2,507 results · Clear filters · Feed
-
High max 8.6ALAS2023-2026-1438 1 CVE
Important: golang security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-61732: A discrepancy between how Go and C/C++ comments were parsed allowed for code smuggling into the resulting cgo binary.
first Feb 16, 2026 -
High max 7.5ALAS2023-2026-1434 9 CVEs
Important: openssl security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-22796: ASN1_TYPE Type Confusion in the PKCS7_digest_from_attributes() function NOTE: https://openssl-library.org/news/secadv/20260127.txt CVE-2026-22795: An i…
first Feb 16, 2026 -
High max 8.8ALAS2023-2026-1431 1 CVE
Important: fontforge security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-15270: FontForge SFD File Parsing Improper Validation of Array Index Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execut…
first Feb 16, 2026 -
High max 9.8ALAS2023-2026-1430 76 CVEs
Important: kernel6.12 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-68764: In the Linux kernel, the following vulnerability has been resolved: NFS: Automounted filesystems should inherit ro,noexec,nodev,sync flags CVE-2025-687…
first Feb 16, 2026 -
High max 9.8ALAS2023-2026-1429 13 CVEs
Important: firefox security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-0891: Memory safety bugs present in Firefox ESR 140.6, Thunderbird ESR 140.6, Firefox 146 and Thunderbird 146. Some of these bugs showed evidence of memory co…
first Feb 16, 2026 -
High max 8.4ALAS2023-2026-1427 1 CVE
Important: gnupg2 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-24882: In GnuPG before 2.5.17, a stack-based buffer overflow exists in tpm2daemon during handling of the PKDECRYPT command for TPM-backed RSA and ECC keys.
first Feb 16, 2026 -
High max 7.1ALAS2023-2026-1410 1 CVE
Important: python3.12-wheel security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-24049: wheel is a command line tool for manipulating Python wheel files, as defined in PEP 427. In versions 0.46.1 and below, the unpack function is vulnerabl…
first Feb 16, 2026 -
High max 8.2ALAS2023-2026-1407 1 CVE
Important: protobuf security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-0994: A denial-of-service (DoS) vulnerability exists in google.protobuf.json_format.ParseDict() in Python, where the max_recursion_depth limit can be bypassed…
first Feb 16, 2026 -
High max 9.8ALAS2023-2026-1423 56 CVEs
Important: kernel6.12 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-71157: In the Linux kernel, the following vulnerability has been resolved: RDMA/core: always drop device refcount in ib_del_sub_device_and_put() CVE-2025-7115…
first Feb 5, 2026 -
High max 9.8ALAS2023-2025-1350 54 CVEs
Important: kernel security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-68331: In the Linux kernel, the following vulnerability has been resolved: usb: uas: fix urb unmapping issue when the uas device is remove during ongoing data…
first Jan 7, 2026 -
High max 9.8ALAS2023-2024-784 57 CVEs
Important: kernel security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-58239: In the Linux kernel, the following vulnerability has been resolved: tls: stop recv() if initial process_rx_list gave us non-DATA CVE-2024-27431: In the…
first Dec 5, 2024 -
High max 9.8ALAS2023-2023-356 75 CVEs
Important: kernel security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-6176: A null pointer dereference flaw was found in the Linux kernel API for the cryptographic algorithm scatterwalk functionality. This issue occurs when a us…
first Sep 27, 2023 -
High max 9.8ALAS2023-2023-330 84 CVEs
Important: kernel security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-54303: In the Linux kernel, the following vulnerability has been resolved: bpf: Disable preemption in bpf_perf_event_output CVE-2023-54297: In the Linux kerne…
first Aug 31, 2023 -
High max 9.8ALAS2023-2023-299 55 CVEs
Important: kernel security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-0639: A denial of service vulnerability due to a deadlock was found in sctp_auto_asconf_init in net/sctp/socket.c in the Linux kernel's SCTP subsystem. This f…
first Aug 17, 2023 -
High max 9.8ALAS2023-2023-228 44 CVEs
Important: kernel security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-54269: In the Linux kernel, the following vulnerability has been resolved: SUNRPC: double free xprt_ctxt while still in use CVE-2023-54268: In the Linux kerne…
first Jun 21, 2023 -
High max 9.8ALAS2023-2023-184 50 CVEs
Important: kernel security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-0775: A use-after-free flaw was found in the __ext4_remount in fs/ext4/super.c in ext4 in the Linux kernel. This flaw allows a local user to cause an informat…
first May 25, 2023 -
High max 8.8ALAS2-2023-2264 56 CVEs
Important: kernel security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-54230: In the Linux kernel, the following vulnerability has been resolved: amba: bus: fix refcount leak CVE-2023-54220: In the Linux kernel, the following vulner…
first Sep 27, 2023 -
High max 9.8ALAS2-2023-1932 80 CVEs
Important: kernel security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-54110: In the Linux kernel, the following vulnerability has been resolved: usb: rndis_host: Secure rndis_query check against int overflow CVE-2023-53032: In the …
first Feb 3, 2023 -
High max 8.2
Important: kernel security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-0775: A use-after-free flaw was found in the __ext4_remount in fs/ext4/super.c in ext4 in the Linux kernel. This flaw allows a local user to cause an information…
first Jun 21, 2023 -
High max 7.8ALAS2-2023-2027 18 CVEs
Important: kernel security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-54265: In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix an uninit variable access bug in __ip6_make_skb() CVE-2023-53623: In the Lin…
