Slándáil Research: Security Feeds

Feed: Amazon Security Bulletins

AWS Response to March 2024 CSRB report

CVE-2024-28056

CVE-2024-3094

CVE-2024-21626 - Runc container issue

CVE-2023-23583

CVE-2023-5528

CVE-2023-44487 - HTTP/2 Rapid Reset Attack

Issue with Amazon WorkSpaces Windows Client Version 5.9 and 5.10

Reported TorchServe Issue (CVE-2023-43654)

Kubernetes Security Issues (CVE-2023-3676, CVE-2023-3893, CVE-2023-3893)

Kubernetes Security Issues (CVE-2023-3676, CVE-2023-3893, CVE-2023-3955)

CVE-2022-40982 - Gather Data Sampling - Downfall

CVE-2023-20569 - RAS Poisoning - Inception

Recent Software-based Power Side-Channel Security Research

CVE-2023-20593

Issue with AWS Directory Service EnableRoleAccess

Reported GuardDuty Finding Issue

Issue With IAM Supporting Multiple MFA Devices

Reported ECR Public Gallery Issue

Reported AWS AppSync Issue

OpenSSL Security Advisories - November 2022

Reported EKS IAM Authenticator Issue

Reported Apache Log4j Hotpatch Issues

Reported AWS Desktop VPN Client for Windows Issue

Reported Amazon RDS PostgreSQL issue

CVE-2022-0778 awareness

Reported AWS Glue Issue

Reported AWS CloudFormation Issue

AWSSupportServiceRolePolicy Informational Update

Update for Apache Log4j2 Issue (CVE-2021-44228)

Apache Log4j2 Issue (CVE-2021-44228)

runC Security Issue (CVE-2021-30465)

Xen Security Advisories (XSA-372, 373, 374, 375, and 377)

Resolved: Application Load Balancer Session Ticket Issue

Sudo Security Issue (CVE-2021-3156)

Android Security Advisory

Xen Security Advisory (XSA-286)

Xen Security Advisory 337 (XSA-337) (CVE-2020-25595)

Xen Security Advisory 336 (XSA-336) (CVE-2020-25604)

Minimum Version of TLS 1.2 Required for FIPS Endpoints by March 31, 2021

Container Networking Security Issue (CVE-2020-8558)