2,507 results · Clear filters · Feed
-
High max 7.5ALAS2023-2026-1861 8 CVEs
Important: ImageMagick security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-53463: ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-50 and 7.1.2-25, when passing i…
-
High max 7.1ALAS2023-2026-1860 1 CVE
Important: jq security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-49839: jq --rawfile invalid-state reuse after String too long causes heap-buffer-overflow
-
High max 7.5ALAS2023-2026-1859 2 CVEs
Important: mod_http2 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-49975: Denial of service in HTTP/2 cookie request header counting CVE-2026-48913: Use After Free vulnerability in Apache HTTP Server module mod_http2 when fil…
-
High max 5.5ALAS2023-2026-1858 1 CVE
Important: squid security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-50012: Due to an Improper Input Validation bug, Squid is vulnerable to a Heap-based Buffer Overflow attack against cache digests. This problem allows a truste…
-
High max 7.4ALAS2023-2026-1857 2 CVEs
Important: libinput security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-50292: In libinput before 1.30.4 and 1.31.x before 1.31.3, libinput-device-group unescaped phys output can inject udev properties leading to arbitrary root co…
-
High max 7.3ALAS2023-2026-1856 1 CVE
Important: graphite2 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-50593: Graphite before 1.3.15 has an integer underflow and resultant out-of-bounds write via Graphite actions, because slotat does not ensure that an offset i…
-
High max 7.1ALAS2023-2026-1855 1 CVE
Important: libnfs security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-53689: libnfs through 6.0.2 before 55c18ea does not validate a string size, leading to an integer overflow during a connection to a crafted NFS server. This o…
-
High max 9.1ALAS2023-2026-1853 15 CVEs
Important: openssl security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-9076: Issue summary: When CMS password-based decryption (RFC 3211 / PWRI key unwrap) processes attacker-supplied CMS data, an attacker-chosen stream-mode KEK …
-
High max 7.8ALAS2023-2026-1852 1 CVE
Important: poppler security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-10118: A flaw was found in Poppler's Splash backend. A remote attacker could exploit this vulnerability by crafting a malicious PDF file that, when rendered, …
-
High max 7.8ALAS2023-2026-1851 1 CVE
Important: compat-poppler22 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-10118: A flaw was found in Poppler's Splash backend. A remote attacker could exploit this vulnerability by crafting a malicious PDF file that, when rendered, …
-
High max 9.8ALAS2023-2026-1850 2 CVEs
Important: perl-DBI security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-9698: DBI versions before 1.648 for Perl saved errors in a limited-sized buffer. Error messages that were returned when RaiseError, PrintError or HandleError …
-
High max 7.8ALAS2023-2026-1849 1 CVE
Important: ansible-core security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-11332: A flaw was found in ansible-core. The ansible-galaxy role install command processes dependency specifications from a role's meta/requirements.yml file.…
-
High max 9.6ALAS2023-2026-1847 6 CVEs
Important: containerd security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-42506: Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in appli…
-
High max 8.0ALAS2023-2026-1845 5 CVEs
Important: mariadb114 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-44173: MariaDB allowed SELECT ... INTO OUTFILE and SELECT ... INTO DUMPFILE without verifying the FILE privilege if the FROM clause contained only subqueries.…
-
High max 8.0ALAS2023-2026-1844 6 CVEs
Important: mariadb1011 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-44173: MariaDB allowed SELECT ... INTO OUTFILE and SELECT ... INTO DUMPFILE without verifying the FILE privilege if the FROM clause contained only subqueries.…
-
High max 7.4ALAS2023-2026-1842 1 CVE
Important: python-jwt security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-48526: PyJWT is a JSON Web Token implementation in Python. Prior to 2.13.0, when the verifier is decoding JSON Web Tokens, while supporting both asymmetric an…
-
High max 4.1ALAS2023-2026-1841 1 CVE
Important: python3.13-pip security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-8643: A flaw was found in pip, the package installer for Python. A remote attacker can exploit this vulnerability by tricking a victim into installing a malic…
-
High max 4.1ALAS2023-2026-1840 1 CVE
Important: python3.12-pip security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-8643: A flaw was found in pip, the package installer for Python. A remote attacker can exploit this vulnerability by tricking a victim into installing a malic…
-
High max 4.1ALAS2023-2026-1839 1 CVE
Important: python3.11-pip security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-8643: A flaw was found in pip, the package installer for Python. A remote attacker can exploit this vulnerability by tricking a victim into installing a malic…
-
High max 4.1ALAS2023-2026-1838 1 CVE
Important: python3.14-pip security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-8643: A flaw was found in pip, the package installer for Python. A remote attacker can exploit this vulnerability by tricking a victim into installing a malic…
-
High max 4.1ALAS2023-2026-1837 1 CVE
Important: python-pip security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-8643: A flaw was found in pip, the package installer for Python. A remote attacker can exploit this vulnerability by tricking a victim into installing a malic…
-
High max 7.4ALAS2023-2026-1833 1 CVE
Important: gdal310 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-49014: In GDAL 3.1.0 through 3.13.0, scanForGeometryContainers in the netCDF driver allows code execution via a stack-based buffer overflow. It reads a geomet…
first Jun 11, 2026 -
High max 8.1ALAS2023-2026-1830 1 CVE
Important: perl-Sereal-Decoder security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-8796: Sereal::Decoder versions before 5.005 for Perl allow heap out-of-bounds read via crafted input. In Perl/Decoder/srl_decoder.c, srl_read_object() and srl…
first Jun 11, 2026 -
High max 7.3ALAS2023-2026-1828 1 CVE
Important: jpegxl security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-70103: Heap buffer overflow vulnerability in libjxl 0.12.0 via crafted PBM images to the jxl::extras::DecodeImagePNM function in file lib/extras/dec/pnm.cc.
