340 results · Clear filters · Feed
-
Low max 6.5ALAS2-2026-4050 1 CVE
Low: file-roller security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-78322: A flaw was found in file-roller. When opening or extracting a malicious 7z or RAR archive containing a file entry with an excessively long path, file-roll…
-
Low max 5.3ALAS2023-2026-3355 1 CVE
Low: ecs-service-connect-agent security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-35189: Issue summary: A certificate with many nameRelativeToCRLIssuer CRL distribution points causes disproportionate heap growth when OpenSSL caches X.509 ex…
-
LowALAS2-2026-4036 1 CVE
Low: kernel security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-98775: In the Linux kernel, the following vulnerability has been resolved: nitro_enclaves: fix use-after-free on SLOT_ALLOC failure
-
LowALAS2023-2026-3217 0 CVEs
Low: device-mapper-persistent-data security update (Amazon Linux 2023)
first Oct 12, 2026 -
Low max 2.0ALAS2023-2026-3132 1 CVE
Low: amazon-efs-utils security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-50185: RustCrypto CMOV provides conditional move CPU intrinsics which are guaranteed on major platforms to execute in constant-time and not be rewritten as br…
-
Low max 2.0ALAS2-2026-3948 1 CVE
Low: amazon-efs-utils security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-50185: RustCrypto CMOV provides conditional move CPU intrinsics which are guaranteed on major platforms to execute in constant-time and not be rewritten as branc…
-
Low max 9.1ALAS2023-2026-2161 1 CVE
Low: perl-Socket security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-12087: Socket versions before 2.041 for Perl have an out-of-bounds heap read. In Socket.xs, pack_ip_mreq_source() checks the length of its source argument bef…
-
Low max 4.3ALAS2023-2026-2137 1 CVE
Low: mount-s3 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-53584: libgit2 Submodule path traversal
-
Low max 2.4ALAS2023-2026-2125 2 CVEs
Low: python3.11 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-6879: `Element.findall()` and fully-consumed `Element.iterfind()` exhibit `O(n^2)` time complexity when using XPath index predicates (e.g. `[1]`, `[last()]`, …
-
Low max 2.4ALAS2023-2026-2124 2 CVEs
Low: python3.12 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-6879: `Element.findall()` and fully-consumed `Element.iterfind()` exhibit `O(n^2)` time complexity when using XPath index predicates (e.g. `[1]`, `[last()]`, …
-
Low max 2.4ALAS2023-2026-2123 2 CVEs
Low: python3.13 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-6879: `Element.findall()` and fully-consumed `Element.iterfind()` exhibit `O(n^2)` time complexity when using XPath index predicates (e.g. `[1]`, `[last()]`, …
-
Low max 2.4ALAS2023-2026-2122 2 CVEs
Low: python3.14 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-6879: `Element.findall()` and fully-consumed `Element.iterfind()` exhibit `O(n^2)` time complexity when using XPath index predicates (e.g. `[1]`, `[last()]`, …
-
Low max 3.3ALAS2-2026-3817 1 CVE
Low: python3-pygments security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-4539: A security flaw has been discovered in pygments up to 2.19.2. The impacted element is the function AdlLexer of the file pygments/lexers/archetype.py. The m…
-
Low max 3.3ALAS2023-2026-1973 1 CVE
Low: python-pygments security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-4539: A security flaw has been discovered in pygments up to 2.19.2. The impacted element is the function AdlLexer of the file pygments/lexers/archetype.py. Th…
-
LowALAS2023-2026-1927 0 CVEs
Low: cifs-utils security update (Amazon Linux 2023)
first Jul 6, 2026 -
Low max 2.9ALAS2023-2026-1912 1 CVE
Low: gnupg2 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-57062: CMS (Cryptographic Message Syntax) parsing in gpgsm in GnuPG through 2.5.20 mishandles the CMS format for AES-GCM because aes-ICVlen is supposed to be …
first Jul 6, 2026 -
Low max 7.5ALAS2-2026-3357 1 CVE
Low: perl-HTML-Parser security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-8829: HTML::Entities versions before 3.84 for Perl read freed heap memory in _decode_entities. The XS routine backing HTML::Entities::_decode_entities cached a p…
-
Low max 7.5ALAS2023-2026-1836 1 CVE
Low: perl-HTML-Parser security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-8829: HTML::Entities versions before 3.84 for Perl read freed heap memory in _decode_entities. The XS routine backing HTML::Entities::_decode_entities cached …
-
Low max 3.3ALAS2023-2026-1824 1 CVE
Low: libssh security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-0965: libssh Possible Denial of Service when parsing unexpected configuration files
first Jun 8, 2026 -
Low max 2.9ALAS2-2026-3306 1 CVE
Low: thunderbird security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-41080: libexpat before 2.7.6 uses insufficient entropy, and thus hash flooding can occur via a crafted XML document.
