4,948 results · Feed
-
Medium max 7.8ALAS2023-2025-1018 6 CVEs
Moderate: kernel security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-22062: In the Linux kernel, the following vulnerability has been resolved: sctp: add mutual exclusion in proc_sctp_do_udp_port() CVE-2024-46751: In the Linux …
first Jun 12, 2025 -
High max 7.4ALAS2023-2025-1017 3 CVEs
Important: java-1.8.0-amazon-corretto security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-30698: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D). Supported ver…
first Jun 11, 2025 -
High max 10.0ALAS2023-2025-935 14 CVEs
Important: kernel6.12 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-22023: In the Linux kernel, the following vulnerability has been resolved: usb: xhci: Don't skip on Stopped - Length Invalid CVE-2025-22022: In the Linux kern…
first Apr 9, 2025 -
High max 9.8ALAS2023-2025-915 25 CVEs
Important: kernel security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-21948: In the Linux kernel, the following vulnerability has been resolved: HID: appleir: Fix potential NULL dereference at raw event handle CVE-2025-21938: In…
first Mar 26, 2025 -
Medium max 9.8ALAS2023-2023-160 10 CVEs
Moderate: kernel security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-53093: In the Linux kernel, the following vulnerability has been resolved: tracing: Do not let histogram values have some modifiers CVE-2023-53083: In the Lin…
first Apr 13, 2023 -
LowALAS2023-2023-264 0 CVEs
Low: sqlite security update (Amazon Linux 2023)
first Jul 19, 2023 -
High max 8.8ALAS2-2025-2891 1 CVE
Important: perl-File-Find-Rule security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2011-10007: File::Find::Rule through 0.34 for Perl is vulnerable to Arbitrary Code Execution when `grep()` encounters a crafted filename. A file handle is opened with…
first Jun 9, 2025 -
Medium max 7.5ALAS2-2025-2890 1 CVE
Moderate: qt security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-38197: An issue was discovered in Qt before 5.15.15, 6.x before 6.2.10, and 6.3.x through 6.5.x before 6.5.3. There are infinite loops in recursive entity expans…
first Jun 9, 2025 -
Medium max 7.5ALAS2-2025-2889 1 CVE
Moderate: python3-tornado security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-47287: Tornado is a Python web framework and asynchronous networking library. When Tornado's ``multipart/form-data`` parser encounters certain errors, it logs a …
first Jun 9, 2025 -
Medium max 7.5ALAS2-2025-2888 1 CVE
Moderate: python-tornado security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-47287: Tornado is a Python web framework and asynchronous networking library. When Tornado's ``multipart/form-data`` parser encounters certain errors, it logs a …
first Jun 9, 2025 -
High max 7.5ALAS2-2025-2887 2 CVEs
Important: mod_security security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-48866: ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. Versions prior to 2.9.10 contain a denial o…
first Jun 9, 2025 -
Medium max 5.3ALAS2-2025-2886 1 CVE
Moderate: libtasn1 security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-12133: When an input DER data contains a large number of SEQUENCE OF or SET OF elements, decoding the data and searching a specific element in it take quadratic …
first Jun 4, 2025 -
Medium max 5.3ALAS2-2025-2885 1 CVE
Moderate: gnutls security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-12243: A flaw was found in GnuTLS, which relies on libtasn1 for ASN.1 data processing. Due to an inefficient algorithm in libtasn1, decoding certain DER-encoded …
first Jun 4, 2025 -
Medium max 7.5ALAS2-2025-2884 1 CVE
Moderate: git security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-52005: Git is a source code management tool. When cloning from a server (or fetching, or pushing), informational or error messages are transported from the remot…
first Jun 4, 2025 -
High max 7.5ALAS2-2025-2883 1 CVE
Important: amazon-ssm-agent security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-22869: SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or n…
first Jun 4, 2025 -
High max 9.1ALAS2-2025-2882 1 CVE
Important: cni-plugins security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-22871: The net/http package accepted data in the chunked transfer encoding containing an invalid chunk-size line terminated by a bare LF. When used in conjunctio…
first Jun 4, 2025 -
Medium max 5.3ALAS2-2025-2880 1 CVE
Moderate: perl-FCGI security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-40907: FCGI versions 0.44 through 0.82, for Perl, include a vulnerable version of the FastCGI fcgi2 (aka fcgi) library. The included FastCGI library is affected …
first Jun 4, 2025 -
Medium max 5.9ALAS2-2025-2879 1 CVE
Moderate: perl security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-40909: Thread creation while a directory handle is open does a fchdir, affecting other threads (race condition)
first Jun 4, 2025 -
Medium max 6.0ALAS2-2025-2878 1 CVE
Moderate: screen security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-46802: For a short time they PTY is set to mode 666, allowing any user on the system to connect to the screen session.
