4,948 results · Feed
-
High max 7.5ALAS2023-2026-1834 2 CVEs
Important: perl-CryptX security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-41565: CryptX versions before 0.088_001 for Perl have a stack buffer overflow in four AEAD decrypt_verify helpers. The gcm_decrypt_verify, ccm_decrypt_verify,…
first Jun 11, 2026 -
High max 7.8ALAS2-2026-3784 1 CVE
Important: log4j-cve-2021-44228-hotpatch security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-85656: An OS command injection issue in the log4j-cve-2021-44228-hotpatch package in Amazon Linux before 1.3-9 might allow a local user to execute arbitrary comm…
first Jul 6, 2026 -
High max 9.3ALAS2023-2026-2142 19 CVEs
Important: freerdp security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-91964: FreeRDP versions before 3.31.0 contain a heap-based buffer overflow in nego_send_negotiation_request when processing Server Redirection PDU messages wi…
first Sep 14, 2026 -
High max 8.8ALAS2-2026-3929 4 CVEs
Important: kernel security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-81000: In the Linux kernel, the following vulnerability has been resolved: net: tun: bound receive headroom CVE-2026-80844: In the Linux kernel, the following vu…
-
Critical max 9.1ALAS2023-2026-3101 1 CVE
Critical: unbound security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-81642: In NLnet Labs Unbound up to and including 1.26.0, a vulnerability was found in the DNSSEC validator that enables denial of service and possible remote …
-
Critical max 9.1ALAS2-2026-3928 1 CVE
Critical: unbound security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-81642: In NLnet Labs Unbound up to and including 1.26.0, a vulnerability was found in the DNSSEC validator that enables denial of service and possible remote cod…
-
High max 7.8ALAS2-2026-3899 3 CVEs
Important: gstreamer1-plugins-good security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-18649: A flaw was found in the GStreamer gst-plugins-good package. The rtph264depay and rtph265depay RTP depayloader elements do not enforce a maximum size limit…
first Aug 31, 2026 -
High max 7.8ALAS2023-2026-2121 3 CVEs
Important: gstreamer1-plugins-good security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-18649: A flaw was found in the GStreamer gst-plugins-good package. The rtph264depay and rtph265depay RTP depayloader elements do not enforce a maximum size li…
first Aug 31, 2026 -
High max 10.0ALAS2023-2026-2110 172 CVEs
Important: kernel6.12 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-80901: In the Linux kernel, the following vulnerability has been resolved: ipvs: fix the checksum validations CVE-2026-80893: In the Linux kernel, the followi…
first Aug 31, 2026 -
Medium max 6.5ALAS2023-2026-2081 3 CVEs
Moderate: jackson-databind security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-77310: jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. Prior to versions 2.18.9, 2.21.5, 2…
first Aug 31, 2026 -
High max 10.0ALAS2023-2026-2071 293 CVEs
Important: kernel6.18 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-80880: In the Linux kernel, the following vulnerability has been resolved: IB/mlx5: Properly support implicit ODP rereg_mr CVE-2026-80876: In the Linux kernel…
first Aug 31, 2026 -
Low max 9.1ALAS2023-2026-2161 1 CVE
Low: perl-Socket security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-12087: Socket versions before 2.041 for Perl have an out-of-bounds heap read. In Socket.xs, pack_ip_mreq_source() checks the length of its source argument bef…
-
High max 7.5ALAS2023-2026-2160 1 CVE
Important: libsoup security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-15709: A flaw was found in libsoup's WebSocket implementation when using the permessage-deflate extension. The extension's decompression loop (inflate()) proc…
-
High max 7.5ALAS2023-2026-2159 1 CVE
Important: libsoup3 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-15709: A flaw was found in libsoup's WebSocket implementation when using the permessage-deflate extension. The extension's decompression loop (inflate()) proc…
-
High max 7.8ALAS2023-2026-2158 1 CVE
Important: gstreamer1-plugins-base security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-18297: GStreamer OGG File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbit…
-
High max 7.5ALAS2023-2026-2157 11 CVEs
Important: expat security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-76957: libexpat before 2.8.4 lacks handler call depth tracking with custom encoding callbacks. Thus, a use-after-free can occur. NOTE: this is similar to CVE-…
-
High max 9.8ALAS2023-2026-2156 1 CVE
Important: libtiff security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-52490: An issue in libtiff 85f2ac8e0b01cb7db2bbecf4a3b891bdbef67938 allows an attacker to execute arbitrary code via the process_command_opts() function in to…
-
High max 7.5ALAS2023-2026-2155 1 CVE
Important: mod_auth_openidc security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-54789: mod_auth_openidc is an OpenID Certified authentication and authorization module for the Apache 2.x HTTP server that implements the OpenID Connect Relyi…
-
High max 7.1ALAS2023-2026-2154 9 CVEs
Important: openexr security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-68515: OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. In versions before 3.2.…
-
High max 9.3ALAS2023-2026-2153 16 CVEs
Important: bouncycastle security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-8763: In Bouncy Castle for Java before 1.85, Name Constraints bypass via trailing dot in rfc822Name and URI. This issue also affects Bouncy Castle for Java LT…
-
Medium max 6.1ALAS2023-2026-2152 1 CVE
Moderate: composer security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-59944: Package bin path can escape the package directory, bypassing the GHSA-gjfg-22fp-rrxx fix. A malicious or compromised Composer package could, when insta…
-
HighALAS2023-2026-2151 0 CVEs
Important: perl-YAML security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-63676: Backtracking leads to exponential load time in libyaml library.
