4,948 results · Feed
-
Low max 2.5ALAS2023-2025-1176 1 CVE
Low: libtiff security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-9165: A flaw has been found in LibTIFF 4.7.0. This affects the function _TIFFmallocExt/_TIFFCheckRealloc/TIFFHashSetNew/InitCCITTFax3 of the file tools/tiffcm…
first Sep 10, 2025 -
High max 7.8ALAS2023-2025-1175 1 CVE
Important: wireshark security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-9817: SSH dissector crash in Wireshark 4.4.0 to 4.4.8 allows denial of service
first Sep 10, 2025 -
High max 7.5ALAS2023-2025-1093 3 CVEs
Important: tomcat10 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-55668: Session Fixation vulnerability in Apache Tomcat via rewrite valve. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.7, from 10.1.0-M1 thro…
first Jul 21, 2025 -
High max 9.8ALAS2023-2025-1052 29 CVEs
Important: kernel6.12 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-38097: In the Linux kernel, the following vulnerability has been resolved: espintcp: remove encap socket caching to avoid reference leak CVE-2025-38079: In th…
first Jul 1, 2025 -
High max 9.8ALAS2023-2023-388 8 CVEs
Important: amazon-ssm-agent security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-3978: Text nodes not in the HTML namespace are incorrectly literally rendered, causing text which should be escaped to not be. This could lead to an XSS attac…
first Oct 12, 2023 -
Medium max 6.3ALAS2023-2023-199 3 CVEs
Moderate: wireshark security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-1994: GQUIC dissector crash in Wireshark 4.0.0 to 4.0.4 and 3.6.0 to 3.6.12 allows denial of service via packet injection or crafted capture file CVE-2023-199…
first Jun 5, 2023 -
LowALAS2023-2025-883 0 CVEs
Low: cups security update (Amazon Linux 2023)
first Feb 26, 2025 -
LowALAS2023-2023-434 0 CVEs
Low: ecs-init security update (Amazon Linux 2023)
first Nov 9, 2023 -
LowALAS2023-2023-408 0 CVEs
Low: grub2 security update (Amazon Linux 2023)
first Oct 30, 2023 -
LowALAS2023-2023-374 0 CVEs
Low: containerd security update (Amazon Linux 2023)
first Sep 27, 2023 -
LowALAS2023-2023-373 0 CVEs
Low: amazon-ssm-agent security update (Amazon Linux 2023)
first Sep 27, 2023 -
LowALAS2023-2023-358 0 CVEs
Low: libwebp security update (Amazon Linux 2023)
first Sep 27, 2023 -
MediumALAS2023-2023-352 1 CVE
Moderate: gdk-pixbuf2 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2021-44648: GNOME gdk-pixbuf 2.42.6 is vulnerable to a heap-buffer overflow vulnerability when decoding the lzw compressed stream of image data in GIF files with l…
first Sep 14, 2023 -
High max 7.5ALAS2023-2023-344 5 CVEs
Important: ecs-service-connect-agent security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-32067: Denial of Service. Attack Steps: The target resolver sends a query The attacker forges a malformed UDP packet with a length of 0 and returns them to th…
first Sep 14, 2023 -
LowALAS2023-2023-339 0 CVEs
Low: amazon-ssm-agent security update (Amazon Linux 2023)
first Aug 31, 2023 -
LowALAS2023-2023-252 0 CVEs
Low: python3.11 security update (Amazon Linux 2023)
first Jul 17, 2023 -
LowALAS2023-2023-231 0 CVEs
Low: runc security update (Amazon Linux 2023)
first Jun 21, 2023 -
LowALAS2023-2023-214 0 CVEs
Low: yajl security update (Amazon Linux 2023)
first Jun 21, 2023 -
MediumALAS2023-2023-135 2 CVEs
Moderate: sudo security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-28487: Sudo before 1.9.13 does not escape control characters in sudoreplay output. CVE-2023-28486: Sudo before 1.9.13 does not escape control characters in lo…
first Mar 20, 2023 -
High max 9.8ALAS2023-2023-122 3 CVEs
Important: emacs security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2022-48339: An issue was discovered in GNU Emacs through 28.2. htmlfontify.el has a command injection vulnerability. In the hfy-istext-command function, the parame…
first Mar 6, 2023 -
LowALAS2023-2023-090 0 CVEs
Low: nginx security update (Amazon Linux 2023)
first Feb 17, 2023 -
High max 7.5ALAS2023-2023-048 27 CVEs
Important: golang security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2022-41716: Due to unsanitized NUL values, attackers may be able to maliciously set environment variables on Windows. In syscall.StartProcess and os/exec.Cmd, inva…
first Feb 17, 2023 -
Low max 2.9ALAS2023-2025-1174 1 CVE
Low: taglib security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-47466: TagLib before 2.0 allows a segmentation violation and application crash during tag writing via a crafted WAV file in which an id3 chunk is the only val…
first Aug 27, 2025 -
Medium max 7.1ALAS2023-2025-1173 2 CVEs
