4,948 results · Feed
-
High max 9.5ALAS2023-2026-1733 11 CVEs
Important: php8.5 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-7568: Signed integer overflow in metaphone() CVE-2026-7263: DoS attack via DOMNode::C14N(). In DOMNode::C14N(), improper removal of a xmlns libxml2 attribute …
first May 25, 2026 -
High max 9.5ALAS2023-2026-1726 9 CVEs
Important: php8.4 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-7568: Signed integer overflow in metaphone() CVE-2026-7263: DoS attack via DOMNode::C14N(). In DOMNode::C14N(), improper removal of a xmlns libxml2 attribute …
first May 25, 2026 -
High max 10.0
Important: tomcat10 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-55957: Missing Critical Step in Authentication vulnerability in Apache Tomcat when the JNDIRealm was configured to authenticate binds using GSSAPI allowed att…
first Mar 26, 2025 -
High max 7.5ALAS2023-2026-1923 3 CVEs
Important: rclone security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-46604: The TIFF decoder can panic when decoding an invalid image with an out-of-bounds strip offset. CVE-2026-46602: The TIFF decoder does not set a limit on …
first Jul 6, 2026 -
High max 7.8ALAS2-2026-3801 1 CVE
Important: kernel security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-43499: In the Linux kernel, the following vulnerability has been resolved: rtmutex: Use waiter::task instead of current in remove_waiter()
-
High max 7.5ALAS2-2026-3799 41 CVEs
Important: virtuoso-opensource security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-61029: An issue in the sqlo_untry component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) via crafted SQL statement…
first Jul 6, 2026 -
LowALAS2023-2026-1927 0 CVEs
Low: cifs-utils security update (Amazon Linux 2023)
first Jul 6, 2026 -
High max 10.0
Important: tomcat9 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-55957: Missing Critical Step in Authentication vulnerability in Apache Tomcat when the JNDIRealm was configured to authenticate binds using GSSAPI allowed att…
first Mar 26, 2025 -
Medium max 5.3ALAS2-2026-3797 2 CVEs
Moderate: qt5-qt3d security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-10232: A weakness has been identified in Assimp up to 6.0.4. Affected by this vulnerability is the function aiNode::~aiNode of the file scene.cpp of the componen…
first Jul 6, 2026 -
High max 7.6ALAS2-2026-3796 1 CVE
Important: 389-ds-base security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-11774: An integer overflow flaw was found in the SASL I/O layer of 389 Directory Server (389-ds-base). In sasl_io_start_packet(), adding sizeof(uint32_t) to a cr…
first Jul 6, 2026 -
High max 9.6ALAS2-2026-3795 38 CVEs
Important: thunderbird security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-56412: libexpat before 2.8.2 does not consider XML_TOK_DATA_CHARS in doCdataSection and thus lacks handler call depth tracking for various calls from within hand…
first Jul 6, 2026 -
High max 7.6ALAS2-2026-3794 1 CVE
Important: ruby security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-42246: Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby. Prior to versions 0.3.10, 0.4.24, 0.5.14, and 0.6.4, a man-in-t…
first Jul 6, 2026 -
Medium max 6.7ALAS2-2026-3793 1 CVE
Moderate: qemu security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-48914: A flaw was found in QEMU's virtio-blk device. The issue arises because the device does not properly validate the size of input descriptors before writing …
first Jul 6, 2026 -
High max 7.8ALAS2-2026-3792 1 CVE
Important: tigervnc security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-50259: A stack-based buffer overflow flaw was found in the X.Org X server and Xwayland. _XkbSetMapChecks() declares a fixed-size stack buffer mapWidths[256] inde…
first Jul 6, 2026 -
High max 8.8ALAS2-2026-3791 3 CVEs
Important: gstreamer-plugins-bad-free security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-52722: A signed integer overflow vulnerability was found in GStreamer's VMnc decoder. A crafted VMnc stream with large cursor dimensions can overflow signed inte…
first Jul 6, 2026 -
Medium max 7.1ALAS2-2026-3790 3 CVEs
Moderate: gstreamer1-plugins-bad-free security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-52722: A signed integer overflow vulnerability was found in GStreamer's VMnc decoder. A crafted VMnc stream with large cursor dimensions can overflow signed inte…
first Jul 6, 2026 -
High max 8.0ALAS2-2026-3789 1 CVE
Important: util-linux security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-53615: Integer Overflow or Wraparound in libblkid/src/partitions/dos.c
first Jul 6, 2026 -
High max 7.6ALAS2-2026-3788 1 CVE
Important: gstreamer1-plugins-good security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-53705: A flaw was found in GStreamer's WavPack audio decoder in gst-plugins-good. When processing a specially crafted WavPack file, an integer overflow in the bu…
first Jul 6, 2026 -
High max 7.6ALAS2-2026-3787 1 CVE
Important: gstreamer-plugins-good security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-53705: A flaw was found in GStreamer's WavPack audio decoder in gst-plugins-good. When processing a specially crafted WavPack file, an integer overflow in the bu…
first Jul 6, 2026 -
Medium max 8.1ALAS2-2026-3786 5 CVEs
Moderate: ImageMagick security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-56379: ImageMagick before 7.1.2-15 and 6.9.13-40 contains a command injection vulnerability in the SVG decoder that allows attackers to inject arbitrary MVG draw…
first Jul 6, 2026 -
Medium max 7.0ALAS2-2026-3785 1 CVE
