2,033 results · Clear filters · Feed
-
MediumALAS2023-2026-3216 0 CVEs
Moderate: loupe security update (Amazon Linux 2023)
first Oct 12, 2026 -
MediumALAS2023-2026-3215 0 CVEs
Moderate: glycin security update (Amazon Linux 2023)
first Oct 12, 2026 -
Medium max 9.1ALAS2-2026-3997 2 CVEs
Moderate: perl security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-57432: Perl versions through 5.43.10 have an integer overflow in S_measure_struct leading to an out-of-bounds heap read in pack and unpack. S_measure_struct adds…
-
Medium max 7.5ALAS2-2026-3996 1 CVE
Moderate: perl-HTTP-Date security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-14741: parse_date() -- and str2time(), which delegates to it -- used regexes with ambiguous adjacent greedy runs (year/clock/timezone digits and timezone/ASCII-t…
-
Medium max 6.3ALAS2-2026-3994 4 CVEs
Moderate: qt5-qt3d security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-19999: A security vulnerability has been detected in Open Asset Import Library Assimp Assimp 17c12da. The affected element is the function Assimp::MDLImporter::P…
-
Medium max 5.4ALAS2-2026-3993 1 CVE
Moderate: apache-ivy security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-26032: The PackagerResolver of Apache Ivy is able to download online artifacts and to (re)package them in a format defined by a packager.xml file. This repackagi…
-
Medium max 9.8ALAS2-2026-3989 1 CVE
Moderate: perl-Storable security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-57433: Storable versions before 3.41 for Perl have a signed integer overflow when deserializing a crafted SX_HOOK record. retrieve_hook_common reads a signed 32-…
-
Medium max 7.5ALAS2-2026-3988 1 CVE
Moderate: fence-agents security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-59939: httplib2 is a comprehensive HTTP client library for Python. Prior to 0.32.0, httplib2 performs unbounded decompression of HTTP response bodies encoded wit…
-
Medium max 7.1ALAS2-2026-3986 1 CVE
Moderate: perl-HTTP-Tiny security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-7017: HTTP::Tiny versions before 0.095 for Perl forward credential headers to cross-origin redirect targets. When the server returns a 3xx redirect, `_maybe_redi…
-
Medium max 6.5ALAS2-2026-3970 10 CVEs
Moderate: libsoup security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-77680: An algorithmic complexity flaw exists in libsoup's HTTP Range header processing that persists after the CVE-2025-32907 fix. CVE-2025-32907 addressed memor…
-
Medium max 7.5ALAS2-2026-3969 2 CVEs
Moderate: amazon-ssm-agent security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-78662: Previously, a channel registered in the mux's chanList is not usable until it is established. A malicious peer was able flood the channel's incomingReques…
-
Medium max 6.8ALAS2-2026-3966 2 CVEs
Moderate: awscli security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-18654: Key exchange without entity authentication in the EMR SSH helper commands in Amazon AWS CLI before 1.45.28 and AWS CLI v2 before 2.35.3 might allow man-in…
-
Medium max 9.1ALAS2023-2026-3211 2 CVEs
Moderate: perl security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-57432: Perl versions through 5.43.10 have an integer overflow in S_measure_struct leading to an out-of-bounds heap read in pack and unpack. S_measure_struct a…
-
Medium max 7.5ALAS2023-2026-3210 1 CVE
Moderate: perl-HTTP-Date security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-14741: parse_date() -- and str2time(), which delegates to it -- used regexes with ambiguous adjacent greedy runs (year/clock/timezone digits and timezone/ASCI…
-
Medium max 9.1ALAS2023-2026-3209 2 CVEs
Moderate: perl-Mojolicious security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-15747: Mojolicious versions from 4.59 before 9.48 for Perl expose a stable representation of the session CSRF token to a BREACH compression oracle. _csrf_toke…
-
Medium max 5.6ALAS2023-2026-3208 2 CVEs
Moderate: jackson-databind security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-83557: DefaultBaseTypeLimitingValidator is the PolymorphicTypeValidator applied automatically whenever @JsonTypeInfo is used without an explicitly configured …
-
Medium max 5.4ALAS2023-2026-3207 1 CVE
Moderate: apache-ivy security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-26032: The PackagerResolver of Apache Ivy is able to download online artifacts and to (re)package them in a format defined by a packager.xml file. This repack…
-
Medium max 7.8ALAS2023-2026-3206 2 CVEs
Moderate: oci-add-hooks security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-42505: Handshakes which used Encrypted Client Hello could be de-anonymized by a passive network observer due to a disclosure of pre-shared key identities in t…
-
Medium max 7.8ALAS2023-2026-3205 2 CVEs
Moderate: docker security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-42505: Handshakes which used Encrypted Client Hello could be de-anonymized by a passive network observer due to a disclosure of pre-shared key identities in t…
-
Medium max 9.8ALAS2023-2026-3203 1 CVE
Moderate: perl-Storable security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-57433: Storable versions before 3.41 for Perl have a signed integer overflow when deserializing a crafted SX_HOOK record. retrieve_hook_common reads a signed …
-
Medium max 6.6ALAS2023-2026-3201 7 CVEs