Moderate: krb5 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-3576: A vulnerability in the MIT Kerberos implementation allows GSSAPI-protected messages using RC4-HMAC-MD5 to be spoofed due to weaknesses in the MD5 checks…
first Aug 27, 2025 -
Medium max 2.9ALAS2023-2025-1172 1 CVE
Moderate: cairo security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-50422: An issue was discovered in freedesktop poppler v25.04.0. The heap memory containing PDF stream objects is not cleared upon program exit, allowing attac…
first Aug 27, 2025 -
High max 9.8ALAS2023-2025-1171 8 CVEs
Important: firefox security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-9185: Memory safety bugs present in Firefox ESR 115.26, Firefox ESR 128.13, Thunderbird ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and …
first Aug 27, 2025 -
Medium max 6.0ALAS2023-2025-1168 1 CVE
Moderate: ruby3.2 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-43857: Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby. Prior to versions 0.5.7, 0.4.20, 0.3.9, and 0.2.5, there is …
first Aug 26, 2025 -
High max 7.5ALAS2023-2025-1167 1 CVE
Important: tomcat9 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-48989: Improper Resource Shutdown or Release vulnerability in Apache Tomcat made Tomcat vulnerable to the made you reset attack. This issue affects Apache Tom…
first Aug 26, 2025 -
High max 7.5ALAS2023-2025-1166 1 CVE
Important: tomcat10 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-48989: Improper Resource Shutdown or Release vulnerability in Apache Tomcat made Tomcat vulnerable to the made you reset attack. This issue affects Apache Tom…
first Aug 26, 2025 -
High max 8.8ALAS2023-2025-1165 3 CVEs
Important: postgresql15 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-8715: Improper neutralization of newlines in pg_dump in PostgreSQL allows a user of the origin server to inject arbitrary code for restore-time execution as t…
first Aug 26, 2025 -
Medium max 5.3ALAS2023-2025-1164 1 CVE
Moderate: libtiff security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-8851: A vulnerability was determined in LibTIFF up to 4.5.1. Affected by this issue is the function readSeparateStripsetoBuffer of the file tools/tiffcrop.c o…
first Aug 26, 2025 -
Medium max 7.2ALAS2023-2025-1162 1 CVE
Moderate: rust security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-6965: There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of columns available. This cou…
first Aug 25, 2025 -
High max 7.0ALAS2023-2025-1161 2 CVEs
Important: golang security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-47907: Cancelling a query (e.g. by cancelling the context passed to one of the query methods) during a call to the Scan method of the returned Rows can result…
first Aug 22, 2025 -
Medium max 7.4ALAS2023-2025-1160 1 CVE
Moderate: gnome-remote-desktop security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-5024: A flaw was found in gnome-remote-desktop. Once gnome-remote-desktop listens for RDP connections, an unauthenticated attacker can exhaust system resource…
first Aug 22, 2025 -
High max 8.8ALAS2023-2025-1159 1 CVE
Important: ImageMagick security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-55154: ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-27 and 7.1.2-1, the magnified s…
first Aug 21, 2025 -
High max 8.8ALAS2023-2025-1158 3 CVEs
Important: postgresql17 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-8715: Improper neutralization of newlines in pg_dump in PostgreSQL allows a user of the origin server to inject arbitrary code for restore-time execution as t…
first Aug 21, 2025 -
Medium max 6.9ALAS2023-2025-1157 1 CVE
Moderate: mod_security security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-54571: ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. In versions 2.9.11 and below, an attacke…
first Aug 20, 2025 -
Medium max 6.5ALAS2023-2025-1156 1 CVE
Moderate: perl-Authen-SASL security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-40918: Authen::SASL::Perl::DIGEST_MD5 versions 2.04 through 2.1800 for Perl generates the cnonce insecurely. The cnonce (client nonce) is generated from an MD…
first Aug 18, 2025 -
Medium max 8.1ALAS2023-2025-1155 4 CVEs
Moderate: libssh security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-5987: If there is an error in initializing ChaCha20 cipher with OpenSSL, an invalid error code is returned. This can happen if there is an heap exhaustion. Th…
first Aug 18, 2025 -
High max 7.8ALAS2023-2025-1154 1 CVE
Important: libxml2 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-7425: A flaw was found in libxslt where the attribute type, atype, flags are modified in a way that corrupts internal memory management. When XSLT functions, …
first Aug 18, 2025