4,948 results · Feed
-
High max 7.5ALAS2-2026-3308 7 CVEs
Important: golist security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-42499: Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322. CVE-2026-39826: If a trusted template autho…
first May 25, 2026 -
Low max 2.9ALAS2-2026-3306 1 CVE
Low: thunderbird security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-41080: libexpat before 2.7.6 uses insufficient entropy, and thus hash flooding can occur via a crafted XML document.
first May 25, 2026 -
Medium max 5.5ALAS2-2026-3305 1 CVE
Moderate: ImageMagick security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-42050: Stack buffer overflow in XTileImage
first May 25, 2026 -
Medium max 7.5ALAS2-2026-3304 3 CVEs
Moderate: nss security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-6772: Incorrect boundary conditions in the Libraries component in NSS. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, and Firefox ESR 140.10. C…
first May 25, 2026 -
Low max 9.8ALAS2-2026-3303 1 CVE
Low: socat security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-54661: readline.sh in socat through 1.8.0.1 relies on the /tmp/$USER/stderr2 file.
first May 11, 2026 -
Medium max 8.6ALAS2023-2026-1758 6 CVEs
Moderate: libsoup security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-5119: A flaw was found in libsoup. When establishing HTTPS tunnels through a configured HTTP proxy, sensitive session cookies are transmitted in cleartext wit…
first May 25, 2026 -
High max 8.2ALAS2023-2026-1757 7 CVEs
Important: gnutls security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-5260: For a server using an RSA key backed by a PKCS#11 token, a client sending an extremely short premaster secret during an RSA key exchange could trigger a…
first May 25, 2026 -
High max 9.1ALAS2023-2026-1756 10 CVEs
Important: unbound security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-44608: NLnet Labs Unbound 1.14.0 up to and including version 1.25.0 has a locking inconsistency vulnerability that when certain conditions are met (multi-thre…
first May 25, 2026 -
High max 7.5ALAS2023-2026-1755 4 CVEs
Important: bind security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-5950: Avoid unbounded recursion loop CVE-2026-5946: An unauthenticated remote attacker can crash any affected named instance with a single crafted DNS message…
first May 25, 2026 -
High max 7.5ALAS2023-2026-1751 16 CVEs
Important: golang-github-burntsushi-toml security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-42499: Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322. CVE-2026-39826: If a trusted template au…
first May 25, 2026 -
High max 7.5ALAS2023-2026-1750 16 CVEs
Important: golang-github-burntsushi-toml-test security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-42499: Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322. CVE-2026-39826: If a trusted template au…
first May 25, 2026 -
High max 7.5ALAS2023-2026-1749 16 CVEs
Important: golang-github-cpuguy83-md2man security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-42499: Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322. CVE-2026-39826: If a trusted template au…
first May 25, 2026 -
High max 7.7ALAS2023-2026-1748 3 CVEs
Important: valkey security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-25243: Redis is an in-memory data structure store. In versions of redis-server up to 8.6.3, the RESTORE command does not properly validate serialized values. …
first May 25, 2026 -
Medium max 4.2ALAS2023-2026-1745 5 CVEs
Moderate: openssh security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-35414: OpenSSH before 10.3 mishandles the authorized_keys principals option in uncommon scenarios involving a principals list in conjunction with a Certificat…
first May 25, 2026 -
High max 7.5ALAS2023-2026-1744 8 CVEs
Important: credentials-fetcher security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-42499: Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322. CVE-2026-39826: If a trusted template au…
first May 25, 2026 -
High max 7.5ALAS2023-2026-1743 10 CVEs
Important: golang security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-42501: A malicious module proxy can exploit a flaw in the go command's validation of module checksums to bypass checksum database validation. This vulnerabili…
first May 25, 2026 -
High max 7.5ALAS2023-2026-1742 7 CVEs
Important: golist security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-42499: Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322. CVE-2026-39826: If a trusted template au…
first May 25, 2026 -
High max 7.5ALAS2023-2026-1741 7 CVEs
Important: runfinch-finch security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-42499: Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322. CVE-2026-39826: If a trusted template au…
first May 25, 2026 -
High max 7.5ALAS2023-2026-1740 7 CVEs
Important: soci-snapshotter security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-42499: Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322. CVE-2026-39826: If a trusted template au…
first May 25, 2026 -
High max 7.5ALAS2023-2026-1739 7 CVEs
Important: oci-add-hooks security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-42499: Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322. CVE-2026-39826: If a trusted template au…
first May 25, 2026 -
