4,948 results · Feed
-
LowALAS2023-2024-558 0 CVEs
Low: curl security update (Amazon Linux 2023)
first Feb 29, 2024 -
HighALAS2023-2024-557 1 CVE
Important: cpio security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2015-1197: cpio 2.11, when using the --no-absolute-filenames option, allows local users to write to arbitrary files via a symlink attack on a file in an archive.
first Feb 29, 2024 -
High max 9.1ALAS2023-2024-556 1 CVE
Important: perl-Cpanel-JSON-XS security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2022-48623: The Cpanel::JSON::XS package before 4.33 for Perl performs out-of-bounds accesses in a way that allows attackers to obtain sensitive information or cau…
first Feb 29, 2024 -
Medium max 6.8ALAS2023-2024-555 1 CVE
Moderate: grub2 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-4001: The "/boot/efi/EFI/fedora/grub.cfg" configuration file allows an unprivileged user with physical access to a computer to bypass the GRUB password protec…
first Feb 29, 2024 -
MediumALAS2023-2024-554 1 CVE
Moderate: ncurses security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-45918: ncurses 6.4-20230610 has a NULL pointer dereference in tgetstr in tinfo/lib_termcap.c.
first Feb 29, 2024 -
High max 7.5ALAS2023-2024-553 2 CVEs
Important: unbound security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-50868: The Closest Encloser Proof aspect of the DNS protocol (in RFC 5155 when RFC 9276 guidance is skipped) allows remote attackers to cause a denial of serv…
first Feb 29, 2024 -
High max 7.5ALAS2023-2024-552 2 CVEs
Important: dnsmasq security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-50868: The Closest Encloser Proof aspect of the DNS protocol (in RFC 5155 when RFC 9276 guidance is skipped) allows remote attackers to cause a denial of serv…
first Feb 29, 2024 -
Medium max 9.1ALAS2023-2024-551 1 CVE
Moderate: openexr security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-5841: Due to a failure in validating the number of scanline samples of a OpenEXR file containing deep scanline data, Academy Software Foundation OpenEX image …
first Feb 29, 2024 -
High max 7.5ALAS2023-2024-550 6 CVEs
Important: bind security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-6516: To keep its cache database efficient, `named` running as a recursive resolver occasionally attempts to clean up the database. It uses several methods, i…
first Feb 29, 2024 -
Medium max 7.5ALAS2023-2024-548 1 CVE
Moderate: gnutls security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-0553: A vulnerability was found in GnuTLS. The response times to malformed ciphertexts in RSA-PSK ClientKeyExchange differ from response times of ciphertexts …
first Feb 29, 2024 -
High max 8.0ALAS2023-2024-547 1 CVE
Important: postgresql15 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-0985: Late privilege drop in REFRESH MATERIALIZED VIEW CONCURRENTLY in PostgreSQL allows an object creator to execute arbitrary SQL functions as the command i…
first Feb 29, 2024 -
Low max 3.3ALAS2023-2024-546 1 CVE
Low: grub2 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-1048: A flaw was found in the grub2-set-bootflag utility of grub2. After the fix of CVE-2019-14865, grub2-set-bootflag will create a temporary file with the n…
first Feb 29, 2024 -
High max 7.5ALAS2023-2024-545 3 CVEs
Important: dotnet6.0 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-21404: .NET Denial of Service Vulnerability CVE-2024-21386: .NET Denial of Service Vulnerability CVE-2024-20672: .NET Denial of Service Vulnerability
first Feb 29, 2024 -
High max 8.6ALAS2023-2024-543 5 CVEs
Important: ecs-service-connect-agent security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-23327: Envoy is a high-performance edge/middle/service proxy. When PPv2 is enabled both on a listener and subsequent cluster, the Envoy instance will segfault…
first Feb 29, 2024 -
High max 8.6ALAS2023-2024-541 2 CVEs
Important: libgit2 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-24577: libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git functionality int…
first Feb 29, 2024 -
Medium max 7.3ALAS2023-2024-540 1 CVE
Moderate: libuv security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-24806: libuv is a multi-platform support library with a focus on asynchronous I/O. The `uv_getaddrinfo` function in `src/unix/getaddrinfo.c` (and its windows …
first Feb 29, 2024 -
High max 8.8ALAS2023-2024-539 1 CVE
Important: composer security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-24821: Composer is a dependency Manager for the PHP language. In affected versions several files within the local working directory are included during the in…
first Feb 29, 2024 -
LowALAS2-2024-2490 0 CVEs
Low: curl security update (Amazon Linux 2)
first Feb 29, 2024 -
HighALAS2-2024-2489 1 CVE
Important: cpio security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2015-1197: cpio 2.11, when using the --no-absolute-filenames option, allows local users to write to arbitrary files via a symlink attack on a file in an archive.
