2,033 results · Clear filters · Feed
-
MediumALAS2-2026-3337 0 CVEs
Moderate: yelp security update (Amazon Linux 2)
-
Medium max 9.8ALAS2-2026-3335 5 CVEs
Moderate: qt5-qt3d security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-70072: An issue in Assimp v.6.0.2 allows a remote attacker to cause a denial of service via the FBXConverter.cpp, FBXConverter::ConvertMeshMultiMaterial() compon…
-
Medium max 7.7ALAS2-2026-3333 1 CVE
Moderate: python-mako security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-41205: Mako is a template library written in Python. Prior to 1.3.11, TemplateLookup.get_template() is vulnerable to path traversal when a URI starts with // (e.…
-
Medium max 7.3ALAS2-2026-3329 1 CVE
Moderate: libssh2 security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-7598: A security vulnerability has been detected in libssh2 up to 1.11.1. The impacted element is the function userauth_password of the file src/userauth.c. Such…
-
Medium max 4.0ALAS2-2026-3328 2 CVEs
Moderate: gstreamer1-plugins-good security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-46470: An issue was discovered in GStreamer gst-plugins-good before 1.28.2. When parsing MP4 audio tracks, the isomp4 plugin's qtdemux_audio_caps function does n…
first May 25, 2026 -
Medium max 7.3ALAS2-2026-3327 1 CVE
Moderate: perl-YAML-Syck security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-5089: YAML::Syck versions before 1.38 for Perl has an out-of-bounds read. The base60 (sexagesimal) parsing code in perl_syck.h has a buffer underflow bug in both…
first May 25, 2026 -
Medium max 6.5ALAS2-2026-3326 1 CVE
Moderate: perl-HTTP-Tiny security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-7010: HTTP::Tiny versions before 0.093 for Perl do not validate CRLF in HTTP request lines or control field header values. The unvalidated inputs are the method …
first May 25, 2026 -
Medium max 6.5ALAS2-2026-3325 1 CVE
Moderate: perl-libwww-perl security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-8368: LWP::UserAgent versions before 6.83 for Perl leak Authorization and Proxy-Authorization headers on cross-origin redirects. On a 3xx response, the redirect …
first May 25, 2026 -
Medium max 5.7ALAS2023-2026-1821 2 CVEs
Moderate: python3.12 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-6019: http.cookies.Morsel.js_output() returns an inline <script> snippet and only escapes " for JavaScript string context. It does not neutralize the HTML par…
-
Medium max 7.3ALAS2023-2026-1819 1 CVE
Moderate: perl security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-8376: Buffer overflow in Perl_study_chunk
-
MediumALAS2023-2026-1818 1 CVE
Moderate: sendmail security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-51765: sendmail through at least 8.14.7 allows SMTP smuggling in certain configurations. Remote attackers can use a published exploitation technique to inject…
-
Medium max 8.2ALAS2023-2026-1815 8 CVEs
Moderate: jq security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-43896: jq is a command-line JSON processor. In 1.8.1 and earlier, unbounded recursion in jv_object_merge_recursive() allows a crafted jq program to crash the …
-
Medium max 8.2ALAS2023-2026-1812 1 CVE
Moderate: vorbis-tools security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-34253: A buffer underflow vulnerability has been identified in the ogg123 utility from the vorbis-tools 1.4.3 package in function remotethread in remote.c. Th…
-
Medium max 6.5ALAS2023-2026-1811 2 CVEs
Moderate: mariadb1011 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-3494: In MariaDB server version through 11.8.5, when server audit plugin is enabled with server_audit_events variable configured with QUERY_DCL, QUERY_DDL, or…
-
Medium max 8.2ALAS2023-2026-1808 4 CVEs
Moderate: gnutls security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-5419: The PKCS#7 padding check performed during decryption was not constant-time, potentially leaking information about the padding bytes through timing diffe…
-
Medium max 7.5ALAS2023-2026-1800 1 CVE
Moderate: composer security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-45793: Github Actions issued GITHUB_TOKEN disclosure in GitHub Actions logs
-
Medium max 6.1ALAS2023-2026-1797 1 CVE
Moderate: perl-Template-Toolkit security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-5090: emplate::Plugin::HTML versions through 3.102 for Perl allows HTML and JavaScript to be injected. The html_filter function did not escape single quotes. …
-
Medium max 7.5ALAS2023-2026-1796 1 CVE
Moderate: perl-Crypt-PasswdMD5 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-6659: Crypt::PasswdMD5 versions through 1.42 for Perl generates insecure random values for salts. The built-in rand function is predictable, and unsuitable fo…
-
Medium max 7.5ALAS2023-2026-1795 1 CVE
Moderate: perl-XML-LibXML security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-8177: XML::LibXML versions through 2.0210 for Perl read out-of-bounds heap memory when parsing XML node names containing truncated UTF-8 byte sequences. A nod…
-
MediumALAS2023-2026-1792 0 CVEs
Moderate: credentials-fetcher security update (Amazon Linux 2023)
-
MediumALAS2023-2026-1791 0 CVEs
Moderate: device-mapper-persistent-data security update (Amazon Linux 2023)
-
