2,507 results · Clear filters · Feed
-
High max 9.8ALAS2023-2026-1776 7 CVEs
Important: tomcat10 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-43515: Improper Authorization vulnerability when multiple method constraints define an HTTP method for the same extension in Apache Tomcat. This issue affects…
-
High max 8.1ALAS2023-2026-1773 1 CVE
Important: nginx security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-9256: NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_rewrite_module module. This vulnerability exists when a rewrite directive uses a r…
-
High max 7.8ALAS2023-2026-1752 3 CVEs
Important: kernel security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-46333: In the Linux kernel, the following vulnerability has been resolved: ptrace: slightly saner 'get_dumpable()' logic CVE-2026-43494: In the Linux kernel, …
first May 25, 2026 -
High max 9.8ALAS2023-2024-488 12 CVEs
Important: kernel security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-25744: In the Linux kernel before 6.6.7, an untrusted VMM can trigger int80 syscall handling at any given point. This is related to arch/x86/coco/tdx/tdx.c an…
first Jan 19, 2024 -
High max 7.5ALAS2-2026-3319 7 CVEs
Important: nerdctl security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-42499: Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322. CVE-2026-39826: If a trusted template autho…
first May 25, 2026 -
High max 8.4ALAS2-2026-3318 2 CVEs
Important: dnsmasq security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-4893: An information disclosure vulnerability in dnsmasq allows remote attackers to bypass source checks via a crafted DNS packet with RFC 7871 client subnet inf…
first May 25, 2026 -
High max 5.3ALAS2-2026-3317 1 CVE
Important: python-pip security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-6357: pip prior to version 26.1 would run self-update check functionality after installing wheel files which required importing well-known Python modules names. …
first May 25, 2026 -
High max 9.5ALAS2-2026-3316 1 CVE
Important: php security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-6722: In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, the SOAP extension's object deduplication mechanism …
first May 25, 2026 -
High max 9.8ALAS2-2026-3315 5 CVEs
Important: thunderbird security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-8094: Other issue in the WebRTC component. This vulnerability was fixed in Firefox ESR 140.10.2. CVE-2026-8092: Memory safety bugs present in Firefox ESR 115.35.…
first May 25, 2026 -
High max 9.8ALAS2-2026-3314 10 CVEs
Important: httpd security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-34059: Buffer Over-read vulnerability in Apache HTTP Server. This issue affects Apache HTTP Server: through 2.4.66. Users are recommended to upgrade to version 2…
first May 25, 2026 -
High max 7.5ALAS2-2026-3313 10 CVEs
Important: golang security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-42501: A malicious module proxy can exploit a flaw in the go command's validation of module checksums to bypass checksum database validation. This vulnerability …
first May 25, 2026 -
High max 8.6ALAS2-2026-3312 2 CVEs
Important: python-pillow security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-42311: Pillow is a Python imaging library. From version 10.3.0 to before version 12.2.0, processing a malicious PSD file could lead to memory corruption, potenti…
first May 25, 2026 -
High max 7.5ALAS2-2026-3311 6 CVEs
Important: cni-plugins security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-42499: Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322. CVE-2026-39823: CVE-2026-27142 fixed a vuln…
first May 25, 2026 -
High max 7.5ALAS2-2026-3310 6 CVEs
Important: cri-tools security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-42499: Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322. CVE-2026-39823: CVE-2026-27142 fixed a vuln…
first May 25, 2026 -
High max 7.5ALAS2-2026-3309 6 CVEs
Important: rclone security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-42499: Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322. CVE-2026-39823: CVE-2026-27142 fixed a vuln…
first May 25, 2026 -
High max 7.5ALAS2-2026-3308 7 CVEs
Important: golist security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-42499: Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322. CVE-2026-39826: If a trusted template autho…
first May 25, 2026 -
High max 8.2ALAS2023-2026-1757 7 CVEs
Important: gnutls security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-5260: For a server using an RSA key backed by a PKCS#11 token, a client sending an extremely short premaster secret during an RSA key exchange could trigger a…
first May 25, 2026 -
High max 9.1ALAS2023-2026-1756 10 CVEs
Important: unbound security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-44608: NLnet Labs Unbound 1.14.0 up to and including version 1.25.0 has a locking inconsistency vulnerability that when certain conditions are met (multi-thre…
first May 25, 2026 -
High max 7.5ALAS2023-2026-1755 4 CVEs
Important: bind security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-5950: Avoid unbounded recursion loop CVE-2026-5946: An unauthenticated remote attacker can crash any affected named instance with a single crafted DNS message…
first May 25, 2026 -
High max 7.5ALAS2023-2026-1751 16 CVEs
Important: golang-github-burntsushi-toml security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-42499: Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322. CVE-2026-39826: If a trusted template au…