first Feb 29, 2024 -
Low max 5.5ALAS2-2024-2488 1 CVE
Low: glade security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2020-36774: plugins/gtk+/glade-gtk-box.c in GNOME Glade before 3.38.1 and 3.39.x before 3.40.0 mishandles widget rebuilding for GladeGtkBox, leading to a denial of se…
first Feb 29, 2024 -
LowALAS2-2024-2487 1 CVE
Low: glib2 security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2021-28153: An issue was discovered in GNOME GLib before 2.66.8. When g_file_replace() is used with G_FILE_CREATE_REPLACE_DESTINATION to replace a path that is a dang…
first Feb 29, 2024 -
High max 7.5ALAS2-2024-2486 5 CVEs
Important: ruby security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2021-41819: CGI::Cookie.parse in Ruby through 2.6.8 mishandles security prefixes in cookie names. This also affects the CGI gem through 0.3.0 for Ruby. CVE-2019-16255…
first Feb 29, 2024 -
High max 7.8ALAS2-2024-2485 1 CVE
Important: less security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2022-48624: close_altfile in filename.c in less before 606 omits shell_quote calls for LESSCLOSE.
first Feb 29, 2024 -
High max 8.3ALAS2-2024-2484 1 CVE
Important: shim security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-40547: A remote code execution vulnerability was found in Shim. The Shim boot support trusts attacker-controlled values when parsing an HTTP response. This flaw …
first Feb 29, 2024 -
High max 8.3ALAS2-2024-2483 8 CVEs
Important: edk2 security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-0727: Processing a maliciously formatted PKCS12 file may lead OpenSSL to crash leading to a potential Denial of Service attack The package openssl098e is provide…
first Feb 29, 2024 -
MediumALAS2-2024-2482 1 CVE
Moderate: ncurses security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-45918: ncurses 6.4-20230610 has a NULL pointer dereference in tgetstr in tinfo/lib_termcap.c.
first Feb 29, 2024 -
High max 7.5ALAS2-2024-2481 2 CVEs
Important: unbound security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-50868: The Closest Encloser Proof aspect of the DNS protocol (in RFC 5155 when RFC 9276 guidance is skipped) allows remote attackers to cause a denial of service…
first Feb 29, 2024 -
Medium max 6.5ALAS2-2024-2480 1 CVE
Moderate: wpa_supplicant security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-52160: wpa_supplicant: potential authorization bypass
first Feb 29, 2024 -
Low max 5.5ALAS2-2024-2479 1 CVE
Low: openssl security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-0727: Processing a maliciously formatted PKCS12 file may lead OpenSSL to crash leading to a potential Denial of Service attack The package openssl098e is provide…
first Feb 29, 2024 -
Low max 5.5ALAS2-2024-2478 1 CVE
Low: openssl11 security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-0727: Processing a maliciously formatted PKCS12 file may lead OpenSSL to crash leading to a potential Denial of Service attack The package openssl098e is provide…
first Feb 29, 2024 -
High max 8.1ALAS2-2024-2477 7 CVEs
Important: thunderbird security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-1553: Memory safety bugs present in Firefox 122, Firefox ESR 115.7, and Thunderbird 115.7. Some of these bugs showed evidence of memory corruption and we presume…
first Feb 29, 2024 -
Medium max 8.1ALAS2-2024-2476 1 CVE
Moderate: xerces-c security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-23807: Apache issued this CVE to indicate the correct versions of xerces-c, which included the fix for CVE-2018-1311. See the older CVE page for fix status.
first Feb 29, 2024 -
Medium max 7.3ALAS2-2024-2474 1 CVE
Moderate: libuv security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-24806: libuv is a multi-platform support library with a focus on asynchronous I/O. The `uv_getaddrinfo` function in `src/unix/getaddrinfo.c` (and its windows cou…
first Feb 29, 2024 -
High max 9.8ALAS2023-2024-526 4 CVEs
Important: amazon-ssm-agent security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-49569: A path traversal vulnerability was discovered in go-git versions prior to v5.11. This vulnerability allows an attacker to create and amend files across…
first Feb 15, 2024 -
Medium max 7.8ALAS2023-2024-518 2 CVEs
Moderate: vim security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-22667: Vim before 9.0.2142 has a stack-based buffer overflow because did_set_langmap in map.c calls sprintf to write to the error buffer that is passed down t…
first Feb 15, 2024 -
High max 7.5ALAS2023-2024-498 4 CVEs
Important: amazon-cloudwatch-agent security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-47108: OpenTelemetry-Go Contrib is a collection of third-party packages for OpenTelemetry-Go. Prior to version 0.46.0, the grpc Unary Server Interceptor out o…
first Jan 19, 2024 -
Medium max 8.6ALAS2023-2023-445 2 CVEs
Moderate: squid security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-25617: Squid is an open source caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to a Collapse of Data into Unsafe Value bug ,Squid may be …
first Dec 6, 2023 -
Medium max 5.4ALAS2023-2023-387 3 CVEs
Moderate: postgresql15 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-39418: A vulnerability was found in PostgreSQL with the use of the MERGE command, which fails to test new rows against row security policies defined for UPDAT…
first Oct 12, 2023 -
High max 7.8ALAS2023-2023-123 2 CVEs
Important: less security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2022-48624: close_altfile in filename.c in less before 606 omits shell_quote calls for LESSCLOSE. CVE-2022-46663: In GNU Less before 609, crafted data can result i…
first Mar 6, 2023 -
Medium max 7.8ALAS2-2024-2452 2 CVEs
Moderate: vim security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-22667: Vim before 9.0.2142 has a stack-based buffer overflow because did_set_langmap in map.c calls sprintf to write to the error buffer that is passed down to t…
first Feb 15, 2024