Skip to content
OpenAdvisories
High ALAS2-2026-3150 7 CVEs

Important: edk2 security update (Amazon Linux 2)

Published Feb 16, 2026 · Updated Feb 18, 2026

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-22796: ASN1_TYPE Type Confusion in the PKCS7_digest_from_attributes() function NOTE: https://openssl-library.org/news/secadv/20260127.txt CVE-2026-22795: An invalid or NULL pointer dereference can happen in an application processing a malformed PKCS#12 file. CVE-2025-69421: Processing a malformed PKCS#12 file can trigger a NULL pointer dereference in the PKCS12_item_decrypt_d2i_ex() function. CVE-2025-69420: A type confusion vulnerability exists in the TimeStamp Response verification code where an ASN1_TYPE union member is accessed without first validating the type, causing an invalid or NULL pointer dereference when processing a malformed TimeStamp Response file. CVE-2025-69419: Calling PKCS12_get_friendlyname() function on a maliciously crafted PKCS#12 file with a BMPString (UTF-16BE) friendly name containing non-ASCII BMP code point can trigger a one byte write before the allocated buffer. CVE-2025-69418: When using the low-level OCB API directly with AES-NI or other hardware-accelerated code paths, inputs whose length is not a multiple of 16 bytes can leave the final partial block unencrypted and unauthenticated. CVE-2025-68160: Writing large, newline-free data into a BIO chain using the line-buffering filter where the next BIO performs short writes can trigger a heap-based out-of-bounds write.

Fixed packages 5

ReleasePackageFixed in
Amazon Linux · 2 edk2-aarch64 0:20240813-306.amzn2
Amazon Linux · 2 edk2-debuginfo 0:20240813-306.amzn2
Amazon Linux · 2 edk2-ovmf 0:20240813-306.amzn2
Amazon Linux · 2 edk2-tools 0:20240813-306.amzn2
Amazon Linux · 2 edk2-tools-doc 0:20240813-306.amzn2

Vulnerabilities 7

  • High 7.5
    CVE-2025-69420 Public exploit

    Missing ASN1_TYPE validation in TS_RESP_verify_response() function

    Issue summary: A type confusion vulnerability exists in the TimeStamp Response verification code where an ASN1_TYPE union member is accessed without first validating the type, causing an invalid or NULL pointer dereference when processing a malformed TimeStam…

    OpenSSL OpenSSL openssl nodejs Debian Ubuntu Azure Linux Alpine Wolfi
  • High 7.5
    CVE-2025-69421 Public exploit

    NULL Pointer Dereference in PKCS12_item_decrypt_d2i_ex function

    Issue summary: Processing a malformed PKCS#12 file can trigger a NULL pointer dereference in the PKCS12_item_decrypt_d2i_ex() function. Impact summary: A NULL pointer dereference can trigger a crash which leads to Denial of Service for an application processi…

    OpenSSL OpenSSL openssl nodejs Debian Ubuntu Azure Linux Alpine Wolfi
  • High 7.4
    CVE-2025-69419 Public exploit

    Out of bounds write in PKCS12_get_friendlyname() UTF-8 conversion

    Issue summary: Calling PKCS12_get_friendlyname() function on a maliciously crafted PKCS#12 file with a BMPString (UTF-16BE) friendly name containing non-ASCII BMP code point can trigger a one byte write before the allocated buffer. Impact summary: The out-of-…

    OpenSSL OpenSSL openssl nodejs Debian Ubuntu Azure Linux Alpine Wolfi
  • Medium 5.5
    CVE-2026-22795

    Missing ASN1_TYPE validation in PKCS#12 parsing

    Issue summary: An invalid or NULL pointer dereference can happen in an application processing a malformed PKCS#12 file. Impact summary: An application processing a malformed PKCS#12 file can be caused to dereference an invalid or NULL pointer on memory read, …

    OpenSSL OpenSSL openssl nodejs Debian Ubuntu Azure Linux Alpine Wolfi
  • Medium 5.3
    CVE-2026-22796

    ASN1_TYPE Type Confusion in the PKCS7_digest_from_attributes() function

    Issue summary: A type confusion vulnerability exists in the signature verification of signed PKCS#7 data where an ASN1_TYPE union member is accessed without first validating the type, causing an invalid or NULL pointer dereference when processing malformed PK…

    OpenSSL OpenSSL openssl nodejs Debian Ubuntu Azure Linux Alpine Wolfi
  • Medium 4.7
    CVE-2025-68160

    Heap out-of-bounds write in BIO_f_linebuffer on short writes

    Issue summary: Writing large, newline-free data into a BIO chain using the line-buffering filter where the next BIO performs short writes can trigger a heap-based out-of-bounds write. Impact summary: This out-of-bounds write can cause memory corruption which …

    OpenSSL OpenSSL openssl nodejs Debian Ubuntu Azure Linux Alpine Wolfi
  • Medium 4.0
    CVE-2025-69418

    Unauthenticated/unencrypted trailing bytes with low-level OCB function calls

    Issue summary: When using the low-level OCB API directly with AES-NI or<br>other hardware-accelerated code paths, inputs whose length is not a multiple<br>of 16 bytes can leave the final partial block unencrypted and unauthenticated.<br><br>Impact summary: Th…

    OpenSSL OpenSSL openssl nodejs Debian Ubuntu Azure Linux Alpine Wolfi

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2025-68160.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2025-69418.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2025-69419.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2025-69420.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2025-69421.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2026-22795.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2026-22796.html