4,948 results · Feed
-
High max 8.8ALAS2023-2024-786 4 CVEs
Important: postgresql16 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-10979: Incorrect control of environment variables in PostgreSQL PL/Perl allows an unprivileged database user to change sensitive process environment variables…
first Dec 5, 2024 -
Medium max 7.5ALAS2023-2024-785 2 CVEs
Moderate: dovecot security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-23185: Dovecot reports: A DoS is possible with a large number of address headers or abnormally large email headers. CVE-2024-23184: Dovecot reports: A DoS is …
first Dec 5, 2024 -
Medium max 7.5ALAS2023-2024-783 1 CVE
Moderate: libxml2 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-34459: An issue was discovered in xmllint (from libxml2) before 2.11.8 and 2.12.x before 2.12.7. Formatting error messages with xmllint --htmlout can result i…
first Dec 5, 2024 -
Medium max 5.6ALAS2023-2024-782 1 CVE
Moderate: python-requests security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-35195: Requests is a HTTP library. Prior to 2.32.0, when making requests through a Requests `Session`, if the first request is made with `verify=False` to dis…
first Dec 5, 2024 -
Medium max 5.6ALAS2023-2024-781 1 CVE
Moderate: python-pip security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-35195: Requests is a HTTP library. Prior to 2.32.0, when making requests through a Requests `Session`, if the first request is made with `verify=False` to dis…
first Dec 5, 2024 -
Medium max 5.6ALAS2023-2024-780 1 CVE
Moderate: python3.11-pip security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-35195: Requests is a HTTP library. Prior to 2.32.0, when making requests through a Requests `Session`, if the first request is made with `verify=False` to dis…
first Dec 5, 2024 -
Medium max 9.4ALAS2023-2024-778 2 CVEs
Moderate: kernel security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-49996: In the Linux kernel, the following vulnerability has been resolved: cifs: Fix buffer overflow when parsing NFS reparse points CVE-2024-41080: In the Li…
first Dec 5, 2024 -
High max 8.1ALAS2023-2024-777 4 CVEs
Important: dotnet8.0 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-43485: .NET and Visual Studio Denial of Service Vulnerability CVE-2024-43484: .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability CVE-2024…
first Dec 5, 2024 -
High max 7.5ALAS2023-2024-776 3 CVEs
Important: dotnet6.0 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-43485: .NET and Visual Studio Denial of Service Vulnerability CVE-2024-43484: .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability CVE-2024…
first Dec 5, 2024 -
Low max 4.3ALAS2023-2024-775 7 CVEs
Low: opensc security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-8443: libopensc: Heap buffer overflow in OpenPGP driver when generating key CVE-2024-45620: It is caused by the libopensc library in opensc porject. This vuln…
first Dec 5, 2024 -
High max 8.4ALAS2023-2024-774 4 CVEs
Important: ghostscript security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-46956: PostScript interpreter - fix buffer length check NOTE: https://bugs.ghostscript.com/show_bug.cgi?id=707895 NOTE: https://cgit.ghostscript.com/cgi-bin/c…
first Dec 5, 2024 -
High max 9.1ALAS2023-2024-773 2 CVEs
Important: python-waitress security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-49769: Waitress is a Web Server Gateway Interface server for Python 2 and 3. When a remote client closes the connection before waitress has had the opportunit…
first Dec 5, 2024 -
High max 7.5ALAS2023-2024-772 3 CVEs
Important: libsoup security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-52532: GNOME libsoup before 3.6.1 has an infinite loop, and memory consumption. during the reading of certain patterns of WebSocket data from clients. CVE-202…
first Dec 5, 2024 -
Medium max 5.3ALAS2023-2024-771 2 CVEs
Moderate: avahi security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-52616: avahi: Avahi Wide-Area DNS Predictable Transaction IDs CVE-2024-52615: avahi: Avahi Wide-Area DNS Uses Constant Source Port
first Dec 5, 2024 -
Medium max 6.3ALAS2023-2024-769 1 CVE
Moderate: grpc security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-7246: It's possible for a gRPC client communicating with a HTTP/2 proxy to poison the HPACK table between the proxy and the backend such that other clients se…
first Dec 5, 2024 -
Medium max 9.8ALAS2023-2024-765 5 CVEs
Moderate: kernel security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-47685: syzbot reported that nf_reject_ip6_tcphdr_put() was possibly sending garbage on the four reserved tcp bits (th->res1) Use skb_put_zero() to clear the w…
first Nov 13, 2024 -
High max 8.8ALAS2023-2024-748 7 CVEs
Important: microcode_ctl security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-24980: Protection mechanism failure in some 3rd, 4th, and 5th Generation Intel(R) Xeon(R) Processors may allow a privileged user to potentially enable escalat…
first Oct 24, 2024 -
Medium max 7.8ALAS2023-2024-709 13 CVEs
Moderate: kernel security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-44944: In the Linux kernel, the following vulnerability has been resolved: netfilter: ctnetlink: use helper function to calculate expect ID CVE-2024-44934: In…
first Aug 28, 2024 -
High max 8.8ALAS2023-2024-519 24 CVEs
Important: kernel security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-35840: In the Linux kernel, the following vulnerability has been resolved: mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect() CVE-2024-35839: In t…
first Feb 15, 2024 -
Medium max 7.8ALAS2-2024-2698 8 CVEs
Moderate: kernel security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-41097: In the Linux kernel, the following vulnerability has been resolved: usb: atm: cxacru: fix endpoint checking in cxacru_bind() CVE-2024-41059: In the Linux …
