Important: python-jinja2

Issue Overview: In Pallets Jinja, str.format allows a sandbox escape. CVE-2016-10745 Affected Packages: python-jinja2 Note: This advisory is applicable to Amazon Linux 2 AL2 Core repository. Visit this FAQ section for the difference between AL2 Core and AL2 Extras advisories. Issue Correction: Ru...

Mitsubishi AL2-4EX Digital I/O Module Detection

Binary data 751913.prm...

Mitsubishi AL2-2PT-ADP Digital I/O Module Detection

Binary data 751911.prm...

Mitsubishi AL2-2DA Digital I/O Module Detection

Binary data 751910.prm...

Mitsubishi AL2-10MR-D PLC Detection

Binary data 752186.prm...

Mitsubishi AL2-4EX-A2 Digital I/O Module Detection

Binary data 751914.prm...

Mitsubishi AL2-2TC-ADP Digital I/O Module Detection

Binary data 751912.prm...

Mitsubishi AL2-10MR-A PLC Detection

Binary data 752185.prm...

Mitsubishi AL2-4EYR Digital I/O Module Detection

Binary data 751915.prm...

Mitsubishi AL2-24MR-D PLC Detection

Binary data 752190.prm...

Important: kernel

Issue Overview: In the Linux kernel afalgrelease in crypto/afalg.c neglects to set a NULL value for a certain structure member, which leads to a use-after-free UAF in sockfssetattr. A local attacker can use this flaw to escalate privileges and take control of the system.CVE-2019-8912 Affected...

Low: binutils

Issue Overview: An integer wraparound has been discovered in the Binary File Descriptor BFD library distributed in GNU Binutils up to version 2.30. An attacker could cause a crash by providing an ELF file with corrupted DWARF debug information.CVE-2018-7568 The ignoresectionsym function in elf.c ...

Amazon Linux 2 : flatpak (ALAS-2018-1096)

It was found that flatpak's D-Bus proxy did not properly filter the access to D-Bus during the authentication protocol. A specially crafted flatpak application could use this flaw to bypass all restrictions imposed by flatpak and have full access to the D-BUS interface.CVE-2018-6560 C Tenable...

Important: kernel

Issue Overview: A weakness was found in the Linux kernel's implementation of random seed data. Programs, early in the boot sequence, could use the data allocated for the seed before it was sufficiently generated. CVE-2018-1108 A flaw was found in the way the Linux kernel handled exceptions...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability on Securifi Almond devices with firmware before AL1-R201EXP10-L304-W34 and Almond-2015 devices with firmware before AL2-R088M allows remote attackers to hijack the authentication of arbitrary users...