Skip to content
OpenAdvisories

Source

Amazon Linux Security Center (ALAS)

Source: https://alas.aws.amazon.com/

All Critical High Medium Low With exploited CVEs

340 results · Clear filters · Feed

  • Low max 3.3
    ALAS2023-2025-1213 1 CVE

    Low: docker security update (Amazon Linux 2023)

    Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-54410: Moby is an open source container framework developed by Docker Inc. that is distributed as Docker Engine, Mirantis Container Runtime, and various other…

  • Low max 7.8
    ALAS2-2025-3011 1 CVE

    Low: optipng security update (Amazon Linux 2)

    Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-43907: OptiPNG v0.7.7 was discovered to contain a global buffer overflow via the 'buffer' variable at gifread.c.

    first Sep 19, 2025
  • Low max 2.5
    ALAS2-2025-3004 1 CVE

    Low: libtiff security update (Amazon Linux 2)

    Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-9165: A flaw has been found in LibTIFF 4.7.0. This affects the function _TIFFmallocExt/_TIFFCheckRealloc/TIFFHashSetNew/InitCCITTFax3 of the file tools/tiffcmp.c…

    first Sep 15, 2025
  • Low max 1.2
    ALAS2023-2025-1204 1 CVE

    Low: ruby3.2 security update (Amazon Linux 2023)

    Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-58767: REXML is an XML toolkit for Ruby. The REXML gems from 3.3.3 to 3.4.1 has a DoS vulnerability when parsing XML containing multiple XML declarations. If …

    first Sep 22, 2025
  • Low
    ALAS2-2023-2240 0 CVEs

    Low: ImageMagick security update (Amazon Linux 2)

    first Aug 31, 2023
  • Low
    ALAS2-2023-1977 1 CVE

    Low: cifs-utils security update (Amazon Linux 2)

    Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2022-29869: A flaw was found in cifs-utils. When verbose logging is enabled, invalid credentials file lines may be dumped to stderr. This may lead to information disc…

    first Mar 2, 2023
  • Low
    ALAS2-2021-1649 0 CVEs

    Low: samba security update (Amazon Linux 2)

    first Jun 16, 2021
  • Low
    ALAS2-2020-1533 0 CVEs

    Low: libwmf security update (Amazon Linux 2)

    first Oct 22, 2020
  • Low
    ALAS2-2020-1446 0 CVEs

    Low: python-urllib3 security update (Amazon Linux 2)

    first Jun 26, 2020
  • Low
    ALAS2-2020-1383 0 CVEs

    Low: golang security update (Amazon Linux 2)

    first Jan 14, 2020
  • Low
    ALAS2-2019-1362 0 CVEs

    Low: openssl security update (Amazon Linux 2)

    first Nov 11, 2019
  • Low
    ALAS2-2019-1289 0 CVEs

    Low: glib2 security update (Amazon Linux 2)

    first Sep 13, 2019
  • Low
    ALAS2-2018-1049 2 CVEs

    Low: libvirt security update (Amazon Linux 2)

    Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2018-5748: qemu/qemu_monitor.c in libvirt allows attackers to cause a denial of service (memory consumption) via a large QEMU reply. 1528396: CVE-2018-5748 libvirt: R…

    first Jul 24, 2018
  • Low
    ALAS2-2018-983 1 CVE

    Low: ruby security update (Amazon Linux 2)

    Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2017-17790: The "lazy_initialize" function in lib/resolv.rb did not properly process certain filenames. A remote attacker could possibly exploit this flaw t…

    first Apr 5, 2018
  • Low
    ALAS2-2025-2998 1 CVE

    Low: giflib security update (Amazon Linux 2)

    Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2021-40633: A memory leak (out-of-memory) in gif2rgb in util/gif2rgb.c in giflib 5.1.4 allows remote attackers trigger an out of memory exception or denial of service…

    first Sep 8, 2025
  • Low max 2.5
    ALAS2023-2025-1176 1 CVE

    Low: libtiff security update (Amazon Linux 2023)

    Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-9165: A flaw has been found in LibTIFF 4.7.0. This affects the function _TIFFmallocExt/_TIFFCheckRealloc/TIFFHashSetNew/InitCCITTFax3 of the file tools/tiffcm…

    first Sep 10, 2025
  • Low
    ALAS2023-2025-883 0 CVEs

    Low: cups security update (Amazon Linux 2023)

    first Feb 26, 2025
  • Low
    ALAS2023-2023-434 0 CVEs

    Low: ecs-init security update (Amazon Linux 2023)

    first Nov 9, 2023
  • Low
    ALAS2023-2023-408 0 CVEs

    Low: grub2 security update (Amazon Linux 2023)