first Jun 4, 2025 -
High max 7.7ALAS2-2025-2877 1 CVE
Important: python2-setuptools security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-47273: setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages. A path traversal vulnerability in `PackageI…
first Jun 4, 2025 -
High max 7.7ALAS2-2025-2876 1 CVE
Important: python-setuptools security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-47273: setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages. A path traversal vulnerability in `PackageI…
first Jun 4, 2025 -
Medium max 4.0ALAS2-2025-2875 1 CVE
Moderate: ghostscript security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-48708: gs_lib_ctx_stash_sanitized_arg in base/gslibctx.c in Artifex Ghostscript before 10.05.1 lacks argument sanitization for the # case. A created PDF document…
first Jun 4, 2025 -
High max 7.5ALAS2-2025-2874 1 CVE
Important: libsoup security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-4948: A flaw was found in the soup_multipart_new_from_message() function of the libsoup HTTP library, which is commonly used by GNOME and other applications to h…
first Jun 4, 2025 -
High max 9.8ALAS2-2025-2873 10 CVEs
Important: thunderbird security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-5283: Use after free in libvpx in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. …
first Jun 4, 2025 -
Medium max 4.9ALAS2023-2025-1016 1 CVE
Moderate: mariadb1011 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-52971: MariaDB Server 10.10 through 10.11.* and 11.0 through 11.4.* crashes in JOIN::fix_all_splittings_in_plan.
first Jun 4, 2025 -
Medium max 4.6ALAS2023-2025-1015 1 CVE
Moderate: ecs-init security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-40635: containerd is an open-source container runtime. A bug was found in containerd prior to versions 1.6.38, 1.7.27, and 2.0.4 where containers launched wit…
first Jun 4, 2025 -
Medium max 7.5ALAS2023-2025-1014 1 CVE
Moderate: git security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-52005: Git is a source code management tool. When cloning from a server (or fetching, or pushing), informational or error messages are transported from the re…
first Jun 4, 2025 -
High max 7.5ALAS2023-2025-1013 1 CVE
Important: amazon-ssm-agent security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-22869: SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, o…
first Jun 4, 2025 -
Medium max 6.5ALAS2023-2025-1011 1 CVE
Moderate: ecs-init security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-22872: The tokenizer incorrectly interprets tags with unquoted attribute values that end with a solidus character (/) as self-closing. When directly using Tok…
first Jun 4, 2025 -
High max 7.5ALAS2023-2025-1010 4 CVEs
Important: nodejs20 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-47279: Undici is an HTTP/1.1 client for Node.js. Prior to versions 5.29.0, 6.21.2, and 7.5.0, applications that use undici to implement a webhook-like system …
first Jun 4, 2025 -
High max 7.5ALAS2023-2025-1009 3 CVEs
Important: nodejs22 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-47279: Undici is an HTTP/1.1 client for Node.js. Prior to versions 5.29.0, 6.21.2, and 7.5.0, applications that use undici to implement a webhook-like system …
first Jun 4, 2025 -
High max 8.0ALAS2023-2025-1008 1 CVE
Important: dotnet8.0 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-26646: External control of file name or path in .NET, Visual Studio, and Build Tools for Visual Studio allows an authorized attacker to perform spoofing over …
first Jun 4, 2025 -
Medium max 5.9ALAS2023-2025-1007 1 CVE
Moderate: perl security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-40909: Thread creation while a directory handle is open does a fchdir, affecting other threads (race condition)
first Jun 4, 2025 -
Medium max 6.0ALAS2023-2025-1006 1 CVE
Moderate: screen security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-46802: For a short time they PTY is set to mode 666, allowing any user on the system to connect to the screen session.
first Jun 4, 2025 -
High max 7.7ALAS2023-2025-1005 1 CVE
Important: python-setuptools security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-47273: setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages. A path traversal vulnerability in `Packa…
first Jun 4, 2025 -
High max 7.7ALAS2023-2025-1004 1 CVE
Important: python3.12-setuptools security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-47273: setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages. A path traversal vulnerability in `Packa…
first Jun 4, 2025 -
High max 7.7ALAS2023-2025-1003 1 CVE
Important: python3.11-setuptools security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-47273: setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages. A path traversal vulnerability in `Packa…
first Jun 4, 2025 -
Medium max 7.5ALAS2023-2025-1002 1 CVE
Moderate: python-tornado security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-47287: Tornado is a Python web framework and asynchronous networking library. When Tornado's ``multipart/form-data`` parser encounters certain errors, it logs…
first Jun 4, 2025 -
High max 7.8ALAS2023-2025-1001 1 CVE
Important: glibc security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-4802: Untrusted LD_LIBRARY_PATH environment variable vulnerability in the GNU C Library version 2.27 to 2.38 allows attacker controlled loading of dynamically…
first Jun 4, 2025 -
Medium max 4.0ALAS2023-2025-1000 1 CVE
Moderate: ghostscript security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-48708: gs_lib_ctx_stash_sanitized_arg in base/gslibctx.c in Artifex Ghostscript before 10.05.1 lacks argument sanitization for the # case. A created PDF docum…
first Jun 4, 2025