2,033 results · Clear filters · Feed
-
Medium max 5.3ALAS2023-2026-1630 1 CVE
Moderate: clamav1.4 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-20031: A vulnerability in the HTML Cascading Style Sheets (CSS) module of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service …
first Apr 27, 2026 -
Medium max 7.5ALAS2023-2026-1624 2 CVEs
Moderate: perl-Net-CIDR-Lite security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-40199: Net::CIDR::Lite versions before 0.23 for Perl mishandles IPv4 mapped IPv6 addresses, which may allow IP ACL bypass. _pack_ipv6() includes the sentinel …
first Apr 27, 2026 -
Medium max 9.2ALAS2023-2026-1609 3 CVEs
Moderate: nodejs24 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-29786: node-tar is a full-featured Tar for Node.js. Prior to version 7.5.10, tar can be tricked into creating a hardlink that points outside the extraction di…
first Apr 27, 2026 -
Medium max 6.0ALAS2023-2026-1600 3 CVEs
Moderate: python3.13 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-4224: When an Expat parser with a registered ElementDeclHandler parses an inline document type definition containing a deeply nested content model a C stack o…
first Apr 27, 2026 -
Medium max 9.8ALAS2023-2026-1599 8 CVEs
Moderate: golist security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-32289: Context was not properly tracked across template branches for JS template literals, leading to possibly incorrect escaping of content. This could cause…
first Apr 27, 2026 -
Medium max 9.8ALAS2023-2026-1598 8 CVEs
Moderate: credentials-fetcher security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-32289: Context was not properly tracked across template branches for JS template literals, leading to possibly incorrect escaping of content. This could cause…
first Apr 27, 2026 -
Medium max 5.9ALAS2023-2026-1597 1 CVE
Moderate: cifs-utils security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-2312: A flaw was found in cifs-utils. When trying to obtain Kerberos credentials, the cifs.upcall program from the cifs-utils package makes an upcall to the w…
first Apr 27, 2026 -
Medium max 9.1ALAS2023-2026-1595 1 CVE
Moderate: tomcat-native security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-29145: CLIENT_CERT authentication does not fail as expected for some scenarios when soft fail is disabled vulnerability in Apache Tomcat, Apache Tomcat Native…
first Apr 27, 2026 -
Medium max 7.2ALAS2023-2026-1588 1 CVE
Moderate: python3.13-tornado security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-35536: In Tornado before 6.5.5, cookie attribute injection could occur because the domain, path, and samesite arguments to .RequestHandler.set_cookie were not…
first Apr 27, 2026 -
Medium max 7.2ALAS2023-2026-1587 1 CVE
Moderate: python-tornado security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-35536: In Tornado before 6.5.5, cookie attribute injection could occur because the domain, path, and samesite arguments to .RequestHandler.set_cookie were not…
first Apr 13, 2026 -
Medium max 5.3ALAS2-2026-3276 1 CVE
Moderate: clamav1.4 security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-20031: A vulnerability in the HTML Cascading Style Sheets (CSS) module of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (Do…
first Apr 27, 2026 -
Medium max 7.5ALAS2-2026-3274 3 CVEs
Moderate: openssl security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-28390: Possible NULL dereference when processing CMS KeyTransportRecipientInfo CVE-2026-28389: Possible NULL dereference when processing CMS KeyAgreeRecipientInf…
first Apr 27, 2026 -
Medium max 6.5ALAS2-2026-3270 9 CVEs
Moderate: webkitgtk4 security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-28871: A logic issue was addressed with improved checks. This issue is fixed in Safari 26.4, iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Tahoe …
first Apr 27, 2026 -
Medium max 5.1ALAS2-2026-3266 1 CVE
Moderate: libpng security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-34757: Use-after-free in png_set_PLTE, png_set_tRNS and png_set_hIST in libpng before 1.6.57. Passing a pointer returned by the corresponding getter back into th…
first Apr 27, 2026 -
Medium max 9.8ALAS2-2026-3260 8 CVEs
Moderate: golist security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-32289: Context was not properly tracked across template branches for JS template literals, leading to possibly incorrect escaping of content. This could cause ac…
first Apr 27, 2026 -
Medium max 6.8ALAS2-2026-3253 1 CVE
Moderate: python3-pytest security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-71176: pytest through 9.0.2 on UNIX relies on directories with the /tmp/pytest-of-{user} name pattern, which allows local users to cause a denial of service or p…
first Apr 13, 2026 -
Medium max 5.1ALAS2-2026-3250 1 CVE
Moderate: gstreamer-plugins-good security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-1940: An out-of-bounds read in the WAV parser that can cause crashes for certain input files.
first Apr 13, 2026 -
Medium max 6.9ALAS2-2026-3247 2 CVEs
Moderate: libvncserver security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-32854: LibVNCServer versions 0.9.15 and prior (fixed in commit dc78dee) contain null pointer dereference vulnerabilities in the HTTP proxy handlers within httpPr…
-
Medium max 7.1ALAS2-2026-3246 3 CVEs
Moderate: rust security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-33056: tar-rs is a tar archive reading/writing library for Rust. In versions 0.4.44 and below, when unpacking a tar archive, the tar crate's unpack_dir function …
-
Medium max 6.5ALAS2-2026-3239 7 CVEs
Moderate: freerdp security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-31897: FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.24.0, there is an out-of-bounds read in freerdp_bitmap_decompress_planar when …
-
Medium max 8.5ALAS2-2026-3231 1 CVE
Moderate: tigervnc security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-34352: In TigerVNC before 1.16.2, Image.cxx in x0vncserver allows other users to observe or manipulate the screen contents, or cause an application crash, becaus…
-
Medium max 5.1ALAS2023-2026-1579 1 CVE
Moderate: gstreamer1-plugins-good security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-1940: An out-of-bounds read in the WAV parser that can cause crashes for certain input files.