    first Oct 30, 2023
  • Low
    ALAS2023-2023-374 0 CVEs

    Low: containerd security update (Amazon Linux 2023)

    first Sep 27, 2023
  • Low
    ALAS2023-2023-373 0 CVEs

    Low: amazon-ssm-agent security update (Amazon Linux 2023)

    first Sep 27, 2023
  • Low
    ALAS2023-2023-358 0 CVEs

    Low: libwebp security update (Amazon Linux 2023)

    first Sep 27, 2023
  • Low
    ALAS2023-2023-339 0 CVEs

    Low: amazon-ssm-agent security update (Amazon Linux 2023)

    first Aug 31, 2023
  • Low
    ALAS2023-2023-252 0 CVEs

    Low: python3.11 security update (Amazon Linux 2023)

    first Jul 17, 2023
  • Low
    ALAS2023-2023-231 0 CVEs

    Low: runc security update (Amazon Linux 2023)

    first Jun 21, 2023
  • Low
    ALAS2023-2023-214 0 CVEs

    Low: yajl security update (Amazon Linux 2023)

    first Jun 21, 2023
  • Low
    ALAS2023-2023-090 0 CVEs

    Low: nginx security update (Amazon Linux 2023)

    first Feb 17, 2023
  • Low max 2.9
    ALAS2023-2025-1174 1 CVE

    Low: taglib security update (Amazon Linux 2023)

    Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-47466: TagLib before 2.0 allows a segmentation violation and application crash during tag writing via a crafted WAV file in which an id3 chunk is the only val…

    first Aug 27, 2025
  • Low
    ALAS2023-2024-615 0 CVEs

    Low: clamav security update (Amazon Linux 2023)

    first May 9, 2024
  • Low
    ALAS2023-2023-305 0 CVEs

    Low: guava security update (Amazon Linux 2023)

    first Aug 17, 2023
  • Low
    ALAS2-2025-2987 1 CVE

    Low: giflib security update (Amazon Linux 2)

    Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-48161: Buffer Overflow vulnerability in GifLib Project GifLib v.5.2.1 allows a local attacker to obtain sensitive information via the DumpSCreen2RGB function in …

    first Aug 26, 2025
  • Low
    ALAS2-2025-2983 1 CVE

    Low: vorbis-tools security update (Amazon Linux 2)

    Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-43361: Buffer Overflow vulnerability in Vorbis-tools v.1.4.2 allows a local attacker to execute arbitrary code and cause a denial of service during the conversio…

    first Aug 21, 2025
  • Low
    ALAS2-2025-2979 1 CVE

    Low: samba security update (Amazon Linux 2)

    Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2021-43566: All versions of Samba prior to 4.13.16 are vulnerable to a malicious client using an SMB1 or NFS race to allow a directory to be created in an area of the…

    first Aug 18, 2025
  • Low max 3.7
    ALAS2023-2025-1152 1 CVE

    Low: nginx security update (Amazon Linux 2023)

    Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-53859: NGINX Open Source and NGINX Plus have a vulnerability in the ngx_mail_smtp_module that might allow an unauthenticated attacker to over-read NGINX SMTP …

    first Aug 13, 2025
  • Low max 5.3
    ALAS2023-2025-1150 1 CVE

    Low: apache-commons-lang3 security update (Amazon Linux 2023)

    Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-48924: Uncontrolled Recursion vulnerability in Apache Commons Lang. This issue affects Apache Commons Lang: Starting with commons-lang:commons-lang 2.0 to 2.6…

    first Aug 12, 2025
  • Low max 5.3
    ALAS2023-2025-1149 1 CVE

    Low: javapackages-bootstrap security update (Amazon Linux 2023)

    Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-48924: Uncontrolled Recursion vulnerability in Apache Commons Lang. This issue affects Apache Commons Lang: Starting with commons-lang:commons-lang 2.0 to 2.6…

    first Aug 12, 2025
  • Low
    ALAS2023-2025-1129 0 CVEs

    Low: kernel6.12 security update (Amazon Linux 2023)

    first Jul 29, 2025
  • Low
    ALAS2023-2025-1128 0 CVEs

    Low: kernel security update (Amazon Linux 2023)

    first Jul 29, 2025
  • Low max 2.8
    ALAS2023-2025-1124 1 CVE

    Low: ruby3.2 security update (Amazon Linux 2023)

    Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-54314: Thor before 1.4.0 can construct an unsafe shell command from library input.

    first Jul 29, 2025
  • Low max 2.7
    ALAS2023-2025-1107 1 CVE

    Low: gnupg2 security update (Amazon Linux 2023)

    Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-30258: In GnuPG before 2.5.5, if a user chooses to import a certificate with certain crafted subkey data that lacks a valid backsig or that has incorrect usag…

    first Jul 21, 2025