crypto: algifaead - Revert to operating out-of-place
A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd). There is a race condition which can lead sshd to handle some signals in an unsafe manner. An unauthenticated, remote attacker may be able to trigger it by failing to authenticate within a set time period.
Amazon Linux is vulnerable to a denial of service, caused by improper input validation by the memset() function within TIFFFetchStripThing() in tifdirread.c. By persuading a victim to open a specially-crafted TIFF file, a remote attacker could exploit this vulnerability to cause the application to crash.