2,507 results · Clear filters · Feed
-
High max 8.7ALAS2-2026-3840 6 CVEs
Important: freerdp security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-57158: planar_decompress_plane_rle_only: heap OOB read -- incomplete fix for CVE-2026-23530 The fix for CVE-2026-23530 (GHSA-r4hv-852m-fq7p) correctly adds dimen…
first Aug 3, 2026 -
High max 8.3ALAS2-2026-3839 4 CVEs
Important: python-pillow security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-59205: Pillow is a Python imaging library. Prior to 12.3.0, Pillow's ImageCms.ImageCmsTransform.apply(im, imOut) API can trigger controlled native heap corruptio…
first Aug 3, 2026 -
High max 9.1ALAS2-2026-3837 4 CVEs
Important: perl-YAML-Syck security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-57077: YAML::Syck versions before 1.47 for Perl allow an out-of-bounds read via an unbounded newline scan in newline_len. In the bundled libsyck newline_len and …
first Aug 3, 2026 -
High max 7.5ALAS2-2026-3836 3 CVEs
Important: python-pyasn1 security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-59886: pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.4, the univ.Real type converted its mantissa, base, and exponent value to a Python float using …
first Aug 3, 2026 -
High max 8.8ALAS2-2026-3834 2 CVEs
Important: rclone security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-59733: Rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to 1.74.4, rclone serve restic --priva…
first Aug 3, 2026 -
High max 7.5ALAS2-2026-3833 3 CVEs
Important: gstreamer1-plugins-bad-free security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-59692: A stack buffer overflow vulnerability was found in GStreamer's DTLS plugin. During a DTLS handshake, the peer certificate Subject Distinguished Name is pr…
first Aug 3, 2026 -
High max 8.8ALAS2-2026-3832 1 CVE
Important: gstreamer1-plugins-bad-free security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-52720: A heap buffer overflow vulnerability was found in GStreamer's librfb (RFB/VNC client). The rectangle bounds check incorrectly validates area rather than i…
first Aug 3, 2026 -
High max 7.1ALAS2-2026-3831 1 CVE
Important: acl security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-54369: A flaw was found in the `acl` component, specifically within its `libacl` pathname-based functions. A local attacker could exploit this vulnerability by u…
first Aug 3, 2026 -
High max 7.1ALAS2-2026-3830 1 CVE
Important: gstreamer-plugins-bad-free security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-59691: A heap buffer overflow vulnerability was found in GStreamer's rfbsrc plugin. When a client connects to a malicious RFB/VNC server that advertises a 16bpp …
first Aug 3, 2026 -
High max 8.4ALAS2-2026-3829 2 CVEs
Important: vim security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-59858: Vim is an open source, command line text editor. Prior to 9.2.0735, the C omni-completion script in runtime/autoload/ccomplete.vim interpolates the typere…
first Aug 3, 2026 -
High max 8.8ALAS2-2026-3828 3 CVEs
Important: sssd security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-14476: A path traversal flaw was found in SSSD's AD GPO provider. The ad_gpo_extract_smb_components() function does not sanitize .. sequences in the gPCFileSysPa…
first Jul 20, 2026 -
High max 8.6ALAS2023-2026-2040 8 CVEs
Important: bind security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-13321: The BIND resolver accepts validly-signed NSEC records where the "Next Domain Name" field points outside the signer's zone. This issue affects BIND 9 ve…
first Aug 3, 2026 -
High max 8.1ALAS2023-2026-2039 3 CVEs
Important: libreswan security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-50722: Libreswan, via the function RSA_authenticate_hash_signature_pkcs1_1_5_rsa(), did not correctly verify the DER encoding of the ASN.1 digest when the IKE…
first Aug 3, 2026 -
High max 7.0ALAS2023-2026-2037 1 CVE
Important: 7zip security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-14266: 7-Zip XZ Decompression Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary …
first Aug 3, 2026 -
High max 7.8ALAS2023-2026-2036 1 CVE
Important: ansible-core security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-16493: A flaw was found in ansible-core. The _extract_collection_from_git() function in ansible-core's concrete_artifact_manager.py constructs git clone comma…
first Aug 3, 2026 -
High max 5.1ALAS2023-2026-2035 3 CVEs
Important: gawk security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-40553: Buffer overflow vulnerability has been found in "extension/readdir.c" program file of gawk (ftype() routine). This issue could be used to crash the pro…
first Aug 3, 2026 -
High max 8.7ALAS2023-2026-2034 1 CVE
Important: aws-nitro-enclaves-cli security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-42327: rust-openssl provides OpenSSL bindings for the Rust programming language. From 0.9.7 to before 0.10.79, X509Ref::ocsp_responders returns OCSP responder…
first Aug 3, 2026 -
High max 7.5ALAS2023-2026-2033 13 CVEs
Important: unbound security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-56416: In NLnet Labs Unbound up to and including version 1.25.1, when the validator builds the canonical RDATA form for an RRSIG-covered PX/RP/MINFO/SOA RRset…
first Aug 3, 2026 -
High max 7.8ALAS2023-2026-2030 1 CVE
Important: cifs-utils security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-12505: A flaw was found in the cifs-utils package where the cifs.upcall helper fails to securely drop its root privileges before looking up user information i…
first Aug 3, 2026 -
High max 8.8ALAS2023-2026-2029 3 CVEs
