4,948 results · Feed
-
High max 7.8ALAS2023-2023-126 2 CVEs
Important: device-mapper-multipath security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2022-41973: A vulnerability was found in the device-mapper-multipath. The device-mapper-multipath allows local users to obtain root access, in conjunction with CVE…
first Mar 7, 2023 -
High max 7.5ALAS2023-2023-125 1 CVE
Important: python-werkzeug security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-25577: Werkzeug is a comprehensive WSGI web application library. Prior to version 2.2.3, Werkzeug's multipart form data parser will parse an unlimited number …
first Mar 6, 2023 -
High max 8.8ALAS2023-2023-124 1 CVE
Important: nss security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-0767: firefox-esr , thunderbird and nss only are affected by this package.
first Mar 6, 2023 -
Medium max 6.5ALAS2023-2023-121 2 CVEs
Moderate: ImageMagick security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2022-44268: ImageMagick 7.1.0-49 is vulnerable to Information Disclosure. When it parses a PNG image (e.g., for resize), the resulting image could have embedded th…
first Mar 6, 2023 -
High max 6.3ALAS2023-2023-120 9 CVEs
Important: wireshark security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-0417: Memory leak in the NFS dissector in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows denial of service via packet injection or crafted capture fi…
first Mar 6, 2023 -
LowALAS2023-2023-119 1 CVE
Low: binutils security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2022-38533: In GNU Binutils before 2.40, there is a heap-buffer-overflow in the error function bfd_getl32 when called from the strip_main function in strip-new via…
first Mar 6, 2023 -
High max 7.8ALAS2023-2023-117 15 CVEs
Important: vim security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-0512: Divide By Zero in GitHub repository vim/vim prior to 9.0.1247. CVE-2023-0433: Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1225.…
first Mar 6, 2023 -
Medium max 7.5ALAS2023-2023-116 2 CVEs
Moderate: python3.9 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-24329: An issue in the urllib.parse component of Python before v3.11 allows attackers to bypass blocklisting methods by supplying a URL that starts with blank…
first Mar 6, 2023 -
High max 9.0ALAS2023-2023-115 3 CVEs
Important: httpd security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2022-37436: Prior to Apache HTTP Server 2.4.55, a malicious backend can cause the response headers to be truncated early, resulting in some headers being incorpora…
first Mar 6, 2023 -
High max 5.5ALAS2023-2023-118 1 CVE
Important: pesign security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2022-3560: A flaw was found in pesign. The pesign package provides a systemd service used to start the pesign daemon. This service unit runs a script to set ACLs f…
first Mar 6, 2023 -
Medium max 9.1ALAS2-2023-1986 3 CVEs
Moderate: curl security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-23916: curl: HTTP multi-header compression denial of service CVE-2023-23915: A flaw was found in the Curl package, where the HSTS mechanism could fail when multi…
first Mar 2, 2023 -
High max 7.8ALAS2-2023-1985 1 CVE
Important: sudo security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-22809: In Sudo before 1.9.12p2, the sudoedit (aka -e) feature mishandles extra arguments passed in the user-provided environment variables (SUDO_EDITOR, VISUAL, …
first Mar 2, 2023 -
Medium max 6.2ALAS2-2023-1984 2 CVEs
Moderate: git security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-23946: Git, a revision control system, is vulnerable to path traversal prior to versions 2.39.2, 2.38.4, 2.37.6, 2.36.5, 2.35.7, 2.34.7, 2.33.7, 2.32.6, 2.31.7, …
first Mar 2, 2023 -
High max 9.8ALAS2-2023-1981 3 CVEs
Important: emacs security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2022-48339: An issue was discovered in GNU Emacs through 28.2. htmlfontify.el has a command injection vulnerability. In the hfy-istext-command function, the parameter…
first Mar 2, 2023 -
High max 7.5ALAS2-2023-1980 2 CVEs
Important: python security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-24329: An issue in the urllib.parse component of Python before v3.11 allows attackers to bypass blocklisting methods by supplying a URL that starts with blank ch…
first Mar 2, 2023 -
Medium max 5.9ALAS2-2023-1979 1 CVE
Moderate: python2-setuptools security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2022-40897: Python Packaging Authority (PyPA) setuptools before 65.5.1 allows remote attackers to cause a denial of service via HTML in a crafted package or custom Pa…
first Mar 2, 2023 -
HighALAS2-2023-1978 1 CVE
Important: cifs-utils security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2022-27239: A stack-based buffer overflow issue was found in pifs-utils. Parsing the mount.cifs ip command-line argument can lead to local attackers gaining root priv…
first Mar 2, 2023 -
High max 7.5ALAS2-2023-1976 1 CVE
Important: snakeyaml security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2022-25857: The package org.yaml:snakeyaml from 0 and before 1.31 are vulnerable to Denial of Service (DoS) due missing to nested depth limitation for collections.
