4,948 results · Feed
-
High max 8.8ALAS2023-2024-702 1 CVE
Important: postgresql15 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-7348: Time-of-check Time-of-use (TOCTOU) race condition in pg_dump in PostgreSQL allows an object creator to execute arbitrary SQL functions as the user runni…
first Aug 14, 2024 -
Medium max 7.8ALAS2023-2024-665 8 CVEs
Moderate: kernel security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-42096: In the Linux kernel, the following vulnerability has been resolved: x86: stop playing stack games in profile_pc() CVE-2024-42090: In the Linux kernel, …
first Jul 18, 2024 -
Medium max 8.8ALAS2-2021-1727 7 CVEs
Moderate: kernel security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2021-47203: In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Fix list_add() corruption in lpfc_drain_txq() CVE-2021-47189: In the Linux…
first Dec 8, 2021 -
Medium max 9.8ALAS2-2024-2621 2 CVEs
Moderate: openssl11 security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-5535: Issue summary: Calling the OpenSSL API function SSL_select_next_proto with an empty supported client protocols buffer may cause a crash or memory contents …
first Aug 9, 2024 -
Medium max 6.1ALAS2-2024-2620 1 CVE
Moderate: python-lxml security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2021-28957: An XSS vulnerability was discovered in python-lxml's clean module versions before 4.6.3. When disabling the safe_attrs_only and forms arguments, the Clean…
first Aug 1, 2024 -
LowALAS2-2024-2619 1 CVE
Low: protobuf-c security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2022-33070: Protobuf-c v1.4.0 was discovered to contain an invalid arithmetic shift via the function parse_tag_and_wiretype in protobuf-c/protobuf-c.c. This vulnerabi…
first Aug 1, 2024 -
Medium max 5.7ALAS2-2024-2617 1 CVE
Moderate: thunderbird security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-6349: A heap overflow vulnerability exists in libvpx - Encoding a frame that has larger dimensions than the originally configured size with VP9 may result in a h…
first Aug 1, 2024 -
High max 7.5ALAS2-2024-2616 2 CVEs
Important: bind security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-1975: If a server hosts a zone containing a "KEY" Resource Record, or a resolver DNSSEC-validates a "KEY" Resource Record from a DNSSEC-signed domain in cache, a…
first Aug 1, 2024 -
Medium max 7.5ALAS2-2024-2614 2 CVEs
Moderate: ghostscript security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-29511: Artifex Ghostscript before 10.03.1, when Tesseract is used for OCR, has a directory traversal issue that allows arbitrary file reading (and writing of err…
first Aug 1, 2024 -
Medium max 6.3ALAS2-2024-2612 2 CVEs
Moderate: ghostscript security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-33870: NOTE: https://ghostscript.readthedocs.io/en/gs10.03.1/News.html NOTE: https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=79aef19c685984…
first Aug 1, 2024 -
High max 9.0ALAS2-2024-2611 1 CVE
Important: freeradius security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-3596: RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local attacker who can modify any valid Response (Access-Accept, Access-Reject, or Ac…
first Aug 1, 2024 -
Medium max 4.4ALAS2-2024-2610 1 CVE
Moderate: vte291 security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-37535: GNOME VTE before 0.76.3 allows an attacker to cause a denial of service (memory consumption) via a window resize escape sequence, a related issue to CVE-2…
first Aug 1, 2024 -
Medium max 6.3ALAS2-2024-2609 1 CVE
Moderate: squid security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-37894: Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to an Out-of-bounds Write error when assigning ESI variables, Squid is sus…
first Aug 1, 2024 -
High max 9.8ALAS2-2024-2608 4 CVEs
Important: emacs security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-39331: In Emacs before 29.4, org-link-expand-abbrev in lisp/ol.el expands a %(...) link abbrev even when it specifies an unsafe function, such as shell-command-t…
first Aug 1, 2024 -
Low max 7.5ALAS2-2024-2607 1 CVE
Low: ca-certificates security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-39689: Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. Cer…
first Aug 1, 2024 -
High max 5.3ALAS2-2024-2606 1 CVE
Important: httpd security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-40725: A partial fix for CVE-2024-39884 in the core of Apache HTTP Server 2.4.61 ignores some use of the legacy content-type based configuration of handlers. "Ad…
first Aug 1, 2024 -
LowALAS2-2024-2605 0 CVEs
Low: openssl11 security update (Amazon Linux 2)
first Aug 1, 2024 -
Medium max 9.1ALAS2-2024-2604 1 CVE
Moderate: openssl security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-5535: Issue summary: Calling the OpenSSL API function SSL_select_next_proto with an empty supported client protocols buffer may cause a crash or memory contents …
first Aug 1, 2024 -
High max 7.0ALAS2-2024-2603 1 CVE
Important: gtk2 security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-6655: gtk3: gtk2: Library injection from CWD
first Aug 1, 2024 -
High max 7.0ALAS2-2024-2602 1 CVE
Important: gtk3 security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-6655: gtk3: gtk2: Library injection from CWD
first Aug 1, 2024 -
MediumALAS2023-2024-499 1 CVE
