4,948 results · Feed
-
High max 8.8ALAS2023-2025-999 1 CVE
Important: apache-commons-beanutils security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-48734: Improper Access Control vulnerability in Apache Commons. A special BeanIntrospector class was added in version 1.9.2. This can be used to stop attacker…
first Jun 4, 2025 -
High max 7.5ALAS2023-2025-998 1 CVE
Important: libsoup3 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-4948: A flaw was found in the soup_multipart_new_from_message() function of the libsoup HTTP library, which is commonly used by GNOME and other applications t…
first Jun 4, 2025 -
High max 7.5ALAS2023-2025-997 1 CVE
Important: libsoup security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-4948: A flaw was found in the soup_multipart_new_from_message() function of the libsoup HTTP library, which is commonly used by GNOME and other applications t…
first Jun 4, 2025 -
High max 9.8ALAS2023-2025-996 9 CVEs
Important: firefox security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-5269: Memory safety bug present in Firefox ESR 128.10, and Thunderbird 128.10. This bug showed evidence of memory corruption and we presume that with enough e…
first Jun 4, 2025 -
MediumALAS2023-2025-993 2 CVEs
Moderate: kernel security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-36975: In the Linux kernel, the following vulnerability has been resolved: KEYS: trusted: Do not use WARN when encode fails CVE-2024-36967: In the Linux kerne…
first Jun 2, 2025 -
Medium max 5.3ALAS2023-2025-990 3 CVEs
Moderate: mariadb105 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-30722: Vulnerability in the MySQL Client product of Oracle MySQL (component: Client: mysqldump). Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-…
first May 21, 2025 -
High max 8.2ALAS2023-2024-695 31 CVEs
Important: kernel security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-36008: In the Linux kernel, the following vulnerability has been resolved: ipv4: check for NULL idev in ip_route_use_hint() CVE-2024-36005: In the Linux kerne…
first Aug 1, 2024 -
High max 10.0
Important: kernel security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-39490: In the Linux kernel, the following vulnerability has been resolved: ipv6: sr: fix missing sk_buff release in seg6_input_core CVE-2024-39489: In the Lin…
first Aug 1, 2024 -
Medium max 9.6ALAS2023-2024-643 31 CVEs
Moderate: kernel security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-36959: In the Linux kernel, the following vulnerability has been resolved: pinctrl: devicetree: fix refcount leak in pinctrl_dt_to_map() CVE-2024-36953: In th…
first Jun 19, 2024 -
Medium max 9.8ALAS2023-2024-613 32 CVEs
Moderate: kernel security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-35976: In the Linux kernel, the following vulnerability has been resolved: xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING CVE-2024-35973: In the…
first May 9, 2024 -
High max 9.8ALAS2023-2023-132 30 CVEs
Important: kernel security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-52986: In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener CVE-2023-52983…
first Mar 11, 2023 -
High max 9.8ALAS2-2025-2826 16 CVEs
Important: kernel security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-22058: In the Linux kernel, the following vulnerability has been resolved: udp: Fix memory accounting leak. CVE-2025-21764: In the Linux kernel, the following vu…
first Apr 9, 2025 -
LowALAS2023-2025-992 0 CVEs
Low: librsvg2 security update (Amazon Linux 2023)
first May 27, 2025 -
Medium max 6.5ALAS2023-2025-991 4 CVEs
Moderate: microcode_ctl security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-20103: Potential security vulnerabilities in some Intel(r) Processors may allow denial of service. Intel is releasing microcode updates to mitigate these pote…
first May 23, 2025 -
Medium max 5.3ALAS2023-2025-989 1 CVE
Moderate: libtasn1 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-12133: When an input DER data contains a large number of SEQUENCE OF or SET OF elements, decoding the data and searching a specific element in it take quadrat…
first May 21, 2025 -
Medium max 8.1ALAS2023-2025-988 6 CVEs
Moderate: glibc security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-0395: When the assert() function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string …
first May 21, 2025 -
Medium max 4.6ALAS2023-2025-987 1 CVE
Moderate: docker security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-40635: containerd is an open-source container runtime. A bug was found in containerd prior to versions 1.6.38, 1.7.27, and 2.0.4 where containers launched wit…
first May 21, 2025 -
Medium max 4.3ALAS2023-2025-986 1 CVE
Moderate: apache-commons-io security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-47554: Uncontrolled Resource Consumption vulnerability in Apache Commons IO. The org.apache.commons.io.input.XmlStreamReader class may excessively consume CPU…
first May 21, 2025 -
High max 8.1ALAS2023-2025-985 2 CVEs
Important: perl-Mojolicious security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-58135: Mojolicious versions from 7.28 through 9.39 for Perl may generate weak HMAC session secrets. When creating a default app with the "mojo generate app" t…
first May 21, 2025 -
Medium max 8.6ALAS2023-2025-984 7 CVEs
Moderate: kernel6.12 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-22108: In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Mask the bd_cnt field in the TX BD properly CVE-2025-21884: In the Linux k…
first May 21, 2025 -
Medium max 6.1ALAS2023-2025-982 1 CVE
