4,948 results · Feed
-
High max 6.5ALAS2023-2023-197 10 CVEs
Important: wireshark security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-2952: XRA dissector infinite loop in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via packet injection or crafted capture file CVE-20…
first Jun 5, 2023 -
Medium max 7.5ALAS2-2025-2768 1 CVE
Moderate: python-pillow security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2014-3589: PIL/IcnsImagePlugin.py in Python Imaging Library (PIL) and Pillow before 2.3.2 and 2.5.x before 2.5.2 allows remote attackers to cause a denial of service …
first Feb 12, 2025 -
High max 5.5ALAS2-2025-2767 5 CVEs
Important: glib2 security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-32665: GLib's GVariant deserialization prior to GLib 2.74.4 is vulnerable to an exponential blowup issue where a crafted GVariant can cause excessive processing,…
first Feb 12, 2025 -
Medium max 7.4ALAS2-2025-2766 1 CVE
Moderate: python3 security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-0397: A defect was discovered in the Python "ssl" module where there is a memory race condition with the ssl.SSLContext methods "cert_store_stats()" and "get_ca_…
first Feb 12, 2025 -
High max 8.8ALAS2-2025-2764 1 CVE
Important: postgresql security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-10979: Incorrect control of environment variables in PostgreSQL PL/Perl allows an unprivileged database user to change sensitive process environment variables (e…
first Feb 12, 2025 -
Medium max 6.8ALAS2-2025-2763 1 CVE
Moderate: python-jwcrypto security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-28102: JWCrypto implements JWK, JWS, and JWE specifications using python-cryptography. Prior to version 1.5.6, an attacker can cause a denial of service attack b…
first Feb 12, 2025 -
Low max 7.5ALAS2-2025-2762 1 CVE
Low: python3 security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-4032: The "ipaddress" module contained incorrect information about whether certain IPv4 and IPv6 addresses were designated as "globally reachable" or "private". …
first Feb 12, 2025 -
Low max 7.5ALAS2-2025-2761 1 CVE
Low: python-ipaddress security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-4032: The "ipaddress" module contained incorrect information about whether certain IPv4 and IPv6 addresses were designated as "globally reachable" or "private". …
first Feb 12, 2025 -
Medium max 5.5ALAS2-2025-2760 1 CVE
Moderate: ghostscript security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-46955: PS interpreter - check Indexed colour space index NOTE: https://bugs.ghostscript.com/show_bug.cgi?id=707990 NOTE: https://cgit.ghostscript.com/cgi-bin/cgi…
first Feb 12, 2025 -
High max 7.8ALAS2-2025-2759 2 CVEs
Important: kernel security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-50055: In the Linux kernel, the following vulnerability has been resolved: driver core: bus: Fix double free in driver API bus_register() CVE-2024-49860: In the …
first Feb 12, 2025 -
Low max 3.6ALAS2-2025-2758 1 CVE
Low: gsl security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-50610: GSL (GNU Scientific Library) through 2.8 has an integer signedness error in gsl_siman_solve_many in siman/siman.c. When params.n_tries is negative, incorr…
first Feb 12, 2025 -
High max 7.8ALAS2-2025-2757 1 CVE
Important: emacs security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-53920: In elisp-mode.el in GNU Emacs through 30.0.92, a user who chooses to invoke elisp-completion-at-point (for code completion) on untrusted Emacs Lisp source…
first Feb 12, 2025 -
Medium max 8.8ALAS2-2025-2756 1 CVE
Moderate: grub2 security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-56737: GNU GRUB (aka GRUB2) through 2.12 has a heap-based buffer overflow in fs/hfs.c via crafted sblock data in an HFS filesystem.
first Feb 12, 2025 -
Medium max 7.5ALAS2-2025-2755 30 CVEs
Moderate: virtuoso-opensource security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-57664: An issue in the sqlg_group_node component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) via crafted SQL stat…
first Feb 12, 2025 -
Medium max 7.5ALAS2-2025-2754 3 CVEs
Moderate: python3 security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-7592: There is a LOW severity vulnerability affecting CPython, specifically the 'http.cookies' standard library module. When parsing cookies that contained backs…
first Feb 12, 2025 -
Medium max 4.2ALAS2-2025-2753 1 CVE
Moderate: vim security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-24014: Vim is an open source, command line text editor. A segmentation fault was found in Vim before 9.1.1043. In silent Ex mode (-s -e), Vim typically doesn't s…
first Feb 12, 2025 -
High max 8.1ALAS2023-2025-862 1 CVE
Important: libxml2 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2022-49043: xmlXIncludeAddNode in xinclude.c in libxml2 before 2.11.0 has a use-after-free.
