4,948 results · Feed
-
Medium max 6.5ALAS2-2020-1471 2 CVEs
Moderate: python security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2022-48560: A use-after-free exists in Python through 3.9 via heappushpop in heapq. CVE-2020-8492: Python 2.7 through 2.7.17, 3.5 through 3.5.9, 3.6 through 3.6.10, 3…
first Jul 31, 2020 -
Medium max 5.3ALAS2023-2023-401 1 CVE
Moderate: java-11-amazon-corretto security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-22081: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK product of Oracle Java SE (component: JSSE). Supported versions that are affected are Oracl…
first Oct 18, 2023 -
Medium max 5.3ALAS2023-2023-400 2 CVEs
Moderate: java-17-amazon-corretto security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-22081: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK product of Oracle Java SE (component: JSSE). Supported versions that are affected are Oracl…
first Oct 18, 2023 -
Medium max 5.3ALAS2023-2023-399 2 CVEs
Moderate: java-21-amazon-corretto security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-22081: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK product of Oracle Java SE (component: JSSE). Supported versions that are affected are Oracl…
first Oct 18, 2023 -
Medium max 5.3ALAS2023-2023-398 2 CVEs
Moderate: java-1.8.0-amazon-corretto security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-22081: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK product of Oracle Java SE (component: JSSE). Supported versions that are affected are Oracl…
first Oct 18, 2023 -
High max 7.5ALAS2023-2023-397 1 CVE
Important: docker security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-39325: The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited …
first Oct 18, 2023 -
High max 7.5ALAS2023-2023-396 1 CVE
Important: runc security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-39325: The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited …
first Oct 18, 2023 -
LowALAS2023-2023-395 0 CVEs
Low: containerd security update (Amazon Linux 2023)
first Oct 18, 2023 -
MediumALAS2023-2023-386 1 CVE
Moderate: giflib security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-39742: giflib v5.2.1 was discovered to contain a segmentation fault via the component getarg.c.
first Oct 12, 2023 -
Medium max 6.4ALAS2023-2023-384 1 CVE
Moderate: composer security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-43655: Composer is a dependency manager for PHP. Users publishing a composer.phar to a public web-accessible server where the composer.phar can be executed as…
first Oct 12, 2023 -
Medium max 7.8ALAS2023-2023-383 3 CVEs
Moderate: libX11 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-43787: libX11: integer overflow in XCreateImage() leading to a heap overflow. CVE-2023-43786: A vulnerability was found in libX11 due to an infinite loop with…
first Oct 12, 2023 -
Medium max 7.8ALAS2023-2023-382 3 CVEs
Moderate: libXpm security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-43789: libXpm: out of bounds read on XPM with corrupted colormap CVE-2023-43787: libX11: integer overflow in XCreateImage() leading to a heap overflow. CVE-20…
first Oct 12, 2023 -
Medium max 5.5ALAS2023-2023-381 1 CVE
Moderate: libXpm security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-43788: libXpm: out of bounds read in XpmCreateXpmImageFromBuffer() NOTE: https://www.openwall.com/lists/oss-security/2023/10/03/1 NOTE: Fixed by: https://gitl…
first Oct 12, 2023 -
Medium max 4.0ALAS2023-2023-378 1 CVE
Moderate: vim security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-5344: Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1969.
first Oct 12, 2023 -
HighALAS2-2023-2316 0 CVEs
Important: yum security update (Amazon Linux 2)
first Oct 18, 2023 -
Medium max 5.3ALAS2-2023-2315 1 CVE
Moderate: java-11-amazon-corretto security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-22081: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK product of Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle J…
first Oct 18, 2023 -
Medium max 5.3ALAS2-2023-2314 2 CVEs
Moderate: java-17-amazon-corretto security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-22081: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK product of Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle J…
first Oct 18, 2023 -
HighALAS2-2023-2311 4 CVEs
Important: oniguruma security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2017-9229: An issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and mbstring in PHP through 7.1.5. A SIGSEGV occurs in left_adju…
first Oct 12, 2023 -
MediumALAS2-2023-2310 2 CVEs
Moderate: squid security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2018-19132: A memory leak was discovered in the way Squid handles SNMP denied queries. A remote attacker may use this flaw to exhaust the resources on the server mach…
first Oct 12, 2023 -
Medium max 8.8ALAS2-2023-2309 2 CVEs
Moderate: bluez security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2019-8922: A heap-based buffer overflow was discovered in bluetoothd in BlueZ through 5.48. There isn't any check on whether there is enough space in the destination …
first Oct 12, 2023 -
MediumALAS2-2023-2308 2 CVEs
Moderate: ghostscript security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2020-21710: A divide by zero issue discovered in eps_print_page in gdevepsn.c in Artifex Software GhostScript 9.50 allows remote attackers to cause a denial of servic…
