4,948 results · Feed
-
High max 8.1ALAS2023-2026-1623 1 CVE
Important: mesa security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-40393: In Mesa before 25.3.6 and 26 before 26.0.1, out-of-bounds memory access can occur in WebGPU because the amount of to-be-allocated data depends on an un…
first Apr 27, 2026 -
High max 7.5ALAS2023-2026-1622 1 CVE
Important: glibc security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-4046: The iconv() function in the GNU C Library versions 2.43 and earlier may crash due to an assertion failure when converting inputs from the IBM1390 or IBM…
first Apr 27, 2026 -
High max 9.8ALAS2023-2026-1621 3 CVEs
Important: firefox security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-5734: Memory safety bugs present in Firefox ESR 140.9.0, Thunderbird ESR 140.9.0, Firefox 149.0.1 and Thunderbird 149.0.1. Some of these bugs showed evidence …
first Apr 27, 2026 -
High max 9.1ALAS2023-2026-1620 4 CVEs
Important: python3.11 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-6100: Use-after-free (UAF) was possible in the `lzma.LZMADecompressor`, `bz2.BZ2Decompressor`, and `gzip.GzipFile` when a memory allocation fails with a `Memo…
first Apr 27, 2026 -
High max 9.1ALAS2023-2026-1619 4 CVEs
Important: python3.12 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-6100: Use-after-free (UAF) was possible in the `lzma.LZMADecompressor`, `bz2.BZ2Decompressor`, and `gzip.GzipFile` when a memory allocation fails with a `Memo…
first Apr 27, 2026 -
High max 9.1ALAS2023-2026-1618 3 CVEs
Important: python3.9 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-6100: Use-after-free (UAF) was possible in the `lzma.LZMADecompressor`, `bz2.BZ2Decompressor`, and `gzip.GzipFile` when a memory allocation fails with a `Memo…
first Apr 27, 2026 -
High max 9.1ALAS2023-2026-1617 5 CVEs
Important: python3.14 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-6100: Use-after-free (UAF) was possible in the `lzma.LZMADecompressor`, `bz2.BZ2Decompressor`, and `gzip.GzipFile` when a memory allocation fails with a `Memo…
first Apr 27, 2026 -
Low max 2.9ALAS2023-2026-1616 1 CVE
Low: nodejs22 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-27171: A flaw was found in zlib. An attacker providing specially crafted input to the crc32_combine64 or crc32_combine_gen64 functions could trigger an infini…
first Apr 27, 2026 -
High max 9.8ALAS2023-2026-1615 9 CVEs
Important: docker security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-34040: Moby is an open source container framework. Prior to version 29.3.1, a security vulnerability has been detected that allows attackers to bypass authori…
first Apr 27, 2026 -
High max 7.8ALAS2023-2026-1614 5 CVEs
Important: xorg-x11-server security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-34003: XKB Buffer overflow in CheckKeyTypes() CVE-2026-34002: XKB Out-of-bounds read in CheckModifierMap() CVE-2026-34001: XSYNC Use-after-free in miSyncTrigg…
first Apr 27, 2026 -
High max 7.8ALAS2023-2026-1613 5 CVEs
Important: xorg-x11-server-Xwayland security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-34003: XKB Buffer overflow in CheckKeyTypes() CVE-2026-34002: XKB Out-of-bounds read in CheckModifierMap() CVE-2026-34001: XSYNC Use-after-free in miSyncTrigg…
first Apr 27, 2026 -
High max 8.6ALAS2023-2026-1612 3 CVEs
Important: openexr security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-34588: OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. From 3…
first Apr 27, 2026 -
Low max 6.8ALAS2023-2026-1610 1 CVE
Low: aws-nitro-tpm-tools security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-25727: time provides date and time handling in Rust. From 0.3.6 to before 0.3.47, when user-provided input is provided to any type that parses with the RFC 28…
first Apr 27, 2026 -
Medium max 9.2ALAS2023-2026-1609 3 CVEs
Moderate: nodejs24 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-29786: node-tar is a full-featured Tar for Node.js. Prior to version 7.5.10, tar can be tricked into creating a hardlink that points outside the extraction di…
first Apr 27, 2026 -
Low max 2.9ALAS2023-2026-1608 1 CVE
Low: nodejs20 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-27171: A flaw was found in zlib. An attacker providing specially crafted input to the crc32_combine64 or crc32_combine_gen64 functions could trigger an infini…
first Apr 27, 2026 -
High max 9.8ALAS2023-2026-1605 10 CVEs
Important: nerdctl security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-39984: Sigstore Timestamp Authority is a service for issuing RFC 3161 timestamps. Versions 2.0.5 and below contain an authorization bypass vulnerability in th…
first Apr 27, 2026 -
High max 7.5ALAS2023-2026-1604 1 CVE
Important: openssh security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-35385: In OpenSSH before 10.3, a file downloaded by scp may be installed setuid or setgid, an outcome contrary to some users' expectations, if the download is…
first Apr 27, 2026 -
High max 8.8ALAS2023-2026-1602 1 CVE
Important: maven3.9 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-67030: Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6d780b3378829318ba5c2d29547e0012d…
first Apr 27, 2026 -
High max 9.3ALAS2023-2026-1601 2 CVEs
Important: flatpak security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-34079: Arbitrary file deletion on the host filesystem in Flatpak before 1.16.4. The caching for ld.so removes outdated cache files without properly checking t…
first Apr 27, 2026 -
Medium max 6.0ALAS2023-2026-1600 3 CVEs
Moderate: python3.13 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-4224: When an Expat parser with a registered ElementDeclHandler parses an inline document type definition containing a deeply nested content model a C stack o…
first Apr 27, 2026 -
Medium max 9.8ALAS2023-2026-1599 8 CVEs
