4,948 results · Feed
-
Medium max 4.3ALAS2023-2025-1112 1 CVE
Moderate: jq security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-23337: jq is a command-line JSON processor. In versions up to and including 1.7.1, an integer overflow arises when assigning value using an index of 214748364…
first Jul 21, 2025 -
Medium max 5.3ALAS2023-2025-1110 1 CVE
Moderate: python-requests security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-47081: Requests is a HTTP library. Due to a URL parsing issue, Requests releases prior to 2.32.4 may leak .netrc credentials to third parties for specific mal…
first Jul 21, 2025 -
Medium max 7.5ALAS2023-2025-1109 2 CVEs
Moderate: ecs-init security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-4673: Proxy-Authorization and Proxy-Authenticate headers persisted on cross-origin redirects potentially leaking sensitive information. CVE-2025-22874: Callin…
first Jul 21, 2025 -
High max 8.6
Important: git security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-48385: Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full acces…
first Jul 21, 2025 -
Low max 2.7ALAS2023-2025-1107 1 CVE
Low: gnupg2 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-30258: In GnuPG before 2.5.5, if a user chooses to import a certificate with certain crafted subkey data that lacks a valid backsig or that has incorrect usag…
first Jul 21, 2025 -
High max 8.1ALAS2023-2025-1106 4 CVEs
Important: java-1.8.0-amazon-corretto security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-50106: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D). Supported ver…
first Jul 21, 2025 -
High max 7.5ALAS2023-2025-1105 1 CVE
Important: bind security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-40777: If a `named` caching resolver is configured with `serve-stale-enable` `yes`, and with `stale-answer-client-timeout` set to `0` (the only allowable valu…
first Jul 21, 2025 -
High max 8.6ALAS2023-2025-1104 1 CVE
Important: golang security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-4674: cmd/go: unexpected command execution in untrusted VCS repositories
first Jul 21, 2025 -
High max 9.1ALAS2023-2025-1103 3 CVEs
Important: libxml2 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-49796: libxml: Type confusion leads to Denial of service (DoS) CVE-2025-49795: libxml: Null pointer dereference leads to Denial of service (DoS) CVE-2025-4979…
first Jul 21, 2025 -
High max 7.8ALAS2023-2025-1102 1 CVE
Important: mtr security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-49809: mtr through 0.95, in certain privileged contexts, mishandles execution of a program specified by the MTR_PACKET environment variable.
first Jul 21, 2025 -
High max 8.6ALAS2023-2025-1101 5 CVEs
Important: java-11-amazon-corretto security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-50106: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D). Supported ver…
first Jul 21, 2025 -
High max 8.6ALAS2023-2025-1100 4 CVEs
Important: java-17-amazon-corretto security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-50106: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D). Supported ver…
first Jul 21, 2025 -
High max 8.6ALAS2023-2025-1099 4 CVEs
Important: java-21-amazon-corretto security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-50106: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D). Supported ver…
first Jul 21, 2025 -
High max 8.6ALAS2023-2025-1098 4 CVEs
Important: java-24-amazon-corretto security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-50106: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D). Supported ver…
first Jul 21, 2025 -
Medium max 5.3ALAS2023-2025-1097 2 CVEs
Moderate: python3.11-pip security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-50181: urllib3 is a user-friendly HTTP client library for Python. Prior to 2.5.0, it is possible to disable redirects for all requests by instantiating a Pool…
first Jul 21, 2025 -
Medium max 5.3ALAS2023-2025-1096 1 CVE
Moderate: python3.12-pip security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-50181: urllib3 is a user-friendly HTTP client library for Python. Prior to 2.5.0, it is possible to disable redirects for all requests by instantiating a Pool…
first Jul 21, 2025 -
Medium max 5.3ALAS2023-2025-1095 1 CVE
Moderate: python-pip security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-50181: urllib3 is a user-friendly HTTP client library for Python. Prior to 2.5.0, it is possible to disable redirects for all requests by instantiating a Pool…
first Jul 21, 2025 -
High max 7.5ALAS2023-2025-1094 3 CVEs
Important: tomcat9 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-53506: Uncontrolled Resource Consumption vulnerability in Apache Tomcat if an HTTP/2 client did not acknowledge the initial settings frame that reduces the ma…
first Jul 21, 2025 -
Medium max 5.9ALAS2023-2025-1092 1 CVE
Moderate: rust security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-53605: The protobuf crate before 3.7.2 for Rust allows uncontrolled recursion in the protobuf::coded_input_stream::CodedInputStream::skip_group parsing of unk…
first Jul 21, 2025 -
Medium max 6.6ALAS2023-2025-1091 2 CVEs
Moderate: libarchive security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-5917: A vulnerability has been identified in the libarchive library. This flaw involves an 'off-by-one' miscalculation when handling prefixes and suffixes for…
first Jul 21, 2025 -
Medium max 4.3ALAS2023-2025-1090 1 CVE
Moderate: python3.9 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-6069: The html.parser.HTMLParser class had worse-case quadratic complexity when processing certain crafted malformed inputs potentially leading to amplified d…