first Apr 27, 2023 -
High max 8.8ALAS2-2023-1987 44 CVEs
Important: kernel security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-7324: In the Linux kernel, the following vulnerability has been resolved: scsi: ses: Fix possible addl_desc_ptr out-of-bounds accesses CVE-2023-7192: kernel: ref…
first Mar 17, 2023 -
High max 9.8ALAS2-2022-1876 34 CVEs
Important: kernel security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2022-50884: In the Linux kernel, the following vulnerability has been resolved: drm: Prevent drm_copy_field() to attempt copying a NULL pointer CVE-2022-50733: In the…
first Oct 31, 2022 -
High max 7.8ALAS2-2025-2837 7 CVEs
Important: kernel security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-53019: In the Linux kernel, the following vulnerability has been resolved: net: mdio: validate parameter addr in mdiobus_get_phy() CVE-2023-53015: In the Linux k…
first Apr 15, 2025 -
High max 8.8ALAS2-2024-2615 20 CVEs
Important: kernel security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-35944: In the Linux kernel, the following vulnerability has been resolved: VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host() CVE-2024-35936: In the Li…
first Aug 1, 2024 -
HighALAS2-2024-2588 2 CVEs
Important: kernel security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-53998: In the Linux kernel, the following vulnerability has been resolved: hwrng: virtio - Fix race on data_avail and actual data CVE-2023-1077: kernel: Type con…
first Jul 3, 2024 -
High max 8.8ALAS2-2023-2268 29 CVEs
Important: kernel security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-0639: A denial of service vulnerability due to a deadlock was found in sctp_auto_asconf_init in net/sctp/socket.c in the Linux kernel's SCTP subsystem. This flaw…
first Sep 27, 2023 -
High max 9.8ALAS2023-2025-1297 30 CVEs
Important: kernel security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-40346: In the Linux kernel, the following vulnerability has been resolved: arch_topology: Fix incorrect error check in topology_parse_cpu_capacity() CVE-2025-…
first Dec 8, 2025 -
High max 9.8ALAS2023-2025-1054 21 CVEs
Important: kernel security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-54236: In the Linux kernel, the following vulnerability has been resolved: net/net_failover: fix txq exceeding warning CVE-2023-53684: In the Linux kernel, th…
first Jul 1, 2025 -
High max 9.8ALAS2023-2024-779 34 CVEs
Important: kernel security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-47660: In the Linux kernel, the following vulnerability has been resolved: fsnotify: clear PARENT_WATCHED flags lazily CVE-2024-46763: In the Linux kernel, th…
first Dec 5, 2024 -
High max 9.8ALAS2023-2024-744 29 CVEs
Important: kernel security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-47674: In the Linux kernel, the following vulnerability has been resolved: mm: avoid leaving partial pfn mappings around in error case CVE-2024-47668: In the …
first Oct 24, 2024 -
High max 7.8ALAS2023-2023-430 5 CVEs
Important: kernel security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-5717: A heap out-of-bounds write vulnerability in the Linux kernel's Linux Kernel Performance Events (perf) component can be exploited to achieve local privil…
first Nov 9, 2023 -
High max 7.8ALAS2023-2023-385 22 CVEs
Important: kernel security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-54324: In the Linux kernel, the following vulnerability has been resolved: dm: fix a race condition in retrieve_deps CVE-2023-5345: A use-after-free vulnerabi…
first Oct 12, 2023 -
High max 7.8ALAS2023-2023-251 10 CVEs
Important: kernel security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-54135: In the Linux kernel, the following vulnerability has been resolved: maple_tree: fix potential out-of-bounds access in mas_wr_end_piv() CVE-2023-53759: …
first Jul 17, 2023 -
High max 8.2ALAS2023-2023-169 22 CVEs
Important: kernel security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-54265: In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix an uninit variable access bug in __ip6_make_skb() CVE-2023-54202: In the …
first Apr 27, 2023 -
High max 7.8ALAS2023-2023-138 69 CVEs
Important: kernel security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-7192: kernel: refcount leak in ctnetlink_create_conntrack() CVE-2023-54321: In the Linux kernel, the following vulnerability has been resolved: driver core: f…
first Mar 20, 2023 -
High max 7.8ALAS2-2026-3161 3 CVEs
Important: kernel security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-40173: In the Linux kernel, the following vulnerability has been resolved: net/ip6_tunnel: Prevent perpetual tunnel growth CVE-2025-40070: In the Linux kernel, t…
-
High max 8.8ALAS2-2026-3153 3 CVEs
Important: fontforge security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-15279: FontForge GUtils BMP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute ar…
-
High max 8.9ALAS2-2026-3149 1 CVE
Important: python-urllib3 security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-21441: urllib3 is an HTTP client library for Python. urllib3's streaming API is designed for the efficient handling of large HTTP responses by reading the conten…
-
High max 7.5ALAS2-2026-3148 1 CVE
Important: python-pyasn1 security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-23490: pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.2, a Denial-of-Service issue has been found that leads to memory exhaustion from malformed RELA…
-
High max 8.9ALAS2-2026-3147 1 CVE
Important: python-pip security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-21441: urllib3 is an HTTP client library for Python. urllib3's streaming API is designed for the efficient handling of large HTTP responses by reading the conten…