Moderate: open-vm-tools security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-22247: VMware Tools contains an insecure file handling vulnerability. A malicious actor with non-administrative privileges on a guest VM may tamper the local …
first May 21, 2025 -
High max 9.1ALAS2023-2025-981 2 CVEs
Important: soci-snapshotter security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-22872: The tokenizer incorrectly interprets tags with unquoted attribute values that end with a solidus character (/) as self-closing. When directly using Tok…
first May 21, 2025 -
High max 9.1ALAS2023-2025-980 2 CVEs
Important: nerdctl security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-22872: The tokenizer incorrectly interprets tags with unquoted attribute values that end with a solidus character (/) as self-closing. When directly using Tok…
first May 21, 2025 -
High max 9.1ALAS2023-2025-979 2 CVEs
Important: runfinch-finch security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-22872: The tokenizer incorrectly interprets tags with unquoted attribute values that end with a solidus character (/) as self-closing. When directly using Tok…
first May 21, 2025 -
High max 9.1ALAS2023-2025-978 1 CVE
Important: oci-add-hooks security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-22871: The net/http package accepted data in the chunked transfer encoding containing an invalid chunk-size line terminated by a bare LF. When used in conjunc…
first May 21, 2025 -
Medium max 3.8ALAS2023-2025-977 1 CVE
Moderate: golang security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-22873: A directory traversal vulnerability was discovered in the Go programming language's os package in versions prior to 1.24.3. The vulnerability allows im…
first May 21, 2025 -
Medium max 5.9ALAS2023-2025-975 1 CVE
Moderate: postgresql17 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-4207: Buffer over-read in PostgreSQL GB18030 encoding validation allows a database input provider to achieve temporary denial of service on platforms where a …
first May 21, 2025 -
Medium max 5.9ALAS2023-2025-974 1 CVE
Moderate: postgresql15 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-4207: Buffer over-read in PostgreSQL GB18030 encoding validation allows a database input provider to achieve temporary denial of service on platforms where a …
first May 21, 2025 -
Medium max 5.9ALAS2023-2025-973 1 CVE
Moderate: postgresql16 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-4207: Buffer over-read in PostgreSQL GB18030 encoding validation allows a database input provider to achieve temporary denial of service on platforms where a …
first May 21, 2025 -
Low max 2.9ALAS2023-2025-972 1 CVE
Low: ImageMagick security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-43965: In MIFF image processing in ImageMagick before 7.1.1-44, image depth is mishandled after SetQuantumFormat is used.
first May 21, 2025 -
Medium max 6.5ALAS2-2025-2872 4 CVEs
Moderate: microcode_ctl security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-20103: Potential security vulnerabilities in some Intel(r) Processors may allow denial of service. Intel is releasing microcode updates to mitigate these potenti…
first May 23, 2025 -
Medium max 7.5ALAS2-2025-2871 1 CVE
Moderate: jetty security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2021-28165: In Eclipse Jetty 7.2.2 to 9.4.38, 10.0.0.alpha0 to 10.0.1, and 11.0.0.alpha0 to 11.0.1, CPU usage can reach 100% upon receiving a large invalid TLS frame.
first May 21, 2025 -
High max 9.8ALAS2-2025-2870 2 CVEs
Important: cri-tools security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-22871: The net/http package accepted data in the chunked transfer encoding containing an invalid chunk-size line terminated by a bare LF. When used in conjunctio…
first May 21, 2025 -
Medium max 5.6ALAS2-2025-2868 1 CVE
Moderate: python-requests security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-35195: Requests is a HTTP library. Prior to 2.32.0, when making requests through a Requests `Session`, if the first request is made with `verify=False` to disabl…
first May 21, 2025 -
High max 9.3ALAS2-2025-2867 1 CVE
Important: ppp security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-58250: The passprompt plugin in pppd in ppp before 2.5.2 mishandles privileges.
first May 21, 2025 -
High max 8.1ALAS2-2025-2866 1 CVE
Important: postgresql security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-1094: Improper neutralization of quoting syntax in PostgreSQL libpq functions PQescapeLiteral(), PQescapeIdentifier(), PQescapeString(), and PQescapeStringConn()…
first May 21, 2025 -
High max 7.8ALAS2-2025-2865 3 CVEs
Important: kernel security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-21722: In the Linux kernel, the following vulnerability has been resolved: nilfs2: do not force clear folio if buffer is referenced CVE-2024-58083: In the Linux …
first May 21, 2025 -
Medium max 6.1ALAS2-2025-2864 1 CVE
Moderate: open-vm-tools security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-22247: VMware Tools contains an insecure file handling vulnerability. A malicious actor with non-administrative privileges on a guest VM may tamper the local fil…
first May 21, 2025 -
High max 9.1ALAS2-2025-2863 2 CVEs
Important: nerdctl security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-22872: The tokenizer incorrectly interprets tags with unquoted attribute values that end with a solidus character (/) as self-closing. When directly using Tokeni…
first May 21, 2025 -
Medium max 7.4ALAS2-2025-2862 1 CVE
Moderate: yelp security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-3155: A flaw was found in Yelp. The Gnome user help application allows the help document to execute arbitrary scripts. This vulnerability allows malicious users …
first May 21, 2025