4,948 results · Feed
-
High max 7.8ALAS2-2025-2948 2 CVEs
Important: gdk-pixbuf2 security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-7345: A flaw exists in gdk-pixbuf within the gdk_pixbuf__jpeg_image_load_increment function (io-jpeg.c) and in glib's g_base64_encode_step (glib/gbase64.c). When…
first Jul 29, 2025 -
Medium max 4.3ALAS2-2025-2947 1 CVE
Moderate: ghostscript security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-7462: A vulnerability was found in Artifex GhostPDL up to 3989415a5b8e99b9d1b87cc9902bde9b7cdea145. It has been classified as problematic. This affects the funct…
first Jul 29, 2025 -
High max 9.8ALAS2-2025-2946 9 CVEs
Important: thunderbird security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-8035: Memory safety bugs present in Firefox ESR 128.12, Thunderbird ESR 128.12, Firefox ESR 140.0, Thunderbird ESR 140.0, Firefox 140 and Thunderbird 140. Some o…
first Jul 29, 2025 -
High max 8.8ALAS2-2025-2945 1 CVE
Important: pixman security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2022-44638: In libpixman in Pixman before 0.42.2, there is an out-of-bounds write (aka heap-based buffer overflow) in rasterize_edges_8 due to an integer overflow in …
first Jul 17, 2025 -
Medium max 4.3ALAS2-2025-2943 1 CVE
Moderate: jq security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-23337: jq is a command-line JSON processor. In versions up to and including 1.7.1, an integer overflow arises when assigning value using an index of 2147483647, …
first Jul 17, 2025 -
Medium max 5.9ALAS2-2025-2942 1 CVE
Moderate: perl-Crypt-OpenSSL-RSA security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-2467: A timing-based side-channel flaw exists in the perl-Crypt-OpenSSL-RSA package, which could be sufficient to recover plaintext across a network in a Bleiche…
first Jul 17, 2025 -
High max 8.6
Important: git security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-48385: Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access t…
first Jul 17, 2025 -
High max 8.6ALAS2-2025-2940 5 CVEs
Important: java-11-amazon-corretto security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-50106: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D). Supported versio…
first Jul 17, 2025 -
High max 8.6ALAS2-2025-2939 1 CVE
Important: golang security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-4674: cmd/go: unexpected command execution in untrusted VCS repositories
first Jul 17, 2025 -
High max 9.1ALAS2-2025-2938 2 CVEs
Important: libxml2 security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-49796: libxml: Type confusion leads to Denial of service (DoS) CVE-2025-49794: libxml: Heap use after free (UAF) leads to Denial of service (DoS)
first Jul 17, 2025 -
High max 7.8ALAS2-2025-2937 1 CVE
Important: mtr security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-49809: mtr through 0.95, in certain privileged contexts, mishandles execution of a program specified by the MTR_PACKET environment variable.
first Jul 17, 2025 -
High max 8.6ALAS2-2025-2936 4 CVEs
Important: java-17-amazon-corretto security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-50106: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D). Supported versio…
first Jul 17, 2025 -
Medium max 5.3ALAS2-2025-2935 1 CVE
Moderate: python-pip security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-50181: urllib3 is a user-friendly HTTP client library for Python. Prior to 2.5.0, it is possible to disable redirects for all requests by instantiating a PoolMan…
first Jul 17, 2025 -
Medium max 8.7ALAS2-2025-2934 1 CVE
Moderate: jackson security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-52999: jackson-core contains core low-level incremental ("streaming") parser and generator abstractions used by Jackson Data Processor. In versions prior to 2.15…
first Jul 17, 2025 -
Medium max 5.9ALAS2-2025-2933 1 CVE
Moderate: rust security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-53605: The protobuf crate before 3.7.2 for Rust allows uncontrolled recursion in the protobuf::coded_input_stream::CodedInputStream::skip_group parsing of unknow…
first Jul 17, 2025 -
Medium max 2.8ALAS2-2025-2932 1 CVE
Moderate: libarchive security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-5917: A vulnerability has been identified in the libarchive library. This flaw involves an 'off-by-one' miscalculation when handling prefixes and suffixes for fi…
first Jul 17, 2025 -
Medium max 6.5ALAS2-2025-2931 1 CVE
Moderate: ruby security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-6442: Ruby WEBrick read_header HTTP Request Smuggling Vulnerability. This vulnerability allows remote attackers to smuggle arbitrary HTTP requests on affected in…
first Jul 17, 2025 -
High max 9.8ALAS2-2025-2909 11 CVEs
Important: kernel security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-53143: In the Linux kernel, the following vulnerability has been resolved: ext4: fix another off-by-one fsmap error on 1k block filesystems CVE-2023-53141: In th…
first Jun 27, 2025 -
High max 8.8ALAS2-2022-1903 30 CVEs
Important: kernel security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-26607: In the Linux kernel 6.0.8, there is an out-of-bounds read in ntfs_attr_find in fs/ntfs/attrib.c. CVE-2022-49874: In the Linux kernel, the following vulner…
first Dec 9, 2022 -
High max 7.8ALAS2-2020-1440 3 CVEs
Important: kernel security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2020-36791: In the Linux kernel, the following vulnerability has been resolved: net_sched: keep alloc_hash updated after hash allocation CVE-2020-12826: A flaw was fo…
first Jun 16, 2020 -
High max 8.8ALAS2023-2025-1053 9 CVEs
Important: kernel6.12 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-38095: In the Linux kernel, the following vulnerability has been resolved: dma-buf: insert memory barrier before updating num_fences CVE-2025-38023: In the Li…
first Jul 1, 2025 -
High max 7.8ALAS2023-2025-959 15 CVEs
Important: kernel security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-22015: In the Linux kernel, the following vulnerability has been resolved: mm/migrate: fix shmem xarray update during migration CVE-2025-22005: In the Linux k…
first May 6, 2025 -
High max 8.8ALAS2023-2025-948 38 CVEs
Important: kernel6.12 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-39989: In the Linux kernel, the following vulnerability has been resolved: x86/mce: use is_copy_from_user() to determine copy-from-user context CVE-2025-39688…
first Apr 23, 2025 -
High max 10.0ALAS2023-2025-947 22 CVEs
Important: kernel security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-38637: In the Linux kernel, the following vulnerability has been resolved: net_sched: skbprio: Remove overly strict queue assertions CVE-2025-37785: In the Li…
first Apr 23, 2025 -
Medium max 5.9ALAS2-2025-2930 1 CVE
Moderate: python-cryptography security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2020-25659: python-cryptography 3.2 is vulnerable to Bleichenbacher timing attacks in the RSA decryption API, via timed processing of valid PKCS#1 v1.5 ciphertext.
