2,507 results · Clear filters · Feed
-
High max 5.3ALAS2023-2026-1653 1 CVE
Important: python3.14-pip security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-6357: pip prior to version 26.1 would run self-update check functionality after installing wheel files which required importing well-known Python modules name…
first May 11, 2026 -
High max 9.8ALAS2023-2026-1652 29 CVEs
Important: firefox security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-7323: Memory safety bugs present in Firefox ESR 140.10.0, Thunderbird ESR 140.10.0, Firefox 150.0.0 and Thunderbird 150.0.0. Some of these bugs showed evidenc…
first May 11, 2026 -
High max 9.2ALAS2023-2026-1648 2 CVEs
Important: nodejs22 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-27135: nghttp2 is an implementation of the Hypertext Transfer Protocol version 2 in C. Prior to version 1.68.1, the nghttp2 library stops reading the incoming…
first May 11, 2026 -
High max 7.5ALAS2023-2026-1647 1 CVE
Important: nodejs24 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-27135: nghttp2 is an implementation of the Hypertext Transfer Protocol version 2 in C. Prior to version 1.68.1, the nghttp2 library stops reading the incoming…
first May 11, 2026 -
High max 7.5ALAS2023-2026-1641 1 CVE
Important: perl-CryptX security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-41564: NOTE: https://lists.security.metacpan.org/cve-announce/msg/39209500/ NOTE: https://github.com/DCIT/perl-CryptX/security/advisories/GHSA-24c2-gp6c-24c6 …
first May 11, 2026 -
High max 8.8ALAS2023-2026-1639 1 CVE
Important: PackageKit security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-41651: PackageKit is a a D-Bus abstraction layer that allows the user to manage packages in a secure way using a cross-distro, cross-architecture API. Package…
first May 11, 2026 -
High max 9.1ALAS2023-2026-1638 2 CVEs
Important: python3.13 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-6100: Use-after-free (UAF) was possible in the `lzma.LZMADecompressor`, `bz2.BZ2Decompressor`, and `gzip.GzipFile` when a memory allocation fails with a `Memo…
first May 11, 2026 -
High max 7.5ALAS2-2026-3300 7 CVEs
Important: java-11-amazon-corretto security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-34282: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking). Supporte…
-
High max 7.5ALAS2-2026-3299 7 CVEs
Important: java-17-amazon-corretto security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-34282: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking). Supporte…
-
High max 7.5ALAS2023-2026-1687 2 CVEs
Important: java-1.8.0-amazon-corretto security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-22016: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP). Supported v…
-
High max 7.5ALAS2023-2026-1686 8 CVEs
Important: java-25-amazon-corretto security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-34282: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking). Suppo…
-
High max 7.5ALAS2023-2026-1685 7 CVEs
Important: java-11-amazon-corretto security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-34282: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking). Suppo…
-
High max 7.5ALAS2023-2026-1684 7 CVEs
Important: java-17-amazon-corretto security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-34282: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking). Suppo…
-
High max 7.5ALAS2023-2026-1683 7 CVEs
Important: java-21-amazon-corretto security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-34282: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking). Suppo…
-
High max 7.5ALAS2023-2026-1682 7 CVEs
Important: java-26-amazon-corretto security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-34282: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking). Suppo…
-
High max 9.8ALAS2023-2026-1646 60 CVEs
Important: kernel6.12 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-43068: In the Linux kernel, the following vulnerability has been resolved: ext4: avoid allocate block from corrupted group in ext4_mb_find_by_goal() CVE-2026-…
-
High max 9.1ALAS2023-2026-1607 8 CVEs
Important: rclone security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-33186: gRPC-Go is the Go language implementation of gRPC. Versions prior to 1.79.3 have an authorization bypass resulting from improper input validation of th…
first Apr 27, 2026 -
High max 9.8ALAS2023-2026-1606 10 CVEs
Important: containerd security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-39882: OpenTelemetry-Go is the Go implementation of OpenTelemetry. Prior to 1.43.0, the otlp HTTP exporters (traces/metrics/logs) read the full HTTP response …
first Apr 27, 2026 -
High max 8.8ALAS2023-2026-1487 32 CVEs
Important: kernel6.12 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-31688: In the Linux kernel, the following vulnerability has been resolved: driver core: enforce device_lock for driver_match_device() CVE-2026-23260: In the L…
first Mar 16, 2026 -
High max 8.6ALAS2023-2025-1258 3 CVEs
Important: git-lfs security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-61728: archive/zip: denial of service when parsing arbitrary ZIP archives CVE-2025-58187: crypto/x509: quadratic complexity when checking name constraints Due…
first Nov 10, 2025 -
High max 9.8ALAS2023-2025-1012 2 CVEs
Important: cni-plugins security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-22871: The net/http package accepted data in the chunked transfer encoding containing an invalid chunk-size line terminated by a bare LF. When used in conjunc…
first Jun 4, 2025 -
High max 6.5ALAS2023-2026-1635 6 CVEs
Important: cups security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-39316: OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.16 and prior, a use-after-free vul…
first Apr 27, 2026 -
High max 9.1ALAS2023-2026-1634 1 CVE
Important: dotnet10.0 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-40372: Improper verification of cryptographic signature in ASP.NET Core allows an unauthorized attacker to elevate privileges over a network.