Moderate: mariadb123 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-61081: Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Performance Schema). Supported versions that are affected …
-
Medium max 6.6ALAS2023-2026-3200 7 CVEs
Moderate: mariadb118 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-61081: Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Performance Schema). Supported versions that are affected …
-
Medium max 6.6ALAS2023-2026-3199 7 CVEs
Moderate: mariadb114 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-61081: Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Performance Schema). Supported versions that are affected …
-
Medium max 6.6ALAS2023-2026-3198 7 CVEs
Moderate: mariadb1011 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-61081: Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Performance Schema). Supported versions that are affected …
-
Medium max 7.1ALAS2023-2026-3194 1 CVE
Moderate: perl-HTTP-Tiny security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-7017: HTTP::Tiny versions before 0.095 for Perl forward credential headers to cross-origin redirect targets. When the server returns a 3xx redirect, `_maybe_r…
-
Medium max 7.8ALAS2023-2026-3180 2 CVEs
Moderate: amazon-ecr-credential-helper security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-42505: Handshakes which used Encrypted Client Hello could be de-anonymized by a passive network observer due to a disclosure of pre-shared key identities in t…
-
Medium max 6.8ALAS2023-2026-3168 1 CVE
Moderate: containerd security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-53495: containerd is an open-source container runtime. Prior to 1.7.35, 2.0.12, 2.2.8, and 2.3.5, containerd on Linux with the CRI plugin enabled can indefini…
-
Medium max 7.5ALAS2023-2026-3160 2 CVEs
Moderate: amazon-ssm-agent security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-78662: Previously, a channel registered in the mux's chanList is not usable until it is established. A malicious peer was able flood the channel's incomingReq…
-
Medium max 6.5ALAS2023-2026-3154 7 CVEs
Moderate: libsoup security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-77680: An algorithmic complexity flaw exists in libsoup's HTTP Range header processing that persists after the CVE-2025-32907 fix. CVE-2025-32907 addressed me…
-
Medium max 7.8ALAS2023-2026-3153 4 CVEs
Moderate: soci-snapshotter security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-85732: oras-go is a Go library for managing OCI artifacts. Prior to 2.6.2, the parseLink function in registry/remote/utils.go accepts an absolute URL from a r…
-
Medium max 7.5ALAS2023-2026-3150 2 CVEs
Moderate: python-urllib3 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-9375: urllib3 version 2.6.3 is vulnerable to a decompression bomb bypass in its streaming API (`preload_content=False`) when using Brotli support. The issue a…
-
Medium max 6.8ALAS2023-2026-3133 2 CVEs
Moderate: awscli-2 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-18654: Key exchange without entity authentication in the EMR SSH helper commands in Amazon AWS CLI before 1.45.28 and AWS CLI v2 before 2.35.3 might allow man…
-
Medium max 8.5ALAS2023-2026-3122 7 CVEs
Moderate: libxml2 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-86144: In xinclude in libxml2 before 2.15.4, xmlXIncludeProcess and xmlXIncludeProcessTree do not propagate parseFlags. This has security relevance for, for e…
-
Medium max 6.5ALAS2023-2026-3115 34 CVEs
Moderate: ImageMagick security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-64685: ImageMagick is free and open-source software used for editing and manipulating digital images. In versions prior to 7.1.2-27, the BGR decoder does not …
-
Medium max 6.5ALAS2023-2026-3096 6 CVEs
Moderate: libssh security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-59850: A flaw was found in libssh. If data packets are processed after a channel is closed, channel data callbacks can be invoked after the associated data ha…
-
Medium max 4.4ALAS2-2026-3949 1 CVE
Moderate: policycoreutils security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-19079: A TOCTOU (Time-of-Check-Time-of-Use) race condition vulnerability was found in the fixfiles script in policycoreutils. When running fixfiles relabel or fi…
-
Medium max 8.5ALAS2-2026-3940 7 CVEs
Moderate: libxml2 security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-86144: In xinclude in libxml2 before 2.15.4, xmlXIncludeProcess and xmlXIncludeProcessTree do not propagate parseFlags. This has security relevance for, for exam…
-
Medium max 6.5ALAS2-2026-3939 34 CVEs
Moderate: ImageMagick security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-86425: ImageMagick before 7.1.2-30 and 6.9.x before 6.9.13-55 contains a heap-use-after-free vulnerability in the Layer method of PerlMagick. An attacker who sup…
-
Medium max 5.3ALAS2023-2026-3091 4 CVEs
Moderate: valkey security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-86227: A weakness has been identified in valkey-io valkey up to 9.0.5/9.1.1. This affects the function kvstoreGetHashtable of the file src/kvstore.c. This man…
-
Medium max 6.5ALAS2023-2026-2081 3 CVEs
Moderate: jackson-databind security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-77310: jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. Prior to versions 2.18.9, 2.21.5, 2…
first Aug 31, 2026