4,948 results · Feed
-
HighALAS2-2020-1467 1 CVE
Important: qemu security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2020-8608: In libslirp 4.1.0, as used in QEMU 4.2.0, tcp_subr.c misuses snprintf return values, leading to a buffer overflow in later code. 1798453: CVE-2020-8608 QEM…
first Jul 21, 2020 -
LowALAS2-2020-1446 0 CVEs
Low: python-urllib3 security update (Amazon Linux 2)
first Jun 26, 2020 -
Medium max 4.3ALAS2-2020-1432 1 CVE
Moderate: python security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2018-20852: http.cookiejar.DefaultPolicy.domain_return_ok in Lib/http/cookiejar.py in Python before 3.7.3 does not correctly validate the domain: it can be tricked in…
first Jun 1, 2020 -
LowALAS2-2020-1383 0 CVEs
Low: golang security update (Amazon Linux 2)
first Jan 14, 2020 -
LowALAS2-2019-1362 0 CVEs
Low: openssl security update (Amazon Linux 2)
first Nov 11, 2019 -
MediumALAS2-2019-1292 8 CVEs
Moderate: mariadb security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2019-2627: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). Supported versions that are affected are 5.6.43 a…
first Sep 13, 2019 -
LowALAS2-2019-1289 0 CVEs
Low: glib2 security update (Amazon Linux 2)
first Sep 13, 2019 -
High max 8.8ALAS2-2019-1160 1 CVE
Important: systemd security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2018-15688: It was discovered that systemd-network does not correctly keep track of a buffer size when constructing DHCPv6 packets. This flaw may lead to an integer u…
first Feb 13, 2019 -
LowALAS2-2018-1049 2 CVEs
Low: libvirt security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2018-5748: qemu/qemu_monitor.c in libvirt allows attackers to cause a denial of service (memory consumption) via a large QEMU reply. 1528396: CVE-2018-5748 libvirt: R…
first Jul 24, 2018 -
LowALAS2-2018-983 1 CVE
Low: ruby security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2017-17790: The "lazy_initialize" function in lib/resolv.rb did not properly process certain filenames. A remote attacker could possibly exploit this flaw t…
first Apr 5, 2018 -
Medium max 6.4ALAS2023-2024-673 3 CVEs
Moderate: wireshark security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-4855: Use after free issue in editcap could cause denial of service via crafted capture file CVE-2024-4854: MONGO and ZigBee TLV dissector infinite loops in W…
first Jul 18, 2024 -
Medium max 5.9ALAS2023-2025-1207 2 CVEs
Moderate: libvpx security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-5197: There exists interger overflows in libvpx in versions prior to 1.14.1. Calling vpx_img_alloc() with a large value of the d_w, d_h, or align parameter ma…
-
High max 7.8ALAS2023-2023-148 31 CVEs
Important: kernel security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-53169: In the Linux kernel, the following vulnerability has been resolved: x86/resctrl: Clear staged_config[] before and after it is used CVE-2023-53143: In t…
first Mar 30, 2023 -
High max 9.8ALAS2023-2023-127 14 CVEs
Important: kernel security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-53224: In the Linux kernel, the following vulnerability has been resolved: ext4: Fix function prototype mismatch for ext4_feat_ktype CVE-2023-52737: In the Li…
first Mar 11, 2023 -
Medium max 8.1ALAS2-2025-3003 3 CVEs
Moderate: gstreamer1-plugins-good security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-47219: In GStreamer through 1.26.1, the isomp4 plugin's qtdemux_parse_trak function may read past the end of a heap buffer while parsing an MP4 file, possibly le…
first Sep 10, 2025 -
Medium max 5.6ALAS2-2025-3002 3 CVEs
Moderate: gstreamer1-plugins-base security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-47808: In GStreamer through 1.26.1, the subparse plugin's tmplayer_parse_line function may dereference a NULL pointer while parsing a subtitle file, leading to a…
first Sep 10, 2025 -
High max 7.8ALAS2-2025-3001 5 CVEs
Important: kernel security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-38499: In the Linux kernel, the following vulnerability has been resolved: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns CVE-2…
first Sep 9, 2025 -
High max 7.6ALAS2-2025-3000 4 CVEs
Important: ImageMagick security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-55298: ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to ImageMagick versions 6.9.13-28 and 7.1.2-2, a form…
first Sep 9, 2025 -
High max 9.8ALAS2-2025-2999 5 CVEs
Important: thunderbird security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-9185: Memory safety bugs present in Firefox ESR 115.26, Firefox ESR 128.13, Thunderbird ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thu…
first Sep 9, 2025 -
LowALAS2-2025-2998 1 CVE
Low: giflib security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2021-40633: A memory leak (out-of-memory) in gif2rgb in util/gif2rgb.c in giflib 5.1.4 allows remote attackers trigger an out of memory exception or denial of service…
first Sep 8, 2025 -
Medium max 6.7ALAS2-2025-2997 1 CVE
Moderate: mpg123 security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-10573: An out-of-bounds write flaw was found in mpg123 when handling crafted streams. When decoding PCM, the libmpg123 may write past the end of a heap-located b…
first Sep 8, 2025 -
Medium max 6.3ALAS2-2025-2996 1 CVE
Moderate: edk2 security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-38805: EDK2 contains a vulnerability in BIOS where a user may cause an Integer Overflow or Wraparound by network means. A successful exploitation of this vulnera…
