Skip to content
OpenAdvisories

Source

Amazon Linux Security Center (ALAS)

Source: https://alas.aws.amazon.com/

5,011 results · Feed

  • High max 5.6

    Important: linux-firmware security update (Amazon Linux 2)

    Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2017-5715: An industry-wide issue was found in the way many modern microprocessor designs have implemented speculative execution of instructions (a commonly used perf…

    first Feb 20, 2018
  • Medium

    Moderate: systemd security update (Amazon Linux 2)

    Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2018-1049: A race condition was found in systemd. This could result in automount requests not being serviced and processes using them could hang, causing denial of se…

    first Feb 20, 2018
  • Medium

    Moderate: nautilus security update (Amazon Linux 2)

    Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2017-14604: An untrusted .desktop file with executable permission set could choose its displayed name and icon, and execute commands without warning when opened by th…

    first Feb 20, 2018
  • High max 5.6

    Important: kernel security update (Amazon Linux 2)

    Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2018-5750: The acpi_smbus_hc_add function in drivers/acpi/sbshc.c in the Linux kernel, through 4.14.15, allows local users to obtain sensitive address information by …

    first Feb 20, 2018
  • High

    Important: 389-ds-base security update (Amazon Linux 2)

    Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2017-15134: A stack buffer overflow flaw was found in the way 389-ds-base handled certain LDAP search filters. A remote, unauthenticated attacker could potentially us…

    first Feb 20, 2018
  • High max 7.5

    Important: bind security update (Amazon Linux 2)

    Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2017-3145: A use-after-free flaw leading to denial of service was found in the way BIND internally handled cleanup operations on upstream recursion fetch contexts. A …

    first Feb 20, 2018
  • High max 5.6

    Important: microcode_ctl security update (Amazon Linux 2)

    Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2017-5715: An industry-wide issue was found in the way many modern microprocessor designs have implemented speculative execution of instructions (a commonly used perf…

    first Feb 7, 2018
  • High max 5.6

    Important: libvirt security update (Amazon Linux 2)

    Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2017-5715: An industry-wide issue was found in the way many modern microprocessor designs have implemented speculative execution of instructions (a commonly used perf…

    first Feb 7, 2018
  • High max 5.6

    Important: qemu-kvm security update (Amazon Linux 2)

    Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2017-5715: An industry-wide issue was found in the way many modern microprocessor designs have implemented speculative execution of instructions (a commonly used perf…

    first Feb 7, 2018
  • High
    ALAS2-2018-949 15 CVEs

    Important: java-1.8.0-openjdk security update (Amazon Linux 2)

    Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2018-2678: Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JNDI). Supported versions that are affected are Java SE:…

    first Feb 7, 2018
  • Critical max 5.6

    Critical: kernel security update (Amazon Linux 2)

    Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2017-5754: An industry-wide issue was found in the way many modern microprocessor designs have implemented speculative execution of instructions (a commonly used perf…

    first Jan 11, 2018