Amazon Linux 2

Amazon Linux 2 — kernel-livepatch-4.14.318-241.531 — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Amazon Linux 2

Amazon Linux 2 — kernel-livepatch-4.14.318-241.531 — multiple vulnerabilities (2 CVEs) — patch and remediation guide

  • February 15, 2024
  • Linux
  • Comment off

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2LIVEPATCH-2023-147 Related CVEs: CVE-2023-3609 CVE-2023-3776 Upstream summary: A use-after-free vulnerability in the Linux kernel's net/sched: cls_u32 component can be exploited to achieve local privilege escalation. If tcf_change_indev() fails, u32_set_parms() will […]

Read more
Amazon Linux 2 — apr — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on Amazon Linux 2

Amazon Linux 2 — apr — multiple vulnerabilities (4 CVEs) — patch and remediation guide

  • February 10, 2024
  • Linux
  • Comment off

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2-2023-1936 Related CVEs: CVE-2017-12613 CVE-2021-35940 CVE-2022-24963 CVE-2023-49582 Upstream summary: An out-of-bounds array read in the apr_time_exp*() functions was fixed in the Apache Portable Runtime 1.6.3 release (CVE-2017-12613). The fix for […]

Read more
Amazon Linux 2 — xstream — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Amazon Linux 2

Amazon Linux 2 — xstream — multiple vulnerabilities (20 CVEs) — patch and remediation guide

  • February 6, 2024
  • Linux
  • Comment off

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2-2024-2707 Related CVEs: CVE-2024-47072 CVE-2021-21342 CVE-2022-41966 CVE-2021-39139 CVE-2021-39140 CVE-2021-39141 CVE-2021-39144 CVE-2021-39145  +12 more Upstream summary: XStream is vulnerable to a Denial of Service attack due to stack overflow from a […]

Read more
Amazon Linux 2 — grub2 — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Amazon Linux 2

Amazon Linux 2 — grub2 — multiple vulnerabilities (20 CVEs) — patch and remediation guide

  • February 3, 2024
  • Linux
  • Comment off

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2-2023-2292 Related CVEs: CVE-2023-4692 CVE-2023-4693 CVE-2021-3695 CVE-2021-3696 CVE-2021-3697 CVE-2022-2601 CVE-2022-28733 CVE-2022-28734  +12 more Upstream summary: An out-of-bounds write flaw was found in grub2's NTFS filesystem driver. This issue may allow […]

Read more
Amazon Linux 2 — python-dns — vulnerability — patch and remediation guide — diagnosis and fix on Amazon Linux 2

Amazon Linux 2 — python-dns — vulnerability — patch and remediation guide

  • February 1, 2024
  • Linux
  • Comment off

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2-2024-2647 Related CVEs: CVE-2023-29483 Upstream summary: eventlet before 0.35.2, as used in dnspython before 2.6.0, allows remote attackers to interfere with DNS name resolution by quickly sending an invalid packet […]

Read more
Amazon Linux 2 — hsqldb — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Amazon Linux 2

Amazon Linux 2 — hsqldb — multiple vulnerabilities (2 CVEs) — patch and remediation guide

  • January 31, 2024
  • Linux
  • Comment off

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2-2023-1914 Related CVEs: CVE-2022-41853 CVE-2023-1183 Upstream summary: Those using java.sql.Statement or java.sql.PreparedStatement in hsqldb (HyperSQL DataBase) to process untrusted input may be vulnerable to a remote code execution attack. By […]

Read more
Amazon Linux 2 — libtommath — vulnerability — patch and remediation guide — diagnosis and fix on Amazon Linux 2

Amazon Linux 2 — libtommath — vulnerability — patch and remediation guide

  • January 29, 2024
  • Linux
  • Comment off

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2ANSIBLE2-2023-010 Related CVEs: CVE-2023-36328 Upstream summary: Integer Overflow vulnerability in mp_grow in libtom libtommath before commit beba892bc0d4e4ded4d667ab1d2a94f4d75109a9, allows attackers to execute arbitrary code and cause a denial of service (DoS). […]

Read more
Amazon Linux 2 — kernel-livepatch-5.10.192-183.736 — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on Amazon Linux 2

Amazon Linux 2 — kernel-livepatch-5.10.192-183.736 — multiple vulnerabilities (4 CVEs) — patch and remediation guide

  • January 29, 2024
  • Linux
  • Comment off

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2LIVEPATCH-2023-159 Related CVEs: CVE-2023-45871 CVE-2023-5197 CVE-2023-4623 CVE-2023-4921 Upstream summary: An issue was discovered in drivers/net/ethernet/intel/igb/igb_main.c in the IGB driver in the Linux kernel before 6.5.3. A buffer size may not […]

Read more

Tags

AIX AlmaLinux Alpine Linux authentication authorization Backup Recovery Boot Startup Cloud Integration Common Problems Cpu Memory Database Debian Debian 11 Debian 12 Bookworm Debian 13 Trixie DNS Firewall Fix Prevention FreeBSD FreeBSD 12 FreeBSD 13 FreeBSD 14 FreeBSD 15 Kernel Drivers Logging Monitoring Lvm Raid NetBSD Networking openSUSE Operations Oracle Linux Oracle Linux 8 Oracle Linux 9 Package Management Performance Proxy Security Hardening SLES Storage Disk Systemd Services Tls Ssl Troubleshooting ubuntu VPN windows server
CHAT