first Apr 27, 2026 -
High max 7.5ALAS2023-2026-1633 1 CVE
Important: ngtcp2 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-40170: ngtcp2 is a C implementation of the IETF QUIC protocol. In versions prior to 1.22.1, ngtcp2_qlog_parameters_set_transport_params() serializes peer tran…
first Apr 27, 2026 -
High max 7.5ALAS2023-2026-1629 4 CVEs
Important: dotnet8.0 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-33116: Loop with unreachable exit condition ('infinite loop') in .NET, .NET Framework, Visual Studio allows an unauthorized attacker to deny service over a ne…
first Apr 27, 2026 -
High max 7.5ALAS2023-2026-1628 4 CVEs
Important: dotnet9.0 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-33116: Loop with unreachable exit condition ('infinite loop') in .NET, .NET Framework, Visual Studio allows an unauthorized attacker to deny service over a ne…
first Apr 27, 2026 -
High max 7.5ALAS2023-2026-1627 4 CVEs
Important: dotnet10.0 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-33116: Loop with unreachable exit condition ('infinite loop') in .NET, .NET Framework, Visual Studio allows an unauthorized attacker to deny service over a ne…
first Apr 27, 2026 -
High max 7.8ALAS2023-2026-1626 5 CVEs
Important: tigervnc security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-34003: XKB Buffer overflow in CheckKeyTypes() CVE-2026-34002: XKB Out-of-bounds read in CheckModifierMap() CVE-2026-34001: XSYNC Use-after-free in miSyncTrigg…
first Apr 27, 2026 -
High max 8.8ALAS2023-2026-1625 2 CVEs
Important: composer security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-40261: Command injection via malicious Perforce source reference/url CVE-2026-40176: Command injection via malicious Perforce repository definition
first Apr 27, 2026 -
High max 8.1ALAS2023-2026-1623 1 CVE
Important: mesa security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-40393: In Mesa before 25.3.6 and 26 before 26.0.1, out-of-bounds memory access can occur in WebGPU because the amount of to-be-allocated data depends on an un…
first Apr 27, 2026 -
High max 7.5ALAS2023-2026-1622 1 CVE
Important: glibc security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-4046: The iconv() function in the GNU C Library versions 2.43 and earlier may crash due to an assertion failure when converting inputs from the IBM1390 or IBM…
first Apr 27, 2026 -
High max 9.8ALAS2023-2026-1621 3 CVEs
Important: firefox security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-5734: Memory safety bugs present in Firefox ESR 140.9.0, Thunderbird ESR 140.9.0, Firefox 149.0.1 and Thunderbird 149.0.1. Some of these bugs showed evidence …
first Apr 27, 2026 -
High max 9.1ALAS2023-2026-1620 4 CVEs
Important: python3.11 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-6100: Use-after-free (UAF) was possible in the `lzma.LZMADecompressor`, `bz2.BZ2Decompressor`, and `gzip.GzipFile` when a memory allocation fails with a `Memo…
first Apr 27, 2026 -
High max 9.1ALAS2023-2026-1619 4 CVEs
Important: python3.12 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-6100: Use-after-free (UAF) was possible in the `lzma.LZMADecompressor`, `bz2.BZ2Decompressor`, and `gzip.GzipFile` when a memory allocation fails with a `Memo…
first Apr 27, 2026 -
High max 9.1ALAS2023-2026-1618 3 CVEs
Important: python3.9 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-6100: Use-after-free (UAF) was possible in the `lzma.LZMADecompressor`, `bz2.BZ2Decompressor`, and `gzip.GzipFile` when a memory allocation fails with a `Memo…
first Apr 27, 2026 -
High max 9.1ALAS2023-2026-1617 5 CVEs
Important: python3.14 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-6100: Use-after-free (UAF) was possible in the `lzma.LZMADecompressor`, `bz2.BZ2Decompressor`, and `gzip.GzipFile` when a memory allocation fails with a `Memo…
first Apr 27, 2026 -
High max 9.8ALAS2023-2026-1615 9 CVEs
Important: docker security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-34040: Moby is an open source container framework. Prior to version 29.3.1, a security vulnerability has been detected that allows attackers to bypass authori…
first Apr 27, 2026 -
High max 7.8ALAS2023-2026-1614 5 CVEs
Important: xorg-x11-server security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-34003: XKB Buffer overflow in CheckKeyTypes() CVE-2026-34002: XKB Out-of-bounds read in CheckModifierMap() CVE-2026-34001: XSYNC Use-after-free in miSyncTrigg…
first Apr 27, 2026 -
High max 7.8ALAS2023-2026-1613 5 CVEs
Important: xorg-x11-server-Xwayland security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-34003: XKB Buffer overflow in CheckKeyTypes() CVE-2026-34002: XKB Out-of-bounds read in CheckModifierMap() CVE-2026-34001: XSYNC Use-after-free in miSyncTrigg…
first Apr 27, 2026 -
High max 8.6ALAS2023-2026-1612 3 CVEs
Important: openexr security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-34588: OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. From 3…
first Apr 27, 2026