340 results · Clear filters · Feed
-
Low max 2.0ALAS2023-2026-1531 1 CVE
Low: python3.11-pip security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-1703: When pip is installing and extracting a maliciously crafted wheel archive, files may be extracted outside the installation directory. The path traversal…
first Mar 30, 2026 -
Low max 2.0ALAS2023-2026-1530 1 CVE
Low: python3.12-pip security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-1703: When pip is installing and extracting a maliciously crafted wheel archive, files may be extracted outside the installation directory. The path traversal…
first Mar 30, 2026 -
Low max 6.8ALAS2023-2026-1523 1 CVE
Low: rust-below security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-25727: time provides date and time handling in Rust. From 0.3.6 to before 0.3.47, when user-provided input is provided to any type that parses with the RFC 28…
first Mar 30, 2026 -
Low max 6.5ALAS2023-2026-1522 1 CVE
Low: openssl security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-2673: Issue summary: An OpenSSL TLS 1.3 server may fail to negotiate the expected preferred key exchange group when its key exchange group configuration inclu…
first Mar 30, 2026 -
Low max 3.3ALAS2023-2026-1509 1 CVE
Low: libheif security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-3949: A vulnerability was determined in strukturag libheif up to 1.21.2. This affects the function vvdec_push_data2 of the file libheif/plugins/decoder_vvdec.…
first Mar 30, 2026 -
Low max 2.0ALAS2023-2026-1490 1 CVE
Low: python3.13-pip security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-1703: When pip is installing and extracting a maliciously crafted wheel archive, files may be extracted outside the installation directory. The path traversal…
first Mar 16, 2026 -
Low max 6.2ALAS2-2026-3186 1 CVE
Low: aide security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-54409: AIDE is an advanced intrusion detection environment. From versions 0.13 to 0.19.1, there is a null pointer dereference vulnerability in AIDE. An attacker …
first Mar 2, 2026 -
Low max 6.2ALAS2-2026-3178 1 CVE
Low: libxml2 security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-1757: A flaw was identified in the interactive shell of the xmllint utility, part of the libxml2 project, where memory allocated for user input is not properly r…
first Mar 2, 2026 -
Low max 6.8ALAS2-2026-3177 1 CVE
Low: thunderbird security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-25727: time provides date and time handling in Rust. From 0.3.6 to before 0.3.47, when user-provided input is provided to any type that parses with the RFC 2822 …
first Mar 2, 2026 -
Low max 6.2ALAS2023-2026-1462 1 CVE
Low: aide security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-54409: AIDE is an advanced intrusion detection environment. From versions 0.13 to 0.19.1, there is a null pointer dereference vulnerability in AIDE. An attack…
first Mar 2, 2026 -
Low max 6.2ALAS2023-2026-1446 1 CVE
Low: libxml2 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-1757: A flaw was identified in the interactive shell of the xmllint utility, part of the libxml2 project, where memory allocated for user input is not properl…
first Mar 2, 2026 -
Low max 6.8ALAS2023-2026-1445 1 CVE
Low: firefox security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-25727: time provides date and time handling in Rust. From 0.3.6 to before 0.3.47, when user-provided input is provided to any type that parses with the RFC 28…
first Mar 2, 2026 -
Low max 4.3ALAS2-2026-3175 2 CVEs
Low: openssh security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-61984: ssh in OpenSSH before 10.1 allows control characters in usernames that originate from certain possibly untrusted sources, potentially leading to code exec…
first Feb 16, 2026 -
LowALAS2-2026-3174 0 CVEs
Low: amazon-cloudwatch-agent security update (Amazon Linux 2)
first Feb 16, 2026 -
LowALAS2023-2026-1442 0 CVEs
Low: amazon-cloudwatch-agent security update (Amazon Linux 2023)
first Feb 16, 2026 -
Low max 3.6ALAS2023-2026-1441 2 CVEs
Low: openssh security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-61985: ssh in OpenSSH before 10.1 allows the '\0' character in an ssh:// URI, potentially leading to code execution when a ProxyCommand is used. CVE-2025-6198…
first Feb 16, 2026 -
LowALAS2-2025-2881 0 CVEs
Low: openssh security update (Amazon Linux 2)
first Jun 4, 2025 -
Low max 4.3ALAS2023-2025-1038 1 CVE
Low: openssh security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-32728: In sshd in OpenSSH before 10.0, the DisableForwarding directive does not adhere to the documentation stating that it disables X11 and agent forwarding.