first Jun 11, 2026 -
High max 7.5ALAS2023-2026-1825 3 CVEs
Important: perl-IO-Compress security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-48962: IO::Compress versions before 2.220 for Perl can execute arbitrary code in File::GlobMapper via an attacker-controlled output glob. _parseOutputGlob() w…
first Jun 11, 2026 -
High max 7.8ALAS2023-2026-1823 1 CVE
Important: rrdtool security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-43958: A flaw was found in rrdcached, a component of rrdtool. A local attacker with access to a rrdcached socket can exploit a stack-based buffer overflow by …
first Jun 8, 2026 -
High max 8.8ALAS2023-2026-1822 4 CVEs
Important: freerdp security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-45700: FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.26.0, FreeRDP's planar bitmap decoder has an out-of-bounds heap write when …
first Jun 8, 2026 -
High max 10.0ALAS2023-2026-1788 19 CVEs
Important: nerdctl security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-46598: For certain crafted inputs, a 'ed25519.PrivateKey' was created by casting malformed wire bytes, leading to a panic when used. CVE-2026-46597: An incorr…
first Jun 8, 2026 -
High max 8.8
Important: kernel security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-46300: In the Linux kernel, the following vulnerability has been resolved: net: skbuff: propagate shared-frag marker through pskb_copy() CVE-2026-43503: In th…
first May 14, 2026 -
High max 8.8
Important: kernel6.18 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-46300: In the Linux kernel, the following vulnerability has been resolved: net: skbuff: propagate shared-frag marker through pskb_copy() CVE-2026-43503: In th…
first May 14, 2026 -
High max 8.8
Important: kernel6.12 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-46300: In the Linux kernel, the following vulnerability has been resolved: net: skbuff: propagate shared-frag marker through pskb_copy() CVE-2026-43503: In th…
first May 14, 2026 -
High max 9.8ALAS2023-2026-1702 88 CVEs
Important: kernel6.18 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-43321: In the Linux kernel, the following vulnerability has been resolved: bpf: Properly mark live registers for indirect jumps CVE-2026-43315: In the Linux k…
first May 11, 2026 -
High max 7.8
Important: kernel security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-46028: In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - snapshot IV for async AEAD requests CVE-2026-43078: In the Lin…
first May 4, 2026 -
High max 7.8
Important: kernel6.12 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-46028: In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - snapshot IV for async AEAD requests CVE-2026-43078: In the Lin…
first May 4, 2026 -
High max 7.8
Important: kernel6.18 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-46028: In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - snapshot IV for async AEAD requests CVE-2026-43078: In the Lin…
first May 4, 2026 -
High max 9.8ALAS2023-2026-1596 167 CVEs
Important: kernel6.18 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-45985: In the Linux kernel, the following vulnerability has been resolved: ext4: don't set EXT4_GET_BLOCKS_CONVERT when splitting before submitting I/O CVE-20…
first Apr 27, 2026 -
High max 9.8ALAS2023-2026-1594 97 CVEs
Important: kernel6.12 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-45943: In the Linux kernel, the following vulnerability has been resolved: erofs: fix inline data read failure for ztailpacking pclusters CVE-2026-43488: In t…
first Apr 27, 2026 -
High max 9.8ALAS2023-2026-1544 70 CVEs
Important: kernel security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-46328: In the Linux kernel, the following vulnerability has been resolved: apparmor: fix rlimit for posix cpu timers CVE-2026-46259: In the Linux kernel, the …
first Apr 7, 2026 -
High max 9.8ALAS2023-2026-1543 158 CVEs
Important: kernel6.12 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-46329: In the Linux kernel, the following vulnerability has been resolved: erofs: handle end of filesystem properly for file-backed mounts CVE-2026-46328: In …
first Apr 7, 2026 -
High max 9.8ALAS2023-2026-1514 82 CVEs
Important: kernel6.18 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-46329: In the Linux kernel, the following vulnerability has been resolved: erofs: handle end of filesystem properly for file-backed mounts CVE-2026-46328: In …
first Mar 30, 2026