Moderate: golist security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-32289: Context was not properly tracked across template branches for JS template literals, leading to possibly incorrect escaping of content. This could cause…
first Apr 27, 2026 -
Medium max 9.8ALAS2023-2026-1598 8 CVEs
Moderate: credentials-fetcher security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-32289: Context was not properly tracked across template branches for JS template literals, leading to possibly incorrect escaping of content. This could cause…
first Apr 27, 2026 -
Medium max 5.9ALAS2023-2026-1597 1 CVE
Moderate: cifs-utils security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-2312: A flaw was found in cifs-utils. When trying to obtain Kerberos credentials, the cifs.upcall program from the cifs-utils package makes an upcall to the w…
first Apr 27, 2026 -
Medium max 9.1ALAS2023-2026-1595 1 CVE
Moderate: tomcat-native security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-29145: CLIENT_CERT authentication does not fail as expected for some scenarios when soft fail is disabled vulnerability in Apache Tomcat, Apache Tomcat Native…
first Apr 27, 2026 -
High max 9.8ALAS2023-2026-1593 9 CVEs
Important: golang security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-32289: Context was not properly tracked across template branches for JS template literals, leading to possibly incorrect escaping of content. This could cause…
first Apr 27, 2026 -
Low max 6.8ALAS2023-2026-1591 1 CVE
Low: librsvg2 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-25727: time provides date and time handling in Rust. From 0.3.6 to before 0.3.47, when user-provided input is provided to any type that parses with the RFC 28…
first Apr 27, 2026 -
High max 5.3ALAS2023-2026-1590 1 CVE
Important: python-jwcrypto security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-39373: JWCrypto implements JWK, JWS, and JWE specifications using python-cryptography. Prior to 1.5.7, an unauthenticated attacker can exhaust server memory b…
first Apr 27, 2026 -
Low max 2.0ALAS2023-2026-1589 1 CVE
Low: python-pip security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-1703: When pip is installing and extracting a maliciously crafted wheel archive, files may be extracted outside the installation directory. The path traversal…
first Apr 27, 2026 -
Medium max 7.2ALAS2023-2026-1588 1 CVE
Moderate: python3.13-tornado security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-35536: In Tornado before 6.5.5, cookie attribute injection could occur because the domain, path, and samesite arguments to .RequestHandler.set_cookie were not…
first Apr 27, 2026 -
Medium max 7.2ALAS2023-2026-1587 1 CVE
Moderate: python-tornado security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-35536: In Tornado before 6.5.5, cookie attribute injection could occur because the domain, path, and samesite arguments to .RequestHandler.set_cookie were not…
first Apr 13, 2026 -
High max 6.5ALAS2-2026-3279 4 CVEs
Important: cups security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-34990: OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.16 and prior, a local unprivileged us…
first Apr 27, 2026 -
High max 7.5ALAS2-2026-3278 9 CVEs
Important: ImageMagick security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-40312: ImageMagick is free and open-source software used for editing and manipulating digital images. In versions below 7.1.2-19, an off by one error in the MSL …
first Apr 27, 2026 -
High max 7.4ALAS2-2026-3277 1 CVE
Important: jetty security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-5795: In Eclipse Jetty, the class JASPIAuthenticator initiates the authentication checks, which set two ThreadLocal variable. Upon returning from the initial che…
first Apr 27, 2026 -
Medium max 5.3ALAS2-2026-3276 1 CVE
Moderate: clamav1.4 security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-20031: A vulnerability in the HTML Cascading Style Sheets (CSS) module of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (Do…
first Apr 27, 2026 -
High max 8.1ALAS2-2026-3275 4 CVEs
Important: edk2 security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-28390: Possible NULL dereference when processing CMS KeyTransportRecipientInfo CVE-2026-28389: Possible NULL dereference when processing CMS KeyAgreeRecipientInf…
first Apr 27, 2026 -
Medium max 7.5ALAS2-2026-3274 3 CVEs
Moderate: openssl security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-28390: Possible NULL dereference when processing CMS KeyTransportRecipientInfo CVE-2026-28389: Possible NULL dereference when processing CMS KeyAgreeRecipientInf…
first Apr 27, 2026 -
High max 7.8ALAS2-2026-3273 4 CVEs
Important: tigervnc security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-34003: XKB Buffer overflow in CheckKeyTypes() CVE-2026-34002: XKB Out-of-bounds read in CheckModifierMap() CVE-2026-34001: XSYNC Use-after-free in miSyncTriggerF…
first Apr 27, 2026 -
High max 7.5ALAS2-2026-3272 1 CVE
Important: glibc security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-4046: The iconv() function in the GNU C Library versions 2.43 and earlier may crash due to an assertion failure when converting inputs from the IBM1390 or IBM139…
first Apr 27, 2026 -
High max 9.8ALAS2-2026-3271 3 CVEs
Important: thunderbird security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-5734: Memory safety bugs present in Firefox ESR 140.9.0, Thunderbird ESR 140.9.0, Firefox 149.0.1 and Thunderbird 149.0.1. Some of these bugs showed evidence of …
first Apr 27, 2026 -
Medium max 6.5ALAS2-2026-3270 9 CVEs
Moderate: webkitgtk4 security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-28871: A logic issue was addressed with improved checks. This issue is fixed in Safari 26.4, iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Tahoe …
first Apr 27, 2026