first Oct 12, 2023 -
MediumALAS2-2023-2307 4 CVEs
Moderate: libsepol security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2021-36087: The CIL compiler in SELinux 3.2 has a heap-based buffer over-read in ebitmap_match_any (called indirectly from cil_check_neverallow). This occurs because …
first Oct 12, 2023 -
MediumALAS2-2023-2306 1 CVE
Moderate: grilo security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2021-39365: In GNOME grilo though 0.3.13, grl-net-wc.c does not enable TLS certificate verification on the SoupSessionAsync objects it creates, leaving users vulnerab…
first Oct 12, 2023 -
Medium max 4.3ALAS2-2023-2305 1 CVE
Moderate: jbigkit security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2022-1210: A vulnerability classified as problematic was found in LibTIFF 4.3.0. Affected by this vulnerability is the TIFF File Handler of tiff2ps. Opening a malicio…
first Oct 12, 2023 -
MediumALAS2-2023-2304 1 CVE
Moderate: pki-core security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2022-2393: A flaw was found in pki-core, which could allow a user to get a certificate for another user identity when directory-based authentication is enabled. This …
first Oct 12, 2023 -
High max 8.2ALAS2-2023-2302 1 CVE
Important: apache-ivy security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2022-46751: Improper Restriction of XML External Entity Reference, XML Injection (aka Blind XPath Injection) vulnerability in Apache Software Foundation Apache Ivy.Th…
first Oct 12, 2023 -
MediumALAS2-2023-2301 2 CVEs
Moderate: sudo security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-28487: Sudo before 1.9.13 does not escape control characters in sudoreplay output. CVE-2023-28486: Sudo before 1.9.13 does not escape control characters in log m…
first Oct 12, 2023 -
Medium max 6.1ALAS2-2023-2300 3 CVEs
Moderate: libtiff security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-3164: A heap-buffer-overflow vulnerability was found in LibTIFF, in extractImageSection() at tools/tiffcrop.c:7916 and tools/tiffcrop.c:7801. This flaw allows at…
first Oct 12, 2023 -
MediumALAS2-2023-2299 1 CVE
Moderate: libreswan security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-38712: A NULL pointer dereference vulnerability was found in the Libreswan package. When an IKEv1 ISAKMP SA Informational Exchange packet contains a Delete/Notif…
first Oct 12, 2023 -
High max 8.8ALAS2-2023-2298 3 CVEs
Important: gstreamer1-plugins-bad-free security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-40476: Integer overflow in H.265 video parser leading to stack overwrite NOTE: https://gstreamer.freedesktop.org/security/sa-2023-0008.html NOTE: https://gitlab.…
first Oct 12, 2023 -
Medium max 6.5ALAS2-2023-2297 1 CVE
Moderate: ceph-common security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-43040: A flaw was found in rgw. This flaw allows an unprivileged user to write to any bucket(s) accessible by a given key if a POST's form-data contains a key ca…
first Oct 12, 2023 -
Medium max 7.8ALAS2-2023-2296 2 CVEs
Moderate: libX11 security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-43787: libX11: integer overflow in XCreateImage() leading to a heap overflow. CVE-2023-43785: libX11: out-of-bounds memory access in _XkbReadKeySyms()
first Oct 12, 2023 -
Medium max 7.8ALAS2-2023-2295 3 CVEs
Moderate: libXpm security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-43789: libXpm: out of bounds read on XPM with corrupted colormap CVE-2023-43788: libXpm: out of bounds read in XpmCreateXpmImageFromBuffer() NOTE: https://www.op…
first Oct 12, 2023 -
MediumALAS2-2023-2294 1 CVE
Moderate: thunderbird security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-44488: VP9 in libvpx before 1.13.1 mishandles widths, leading to a crash related to encoding.
first Oct 12, 2023 -
Medium max 7.0ALAS2-2023-2293 1 CVE
Moderate: cups security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-4504: A vulnerability was found in OpenPrinting CUPS. The security flaw occurs due to failure in validating the length provided by an attacker-crafted CUPS docum…
first Oct 12, 2023 -
High max 7.5ALAS2-2023-2292 2 CVEs
Important: grub2 security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-4693: An out-of-bounds read flaw was found on grub2's NTFS filesystem driver. This issue may allow a physically present attacker to present a specially crafted N…
first Oct 12, 2023 -
High max 8.8
Important: libwebp12 security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-4863: Heap buffer overflow in WebP in Google Chrome prior to 116.0.5845.187 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML…
first Oct 12, 2023 -
Medium max 6.2ALAS2-2023-2289 1 CVE
Moderate: ImageMagick security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-5341: A vulnerability was found in ImageMagick where heap use-after-free was found in coders/bmp.c.
first Oct 12, 2023 -
Medium max 4.0ALAS2-2023-2288 1 CVE
Moderate: vim security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-5344: Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1969.
first Oct 12, 2023 -
High max 8.1
Important: golang security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-44487: The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited …
first Oct 16, 2023