ALAS2023-2025-814: CVEs fixed (Amazon Linux)
ALAS2023-2025-814 fixes 3 tracked CVEs. Affected systems and fixed versions.
- CVE-2024-56337 CRITICAL 9.8 UPGRADE MITIGATE Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in Apache Tomcat. This issue affects Apache T
- CVE-2024-52316 CRITICAL 9.8 UPGRADE MITIGATE Unchecked Error Condition vulnerability in Apache Tomcat
- CVE-2024-50379 CRITICAL 9.8 UPGRADE MITIGATE Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability during JSP compilation in Apache Tomcat permit
Applies to
- Amazon Linux 2023