-
Medium max 4.7ALAS2023-2026-2150 1 CVE
Moderate: jsoup security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-71497: jsoup is a Java library for working with real-world HTML. From 1.14.3 until 1.23.1, jsoup's HTML parser could incorrectly handle a malformed tag name e…
-
High max 7.5ALAS2023-2026-2149 13 CVEs
Important: ecs-service-connect-agent security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-73553: Fixed an authorization bypass when ignore_path_parameters_in_path_matching was enabled, where a path such as /admin;x could bypass an RBAC policy for /…
-
High max 7.5ALAS2023-2026-2148 1 CVE
Important: python-mistune security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-76098: Mistune is a Python Markdown parser with renderers and plugins. Versions 3.3.0 through 3.3.2 are vulnerable to DoS through deeply nested tokens. HTML r…
-
High max 7.6ALAS2023-2026-2146 1 CVE
Important: bluez security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-80186: A stack-based buffer overflow vulnerability exists in BlueZ, the Linux Bluetooth protocol stack. A remote user within Bluetooth radio range can send a …
-
High max 7.5ALAS2023-2026-2145 2 CVEs
Important: ruby3.4 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-80213: An issue was discovered in the resolv gem before 0.7.2 for Ruby. Resolv::DNS::MessageEncoder wrote a DNS label's length into a single octet without che…
-
High max 7.5ALAS2023-2026-2144 2 CVEs
Important: ruby4.0 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-80213: An issue was discovered in the resolv gem before 0.7.2 for Ruby. Resolv::DNS::MessageEncoder wrote a DNS label's length into a single octet without che…
-
Medium max 7.5ALAS2023-2026-2141 1 CVE
Moderate: nodejs24 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-9496: Versions of the package pacote from 11.2.7 are vulnerable to Denial of Service (DoS) via the addGitSha function. An attacker can exploit this vulnerabil…
-
High max 7.8ALAS2023-2026-2140 1 CVE
Important: gstreamer1-plugins-good security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-18298: GStreamer PNG File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitr…
-
High max 7.8ALAS2023-2026-2139 1 CVE
Important: libvirt security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-18917: A flaw was found in libvirt. An unprivileged local user could exploit an integer overflow vulnerability in the NodeGetFreePages RPC handler. This flaw …
-
Medium max 7.8ALAS2023-2026-2138 6 CVEs
Moderate: runc security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-42507: When returning errors, functions in the net/textproto package would include its input as part of the error. This might allow an attacker to inject misl…
-
Low max 4.3ALAS2023-2026-2137 1 CVE
Low: mount-s3 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-53584: libgit2 Submodule path traversal
-
High max 9.8ALAS2023-2026-2136 9 CVEs
Important: openssl security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-75803: Check the tag on EVP_Cipher() finalize: Poly1305 and OCB AEADs CVE-2026-63076: Issue summary: OpenSSL CMP password based protection verification only c…
-
High max 6.1ALAS2023-2026-2135 2 CVEs
Important: samba security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-6949: TSIG packet with name compression can crash DNS CVE-2026-58218: DNS signing DoS via TKEY name cache exhaustion NOTE: https://www.samba.org/samba/securit…
-
Medium max 8.7ALAS2023-2026-2134 2 CVEs
Moderate: libheif security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-62292: libheif: Out-of-bounds read in uncompressed unci tile range slicing CVE-2026-62289: libheif: Integer underflow in Fraction constructor via double clap …
-
High max 7.5ALAS2023-2026-2133 1 CVE
Important: rsyslog security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-78002: A flaw was found in rsyslog. An unauthenticated remote attacker can trigger a heap buffer overflow in the RainerScript `replace()` function by sending …
-
Medium max 9.8ALAS2023-2026-2132 15 CVEs
Moderate: curl security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-9547: When a libcurl-based application performs transfers via SCP:// or SFTP:// and utilizes the CURLOPT_SSH_KEYFUNCTION callback, it may silently accept an u…
-
Medium max 7.8ALAS2023-2026-2129 4 CVEs
Moderate: nerdctl security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-47262: Memory exhaustion DoS causing OOM kill of containerd process NOTE: https://github.com/containerd/containerd/security/advisories/GHSA-jpcc-p29g-p8mq CVE…
first Aug 31, 2026 -
High max 8.7ALAS2023-2026-2128 2 CVEs
Important: libevent security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-63384: Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, libevent has an incorrect integer conversion in event_tagging.c when evtag_…
first Aug 31, 2026