Important: pipewire security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-5674: A flaw was found in PipeWire, a multimedia server. This vulnerability allows an attacker to escape sandboxed applications, such as Flatpak, by exploitin…
first Aug 3, 2026 -
High max 7.1ALAS2023-2026-2028 1 CVE
Important: glib2 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-16118: A flaw was found in xdgmime. A heap-based buffer overflow can be triggered in _xdg_mime_magic_parse_magic_line() in the xdgmimemagic.c file on little-e…
first Aug 3, 2026 -
High max 8.8ALAS2023-2026-2026 3 CVEs
Important: python-dulwich security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-47734: An uncontrolled-resource-consumption (memory exhaustion) denial-of-service vulnerability (CWE-400 / CWE-789). A client with push access could push a ti…
first Aug 3, 2026 -
High max 7.8ALAS2023-2026-2024 1 CVE
Important: rust-cargo-c security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-40034: gix-submodule before 0.29.0 (gitoxide before 0.5.21, gix before 0.84.0) incorrectly validates the update field in .gitmodules, allowing attackers to by…
first Aug 3, 2026 -
High max 8.7ALAS2023-2026-2023 5 CVEs
Important: runfinch-finch security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-49835: A flaw was found in Sigstore Timestamp Authority. An unauthenticated remote attacker can exploit this vulnerability by sending requests with arbitrary …
first Aug 3, 2026 -
High max 7.5ALAS2023-2026-2022 8 CVEs
Important: java-17-amazon-corretto security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-60147: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security). Support…
first Aug 3, 2026 -
High max 7.5ALAS2023-2026-2021 8 CVEs
Important: java-21-amazon-corretto security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-60147: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security). Support…
first Aug 3, 2026 -
High max 7.5ALAS2023-2026-2020 8 CVEs
Important: java-25-amazon-corretto security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-60147: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security). Support…
first Aug 3, 2026 -
High max 7.5ALAS2023-2026-2019 8 CVEs
Important: java-26-amazon-corretto security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-60147: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security). Support…
first Aug 3, 2026 -
High max 7.5ALAS2023-2026-2018 10 CVEs
Important: java-11-amazon-corretto security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-60147: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security). Support…
first Aug 3, 2026 -
High max 7.5ALAS2023-2026-2017 9 CVEs
Important: java-1.8.0-amazon-corretto security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-60147: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security). Support…
first Aug 3, 2026 -
High max 7.7ALAS2023-2026-2016 3 CVEs
Important: python-tornado security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-49855: Tornado is a Python web framework and asynchronous networking library. Prior to 6.5.6, Tornado gzip decompression routines processed limited-size chunk…
first Aug 3, 2026 -
High max 7.7ALAS2023-2026-2015 3 CVEs
Important: python3.13-tornado security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-49855: Tornado is a Python web framework and asynchronous networking library. Prior to 6.5.6, Tornado gzip decompression routines processed limited-size chunk…
first Aug 3, 2026 -
High max 8.7ALAS2023-2026-2013 7 CVEs
Important: python-pillow security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-59205: Pillow is a Python imaging library. Prior to 12.3.0, Pillow's ImageCms.ImageCmsTransform.apply(im, imOut) API can trigger controlled native heap corrup…
first Aug 3, 2026 -
High max 8.7ALAS2023-2026-2012 10 CVEs
Important: freerdp security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-57158: planar_decompress_plane_rle_only: heap OOB read -- incomplete fix for CVE-2026-23530 The fix for CVE-2026-23530 (GHSA-r4hv-852m-fq7p) correctly adds di…
first Aug 3, 2026 -
High max 8.8ALAS2023-2026-2011 2 CVEs
Important: valkey security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-63639: An authenticated user may use a specially crafted RESTORE command to inject a malformed RDB payload containing duplicate Pending Entry List (PEL) assig…
first Aug 3, 2026 -
High max 8.2ALAS2023-2026-2008 3 CVEs
Important: nginx security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-60005: NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_slice_module module. When the slice directive and unnamed regex captures are conf…
first Aug 3, 2026 -
High max 9.1ALAS2023-2026-2007 4 CVEs
Important: perl-YAML-Syck security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-57077: YAML::Syck versions before 1.47 for Perl allow an out-of-bounds read via an unbounded newline scan in newline_len. In the bundled libsyck newline_len a…
first Aug 3, 2026 -
High max 9.8ALAS2023-2026-2006 4 CVEs
Important: perl-DBI security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-60082: DBI versions before 1.651 for Perl do not enforce statement handle consistency with the row. When the statement handle had no fields but the source row…
first Aug 3, 2026 -
High max 8.8ALAS2023-2026-2002 2 CVEs
Important: rclone security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-59733: Rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to 1.74.4, rclone serve restic --pr…
first Aug 3, 2026 -
High max 7.5ALAS2023-2026-2000 3 CVEs
Important: python-pyasn1 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-59886: pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.4, the univ.Real type converted its mantissa, base, and exponent value to a Python float usi…
first Aug 3, 2026