-
Medium max 7.5ALAS2023-2026-1575 3 CVEs
Moderate: oci-add-hooks security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-27142: Actions which insert URLs into the content attribute of HTML meta tags are not escaped. This can allow XSS if the meta tag also has an http-equiv attri…
-
Medium max 7.5ALAS2023-2026-1574 3 CVEs
Moderate: amazon-ecr-credential-helper security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-27142: Actions which insert URLs into the content attribute of HTML meta tags are not escaped. This can allow XSS if the meta tag also has an http-equiv attri…
-
Medium max 7.1ALAS2023-2026-1568 3 CVEs
Moderate: rust security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-33056: tar-rs is a tar archive reading/writing library for Rust. In versions 0.4.44 and below, when unpacking a tar archive, the tar crate's unpack_dir functi…
-
Medium max 5.1ALAS2023-2026-1567 2 CVEs
Moderate: rust-below security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-33056: tar-rs is a tar archive reading/writing library for Rust. In versions 0.4.44 and below, when unpacking a tar archive, the tar crate's unpack_dir functi…
-
Medium max 5.1ALAS2023-2026-1566 2 CVEs
Moderate: rust-cargo-c security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-33056: tar-rs is a tar archive reading/writing library for Rust. In versions 0.4.44 and below, when unpacking a tar archive, the tar crate's unpack_dir functi…
-
Medium max 5.1ALAS2023-2026-1565 2 CVEs
Moderate: clamav1.5 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-33056: tar-rs is a tar archive reading/writing library for Rust. In versions 0.4.44 and below, when unpacking a tar archive, the tar crate's unpack_dir functi…
-
Medium max 6.8ALAS2023-2026-1562 1 CVE
Moderate: mod_security_crs security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-33691: Whitespace padding in filenames bypasses file upload extension checks NOTE: https://github.com/coreruleset/coreruleset/security/advisories/GHSA-rw5f-9w…
-
Medium max 8.4ALAS2023-2026-1561 1 CVE
Moderate: openexr security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-34544: OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. From v…
-
Medium max 5.1ALAS2023-2026-1550 2 CVEs
Moderate: ImageMagick security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-33536: ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-18 and 6.9.13-43, due to an incorrect ret…
-
Medium max 5.5ALAS2023-2026-1546 1 CVE
Moderate: polkit security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-4897: A flaw was found in polkit. A local user can exploit this by providing a specially crafted, excessively long input to the `polkit-agent-helper-1` setuid…
-
Medium max 7.5ALAS2023-2026-1541 3 CVEs
Moderate: runc security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-27142: Actions which insert URLs into the content attribute of HTML meta tags are not escaped. This can allow XSS if the meta tag also has an http-equiv attri…
-
Medium max 5.3ALAS2023-2026-1539 2 CVEs
Moderate: vim security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-28422: Vim is an open source, command line text editor. Prior to version 9.2.0078, a stack-buffer-overflow occurs in `build_stl_str_hl()` when rendering a sta…
-
Medium max 7.5ALAS2023-2026-1538 1 CVE
Moderate: python-pyasn1 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-30922: pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.3, the `pyasn1` library is vulnerable to a Denial of Service (DoS) attack caused by uncontro…
-
Medium max 8.5ALAS2023-2026-1537 1 CVE
Moderate: tigervnc security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-34352: In TigerVNC before 1.16.2, Image.cxx in x0vncserver allows other users to observe or manipulate the screen contents, or cause an application crash, bec…
-
Medium max 5.3ALAS2023-2026-1529 1 CVE
Moderate: gnutls security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-14831: A flaw was found in GnuTLS. This vulnerability allows a denial of service (DoS) by excessive CPU (Central Processing Unit) and memory consumption via s…
first Mar 30, 2026 -
Medium max 7.1ALAS2023-2026-1527 2 CVEs
Moderate: rust-cargo-c security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-25727: time provides date and time handling in Rust. From 0.3.6 to before 0.3.47, when user-provided input is provided to any type that parses with the RFC 28…
first Mar 30, 2026 -
Medium max 6.5ALAS2023-2026-1520 7 CVEs
Moderate: freerdp security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-31897: FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.24.0, there is an out-of-bounds read in freerdp_bitmap_decompress_planar wh…
first Mar 30, 2026 -
Medium max 7.5ALAS2023-2026-1519 1 CVE
Moderate: python-jwt security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-32597: A missing verification step has been discovered in PyJWT. PyJWT does not validate the crit (Critical) Header Parameter defined in RFC 7515 SS4.1.11. Wh…
first Mar 30, 2026