first Feb 12, 2025 -
Medium max 9.8ALAS2023-2025-861 1 CVE
Moderate: libglvnd security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-45924: libglxproto.c in OpenGL libglvnd bb06db5a was discovered to contain a segmentation violation via the function glXGetDrawableScreen(). NOTE: this is dis…
first Feb 12, 2025 -
Medium max 5.5ALAS2023-2025-860 1 CVE
Moderate: ansible-core security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-11079: This vulnerability allows attackers to bypass unsafe content protections using the hostvars object to reference and execute templated content. This iss…
first Feb 12, 2025 -
Medium max 7.5ALAS2023-2025-859 2 CVEs
Moderate: zziplib security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-39134: A Stack Buffer Overflow vulnerability in zziplibv 0.13.77 allows attackers to cause a denial of service via the __zzip_fetch_disk_trailer() function at…
first Feb 12, 2025 -
Medium max 5.3ALAS2023-2025-858 1 CVE
Moderate: soci-snapshotter security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-45338: An attacker can craft an input to the Parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow pars…
first Feb 12, 2025 -
Medium max 7.5ALAS2023-2025-857 1 CVE
Moderate: squid security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-45802: Squid is an open source caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to Input Validation, Premature Release of Resource During …
first Feb 12, 2025 -
Medium max 5.5ALAS2023-2025-856 1 CVE
Moderate: ghostscript security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-46955: PS interpreter - check Indexed colour space index NOTE: https://bugs.ghostscript.com/show_bug.cgi?id=707990 NOTE: https://cgit.ghostscript.com/cgi-bin/…
first Feb 12, 2025 -
Low max 3.6ALAS2023-2025-853 1 CVE
Low: gsl security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-50610: GSL (GNU Scientific Library) through 2.8 has an integer signedness error in gsl_siman_solve_many in siman/siman.c. When params.n_tries is negative, inc…
first Feb 12, 2025 -
Low max 3.1ALAS2023-2025-852 1 CVE
Low: docker security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-51744: golang-jwt is a Go implementation of JSON Web Tokens. Unclear documentation of the error behavior in `ParseWithClaims` can lead to situation where user…
first Feb 12, 2025 -
High max 8.5ALAS2023-2025-851 1 CVE
Important: git-lfs security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-53263: Git LFS is a Git extension for versioning large files. When Git LFS requests credentials from Git for a remote host, it passes portions of the host's U…
first Feb 12, 2025 -
High max 7.5ALAS2023-2025-850 1 CVE
Important: ecs-service-connect-agent security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-53270: Envoy is a cloud-native high-performance edge/middle/service proxy. In affected versions `sendOverloadError` is going to assume the active request exis…
first Feb 12, 2025 -
High max 7.8ALAS2023-2025-849 1 CVE
Important: emacs security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-53920: In elisp-mode.el in GNU Emacs through 30.0.92, a user who chooses to invoke elisp-completion-at-point (for code completion) on untrusted Emacs Lisp sou…
first Feb 12, 2025 -
Medium max 9.3ALAS2023-2025-848 1 CVE
Moderate: harfbuzz security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-56732: HarfBuzz is a text shaping engine. Starting with 8.5.0 through 10.0.1, there is a heap-based buffer overflow in the hb_cairo_glyphs_from_buffer functio…
first Feb 12, 2025 -
Medium max 8.8ALAS2023-2025-847 1 CVE
Moderate: grub2 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-56737: GNU GRUB (aka GRUB2) through 2.12 has a heap-based buffer overflow in fs/hfs.c via crafted sblock data in an HFS filesystem.
first Feb 12, 2025 -
Medium max 5.5ALAS2023-2025-846 1 CVE
Moderate: ansible-core security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-8775: A flaw was found in Ansible, where sensitive information stored in Ansible Vault files can be exposed in plaintext during the execution of a playbook. T…
first Feb 12, 2025 -
Medium max 9.8ALAS2023-2025-845 7 CVEs
Moderate: php8.1 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-9026: Logs from childrens may be altered NOTE: Fixed in 8.3.12, 8.2.24 NOTE: https://github.com/php/php-src/security/advisories/GHSA-865w-9rf3-2wh5 NOTE: http…
first Feb 12, 2025 -
High max 8.8ALAS2023-2025-844 3 CVEs
Important: dotnet8.0 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-21176: .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability CVE-2025-21173: .NET Elevation of Privilege Vulnerability CVE-2025-21172: .…
first Feb 12, 2025 -
Medium max 5.3ALAS2023-2025-843 1 CVE
Moderate: nodejs security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-23085: A memory leak could occur when a remote peer abruptly closes the socket without sending a GOAWAY notification. Additionally, if an invalid header was d…
first Feb 12, 2025 -
Medium max 4.3ALAS2023-2025-842 1 CVE
Moderate: nginx security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-23419: When multiple server blocks are configured to share the same IP address and port, an attacker can use session resumption to bypass client certificate a…
first Feb 12, 2025 -
Medium max 7.5ALAS2023-2025-841 1 CVE
Moderate: apache-commons-compress security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2021-36090: When reading a specially crafted ZIP archive, Compress can be made to allocate large amounts of memory that finally leads to an out of memory error eve…
first Feb 11, 2025 -
LowALAS2023-2025-820 0 CVEs
Low: ansible-core security update (Amazon Linux 2023)
first Jan 21, 2025 -
Medium max 6.5ALAS2-2022-1896 2 CVEs
Moderate: python3 security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2021-28861: Python 3.x through 3.10 has an open redirection vulnerability in lib/http/server.py due to no protection against multiple (/) at the beginning of URI path…
first Dec 1, 2022 -
High max 9.1ALAS2023-2025-834 3 CVEs
Important: runfinch-finch security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-51744: golang-jwt is a Go implementation of JSON Web Tokens. Unclear documentation of the error behavior in `ParseWithClaims` can lead to situation where user…
first Jan 30, 2025 -
Medium max 5.3ALAS2023-2025-839 1 CVE
Moderate: ruby3.2 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-36617: A ReDoS issue was discovered in the URI component before 0.12.2 for Ruby. The URI parser mishandles invalid URLs that have specific characters. There i…
first Jan 30, 2025