first Mar 2, 2023 -
High max 7.8ALAS2-2023-1975 22 CVEs
Important: vim security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-0512: Divide By Zero in GitHub repository vim/vim prior to 9.0.1247. CVE-2023-0433: Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1225. CV…
first Mar 2, 2023 -
Medium max 7.5ALAS2-2023-1974 1 CVE
Moderate: openssl11 security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2022-2097: AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimized implementation will not encrypt the entirety of the data under some circumstances…
first Mar 2, 2023 -
Medium max 7.5ALAS2-2023-1973 1 CVE
Moderate: protobuf security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2022-1941: A parsing vulnerability for the MessageSet type in the ProtocolBuffers versions prior to and including 3.16.1, 3.17.3, 3.18.2, 3.19.4, 3.20.1 and 3.21.5 fo…
first Mar 2, 2023 -
Medium max 7.8ALAS2-2023-1972 1 CVE
Moderate: cpio security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2021-38185: GNU cpio through 2.13 allows attackers to execute arbitrary code via a crafted pattern file, because of a dstring.c ds_fgetstr integer overflow that trigg…
first Mar 2, 2023 -
MediumALAS2-2023-1971 7 CVEs
Moderate: ImageMagick security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2022-32547: In ImageMagick, there is load of misaligned address for type 'double', which requires 8 byte alignment and for type 'float', which requires 4 byte alignme…
first Mar 2, 2023 -
Medium max 7.5ALAS2-2023-1970 3 CVEs
Moderate: freeradius security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2022-41861: freeradius: A malicious RADIUS client or home server can send a malformed abinary attribute which can cause the server to crash. CVE-2022-41860: When an E…
first Mar 2, 2023 -
Medium max 3.5ALAS2-2023-1969 1 CVE
Moderate: libbpf security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2022-3606: A vulnerability was found in Linux Kernel. It has been classified as problematic. This affects the function find_prog_by_sec_insn of the file tools/lib/bpf…
first Mar 2, 2023 -
MediumALAS2-2023-1968 1 CVE
Moderate: qt5-qtsvg security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2021-45930: Qt SVG in Qt 5.0.0 through 5.15.2 and 6.0.0 through 6.2.1 has an out-of-bounds write in QtPrivate::QCommonArrayOps<QPainterPath::Element>::growAppend (cal…
first Mar 2, 2023 -
MediumALAS2-2023-1967 1 CVE
Moderate: qt5-qtbase security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2021-38593: Qt 5.x before 5.15.6 and 6.x through 6.1.2 has an out-of-bounds write in QOutlineMapper::convertPath (called from QRasterPaintEngine::fill and QPaintEngin…
first Mar 2, 2023 -
High max 8.2ALAS2-2023-1966 6 CVEs
Important: batik security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2022-42890: A vulnerability in Batik of Apache XML Graphics allows an attacker to run Java code from untrusted SVG via JavaScript. This issue affects Apache XML Graph…
first Mar 2, 2023 -
HighALAS2-2023-1965 1 CVE
Important: libdb security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2017-10140: Postfix before 2.11.10, 3.0.x before 3.0.10, 3.1.x before 3.1.6, and 3.2.x before 3.2.2 might allow local users to gain privileges by leveraging undocumen…
first Mar 2, 2023 -
Medium max 7.4ALAS2023-2023-007 2 CVEs
Moderate: xdg-utils security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2022-4055: When xdg-mail is configured to use thunderbird for mailto URLs, improper parsing of the URL can lead to additional headers being passed to thunderbird t…
first Feb 17, 2023 -
MediumALAS2023-2023-004 2 CVEs
Moderate: autotrace security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2019-19005: A bitmap double free in main.c in autotrace 0.31.1 allows attackers to cause an unspecified impact via a malformed bitmap image. This may occur after t…
first Feb 17, 2023 -
High max 9.8ALAS2023-2023-003 2 CVEs
Important: zlib security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2022-37434: A security vulnerability was found in zlib. The flaw triggered a heap-based buffer in inflate in the inflate.c function via a large gzip header extra f…
first Feb 17, 2023 -
High max 9.8ALAS2023-2023-002 3 CVEs
Important: rsync security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2022-37434: A security vulnerability was found in zlib. The flaw triggered a heap-based buffer in inflate in the inflate.c function via a large gzip header extra f…
first Feb 17, 2023 -
HighALAS2023-2023-011 2 CVEs
Important: subversion security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2022-24070: A use-after-free vulnerability was found in Subversion in the mod_dav_svn Apache HTTP server (HTTPd) module. While looking up path-based authorization …
first Feb 17, 2023 -
Medium max 6.8ALAS2023-2023-010 2 CVEs
Moderate: bind security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2022-0396: A flaw was found in Bind that incorrectly handles certain crafted TCP streams. The vulnerability allows TCP connection slots to be consumed for an indef…
first Feb 17, 2023 -
Medium max 6.5ALAS2023-2023-009 1 CVE
Moderate: protobuf security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2021-22570: A flaw was found in protobuf. The vulnerability occurs due to incorrect parsing of a NULL character in the proto symbol and leads to a Null pointer der…
first Feb 17, 2023 -
MediumALAS2023-2023-008 1 CVE
Moderate: flac security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2021-0561: An out-of-bounds write vulnerability was found in libFlak. The vulnerability occurs due to a missing bounds check. This flaw allows a local attacker wit…
first Feb 17, 2023 -
LowALAS2023-2023-006 1 CVE
Low: zziplib security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2020-18442: Infinite Loop in zziplib v0.13.69 allows remote attackers to cause a denial of service via the return value "zzip_file_read" in the function "unzzip_ca…
first Feb 17, 2023 -
Medium max 7.5ALAS2023-2023-014 1 CVE
Moderate: jdom security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2021-33813: An XXE issue in SAXBuilder in JDOM through 2.0.6 allows attackers to cause a denial of service via a crafted HTTP request.
first Feb 17, 2023 -
LowALAS2023-2023-013 1 CVE
Low: libsolv security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2021-3200: A flaw was found in libsolv. A buffer overflow vulnerability could cause a denial of service. The highest threat from this vulnerability is to system av…
first Feb 17, 2023