Moderate: containerd security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-39326: A malicious HTTP sender can use chunk extensions to cause a receiver reading from a request or response body to read many more bytes from the network t…
first Jan 19, 2024 -
MediumALAS2023-2024-701 1 CVE
Moderate: libsndfile security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2022-33065: Multiple signed integers overflow in function au_read_header in src/au.c and in functions mat4_open and mat4_read_header in src/mat4.c in Libsndfile, a…
first Aug 1, 2024 -
Medium max 7.5ALAS2023-2024-700 3 CVEs
Moderate: nerdctl security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-28180: Package jose aims to provide an implementation of the Javascript Object Signing and Encryption set of standards. An attacker could send a JWE containin…
first Aug 1, 2024 -
Medium max 7.4ALAS2023-2024-699 1 CVE
Moderate: python3.9 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-0397: A defect was discovered in the Python "ssl" module where there is a memory race condition with the ssl.SSLContext methods "cert_store_stats()" and "get_…
first Aug 1, 2024 -
Medium max 6.5ALAS2023-2024-694 3 CVEs
Moderate: nodejs security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-30261: Undici is an HTTP/1.1 client, written from scratch for Node.js. An attacker can alter the `integrity` option passed to `fetch()`, allowing `fetch()` to…
first Aug 1, 2024 -
Medium max 9.1ALAS2023-2024-693 2 CVEs
Moderate: tpm2-tools security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-29039: tpm2-tools: pcr selection value is not compared with the attest CVE-2024-29038: tpm2-tools: arbitrary quote data may go undetected by tpm2_checkquote
first Aug 1, 2024 -
Medium max 8.8ALAS2023-2024-692 5 CVEs
Moderate: ghostscript security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-29511: Artifex Ghostscript before 10.03.1, when Tesseract is used for OCR, has a directory traversal issue that allows arbitrary file reading (and writing of …
first Aug 1, 2024 -
Medium max 6.3ALAS2023-2024-691 2 CVEs
Moderate: ghostscript security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-33870: NOTE: https://ghostscript.readthedocs.io/en/gs10.03.1/News.html NOTE: https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=79aef19c685…
first Aug 1, 2024 -
Medium max 4.8ALAS2023-2024-690 1 CVE
Moderate: python-tqdm security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-34062: tqdm is an open source progress bar for Python and CLI. Any optional non-boolean CLI arguments (e.g. `--delim`, `--buf-size`, `--manpath`) are passed t…
first Aug 1, 2024 -
Medium max 5.4ALAS2023-2024-689 1 CVE
Moderate: mod_http2 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-36387: Serving WebSocket protocol upgrades over a HTTP/2 connection could result in a Null Pointer dereference, leading to a crash of the server process, degr…
first Aug 1, 2024 -
Medium max 9.1ALAS2023-2024-688 2 CVEs
Moderate: krb5 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-37371: In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can cause invalid memory reads during GSS message token handling by sending message tokens with…
first Aug 1, 2024 -
Medium max 6.3ALAS2023-2024-687 1 CVE
Moderate: squid security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-37894: Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to an Out-of-bounds Write error when assigning ESI variables, Squid is …
first Aug 1, 2024 -
High max 8.1ALAS2023-2024-686 3 CVEs
Important: dotnet8.0 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-38095: .NET and Visual Studio Denial of Service Vulnerability CVE-2024-35264: .NET and Visual Studio Remote Code Execution Vulnerability CVE-2024-30105: .NET …
first Aug 1, 2024 -
High max 7.5ALAS2023-2024-685 1 CVE
Important: dotnet6.0 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-38095: .NET and Visual Studio Denial of Service Vulnerability
first Aug 1, 2024 -
Medium max 6.8ALAS2023-2024-684 1 CVE
Moderate: rapidjson security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-38517: Tencent RapidJSON is vulnerable to privilege escalation due to an integer underflow in the `GenericReader::ParseNumber()` function of `include/rapidjso…
first Aug 1, 2024 -
Low max 7.5ALAS2023-2024-682 1 CVE
Low: ca-certificates security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-39689: Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. …
first Aug 1, 2024 -
High max 5.3ALAS2023-2024-681 1 CVE
Important: httpd security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-40725: A partial fix for CVE-2024-39884 in the core of Apache HTTP Server 2.4.61 ignores some use of the legacy content-type based configuration of handlers. …
first Aug 1, 2024 -
High max 7.5ALAS2023-2024-680 3 CVEs
Important: bind security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-4076: Client queries that trigger serving stale data and that also require lookups in local authoritative zone data may result in an assertion failure. This i…
first Aug 1, 2024 -
Medium max 5.9ALAS2023-2024-678 2 CVEs
Moderate: php8.2 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-5458: In PHP versions 8.1.* before 8.1.29, 8.2.* before 8.2.20, 8.3.* before 8.3.8, due to a code logic error, filtering functions such as filter_var when val…
first Aug 1, 2024 -
Medium max 9.8ALAS2023-2024-677 3 CVEs
Moderate: openssl security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-5535: Issue summary: Calling the OpenSSL API function SSL_select_next_proto with an empty supported client protocols buffer may cause a crash or memory conten…
first Aug 1, 2024