4,948 results · Feed
-
MediumALAS2-2023-2190 1 CVE
Moderate: linux-firmware security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-20593: An issue in "Zen 2" CPUs, under specific microarchitectural circumstances, may allow an attacker to potentially access sensitive information.
first Aug 3, 2023 -
Medium max 5.9ALAS2-2023-2189 2 CVEs
Moderate: java-1.8.0-openjdk security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-22045: Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK product of Oracle Java SE (component: Hotspot). Supported v…
first Aug 3, 2023 -
MediumALAS2-2023-2173 2 CVEs
Moderate: transfig security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2021-32280: An issue was discovered in fig2dev before 3.2.8.. A NULL pointer dereference exists in the function compute_closed_spline() located in trans_spline.c. It …
first Jul 20, 2023 -
MediumALAS2-2023-2048 2 CVEs
Moderate: libwebp security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2018-25014: A flaw was found in libwebp. An unitialized variable is used in function ReadSymbol. The highest threat from this vulnerability is to data confidentiality…
first May 11, 2023 -
MediumALAS2-2020-1543 3 CVEs
Moderate: qt5-qtbase security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2020-24742: An issue has been fixed in Qt versions 5.14.0 where QPluginLoader attempts to load plugins relative to the working directory, allowing attackers to execut…
first Oct 22, 2020 -
Medium max 5.5ALAS2023-2023-271 1 CVE
Moderate: libtiff security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-26965: loadImage() in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based use after free via a crafted TIFF image.
first Jul 19, 2023 -
Medium max 7.5ALAS2023-2023-270 3 CVEs
Moderate: curl security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-28322: When doing HTTP(S) transfers, libcurl might erroneously use the read callback (CURLOPT_READFUNCTION) to ask for data to send, even when the CURLOPT_POS…
first Jul 19, 2023 -
High max 9.8ALAS2023-2023-269 4 CVEs
Important: golang security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-29405: The go command may execute arbitrary code at build time when using cgo. This may occur when running "go get" on a malicious module, or when running any…
first Jul 19, 2023 -
Medium max 9.8ALAS2023-2023-268 1 CVE
Moderate: scipy security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-29824: A use-after-free issue was discovered in Py_FindObjects() function in SciPy versions prior to 1.8.0.
first Jul 19, 2023 -
Medium max 5.9ALAS2023-2023-267 1 CVE
Moderate: libtiff security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-3316: A NULL pointer dereference in TIFFClose() is caused by a failure to open an output file (non-existent path or a path that requires permissions like /dev…
first Jul 19, 2023 -
Medium max 5.5ALAS2023-2023-266 1 CVE
Moderate: janino security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-33546: janino 3.1.9 and earlier are subject to denial of service (DOS) attacks when using the expression evaluator.guess parameter name method. If the parser …
first Jul 19, 2023 -
Medium max 5.5ALAS2023-2023-265 1 CVE
Moderate: libtiff security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-3576: Memory leak in memory leak in tiffcrop.c.
first Jul 19, 2023 -
High max 7.6ALAS2-2023-2155 1 CVE
Important: gstreamer1-plugins-good security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-37327: Integer overflow leading to heap overwrite in FLAC image tag handling
first Jul 20, 2023 -
High max 7.6ALAS2-2023-2154 1 CVE
Important: gstreamer1-plugins-base security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-37327: Integer overflow leading to heap overwrite in FLAC image tag handling
first Jul 20, 2023 -
HighALAS2-2023-2153 1 CVE
Important: iperf3 security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-38403: iperf3 before 3.14 allows peers to cause an integer overflow and heap corruption via a crafted length field.
first Jul 20, 2023 -
High max 9.8ALAS2-2023-2163 10 CVEs
Important: golang security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-29405: The go command may execute arbitrary code at build time when using cgo. This may occur when running "go get" on a malicious module, or when running any ot…
first Jul 20, 2023 -
Medium max 7.5ALAS2-2023-2162 1 CVE
Moderate: SDL2 security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2022-4743: A memory leak issue was discovered in SDL2 version >= SDL2-2.0.8.
first Jul 20, 2023 -
Medium max 5.5ALAS2-2023-2161 1 CVE
Moderate: avahi security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-1981: avahi-daemon denial of service can be caused by unprivileged users via DBus
first Jul 20, 2023 -
Medium max 9.8ALAS2-2023-2160 1 CVE
Moderate: scipy security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-29824: A use-after-free issue was discovered in Py_FindObjects() function in SciPy versions prior to 1.8.0.
first Jul 20, 2023 -
MediumALAS2-2023-2159 1 CVE
Moderate: qt5-qtbase security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-32763: In QT, there is an integer overflow in qfixed_p.h when rendering SVG image on the minimal plugin.
first Jul 20, 2023 -
Medium max 5.5ALAS2-2023-2158 1 CVE
Moderate: libtiff security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-3576: Memory leak in memory leak in tiffcrop.c.