first Jul 2, 2025 -
High max 7.8ALAS2-2025-2929 3 CVEs
Important: kernel security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-37942: In the Linux kernel, the following vulnerability has been resolved: HID: pidff: Make sure to fetch pool before checking SIMULTANEOUS_MAX CVE-2025-37923: I…
first Jul 2, 2025 -
Medium max 5.3ALAS2-2025-2928 1 CVE
Moderate: python-pip security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-47081: Requests is a HTTP library. Due to a URL parsing issue, Requests releases prior to 2.32.4 may leak .netrc credentials to third parties for specific malici…
first Jul 2, 2025 -
Medium max 4.3ALAS2-2025-2927 1 CVE
Moderate: apache-commons-io security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-47554: Uncontrolled Resource Consumption vulnerability in Apache Commons IO. The org.apache.commons.io.input.XmlStreamReader class may excessively consume CPU re…
first Jul 2, 2025 -
High max 8.8ALAS2-2025-2926 1 CVE
Important: cloud-init security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-6174: When a non-x86 platform is detected, cloud-init grants root access to a hardcoded url with a local IP address. To prevent this, cloud-init default configur…
first Jul 2, 2025 -
High max 8.8ALAS2-2025-2925 5 CVEs
Important: webkitgtk4 security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-31257: This issue was addressed with improved memory handling. This issue is fixed in watchOS 11.5, tvOS 18.5, iOS 18.5 and iPadOS 18.5, macOS Sequoia 15.5, visi…
first Jul 2, 2025 -
High max 2.8ALAS2-2025-2924 1 CVE
Important: sudo security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-32462: Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor ALL, allows listed users to execute command…
first Jul 2, 2025 -
Medium max 5.9ALAS2-2025-2923 2 CVEs
Moderate: python3 security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-6069: The html.parser.HTMLParser class had worse-case quadratic complexity when processing certain crafted malformed inputs potentially leading to amplified deni…
first Jul 2, 2025 -
Medium max 6.8ALAS2-2025-2922 1 CVE
Moderate: golist security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-4673: Proxy-Authorization and Proxy-Authenticate headers persisted on cross-origin redirects potentially leaking sensitive information.
first Jul 2, 2025 -
Medium max 6.8ALAS2-2025-2921 1 CVE
Moderate: nerdctl security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-4673: Proxy-Authorization and Proxy-Authenticate headers persisted on cross-origin redirects potentially leaking sensitive information.
first Jul 2, 2025 -
High max 7.5ALAS2-2025-2920 1 CVE
Important: tomcat security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-48976: Allocation of resources for multipart headers with insufficient limits enabled a DoS vulnerability in Apache Commons FileUpload. This issue affects Apache…
first Jul 2, 2025 -
Medium max 7.5ALAS2-2025-2919 1 CVE
Moderate: tomcat security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-48988: Allocation of Resources Without Limits or Throttling vulnerability in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.7, from…
first Jul 2, 2025 -
Medium max 7.8ALAS2-2025-2918 5 CVEs
Moderate: xorg-x11-server security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-49180: A flaw was found in the RandR extension, where the RRChangeProviderProperty function does not properly validate input. This issue leads to an integer over…
first Jul 2, 2025 -
Medium max 7.8ALAS2-2025-2917 5 CVEs
Moderate: tigervnc security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-49180: A flaw was found in the RandR extension, where the RRChangeProviderProperty function does not properly validate input. This issue leads to an integer over…
first Jul 2, 2025 -
Medium max 5.3ALAS2-2025-2916 1 CVE
Moderate: python3-urllib3 security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-50181: urllib3 is a user-friendly HTTP client library for Python. Prior to 2.5.0, it is possible to disable redirects for all requests by instantiating a PoolMan…
first Jul 2, 2025 -
Medium max 5.3ALAS2-2025-2915 1 CVE
Moderate: python-urllib3 security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-50181: urllib3 is a user-friendly HTTP client library for Python. Prior to 2.5.0, it is possible to disable redirects for all requests by instantiating a PoolMan…
first Jul 2, 2025