4,948 results · Feed
-
Medium max 7.8ALAS2-2024-2696 18 CVEs
Moderate: kernel security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-47669: In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix state management in error path of log writing function CVE-2024-46840: In …
first Nov 8, 2024 -
Medium max 7.8
Moderate: kernel security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-42090: In the Linux kernel, the following vulnerability has been resolved: pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER CVE-2024-42070: …
first Aug 14, 2024 -
High max 9.8ALAS2-2022-1813 47 CVEs
Important: kernel security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2022-49731: In the Linux kernel, the following vulnerability has been resolved: ata: libata-core: fix NULL pointer deref in ata_host_alloc_pinfo() CVE-2022-49727: In …
first Jul 6, 2022 -
High max 7.8ALAS2-2022-1798 12 CVEs
Important: kernel security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-4459: A NULL pointer dereference flaw was found in vmxnet3_rq_cleanup in drivers/net/vmxnet3/vmxnet3_drv.c in the networking sub-component in vmxnet3 in the Linu…
first May 31, 2022 -
High max 5.5ALAS2-2022-1774 4 CVEs
Important: kernel security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2022-48924: In the Linux kernel, the following vulnerability has been resolved: thermal: int340x: fix memory leak in int3400_notify() CVE-2022-28356: In the Linux ker…
first Apr 18, 2022 -
High max 8.8ALAS2-2022-1768 12 CVEs
Important: kernel security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2022-49293: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: initialize registers in nft_do_chain() CVE-2022-48931: In the Li…
first Apr 4, 2022 -
High max 9.8ALAS2-2022-1761 26 CVEs
Important: kernel security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2022-48810: In the Linux kernel, the following vulnerability has been resolved: ipmr,ip6mr: acquire RTNL before calling ip[6]mr_free_table() on failure path CVE-2022-…
first Mar 7, 2022 -
High max 8.8ALAS2-2021-1696 16 CVEs
Important: kernel security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-28772: An issue was discovered in the Linux kernel before 5.13.3. lib/seq_buf.c has a seq_buf_putmem_hex buffer overflow. CVE-2021-47353: In the Linux kernel, th…
first Aug 4, 2021 -
High max 9.8ALAS2-2021-1685 51 CVEs
Important: kernel security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2021-47280: In the Linux kernel, the following vulnerability has been resolved: drm: Fix use-after-free read in drm_getunique() CVE-2021-47277: In the Linux kernel, t…
first Jul 14, 2021 -
High max 9.8
Important: kernel security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-39835: In the Linux kernel, the following vulnerability has been resolved: xfs: do not propagate ENODATA disk errors into xattr code CVE-2025-39825: In the Li…
first Sep 10, 2025 -
High max 9.3ALAS2023-2025-1170 4 CVEs
Important: kernel6.12 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-38727: In the Linux kernel, the following vulnerability has been resolved: netlink: avoid infinite retry looping in netlink_unicast() CVE-2025-38560: In the L…
first Aug 26, 2025 -
High max 9.3ALAS2023-2025-1169 22 CVEs
Important: kernel security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-39734: In the Linux kernel, the following vulnerability has been resolved: Revert "fs/ntfs3: Replace inode_trylock with inode_lock" CVE-2025-39730: In the Lin…
first Aug 26, 2025 -
High max 9.8ALAS2023-2025-1145 48 CVEs
Important: kernel6.12 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-38552: In the Linux kernel, the following vulnerability has been resolved: mptcp: plug races between subflow fail and subflow creation CVE-2025-38551: In the …
first Aug 8, 2025 -
High max 9.8ALAS2023-2025-1144 34 CVEs
Important: kernel security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-38550: In the Linux kernel, the following vulnerability has been resolved: ipv6: mcast: Delay put pmc->idev in mld_del_delrec() CVE-2025-38540: In the Linux k…
first Aug 8, 2025 -
High max 9.8
Important: kernel security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-38498: In the Linux kernel, the following vulnerability has been resolved: do_change_type(): refuse to operate on unmounted/not ours mounts CVE-2025-38430: In…
first Jul 21, 2025 -
High max 9.8
Important: kernel6.12 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-38498: In the Linux kernel, the following vulnerability has been resolved: do_change_type(): refuse to operate on unmounted/not ours mounts CVE-2025-38430: In…
first Jul 3, 2025 -
High max 9.0ALAS2023-2025-941 13 CVEs
Important: libsoup3 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-46421: A flaw was found in libsoup. When libsoup clients encounter an HTTP redirect, they mistakenly send the HTTP Authorization header to the new host that t…
first Apr 23, 2025 -
High max 9.8ALAS2023-2025-901 18 CVEs
Important: kernel security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-21899: In the Linux kernel, the following vulnerability has been resolved: tracing: Fix bad hist from corrupting named_triggers list CVE-2025-21898: In the Li…
first Mar 13, 2025 -
High max 9.8ALAS2023-2025-876 37 CVEs
Important: kernel security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-40364: In the Linux kernel, the following vulnerability has been resolved: io_uring: fix io_req_prep_async with provided buffers CVE-2025-21832: In the Linux …
first Feb 26, 2025 -
High max 7.9ALAS2023-2025-836 38 CVEs
Important: kernel security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-41001: In the Linux kernel, the following vulnerability has been resolved: io_uring/sqpoll: work around a potential audit memory leak CVE-2024-41000: In the L…