Moderate: libxml2 security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-6653: Use After Free in libxml2's xmlParseInternalSubset from GNOME libxml2 version 2.9.11 to 2.11.0 allows a remote attacker to cause a denial-of-service via ma…
first Jul 6, 2026 -
Medium max 7.5ALAS2-2026-3497 3 CVEs
Moderate: nerdctl security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-42507: When returning errors, functions in the net/textproto package would include its input as part of the error. This might allow an attacker to inject mislead…
first Jul 6, 2026 -
Medium max 8.2ALAS2-2026-3496 8 CVEs
Moderate: jq security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-47770: The vulnerability is an unbounded recursion in jv_equal() and jv_cmp() that causes a stack overflow when processing deeply nested JSON structures during e…
first Jul 6, 2026 -
High max 6.9ALAS2-2026-3495 1 CVE
Important: expat security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-56132: In libexpat before 2.8.2, there is a heap-based buffer overflow in doProlog in xmlparse.c because scaffold backing array reallocation is mishandled when t…
first Jul 6, 2026 -
High max 9.0ALAS2-2026-3493 3 CVEs
Important: samba security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-4480: Samba passes the client-controlled job description string to the command configured with the "print command" setting via the "%J" substitution character wi…
first Jul 6, 2026 -
Medium max 5.0ALAS2-2026-3492 1 CVE
Moderate: opensc security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-10275: A flaw has been found in OpenSC up to 0.26.1. This affects the function test_kpgen_certwrite of the file src/tools/pkcs11-tool.c of the component pkcs11-t…
first Jun 22, 2026 -
MediumALAS2023-2026-1935 1 CVE
Moderate: kernel security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-53080: In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_fw: fix NULL dereference of "old" filters before change()
first Jul 6, 2026 -
MediumALAS2023-2026-1934 1 CVE
Moderate: kernel6.12 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-53080: In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_fw: fix NULL dereference of "old" filters before change()
first Jul 6, 2026 -
Medium max 6.3ALAS2023-2026-1933 5 CVEs
Moderate: python3.9 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-8328: The ftpcp() function in Lib/ftplib.py was not updated when CVE-2021-4189 was fixed. While makepasv() was patched to replace server-supplied PASV host ad…
first Jul 6, 2026 -
High max 7.3ALAS2023-2026-1932 1 CVE
Important: ansible security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-11837: A local privilege escalation vulnerability was found in the ansible.posix authorized_key module. The module's keyfile() function uses os.chown() instea…
first Jul 6, 2026 -
High max 7.8ALAS2023-2026-1931 4 CVEs
Important: python3.12 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-8328: The ftpcp() function in Lib/ftplib.py was not updated when CVE-2021-4189 was fixed. While makepasv() was patched to replace server-supplied PASV host ad…
first Jul 6, 2026 -
High max 7.8ALAS2023-2026-1930 4 CVEs
Important: python3.11 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-8328: The ftpcp() function in Lib/ftplib.py was not updated when CVE-2021-4189 was fixed. While makepasv() was patched to replace server-supplied PASV host ad…
first Jul 6, 2026 -
High max 9.6ALAS2023-2026-1928 42 CVEs
Important: firefox security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-56412: libexpat before 2.8.2 does not consider XML_TOK_DATA_CHARS in doCdataSection and thus lacks handler call depth tracking for various calls from within h…
first Jul 6, 2026 -
High max 7.6ALAS2023-2026-1926 1 CVE
Important: gstreamer1-plugins-good security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-53705: A flaw was found in GStreamer's WavPack audio decoder in gst-plugins-good. When processing a specially crafted WavPack file, an integer overflow in the…
first Jul 6, 2026 -
High max 8.1ALAS2023-2026-1922 2 CVEs
Important: nginx security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-48142: NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_charset_module module. When content is served or proxied through a location block…
first Jul 6, 2026 -
High max 7.8ALAS2023-2026-1921 17 CVEs
Important: nodejs22 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-9679: undici's cookie parser in parseSetCookie percent-decodes cookie values via qsUnescape, turning encoded sequences like %0D%0A, %00, %3B, and %3D into the…
first Jul 6, 2026 -
High max 6.5ALAS2023-2026-1919 2 CVEs
Important: libheif security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-49271: libheif is a HEIF and AVIF file format decoder and encoder. Prior to version 1.22.1, the uncompressed HEIF decoder validates explicit icef compressed-u…
first Jul 6, 2026 -
High max 7.1ALAS2023-2026-1918 3 CVEs
Important: libde265 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-49346: libde265 is an open source implementation of the h.265 video codec. Prior to version 1.1.0, a crafted H.265 bitstream with large SPS dimensions and 16-…
first Jul 6, 2026 -
High max 8.8ALAS2023-2026-1917 6 CVEs
Important: gstreamer1-plugins-bad-free security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-53702: A stack buffer overflow flaw was found in the GStreamer H.265 codec parser library (gst-plugins-bad). When parsing a buffering period SEI message, the …
first Jul 6, 2026 -
High max 8.0ALAS2023-2026-1916 1 CVE
Important: util-linux security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-53615: Integer Overflow or Wraparound in libblkid/src/partitions/dos.c
first Jul 6, 2026