4,948 results · Feed
-
High max 8.8ALAS2023-2025-1210 21 CVEs
Important: kernel security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-40300: In the Linux kernel, the following vulnerability has been resolved: x86/vmscape: Add conditional IBPB mitigation VMSCAPE is a vulnerability that exploi…
first Sep 24, 2025 -
High max 7.9ALAS2023-2025-1209 5 CVEs
Important: microcode_ctl security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-32086: Improperly implemented security check for standard in the DDRIO configuration for some Intel(R) Xeon(R) 6 Processors when using Intel(R) SGX or Intel(R…
first Sep 23, 2025 -
Medium max 3.8ALAS2023-2025-1206 2 CVEs
Moderate: ImageMagick security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-57807: ImageMagick is free and open-source software used for editing and manipulating digital images. ImageMagick versions lower than 14.8.2 include insecure …
first Sep 22, 2025 -
Medium max 8.0ALAS2023-2025-1205 2 CVEs
Moderate: cups security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-58364: OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.12 and earlier, an unsafe deserial…
first Sep 22, 2025 -
Low max 1.2ALAS2023-2025-1204 1 CVE
Low: ruby3.2 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-58767: REXML is an XML toolkit for Ruby. The REXML gems from 3.3.3 to 3.4.1 has a DoS vulnerability when parsing XML containing multiple XML declarations. If …
first Sep 22, 2025 -
High max 8.8ALAS2023-2025-1203 8 CVEs
Important: firefox security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-59375: libexpat in Expat before 2.7.2 allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing. CVE-202…
first Sep 19, 2025 -
High max 9.1ALAS2023-2025-1202 2 CVEs
Important: amazon-ssm-agent security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-22872: The tokenizer incorrectly interprets tags with unquoted attribute values that end with a solidus character (/) as self-closing. When directly using Tok…
first Sep 19, 2025 -
Medium max 4.5ALAS2023-2025-1201 3 CVEs
Moderate: GraphicsMagick security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-32460: GraphicsMagick before 8e56520 has a heap-based buffer over-read in ReadJXLImage in coders/jxl.c, related to an ImportViewPixelArea call. CVE-2025-27796…
first Sep 17, 2025 -
Medium max 7.5ALAS2023-2025-1200 1 CVE
Moderate: perl-JSON-XS security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-40928: JSON::XS before version 4.04 for Perl has an integer buffer overflow causing a segfault when parsing crafted JSON, enabling denial-of-service attacks o…
first Sep 17, 2025 -
Medium max 5.6ALAS2023-2025-1199 1 CVE
Moderate: perl-Cpanel-JSON-XS security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-40929: Cpanel::JSON::XS before version 4.40 for Perl has an integer buffer overflow causing a segfault when parsing crafted JSON, enabling denial-of-service a…
first Sep 17, 2025 -
Medium max 6.5ALAS2023-2025-1198 1 CVE
Moderate: openjpeg2 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-50952: openjpeg v 2.5.0 was discovered to contain a NULL pointer dereference via the component /openjp2/dwt.c.
first Sep 17, 2025 -
Medium max 6.5ALAS2023-2025-1197 2 CVEs
Moderate: iperf3 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-54350: In iperf before 3.19.1, iperf_auth.c has a Base64Decode assertion failure and application exit upon a malformed authentication attempt. CVE-2025-54349:…
first Sep 17, 2025 -
High max 7.5ALAS2023-2025-1196 1 CVE
Important: expat security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-59375: libexpat in Expat before 2.7.2 allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing.
first Sep 17, 2025 -
Medium max 6.8ALAS2023-2025-1195 1 CVE
Moderate: redis6 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-9810: TOCTOU in linenoiseHistorySave in linenoise allows local attackers to overwrite arbitrary files and change permissions via a symlink race between fopen(…
first Sep 17, 2025 -
Medium max 4.4ALAS2023-2025-1194 1 CVE
Moderate: coreutils security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-5278: A flaw was found in GNU Coreutils. The sort utility's begfield() function is vulnerable to a heap buffer under-read. The program may access memory outsi…
first Sep 15, 2025 -
Medium max 2.3ALAS2023-2025-1193 1 CVE
Moderate: glycin security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-58160: tracing is a framework for instrumenting Rust programs to collect structured, event-based diagnostic information. Prior to version 0.3.20, tracing-subs…
first Sep 15, 2025 -
Medium max 2.3ALAS2023-2025-1192 1 CVE
Moderate: loupe security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-58160: tracing is a framework for instrumenting Rust programs to collect structured, event-based diagnostic information. Prior to version 0.3.20, tracing-subs…
first Sep 15, 2025 -
Medium max 5.3ALAS2023-2025-1191 1 CVE
Moderate: binutils security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-7546: A vulnerability, which was classified as problematic, has been found in GNU Binutils 2.45. Affected by this issue is the function bfd_elf_set_group_cont…
first Sep 15, 2025 -
Medium max 7.8ALAS2-2023-2231 9 CVEs
Moderate: sox security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-34432: A vulnerabilty was found in sox v14.4.3, heap-buffer-overflow vulnerability that exists in the lsx_readbuf function at sox/src/formats_i.c:98:16. This vul…
first Aug 31, 2023 -
High max 7.8ALAS2-2025-2968 6 CVEs
Important: kernel security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-38161: In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction CVE-2025-38086: In …
first Aug 12, 2025 -
MediumALAS2023-2023-075 2 CVEs
Moderate: giflib security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2022-28506: There is a heap-buffer-overflow in GIFLIB 5.2.1 function DumpScreen2RGB() in gif2rgb.c:298:45. CVE-2020-23922: An issue was discovered in giflib throug…
first Feb 17, 2023 -
Medium max 4.5ALAS2-2025-2804 1 CVE
Moderate: rust security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-53159: The openssl crate before 0.10.55 for Rust allows an out-of-bounds read via an empty string to X509VerifyParamRef::set_host.