first Jan 30, 2025 -
High max 9.8ALAS2023-2025-809 111 CVEs
Important: kernel security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-21629: In the Linux kernel, the following vulnerability has been resolved: net: reenable NETIF_F_IPV6_CSUM offload for BIG TCP packets CVE-2024-57946: In the …
first Jan 21, 2025 -
High max 9.8
Important: kernel security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-53140: In the Linux kernel, the following vulnerability has been resolved: netlink: terminate outstanding dump on socket close CVE-2024-53138: In the Linux ke…
first Jan 16, 2025 -
High max 9.8ALAS2023-2025-794 111 CVEs
Important: kernel security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-50201: In the Linux kernel, the following vulnerability has been resolved: drm/radeon: Fix encoder->possible_clones CVE-2024-50200: In the Linux kernel, the f…
first Jan 6, 2025 -
Medium max 9.8ALAS2023-2024-731 3 CVEs
Moderate: kernel security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-44931: In the Linux kernel, the following vulnerability has been resolved: gpio: prevent potential speculation leaks in gpio_device_get_desc() CVE-2024-35870:…
first Oct 10, 2024 -
High max 7.8ALAS2023-2024-714 16 CVEs
Important: kernel security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-42098: In the Linux kernel, the following vulnerability has been resolved: crypto: ecdh - explicitly zeroize private_key CVE-2024-42096: In the Linux kernel, …
first Sep 12, 2024 -
High max 9.8ALAS2023-2024-696 64 CVEs
Important: kernel security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-36031: In the Linux kernel, the following vulnerability has been resolved: keys: Fix overwrite of key expiration on instantiation CVE-2024-35827: In the Linux…
first Aug 1, 2024 -
MediumALAS2-2025-3017 1 CVE
Moderate: dcraw security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2021-3624: There is an integer overflow vulnerability in dcraw. When the victim runs dcraw with a maliciously crafted X3F input image, arbitrary code may be executed …
first Sep 23, 2025 -
MediumALAS2-2025-3016 1 CVE
Moderate: LibRaw security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2021-3624: There is an integer overflow vulnerability in dcraw. When the victim runs dcraw with a maliciously crafted X3F input image, arbitrary code may be executed …
first Sep 23, 2025 -
Medium max 5.9ALAS2-2025-3015 1 CVE
Moderate: libvpx security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-5197: There exists interger overflows in libvpx in versions prior to 1.14.1. Calling vpx_img_alloc() with a large value of the d_w, d_h, or align parameter may r…
first Sep 23, 2025 -
High max 7.9ALAS2-2025-3014 5 CVEs
Important: microcode_ctl security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-32086: Improperly implemented security check for standard in the DDRIO configuration for some Intel(R) Xeon(R) 6 Processors when using Intel(R) SGX or Intel(R) T…
first Sep 23, 2025 -
High max 9.8ALAS2-2025-3013 11 CVEs
Important: kernel security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-39702: In the Linux kernel, the following vulnerability has been resolved: ipv6: sr: Fix MAC comparison to be constant-time CVE-2025-39689: In the Linux kernel, …
first Sep 23, 2025 -
Medium max 6.5ALAS2-2025-3012 1 CVE
Moderate: cups security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-58364: OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.12 and earlier, an unsafe deserializa…
first Sep 23, 2025 -
Low max 7.8ALAS2-2025-3011 1 CVE
Low: optipng security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-43907: OptiPNG v0.7.7 was discovered to contain a global buffer overflow via the 'buffer' variable at gifread.c.
first Sep 19, 2025 -
High max 9.1ALAS2-2025-3010 2 CVEs
Important: amazon-ssm-agent security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-22872: The tokenizer incorrectly interprets tags with unquoted attribute values that end with a solidus character (/) as self-closing. When directly using Tokeni…
first Sep 19, 2025 -
Medium max 3.8ALAS2-2025-3009 1 CVE
Moderate: ImageMagick security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-57807: ImageMagick is free and open-source software used for editing and manipulating digital images. ImageMagick versions lower than 14.8.2 include insecure fun…
first Sep 19, 2025 -
High max 8.8ALAS2-2025-3008 8 CVEs
Important: thunderbird security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-59375: libexpat in Expat before 2.7.2 allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing. CVE-2025-1…
first Sep 19, 2025 -
Medium max 6.5ALAS2-2025-3007 1 CVE
Moderate: openjpeg2 security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-50952: openjpeg v 2.5.0 was discovered to contain a NULL pointer dereference via the component /openjp2/dwt.c.
first Sep 17, 2025 -
High max 7.5ALAS2-2025-3006 1 CVE
Important: libsoup security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-32049: A flaw was found in libsoup. The SoupWebsocketConnection may accept a large WebSocket message, which may cause libsoup to allocate memory and lead to a de…
first Sep 15, 2025 -
Medium max 7.5ALAS2-2025-3005 1 CVE
Moderate: perl-JSON-XS security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-40928: JSON::XS before version 4.04 for Perl has an integer buffer overflow causing a segfault when parsing crafted JSON, enabling denial-of-service attacks or o…
first Sep 15, 2025 -
Low max 2.5ALAS2-2025-3004 1 CVE
Low: libtiff security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-9165: A flaw has been found in LibTIFF 4.7.0. This affects the function _TIFFmallocExt/_TIFFCheckRealloc/TIFFHashSetNew/InitCCITTFax3 of the file tools/tiffcmp.c…
first Sep 15, 2025