High max 7.5ALAS2023-2026-1738 7 CVEs
Important: amazon-ecr-credential-helper security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-42499: Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322. CVE-2026-39826: If a trusted template au…
first May 25, 2026 -
High max 7.5ALAS2023-2026-1737 7 CVEs
Important: containerd security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-42499: Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322. CVE-2026-39826: If a trusted template au…
first May 25, 2026 -
High max 7.5ALAS2023-2026-1736 7 CVEs
Important: docker security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-42499: Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322. CVE-2026-39826: If a trusted template au…
first May 25, 2026 -
High max 7.5ALAS2023-2026-1735 7 CVEs
Important: nerdctl security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-42499: Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322. CVE-2026-39826: If a trusted template au…
first May 25, 2026 -
High max 7.5ALAS2023-2026-1734 1 CVE
Important: python-twisted security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-42304: The twisted.names module is vulnerable to a Denial of Service (DoS) attack via resource exhaustion during DNS name decompression. A remote, unauthentic…
first May 25, 2026 -
Medium max 6.5ALAS2023-2026-1732 2 CVEs
Moderate: perl-Net-CIDR-Lite security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-45191: Net::CIDR::Lite versions before 0.24 for Perl does not properly consider extraneous zero characters in CIDR mask values, which may allow IP ACL bypass.…
first May 25, 2026 -
High max 9.5ALAS2023-2026-1728 7 CVEs
Important: php8.3 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-7568: Signed integer overflow in metaphone() CVE-2026-7262: NULL pointer dereference in SOAP apache:Map decoder with missing <value> CVE-2026-7261: In PHP ver…
first May 25, 2026 -
High max 9.5ALAS2023-2026-1727 7 CVEs
Important: php8.2 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-7568: Signed integer overflow in metaphone() CVE-2026-7262: NULL pointer dereference in SOAP apache:Map decoder with missing <value> CVE-2026-7261: In PHP ver…
first May 25, 2026 -
High max 9.8ALAS2023-2026-1725 5 CVEs
Important: firefox security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-8094: Other issue in the WebRTC component. This vulnerability was fixed in Firefox ESR 140.10.2. CVE-2026-8092: Memory safety bugs present in Firefox ESR 115.…
first May 25, 2026 -
High max 8.8ALAS2023-2026-1724 1 CVE
Important: mod_http2 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-23918: Double Free and possible RCE vulnerability in Apache HTTP Server with the HTTP/2 protocol. This issue affects Apache HTTP Server: 2.4.66. Users are rec…
first May 25, 2026 -
High max 7.5ALAS2023-2026-1723 6 CVEs
Important: cni-plugins security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-42499: Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322. CVE-2026-39823: CVE-2026-27142 fixed a v…
first May 25, 2026 -
High max 7.5ALAS2023-2026-1722 6 CVEs
Important: git-lfs security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-42499: Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322. CVE-2026-39823: CVE-2026-27142 fixed a v…
first May 25, 2026 -
High max 7.5ALAS2023-2026-1721 6 CVEs
Important: libcap security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-42499: Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322. CVE-2026-39823: CVE-2026-27142 fixed a v…
first May 25, 2026 -
High max 9.8ALAS2023-2026-1720 10 CVEs
Important: httpd security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-34059: Buffer Over-read vulnerability in Apache HTTP Server. This issue affects Apache HTTP Server: through 2.4.66. Users are recommended to upgrade to versio…
first May 25, 2026 -
Low max 4.6ALAS2023-2026-1719 1 CVE
Low: python3.13-pip security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-3219: pip handles concatenated tar and ZIP files as ZIP files regardless of filename or whether a file is both a tar and ZIP file. This behavior could result …
first May 25, 2026 -
Low max 4.6ALAS2023-2026-1718 1 CVE
Low: python3.14-pip security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-3219: pip handles concatenated tar and ZIP files as ZIP files regardless of filename or whether a file is both a tar and ZIP file. This behavior could result …
first May 25, 2026 -
High max 7.5ALAS2023-2026-1717 5 CVEs
Important: rclone security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-42499: Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322. CVE-2026-39823: CVE-2026-27142 fixed a v…
first May 25, 2026 -
High max 7.5ALAS2023-2026-1716 5 CVEs
Important: yq security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-42499: Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322. CVE-2026-39823: CVE-2026-27142 fixed a v…
first May 25, 2026 -
High max 7.5ALAS2023-2026-1715 7 CVEs
Important: runc security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-42499: Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322. CVE-2026-39826: If a trusted template au…
first May 25, 2026 -
High max 8.8ALAS2023-2026-1713 3 CVEs
Important: openexr security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-42217: OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. From v…
first May 25, 2026