first Mar 20, 2025 -
High max 8.6ALAS2-2025-2776 1 CVE
Important: gstreamer1-plugins-good security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-47606: GStreamer is a library for constructing graphs of media-handling components. An integer underflow has been detected in the function qtdemux_parse_theora_e…
first Feb 26, 2025 -
High max 8.6ALAS2-2025-2747 3 CVEs
Important: gstreamer1-plugins-base security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-47615: GStreamer is a library for constructing graphs of media-handling components. An OOB-Write has been detected in the function gst_parse_vorbis_setup_packet …
first Jan 30, 2025 -
HighALAS2-2024-2545 1 CVE
Important: golang security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2019-17596: Go before 1.12.11 and 1.3.x before 1.13.2 can panic upon an attempt to process network traffic containing an invalid DSA public key. There are several att…
first May 9, 2024 -
High max 9.8ALAS2-2024-2502 20 CVEs
Important: edk2 security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-5678: Issue summary: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow. Impact summary: Applica…
first Mar 13, 2024 -
LowALAS2-2023-2240 0 CVEs
Low: ImageMagick security update (Amazon Linux 2)
first Aug 31, 2023 -
Medium max 7.5ALAS2-2023-2238 2 CVEs
Moderate: amazon-ssm-agent security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2022-27664: In net/http in Go before 1.18.6 and 1.19.x before 1.19.1, attackers can cause a denial of service because an HTTP/2 connection can hang during closing if …
first Aug 31, 2023 -
Medium max 6.0ALAS2-2023-2148 2 CVEs
Moderate: qemu security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-2861: 9pfs: prevent opening special files: A malicious client could potentially escape from the exported 9p tree by creating and opening a device file on host si…
first Jul 17, 2023 -
High max 7.8ALAS2-2023-2015 5 CVEs
Important: golang security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2022-41723: http2/hpack: avoid quadratic complexity in hpack decoding CVE-2022-41722: The Go project has described this issue as follows: "On Windows, the filepath.Cl…
first Apr 13, 2023 -
LowALAS2-2023-1977 1 CVE
Low: cifs-utils security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2022-29869: A flaw was found in cifs-utils. When verbose logging is enabled, invalid credentials file lines may be dumped to stderr. This may lead to information disc…
first Mar 2, 2023 -
High max 7.5ALAS2-2022-1846 13 CVEs
Important: golang security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2022-32189: An uncontrolled resource consumption flaw was found in Golang math/big. A too-short encoded message can cause a panic in Float.GobDecode and Rat.GobDecode…
first Sep 15, 2022 -
High max 7.5ALAS2-2022-1830 3 CVEs
Important: golang security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2022-28327: An integer overflow flaw was found in Golang's crypto/elliptic library. This flaw allows an attacker to use a crafted scaler input longer than 32 bytes, c…
first Jul 28, 2022 -
Medium max 8.4ALAS2-2022-1805 12 CVEs
Moderate: vim security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2022-1420: A vulnerability was found in Vim. The issue occurs when using a number in a string for the lambda name, triggering an out-of-range pointer offset vulnerabi…
first May 31, 2022 -
High max 9.8ALAS2-2022-1786 3 CVEs
Important: python-pillow security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2022-22817: A flaw was found in python-pillow. The vulnerability occurs due to Improper Neutralization, leading to command injection. This flaw allows an attacker to …
first Apr 25, 2022 -
Medium max 7.3ALAS2-2022-1743 12 CVEs
Moderate: vim security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2021-4193: It was found that vim was vulnerable to an out-of-bound read flaw in getvcol(). A specially crafted file could be used to, when opened in vim, disclose som…
first Jan 18, 2022 -
Medium max 6.5ALAS2-2021-1700 4 CVEs
Moderate: curl security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2021-22925: A flaw was found in the way curl handled telnet protocol option for sending environment variables, which could lead to sending of uninitialized data from …
first Sep 8, 2021 -
LowALAS2-2021-1649 0 CVEs
Low: samba security update (Amazon Linux 2)
first Jun 16, 2021 -
Medium max 7.0ALAS2-2021-1647 3 CVEs
Moderate: systemd security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2019-3815: A memory leak was discovered in the backport of fixes for CVE-2018-16864 in Red Hat Enterprise Linux. Function dispatch_message_real() in journald-server.c…
first Jun 16, 2021 -
LowALAS2-2020-1533 0 CVEs
Low: libwmf security update (Amazon Linux 2)
first Oct 22, 2020