first Sep 8, 2025 -
Medium max 5.6ALAS2-2025-2995 1 CVE
Moderate: pki-core security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-1647: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Bootstrap allows Cross-Site Scripting (XSS).Th…
first Sep 8, 2025 -
High max 7.8ALAS2-2025-2994 5 CVEs
Important: microcode_ctl security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-20109: Improper Isolation or Compartmentalization in the stream cache mechanism for some Intel(R) Processors may allow an authenticated user to potentially enabl…
first Sep 8, 2025 -
High max 7.2ALAS2-2025-2993 3 CVEs
Important: microcode_ctl security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-24305: Insufficient control flow management in the Alias Checking Trusted Module (ACTM) firmware for some Intel(R) Xeon(R) processors may allow a privileged user…
first Sep 8, 2025 -
High max 8.5ALAS2-2025-2992 1 CVE
Important: udisks2 security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-8067: A flaw was found in the Udisks daemon, where it allows unprivileged users to create loop devices using the D-BUS system. This is achieved via the loop devi…
first Sep 8, 2025 -
Medium max 5.3ALAS2-2025-2991 1 CVE
Moderate: libtiff security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-8851: A vulnerability was determined in LibTIFF up to 4.5.1. Affected by this issue is the function readSeparateStripsetoBuffer of the file tools/tiffcrop.c of t…
first Sep 8, 2025 -
High max 7.2ALAS2023-2025-1190 3 CVEs
Important: microcode_ctl security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-24305: Insufficient control flow management in the Alias Checking Trusted Module (ACTM) firmware for some Intel(R) Xeon(R) processors may allow a privileged u…
first Sep 10, 2025 -
High max 7.8ALAS2023-2025-1189 5 CVEs
Important: microcode_ctl security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-20109: Improper Isolation or Compartmentalization in the stream cache mechanism for some Intel(R) Processors may allow an authenticated user to potentially en…
first Sep 10, 2025 -
Medium max 8.2ALAS2023-2025-1188 1 CVE
Moderate: mod_auth_openidc security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-31492: mod_auth_openidc is an OpenID Certified authentication and authorization module for the Apache 2.x HTTP server that implements the OpenID Connect Relyi…
first Sep 10, 2025 -
High max 7.5ALAS2023-2025-1187 1 CVE
Important: libsoup security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-32049: A flaw was found in libsoup. The SoupWebsocketConnection may accept a large WebSocket message, which may cause libsoup to allocate memory and lead to a…
first Sep 10, 2025 -
Medium max 8.1ALAS2023-2025-1185 2 CVEs
Moderate: gstreamer1-plugins-good security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-47219: In GStreamer through 1.26.1, the isomp4 plugin's qtdemux_parse_trak function may read past the end of a heap buffer while parsing an MP4 file, possibly…
first Sep 10, 2025 -
Medium max 5.6ALAS2023-2025-1184 3 CVEs
Moderate: gstreamer1-plugins-base security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-47808: In GStreamer through 1.26.1, the subparse plugin's tmplayer_parse_line function may dereference a NULL pointer while parsing a subtitle file, leading t…
first Sep 10, 2025 -
Medium max 6.3ALAS2023-2025-1183 1 CVE
Moderate: httpd security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-54090: A bug in Apache HTTP Server 2.4.64 results in all "RewriteCond expr ..." tests evaluating as "true". Users are recommended to upgrade to version 2.4.65…
first Sep 10, 2025 -
High max 7.6ALAS2023-2025-1182 4 CVEs
Important: ImageMagick security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-55298: ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to ImageMagick versions 6.9.13-28 and 7.1.2-2, a f…
first Sep 10, 2025 -
Medium max 6.9ALAS2023-2025-1181 1 CVE
Moderate: python-h2 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-57804: h2 is a pure-Python implementation of a HTTP/2 protocol stack. Prior to version 4.3.0, an HTTP/2 request splitting vulnerability allows attackers to pe…
first Sep 10, 2025 -
Medium max 2.3ALAS2023-2025-1180 1 CVE
Moderate: rust-cargo-c security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-58160: tracing is a framework for instrumenting Rust programs to collect structured, event-based diagnostic information. Prior to version 0.3.20, tracing-subs…
first Sep 10, 2025 -
Medium max 5.9ALAS2023-2025-1179 1 CVE
Moderate: glibc security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-8058: The regcomp function in the GNU C library version from 2.4 to 2.41 is subject to a double free if some previous allocation fails. It can be accomplished…
first Sep 10, 2025 -
High max 8.5ALAS2023-2025-1178 1 CVE
Important: udisks2 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-8067: A flaw was found in the Udisks daemon, where it allows unprivileged users to create loop devices using the D-BUS system. This is achieved via the loop d…
first Sep 10, 2025 -
High max 8.8ALAS2023-2025-1177 3 CVEs
Important: postgresql16 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-8715: Improper neutralization of newlines in pg_dump in PostgreSQL allows a user of the origin server to inject arbitrary code for restore-time execution as t…
first Sep 10, 2025