first Jun 18, 2025 -
Low max 3.7ALAS2-2026-3145 1 CVE
Low: libxml2 security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-0989: A flaw was identified in the RelaxNG parser of libxml2 related to how external schema inclusions are handled. The parser does not enforce a limit on inclus…
-
LowALAS2023-2026-1422 1 CVE
Low: unzip security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2019-13232: Info-ZIP UnZip 6.0 mishandles the overlapping of files inside a ZIP container, leading to denial of service (resource consumption), aka a "better zip b…
-
Low max 3.7ALAS2023-2026-1397 1 CVE
Low: libxml2 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-0989: A flaw was identified in the RelaxNG parser of libxml2 related to how external schema inclusions are handled. The parser does not enforce a limit on inc…
-
Low max 1.3ALAS2023-2026-1365 1 CVE
Low: composer security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-67746: Composer is a dependency manager for PHP. In versions on the 2.x branch prior to 2.2.26 and 2.9.3, attackers controlling remote sources that Composer d…
-
Low max 3.3ALAS2023-2026-1360 1 CVE
Low: libxml2 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-8732: A vulnerability was found in libxml2 up to 2.14.5. It has been declared as problematic. This vulnerability affects the function xmlParseSGMLCatalog of t…
-
Low max 3.3ALAS2-2026-3122 1 CVE
Low: libxml2 security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-8732: A vulnerability was found in libxml2 up to 2.14.5. It has been declared as problematic. This vulnerability affects the function xmlParseSGMLCatalog of the …
-
LowALAS2-2025-3055 0 CVEs
Low: unbound security update (Amazon Linux 2)
first Nov 5, 2025 -
Low max 1.8ALAS2023-2025-1309 1 CVE
Low: python3.11 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-6075: If the value passed to os.path.expandvars() is user-controlled a performance degradation is possible when expanding environment variables.
-
Low max 1.8ALAS2023-2025-1308 1 CVE
Low: python3.13 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-6075: If the value passed to os.path.expandvars() is user-controlled a performance degradation is possible when expanding environment variables.
-
Low max 1.8ALAS2023-2025-1294 1 CVE
Low: python3.12 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-6075: If the value passed to os.path.expandvars() is user-controlled a performance degradation is possible when expanding environment variables.
-
Low max 1.8ALAS2023-2025-1293 1 CVE
Low: python3.9 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-6075: If the value passed to os.path.expandvars() is user-controlled a performance degradation is possible when expanding environment variables.
-
Low max 1.8ALAS2-2025-3084 1 CVE
Low: python3 security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-6075: If the value passed to os.path.expandvars() is user-controlled a performance degradation is possible when expanding environment variables.
-
LowALAS2-2025-3064 0 CVEs
Low: thunderbird security update (Amazon Linux 2)
first Nov 10, 2025 -
LowALAS2-2025-3062 0 CVEs
Low: lz4 security update (Amazon Linux 2)
first Nov 10, 2025 -
Low max 7.5ALAS2-2025-3056 1 CVE
Low: curl security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-9086: Out of bounds read for cookie path NOTE: https://curl.se/docs/CVE-2025-9086.html NOTE: Introduced with: https://github.com/curl/curl/commit/f24dc09d209a2f9…
-
LowALAS2023-2025-1284 0 CVEs
Low: firefox security update (Amazon Linux 2023)
-
LowALAS2023-2025-1266 0 CVEs
Low: lz4 security update (Amazon Linux 2023)
-
LowALAS2023-2025-1263 0 CVEs
Low: runc security update (Amazon Linux 2023)
-
LowALAS2023-2025-1256 0 CVEs
Low: unbound security update (Amazon Linux 2023)
-
Low max 3.3ALAS2-2025-3039 1 CVE
Low: compat-libtiff3 security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-8961: A vulnerability was identified in LibTIFF 4.7.0. This issue affects the function May of the file tiffcrop.c of the component tiffcrop. The manipulation lea…
-
Low max 3.7ALAS2023-2025-1252 1 CVE
Low: java-11-amazon-corretto security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2020-14573: Vulnerability in the Java SE product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Java SE: 11.0.7 and 14.0.1. Diffi…
-
LowALAS2-2025-3032 1 CVE
Low: sox security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2021-33844: A floating point exception (divide-by-zero) issue was discovered in SoX in functon startread() of wav.c file. An attacker with a crafted wav file, could c…