4,948 results · Feed
-
High max 7.5ALAS2023-2026-1915 1 CVE
Important: haproxy security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-55204: HAProxy through 3.4.0, fixed in commit 9a6d1fe, contains a null pointer dereference vulnerability in hpack_dht_insert() within src/hpack-tbl.c that fai…
first Jul 6, 2026 -
Medium max 8.1ALAS2023-2026-1914 1 CVE
Moderate: ImageMagick security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-56379: ImageMagick before 7.1.2-15 and 6.9.13-40 contains a command injection vulnerability in the SVG decoder that allows attackers to inject arbitrary MVG d…
first Jul 6, 2026 -
High max 6.9ALAS2023-2026-1913 3 CVEs
Important: expat security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-56407: libexpat before 2.8.2 has an integer overflow in doProlog that is related to storeEntityValue and entity textLen. CVE-2026-56406: libexpat before 2.8.2…
first Jul 6, 2026 -
Low max 2.9ALAS2023-2026-1912 1 CVE
Low: gnupg2 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-57062: CMS (Cryptographic Message Syntax) parsing in gpgsm in GnuPG through 2.5.20 mishandles the CMS format for AES-GCM because aes-ICVlen is supposed to be …
first Jul 6, 2026 -
Medium max 7.0ALAS2023-2026-1911 1 CVE
Moderate: libxml2 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-6653: Use After Free in libxml2's xmlParseInternalSubset from GNOME libxml2 version 2.9.11 to 2.11.0 allows a remote attacker to cause a denial-of-service via…
first Jul 6, 2026 -
High max 8.2ALAS2023-2026-1910 7 CVEs
Important: python3.13 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-9669: bz2.BZ2Decompressor objects could be reused after a decompression error. If an application caught the resulting OSError and retried with the same decomp…
first Jul 6, 2026 -
Medium max 7.5ALAS2023-2026-1909 3 CVEs
Moderate: containerd security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-42507: When returning errors, functions in the net/textproto package would include its input as part of the error. This might allow an attacker to inject misl…
first Jul 6, 2026 -
Medium max 7.5ALAS2023-2026-1908 3 CVEs
Moderate: nerdctl security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-42507: When returning errors, functions in the net/textproto package would include its input as part of the error. This might allow an attacker to inject misl…
first Jul 6, 2026 -
Medium max 7.4ALAS2023-2026-1905 1 CVE
Moderate: aws-nitro-tpm-tools security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-4428: A logic error in CRL distribution point validation in AWS-LC before 1.71.0 causes partitioned CRLs to be incorrectly rejected as out of scope, which all…
first Jul 6, 2026 -
Medium max 5.5ALAS2023-2026-1904 35 CVEs
Moderate: wireshark security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-9759: ROHC protocol dissector crash in Wireshark 4.6.0 to 4.6.5 and 4.4.0 to 4.4.15 allows denial of service CVE-2026-7379: Memory leak in sharkd 4.6.0 to 4.6…
first Jul 6, 2026 -
High max 7.8ALAS2023-2026-1903 2 CVEs
Important: sqlite security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-11824: SQLite before 3.53.2 contains a heap-based buffer overflow vulnerability in the FTS5 full-text search extension that allows attackers to cause a crash …
first Jul 6, 2026 -
High max 9.6ALAS2023-2026-1902 9 CVEs
Important: ecs-init security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-42507: When returning errors, functions in the net/textproto package would include its input as part of the error. This might allow an attacker to inject misl…
first Jul 6, 2026 -
High max 7.5ALAS2023-2026-1901 4 CVEs
Important: docker security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-42507: When returning errors, functions in the net/textproto package would include its input as part of the error. This might allow an attacker to inject misl…
first Jul 6, 2026 -
High max 6.9ALAS2023-2026-1900 1 CVE
Important: expat security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-56132: In libexpat before 2.8.2, there is a heap-based buffer overflow in doProlog in xmlparse.c because scaffold backing array reallocation is mishandled whe…
first Jul 6, 2026 -
High max 8.0ALAS2023-2026-1899 1 CVE
Important: samba security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-3012: If the certificate auto-enrollment GPO is enabled on domain members (both in Samba's smb.conf and using Windows GPME tool), a CA certificate may be fetc…
first Jul 6, 2026 -
Medium max 5.0ALAS2023-2026-1898 1 CVE
Moderate: opensc security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-10275: A flaw has been found in OpenSC up to 0.26.1. This affects the function test_kpgen_certwrite of the file src/tools/pkcs11-tool.c of the component pkcs1…
first Jun 22, 2026 -
High max 9.8ALAS2-2026-3323 19 CVEs
Important: amazon-cloudwatch-agent security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-42499: Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322. CVE-2026-42154: Prometheus is an open-sourc…
first May 25, 2026 -
High max 9.8ALAS2023-2026-1747 19 CVEs
Important: amazon-cloudwatch-agent security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-42499: Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322. CVE-2026-42154: Prometheus is an open-so…
first May 25, 2026 -
MediumALAS2023-2026-1906 0 CVEs
Moderate: ecs-init security update (Amazon Linux 2023)
-
High max 9.8ALAS2023-2026-1746 128 CVEs