first Jul 20, 2023 -
Medium max 5.5ALAS2-2023-2157 1 CVE
Moderate: compat-libtiff3 security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-3576: Memory leak in memory leak in tiffcrop.c.
first Jul 20, 2023 -
HighALAS2-2023-2156 5 CVEs
Important: thunderbird security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-37211: Memory safety bugs present in Firefox 114, Firefox ESR 102.12, and Thunderbird 102.12. Some of these bugs showed evidence of memory corruption and we pres…
first Jul 20, 2023 -
MediumALAS2-2023-2174 1 CVE
Moderate: python-ipaddress security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2020-14422: A vulnerability was found in the way the ipaddress python module computes hash values in the IPv4Interface and IPv6Interface classes. This flaw allows an …
first Jul 20, 2023 -
MediumALAS2-2023-2172 1 CVE
Moderate: libicu60 security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2020-21913: International Components for Unicode (ICU-20850) v66.1 was discovered to contain a use after free bug in the pkg_createWithAssemblyCode function in the fi…
first Jul 20, 2023 -
MediumALAS2-2023-2171 1 CVE
Moderate: icu security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2020-21913: International Components for Unicode (ICU-20850) v66.1 was discovered to contain a use after free bug in the pkg_createWithAssemblyCode function in the fi…
first Jul 20, 2023 -
LowALAS2-2023-2170 1 CVE
Low: libvncserver security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2020-29260: libvncclient v0.9.13 was discovered to contain a memory leak via the function rfbClientCleanup().
first Jul 20, 2023 -
LowALAS2-2023-2169 4 CVEs
Low: qemu security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2021-3595: An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU. The flaw exists in the tftp_input() function and could oc…
first Jul 20, 2023 -
MediumALAS2-2023-2168 1 CVE
Moderate: keepalived security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2021-44225: A flaw was found in keepalived, where an improper authentication vulnerability allows an unprivileged user to change properties that could lead to an acce…
first Jul 20, 2023 -
Medium max 8.8ALAS2-2023-2167 1 CVE
Moderate: bluez security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2022-0204: A heap overflow vulnerability was found in bluez in versions prior to 5.63. An attacker with local network access could pass specially crafted files causin…
first Jul 20, 2023 -
Medium max 4.3ALAS2-2023-2166 1 CVE
Moderate: samba security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2022-32742: A flaw was found in Samba. Some SMB1 write requests were not correctly range-checked to ensure the client had sent enough data to fulfill the write, allow…
first Jul 20, 2023 -
High max 7.5ALAS2-2023-2165 1 CVE
Important: apache-ivy security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2022-37866: When Apache Ivy downloads artifacts from a repository it stores them in the local file system based on a user-supplied "pattern" that may include placehol…
first Jul 20, 2023 -
Medium max 7.5ALAS2-2023-2164 1 CVE
Moderate: python-mako security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2022-40023: Sqlalchemy mako before 1.2.2 is vulnerable to Regular expression Denial of Service when using the Lexer class to parse. This also affects babelplugin and …
first Jul 20, 2023 -
Medium max 5.9ALAS2023-2023-256 3 CVEs
Moderate: java-1.8.0-amazon-corretto security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-22049: Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK product of Oracle Java SE (component: Libraries). Suppor…
first Jul 17, 2023 -
LowALAS2023-2023-246 1 CVE
Low: libarchive security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2022-36227: In libarchive 3.6.1, the software does not check for an error after calling calloc function that can return with a NULL pointer if the function fails, …
first Jul 5, 2023 -
Medium max 5.9ALAS2023-2023-245 1 CVE
Moderate: python-setuptools security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2022-40897: Python Packaging Authority (PyPA) setuptools before 65.5.1 allows remote attackers to cause a denial of service via HTML in a crafted package or custom…
first Jul 5, 2023 -
Medium max 7.5ALAS2023-2023-244 1 CVE
Moderate: zstd security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2022-4899: In zstd, supplying an empty string as an argument to either --output-dir-flat or --output-dir-mirror may cause a buffer overrun.
first Jul 5, 2023 -
Medium max 8.6ALAS2023-2023-243 2 CVEs
Moderate: nodejs security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-23918: It is possible to bypass Permissions and access non authorized modules by using process.mainModule.require(). This only affects users who had enabled t…
first Jul 5, 2023 -
High max 7.8ALAS2023-2023-242 7 CVEs
Important: dotnet6.0 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-33135: .NET and Visual Studio Elevation of Privilege Vulnerability CVE-2023-32032: .NET and Visual Studio Elevation of Privilege Vulnerability CVE-2023-29337:…
first Jul 5, 2023 -
High max 7.2ALAS2023-2023-241 1 CVE
Important: postgresql15 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-2454: This enabled an attacker having database-level CREATE privilege to execute arbitrary code as the bootstrap superuser. Database owners have that right by…
first Jul 5, 2023