AWS Security Advisories · September 2016 — AWS Security Advisories
13 advisories 41 CVEs

Amazon Linux (AL1, AL2, AL2023), AWS Security Bulletins, and AWS SDK CVEs for 2016-09. Mirrored into Vulnetix VDB.

Every advisory below is enriched with the Vulnetix VDB exploit-intelligence chip (hover a CVE ID in the interactive page to see CVSS, EPSS, KEV status, and PoC maturity).

Advisories

ALAS-2016-743

ALAS · AL1Important2016-09-27

ALAS-2016-743: libarchive (important)

CVEs:CVE-2015-8916CVE-2015-8917CVE-2015-8919CVE-2015-8920CVE-2015-8921CVE-2015-8922CVE-2015-8923CVE-2015-8924CVE-2015-8925CVE-2015-8926CVE-2015-8928CVE-2015-8930CVE-2015-8931CVE-2015-8932CVE-2015-8934CVE-2016-1541CVE-2016-4300CVE-2016-4302CVE-2016-4809CVE-2016-5418CVE-2016-5844CVE-2016-6250CVE-2016-7166

Affected products

ProductStatusVendorPackageEcosystem
libarchive affected Amazon libarchive
Upstream advisory

ALAS-2016-744

ALAS · AL1Medium2016-09-15

ALAS-2016-744: libgcrypt, gnupg (medium)

CVEs:CVE-2016-6313

Affected products

ProductStatusVendorPackageEcosystem
libgcrypt, gnupg affected Amazon libgcrypt, gnupg
Upstream advisory

ALAS-2016-747

ALAS · AL1Medium2016-09-15

ALAS-2016-747: postgresql92, postgresql93, postgresql94 (medium)

CVEs:CVE-2016-5423CVE-2016-5424

Affected products

ProductStatusVendorPackageEcosystem
postgresql92, postgresql93, postgresql94 affected Amazon postgresql92, postgresql93, postgresql94
Upstream advisory

ALAS-2016-741

ALAS · AL1Medium2016-09-01

ALAS-2016-741: python34, python27, python26 (medium)

CVEs:CVE-2016-1000110

Affected products

ProductStatusVendorPackageEcosystem
python34, python27, python26 affected Amazon python34, python27, python26
Upstream advisory

Need live exploit intelligence?

Every CVE above is indexed in the Vulnetix VDB with KEV, EPSS, and PoC maturity. The interactive page surfaces that on hover.