Medium max 4.0ALAS2023-2026-1787 2 CVEs
Moderate: gstreamer1-plugins-good security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-46470: An issue was discovered in GStreamer gst-plugins-good before 1.28.2. When parsing MP4 audio tracks, the isomp4 plugin's qtdemux_audio_caps function doe…
-
Medium max 2.1ALAS2023-2026-1786 1 CVE
Moderate: python3.13 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-6019: http.cookies.Morsel.js_output() returns an inline <script> snippet and only escapes " for JavaScript string context. It does not neutralize the HTML par…
-
Medium max 2.1ALAS2023-2026-1785 1 CVE
Moderate: python3.9 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-6019: http.cookies.Morsel.js_output() returns an inline <script> snippet and only escapes " for JavaScript string context. It does not neutralize the HTML par…
-
Medium max 8.1ALAS2023-2026-1781 2 CVEs
Moderate: memcached security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-47784: In memcached before 1.6.42, password data for SASL password database authentication has a timing side channel because memcmp is used by sasl_server_use…
-
Medium max 7.3ALAS2023-2026-1779 1 CVE
Moderate: libssh2 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-7598: A security vulnerability has been detected in libssh2 up to 1.11.1. The impacted element is the function userauth_password of the file src/userauth.c. S…
-
Medium max 8.6ALAS2023-2026-1778 8 CVEs
Moderate: libsoup3 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-5119: A flaw was found in libsoup. When establishing HTTPS tunnels through a configured HTTP proxy, sensitive session cookies are transmitted in cleartext wit…
-
Medium max 6.3ALAS2023-2026-1775 1 CVE
Moderate: bouncycastle security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-5588: Use of a Broken or Risky Cryptographic Algorithm vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA bcpkix on all (pkix modules). PKIX draft Comp…
-
Medium max 6.3ALAS2023-2026-1774 5 CVEs
Moderate: python3.14 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-7210: `xml.parsers.expat` and `xml.etree.ElementTree` use insufficient entropy for Expat hash-flooding protection, which allows a crafted XML document to trig…
-
Medium max 4.2ALAS2-2026-3320 2 CVEs
Moderate: openssh security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-35414: OpenSSH before 10.3 mishandles the authorized_keys principals option in uncommon scenarios involving a principals list in conjunction with a Certificate A…
first May 25, 2026 -
Medium max 5.5ALAS2-2026-3305 1 CVE
Moderate: ImageMagick security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-42050: Stack buffer overflow in XTileImage
first May 25, 2026 -
Medium max 7.5ALAS2-2026-3304 3 CVEs
Moderate: nss security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-6772: Incorrect boundary conditions in the Libraries component in NSS. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, and Firefox ESR 140.10. C…
first May 25, 2026 -
Medium max 8.6ALAS2023-2026-1758 6 CVEs
Moderate: libsoup security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-5119: A flaw was found in libsoup. When establishing HTTPS tunnels through a configured HTTP proxy, sensitive session cookies are transmitted in cleartext wit…
first May 25, 2026 -
Medium max 4.2ALAS2023-2026-1745 5 CVEs
Moderate: openssh security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-35414: OpenSSH before 10.3 mishandles the authorized_keys principals option in uncommon scenarios involving a principals list in conjunction with a Certificat…
first May 25, 2026 -
Medium max 6.5ALAS2023-2026-1732 2 CVEs
Moderate: perl-Net-CIDR-Lite security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-45191: Net::CIDR::Lite versions before 0.24 for Perl does not properly consider extraneous zero characters in CIDR mask values, which may allow IP ACL bypass.…
first May 25, 2026 -
Medium max 4.8ALAS2023-2026-1772 1 CVE
Moderate: capstone security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-68114: Capstone is a disassembly framework. In versions 6.0.0-Alpha5 and prior, an unchecked vsnprintf return in SStream_concat lets a malicious cs_opt_mem.vs…
-
Medium max 7.3ALAS2023-2026-1769 1 CVE
Moderate: perl-YAML-Syck security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-5089: YAML::Syck versions before 1.38 for Perl has an out-of-bounds read. The base60 (sexagesimal) parsing code in perl_syck.h has a buffer underflow bug in b…
-
Medium max 6.5ALAS2023-2026-1765 1 CVE
Moderate: perl-HTTP-Tiny security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-7010: HTTP::Tiny versions before 0.093 for Perl do not validate CRLF in HTTP request lines or control field header values. The unvalidated inputs are the meth…
-
Medium max 6.5ALAS2023-2026-1764 1 CVE
Moderate: perl-libwww-perl security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-8368: LWP::UserAgent versions before 6.83 for Perl leak Authorization and Proxy-Authorization headers on cross-origin redirects. On a 3xx response, the redire…
-
Medium max 5.3ALAS2023-2026-1759 1 CVE
Moderate: libssh security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-3731: A weakness has been identified in libssh up to 0.11.3. The impacted element is the function sftp_extensions_get_name/sftp_extensions_get_data of the fil…