first Jul 21, 2025 -
Medium max 5.9ALAS2023-2025-1088 3 CVEs
Moderate: php8.2 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-6491: If a SoapVar instance is created with a fully qualified name larger than 2G, this will cause a NULL pointer dereference resulting in a segmentation faul…
first Jul 26, 2025 -
Medium max 5.9ALAS2023-2025-1087 3 CVEs
Moderate: php8.1 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-6491: If a SoapVar instance is created with a fully qualified name larger than 2G, this will cause a NULL pointer dereference resulting in a segmentation faul…
first Jul 26, 2025 -
Medium max 5.5ALAS2-2022-1799 2 CVEs
Moderate: libtiff security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2022-34266: A flaw was found in libtiff-4.0.3-35.amzn2.0.1 as packaged on Amazon Linux 2. When processing a malicious TIFF file, an invalid range may be passed as an …
first May 31, 2022 -
High max 7.5ALAS2-2022-1776 16 CVEs
Important: golang security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2022-24921: A stack overflow flaw was found in Golang's regexp module, which can crash the runtime if the application using regexp accepts very long or arbitrarily lo…
first Apr 25, 2022 -
Medium max 6.5ALAS2-2021-1667 2 CVEs
Moderate: python-pip security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2021-3572: A flaw was found in python-pip in the way it handled Unicode separators in git references. A remote attacker could possibly use this issue to install a dif…
first Jun 16, 2021 -
MediumALAS2-2019-1309 2 CVEs
Moderate: golang security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2019-16276: It was discovered that net/http (through net/textproto) in golang does not correctly interpret HTTP requests where an HTTP header contains spaces before t…
first Oct 8, 2019 -
High max 5.9ALAS2-2019-1205 5 CVEs
Important: kernel security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2019-11815: A flaw was found in the Linux kernel's implementation of RDS over TCP. A system that has the rds_tcp kernel module loaded (either through autoload via loc…
first May 7, 2019 -
High max 8.6ALAS2-2025-2854 6 CVEs
Important: kernel security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-38323: In the Linux kernel, the following vulnerability has been resolved: net: atm: add lec_mutex CVE-2025-22004: In the Linux kernel, the following vulnerabili…
first May 8, 2025 -
Medium max 5.7ALAS2-2025-2960 2 CVEs
Moderate: libvpx security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-6349: A heap overflow vulnerability exists in libvpx - Encoding a frame that has larger dimensions than the originally configured size with VP9 may result in a h…
first Jul 29, 2025 -
Medium max 4.7ALAS2-2025-2959 1 CVE
Moderate: pam security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-10041: A vulnerability was found in PAM. The secret information is stored in memory, where the attacker can trigger the victim program to execute by sending char…
first Jul 29, 2025 -
High max 9.1ALAS2-2025-2958 7 CVEs
Important: httpd security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-53020: Late Release of Memory after Effective Lifetime vulnerability in Apache HTTP Server. This issue affects Apache HTTP Server: from 2.4.17 up to 2.4.63. User…
first Jul 29, 2025 -
Medium max 7.5ALAS2-2025-2957 1 CVE
Moderate: ruby security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-24294: The attack vector is a potential Denial of Service (DoS). The vulnerability is caused by an insufficient check on the length of a decompressed domain name…
first Jul 29, 2025 -
High max 8.1ALAS2-2025-2956 4 CVEs
Important: java-1.8.0-openjdk security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-50106: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D). Supported versio…
first Jul 29, 2025 -
Medium max 2.9ALAS2-2025-2954 1 CVE
Moderate: LibRaw security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-43964: In LibRaw before 0.21.4, tag 0x412 processing in phase_one_correct in decoders/load_mfbacks.cpp does not enforce minimum w0 and w1 values, which are used …
first Jul 29, 2025 -
High max 7.5ALAS2-2025-2953 1 CVE
Important: tomcat security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-52520: For some unlikely configurations of multipart upload, an Integer Overflow vulnerability in Apache Tomcat could lead to a DoS via bypassing of size limits.…
first Jul 29, 2025 -
Medium max 7.4ALAS2-2025-2952 3 CVEs
Moderate: ImageMagick security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-53101: ImageMagick is free and open-source software used for editing and manipulating digital images. In versions prior to 7.1.2-0 and 6.9.13-26, in ImageMagick'…
first Jul 29, 2025 -
High max 8.7ALAS2-2025-2951 1 CVE
Important: unbound security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-5994: A multi-vendor cache poisoning vulnerability named 'Rebirthday Attack' has been discovered in caching resolvers that support EDNS Client Subnet (ECS). Unbo…
first Jul 29, 2025 -
Medium max 7.8ALAS2-2025-2950 1 CVE
Moderate: pam security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-6020: A flaw was found in linux-pam. The module pam_namespace may use access user-controlled paths without proper protection, allowing local users to elevate the…
first Jul 29, 2025 -
Medium max 7.2ALAS2-2025-2949 1 CVE
Moderate: thunderbird security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-6965: There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of columns available. This could …
first Jul 29, 2025