first May 25, 2026 -
High max 7.5ALAS2023-2026-1750 16 CVEs
Important: golang-github-burntsushi-toml-test security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-42499: Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322. CVE-2026-39826: If a trusted template au…
first May 25, 2026 -
High max 7.5ALAS2023-2026-1749 16 CVEs
Important: golang-github-cpuguy83-md2man security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-42499: Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322. CVE-2026-39826: If a trusted template au…
first May 25, 2026 -
High max 7.7ALAS2023-2026-1748 3 CVEs
Important: valkey security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-25243: Redis is an in-memory data structure store. In versions of redis-server up to 8.6.3, the RESTORE command does not properly validate serialized values. …
first May 25, 2026 -
High max 7.5ALAS2023-2026-1744 8 CVEs
Important: credentials-fetcher security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-42499: Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322. CVE-2026-39826: If a trusted template au…
first May 25, 2026 -
High max 7.5ALAS2023-2026-1743 10 CVEs
Important: golang security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-42501: A malicious module proxy can exploit a flaw in the go command's validation of module checksums to bypass checksum database validation. This vulnerabili…
first May 25, 2026 -
High max 7.5ALAS2023-2026-1742 7 CVEs
Important: golist security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-42499: Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322. CVE-2026-39826: If a trusted template au…
first May 25, 2026 -
High max 7.5ALAS2023-2026-1741 7 CVEs
Important: runfinch-finch security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-42499: Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322. CVE-2026-39826: If a trusted template au…
first May 25, 2026 -
High max 7.5ALAS2023-2026-1740 7 CVEs
Important: soci-snapshotter security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-42499: Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322. CVE-2026-39826: If a trusted template au…
first May 25, 2026 -
High max 7.5ALAS2023-2026-1739 7 CVEs
Important: oci-add-hooks security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-42499: Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322. CVE-2026-39826: If a trusted template au…
first May 25, 2026 -
High max 7.5ALAS2023-2026-1738 7 CVEs
Important: amazon-ecr-credential-helper security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-42499: Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322. CVE-2026-39826: If a trusted template au…
first May 25, 2026 -
High max 7.5ALAS2023-2026-1737 7 CVEs
Important: containerd security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-42499: Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322. CVE-2026-39826: If a trusted template au…
first May 25, 2026 -
High max 7.5ALAS2023-2026-1736 7 CVEs
Important: docker security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-42499: Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322. CVE-2026-39826: If a trusted template au…
first May 25, 2026 -
High max 7.5ALAS2023-2026-1735 7 CVEs
Important: nerdctl security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-42499: Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322. CVE-2026-39826: If a trusted template au…
first May 25, 2026 -
High max 7.5ALAS2023-2026-1734 1 CVE
Important: python-twisted security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-42304: The twisted.names module is vulnerable to a Denial of Service (DoS) attack via resource exhaustion during DNS name decompression. A remote, unauthentic…
first May 25, 2026 -
High max 9.5ALAS2023-2026-1728 7 CVEs
Important: php8.3 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-7568: Signed integer overflow in metaphone() CVE-2026-7262: NULL pointer dereference in SOAP apache:Map decoder with missing <value> CVE-2026-7261: In PHP ver…
first May 25, 2026 -
High max 9.5ALAS2023-2026-1727 7 CVEs
Important: php8.2 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-7568: Signed integer overflow in metaphone() CVE-2026-7262: NULL pointer dereference in SOAP apache:Map decoder with missing <value> CVE-2026-7261: In PHP ver…
first May 25, 2026 -
High max 9.8ALAS2023-2026-1725 5 CVEs
Important: firefox security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-8094: Other issue in the WebRTC component. This vulnerability was fixed in Firefox ESR 140.10.2. CVE-2026-8092: Memory safety bugs present in Firefox ESR 115.…
first May 25, 2026 -
High max 8.8ALAS2023-2026-1724 1 CVE
Important: mod_http2 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-23918: Double Free and possible RCE vulnerability in Apache HTTP Server with the HTTP/2 protocol. This issue affects Apache HTTP Server: 2.4.66. Users are rec…
first May 25, 2026 -
High max 7.5ALAS2023-2026-1723 6 CVEs
Important: cni-plugins security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-42499: Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322. CVE-2026-39823: CVE-2026-27142 fixed a v…
first May 25, 2026 -
High max 7.5ALAS2023-2026-1722 6 CVEs
Important: git-lfs security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-42499: Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322. CVE-2026-39823: CVE-2026-27142 fixed a v…
first May 25, 2026