first Nov 8, 2024 -
High max 8.8ALAS2-2024-2682 7 CVEs
Important: microcode_ctl security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-24980: Protection mechanism failure in some 3rd, 4th, and 5th Generation Intel(R) Xeon(R) Processors may allow a privileged user to potentially enable escalation…
first Oct 24, 2024 -
MediumALAS2-2024-2633 2 CVEs
Moderate: kernel security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-35807: In the Linux kernel, the following vulnerability has been resolved: ext4: fix corruption during on-line resize CVE-2024-26687: In the Linux kernel, the fo…
first Sep 12, 2024 -
High max 9.8ALAS2-2024-2391 11 CVEs
Important: kernel security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-0584: A use-after-free issue was found in igmp_start_timer in net/ipv4/igmp.c in the network sub-component in the Linux Kernel. This flaw allows a local user to …
first Jan 3, 2024 -
Medium max 7.1ALAS2-2023-2359 5 CVEs
Moderate: kernel security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-52868: In the Linux kernel, the following vulnerability has been resolved: thermal: core: prevent potential string overflow CVE-2023-52867: In the Linux kernel, …
first Nov 29, 2023 -
Medium max 5.5ALAS2-2024-2701 1 CVE
Moderate: cloud-init security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-1786: Sensitive data could be exposed in logs of cloud-init before version 23.1.2. An attacker could use this information to find hashed passwords and possibly e…
first Nov 8, 2024 -
Medium max 7.5ALAS2-2024-2700 1 CVE
Moderate: fop security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-28168: Improper Restriction of XML External Entity Reference ('XXE') vulnerability in Apache XML Graphics FOP. This issue affects Apache XML Graphics FOP: 2.9. U…
first Nov 8, 2024 -
Medium max 6.2ALAS2-2024-2699 1 CVE
Moderate: python3-idna security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-3651: python-idna: potential DoS via resource consumption via specially crafted inputs to idna.encode()
first Nov 8, 2024 -
High max 9.8ALAS2-2024-2697 1 CVE
Important: perl-App-cpanminus security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-45321: The App::cpanminus package through 1.7047 for Perl downloads code via insecure HTTP, enabling code execution for network attackers.
first Nov 8, 2024 -
Medium max 7.5ALAS2-2024-2695 1 CVE
Moderate: kernel security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-46763: In the Linux kernel, the following vulnerability has been resolved: fou: Fix null-ptr-deref in GRO.
first Nov 8, 2024 -
High max 7.5ALAS2-2024-2694 1 CVE
Important: python3 security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-6232: There is a MEDIUM severity vulnerability affecting CPython. Regular expressions that allowed excessive backtracking during tarfile.TarFile header parsing a…
first Nov 8, 2024 -
High max 8.7ALAS2-2024-2693 1 CVE
Important: protobuf security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-7254: Any project that parses untrusted Protocol Buffers data containing an arbitrary number of nested groups / series of SGROUP tags can corrupted by exceeding …
first Nov 8, 2024 -
High max 7.8ALAS2-2024-2692 1 CVE
Important: xorg-x11-server security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-9632: A flaw was found in the X.org server. Due to improperly tracked allocation size in _XkbSetCompatMap, a local attacker may be able to trigger a buffer overf…
first Nov 8, 2024 -
High max 7.8ALAS2-2024-2691 1 CVE
Important: tigervnc security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-9632: A flaw was found in the X.org server. Due to improperly tracked allocation size in _XkbSetCompatMap, a local attacker may be able to trigger a buffer overf…
first Nov 8, 2024 -
High max 9.8
Important: thunderbird security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-9680: An attacker was able to achieve code execution in the content process by exploiting a use-after-free in Animation timelines. We have had reports of this vu…
first Nov 8, 2024 -
Medium max 6.5ALAS2023-2024-768 4 CVEs
Moderate: nodejs20 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-36137: A vulnerability has been identified in Node.js, affecting users of the experimental permission model when the --allow-fs-write flag is used. Node.js Pe…
first Nov 13, 2024 -
Medium max 6.7ALAS2023-2024-767 1 CVE
Moderate: python-pillow security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-28219: In _imagingcms.c, two strcpy calls were able to copy too much data into fixed length strings. This has been fixed by using strncpy instead.
first Nov 13, 2024 -
Medium max 6.5ALAS2023-2024-766 1 CVE
Moderate: nodejs security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-28863: node-tar is a Tar for Node.js. node-tar prior to version 6.2.1 has no limit on the number of sub-folders created in the folder creation process. An att…
first Nov 13, 2024 -
Medium max 6.2ALAS2023-2024-764 1 CVE
Moderate: python-pip security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-3651: python-idna: potential DoS via resource consumption via specially crafted inputs to idna.encode()
first Nov 13, 2024 -
Medium max 6.2ALAS2023-2024-763 1 CVE
Moderate: python-idna security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-3651: python-idna: potential DoS via resource consumption via specially crafted inputs to idna.encode()
first Nov 13, 2024 -
Medium max 6.2ALAS2023-2024-762 1 CVE
Moderate: python3.11-pip security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-3651: python-idna: potential DoS via resource consumption via specially crafted inputs to idna.encode()
first Nov 13, 2024