Important: kernel6.18 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-53080: In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_fw: fix NULL dereference of "old" filters before change() CVE-2026-4…
first May 25, 2026 -
High max 8.8ALAS2023-2026-1491 21 CVEs
Important: kernel security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-52945: In the Linux kernel, the following vulnerability has been resolved: Revert "wireguard: device: enable threaded NAPI" CVE-2026-23273: In the Linux kerne…
first Mar 16, 2026 -
Medium max 7.5ALAS2023-2026-1489 4 CVEs
Moderate: kernel6.12 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-52945: In the Linux kernel, the following vulnerability has been resolved: Revert "wireguard: device: enable threaded NAPI" CVE-2026-23390: In the Linux kerne…
first Mar 16, 2026 -
Critical max 9.8ALAS2-2026-3494 1 CVE
Critical: rclone security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-49980: Rclone is a command-line program to sync files and directories to and from different cloud storage providers. From 1.46.0 until 1.74.3, rclone rcd --rc-se…
-
Critical max 9.8ALAS2023-2026-1907 1 CVE
Critical: rclone security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-49980: Rclone is a command-line program to sync files and directories to and from different cloud storage providers. From 1.46.0 until 1.74.3, rclone rcd --rc…
-
High max 7.5ALAS2023-2026-1611 7 CVEs
Important: ImageMagick security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-56370: ImageMagick before 7.1.2-19 contains an out-of-bounds access vulnerability in ConnectedComponentsImage() when processing connected-components artifacts…
first Apr 27, 2026 -
High max 8.6ALAS2023-2026-1478 32 CVEs
Important: ImageMagick security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-56378: ImageMagick before 7.1.2-15 (and 6.x before 6.9.13-40) contains a heap out-of-bounds read in the PCD coder's DecodeImage loop. A crafted PCD file can t…
first Mar 16, 2026 -
High max 9.4ALAS2023-2026-1897 5 CVEs
Important: containerd security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-53492: Device and host mount injection via CDI annotations in checkpoint metadata (requires CDI enabled on node) NOTE: https://github.com/containerd/container…
first Jun 22, 2026 -
High max 9.8ALAS2023-2025-864 52 CVEs
Important: kernel security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-57947: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_set_pipapo: fix initial map fill CVE-2024-44970: In the Linux kernel,…
first Feb 26, 2025 -
High max 10.0ALAS2-2026-3389 7 CVEs
Important: amazon-cloudwatch-agent security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-46595: Previously, CVE-2024-45337 fixed an authorization bypass for misused ssh server configurations; if any other type of callback is passed other than public …
-
Medium max 10.0ALAS2-2026-3388 1 CVE
Moderate: perl-Storable security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2017-20230: Storable versions before 3.05 for Perl has a stack overflow. The retrieve_hook function stored the length of the class name into a signed integer but in r…
-
High max 9.8ALAS2-2026-3387 1 CVE
Important: perl-GD security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-11526: command injection via 2-arg open() in _make_filehandle
-
High max 6.5ALAS2-2026-3386 1 CVE
Important: cni-plugins security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-25680: Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service.
-
High max 6.5ALAS2-2026-3385 1 CVE
Important: cri-tools security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-25680: Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service.
-
High max 6.5ALAS2-2026-3384 1 CVE
Important: rclone security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-25680: Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service.
-
Medium max 7.5ALAS2-2026-3383 3 CVEs
Moderate: golang security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-42507: When returning errors, functions in the net/textproto package would include its input as part of the error. This might allow an attacker to inject mislead…
-
Medium max 7.5ALAS2-2026-3382 3 CVEs
Moderate: golist security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-42507: When returning errors, functions in the net/textproto package would include its input as part of the error. This might allow an attacker to inject mislead…
-
Medium max 8.8ALAS2-2026-3381 16 CVEs
Moderate: webkitgtk4 security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-43660: A validation issue was addressed with improved logic. This issue is fixed in Safari 26.5, iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Ta…
-
HighALAS2-2026-3380 1 CVE
Important: kernel security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-31692: In the Linux kernel, the following vulnerability has been resolved: rtnetlink: add missing netlink_ns_capable() check for peer netns
-
Medium max 9.8ALAS2-2026-3379 11 CVEs
Moderate: httpd security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-44631: Buffer Underwrite vulnerability in Apache HTTP Server on crafted regular expressions in the configuration. This issue affects Apache HTTP Server: from 2.4…
-
Medium max 4.7ALAS2-2026-3378 1 CVE
Moderate: amazon-ssm-agent security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-41506: go-git is an extensible git implementation library written in pure Go. Prior to versions 5.18.0 and 6.0.0-alpha.2, go-git may leak HTTP authentication cre…