first May 25, 2026 -
Low max 9.8ALAS2-2026-3303 1 CVE
Low: socat security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-54661: readline.sh in socat through 1.8.0.1 relies on the /tmp/$USER/stderr2 file.
first May 11, 2026 -
Low max 4.6ALAS2023-2026-1719 1 CVE
Low: python3.13-pip security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-3219: pip handles concatenated tar and ZIP files as ZIP files regardless of filename or whether a file is both a tar and ZIP file. This behavior could result …
first May 25, 2026 -
Low max 4.6ALAS2023-2026-1718 1 CVE
Low: python3.14-pip security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-3219: pip handles concatenated tar and ZIP files as ZIP files regardless of filename or whether a file is both a tar and ZIP file. This behavior could result …
first May 25, 2026 -
Low max 3.3ALAS2023-2026-1707 1 CVE
Low: glslang security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-3010: A vulnerability, which was classified as problematic, has been found in Khronos Group glslang 15.1.0. Affected by this issue is the function glslang::TI…
-
Low max 2.9ALAS2023-2026-1706 1 CVE
Low: firefox security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-41080: libexpat before 2.7.6 uses insufficient entropy, and thus hash flooding can occur via a crafted XML document.
-
LowALAS2023-2026-1662 0 CVEs
Low: aws-cfn-bootstrap security update (Amazon Linux 2023)
first May 11, 2026 -
Low max 9.8ALAS2023-2026-1701 1 CVE
Low: socat security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-54661: readline.sh in socat through 1.8.0.1 relies on the /tmp/$USER/stderr2 file.
first May 11, 2026 -
Low max 3.9ALAS2-2026-3294 1 CVE
Low: microcode_ctl security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-31648: Improper handling of values in the microcode flow for some Intel(R) Processor Family may allow an escalation of privilege. Startup code and smm adversary …
first May 11, 2026 -
Low max 3.9ALAS2023-2026-1675 1 CVE
Low: microcode_ctl security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-31648: Improper handling of values in the microcode flow for some Intel(R) Processor Family may allow an escalation of privilege. Startup code and smm adversa…
first May 11, 2026 -
Low max 5.7ALAS2023-2026-1674 1 CVE
Low: python3.14 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-2297: The import hook in CPython that handles legacy *.pyc files (SourcelessFileLoader) is incorrectly handled in FileLoader (a base class) and so does not us…
first May 11, 2026 -
Low max 3.3ALAS2023-2026-1692 1 CVE
Low: PackageKit security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-0217: A use-after-free flaw was found in PackageKitd. In some conditions, the order of cleanup mechanics for a transaction could be impacted. As a result, som…
-
Low max 2.9ALAS2023-2026-1691 1 CVE
Low: atop security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-31160: atop through 2.11.0 allows local users to cause a denial of service (e.g., assertion failure and application exit) or possibly have unspecified other i…
-
LowALAS2023-2024-758 0 CVEs
Low: ecs-service-connect-agent security update (Amazon Linux 2023)
first Nov 13, 2024 -
Low max 2.9ALAS2023-2026-1616 1 CVE
Low: nodejs22 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-27171: A flaw was found in zlib. An attacker providing specially crafted input to the crc32_combine64 or crc32_combine_gen64 functions could trigger an infini…
first Apr 27, 2026 -
Low max 6.8ALAS2023-2026-1610 1 CVE
Low: aws-nitro-tpm-tools security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-25727: time provides date and time handling in Rust. From 0.3.6 to before 0.3.47, when user-provided input is provided to any type that parses with the RFC 28…
first Apr 27, 2026 -
Low max 2.9ALAS2023-2026-1608 1 CVE
Low: nodejs20 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-27171: A flaw was found in zlib. An attacker providing specially crafted input to the crc32_combine64 or crc32_combine_gen64 functions could trigger an infini…
first Apr 27, 2026 -
Low max 6.8ALAS2023-2026-1591 1 CVE
Low: librsvg2 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-25727: time provides date and time handling in Rust. From 0.3.6 to before 0.3.47, when user-provided input is provided to any type that parses with the RFC 28…
first Apr 27, 2026 -
Low max 2.0ALAS2023-2026-1589 1 CVE
Low: python-pip security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-1703: When pip is installing and extracting a maliciously crafted wheel archive, files may be extracted outside the installation directory. The path traversal…
first Apr 27, 2026 -
Low max 2.0ALAS2-2026-3256 1 CVE
Low: python-pip security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-1703: When pip is installing and extracting a maliciously crafted wheel archive, files may be extracted outside the installation directory. The path traversal is…
first Apr 27, 2026 -
Low max 5.6ALAS2023-2026-1580 4 CVEs
Low: tracker-miners security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-1767: A flaw was found in the GNOME localsearch MP3 Extractor `tracker-extract-mp3` component. A remote attacker could exploit this heap buffer overflow vulne…