4,948 results · Feed
-
Low max 6.8ALAS2-2026-3177 1 CVE
Low: thunderbird security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-25727: time provides date and time handling in Rust. From 0.3.6 to before 0.3.47, when user-provided input is provided to any type that parses with the RFC 2822 …
first Mar 2, 2026 -
Medium max 6.5ALAS2-2026-3176 1 CVE
Moderate: vsftpd security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-14242: A flaw was found in vsftpd. This vulnerability allows a denial of service (DoS) via an integer overflow in the ls command parameter parsing, triggered by …
first Mar 2, 2026 -
High max 8.5ALAS2023-2026-1471 2 CVEs
Important: valkey security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-21863: Valkey is a distributed key-value database. Prior to versions 9.0.2, 8.1.6, 8.0.7, and 7.2.12, a malicious actor with access to the Valkey clusterbus p…
first Mar 2, 2026 -
High max 8.8ALAS2023-2026-1469 3 CVEs
Important: firefox security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-2447: Heap buffer overflow in libvpx. This vulnerability affects Firefox < 147.0.4, Firefox ESR < 140.7.1, Firefox ESR < 115.32.1, Thunderbird < 140.7.2, and …
first Mar 2, 2026 -
Medium max 7.0ALAS2023-2026-1467 1 CVE
Moderate: python-jwt security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-45768: pyjwt v2.10.1 was discovered to contain weak encryption.
first Mar 2, 2026 -
High max 8.8ALAS2023-2026-1466 3 CVEs
Important: nodejs24 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-24842: node-tar,a Tar for Node.js, contains a vulnerability in versions prior to 7.5.7 where the security check for hardlink entries uses different path resol…
first Mar 2, 2026 -
High max 8.8ALAS2023-2026-1465 3 CVEs
Important: nodejs22 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-23950: node-tar,a Tar for Node.js, has a race condition vulnerability in versions up to and including 7.5.3. This is due to an incomplete handling of Unicode …
first Mar 2, 2026 -
High max 8.8ALAS2023-2026-1464 2 CVEs
Important: nodejs20 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-23950: node-tar,a Tar for Node.js, has a race condition vulnerability in versions up to and including 7.5.3. This is due to an incomplete handling of Unicode …
first Mar 2, 2026 -
Medium max 8.3ALAS2023-2026-1463 1 CVE
Moderate: libpng security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-25646: libpng: An out-of-bounds read vulnerability exists in the png_set_quantize() API function. When the function is called with no histogram and the number…
first Mar 2, 2026 -
Low max 6.2ALAS2023-2026-1462 1 CVE
Low: aide security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-54409: AIDE is an advanced intrusion detection environment. From versions 0.13 to 0.19.1, there is a null pointer dereference vulnerability in AIDE. An attack…
first Mar 2, 2026 -
High max 6.5ALAS2023-2026-1461 1 CVE
Important: libssh security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-0966: libssh: Buffer underflow in ssh_get_hexa() on invalid input
first Mar 2, 2026 -
High max 6.5ALAS2023-2026-1460 3 CVEs
Important: libsoup3 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-2369: libsoup: heap buffer overflow in soup_content_sniffer_sniff CVE-2026-1539: A flaw was found in the libsoup HTTP library that can cause proxy authenticat…
first Mar 2, 2026 -
High max 8.7ALAS2023-2026-1459 2 CVEs
Important: jpegxl security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-1837: A specially-crafted file can cause libjxl's decoder to write pixel data to uninitialized unallocated memory. Soon after that data from another uninitial…
first Mar 2, 2026 -
High max 8.8ALAS2023-2026-1458 4 CVEs
Important: postgresql16 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-2006: Missing validation of multibyte character length in PostgreSQL text manipulation allows a database user to issue crafted queries that achieve a buffer o…
first Mar 2, 2026 -
High max 8.8ALAS2023-2026-1457 4 CVEs
Important: postgresql17 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-2006: Missing validation of multibyte character length in PostgreSQL text manipulation allows a database user to issue crafted queries that achieve a buffer o…
first Mar 2, 2026 -
High max 8.8ALAS2023-2026-1456 4 CVEs
Important: postgresql15 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-2006: Missing validation of multibyte character length in PostgreSQL text manipulation allows a database user to issue crafted queries that achieve a buffer o…
first Mar 2, 2026 -
High max 8.2ALAS2023-2026-1455 48 CVEs
Important: kernel6.12 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-23145: In the Linux kernel, the following vulnerability has been resolved: ext4: fix iloc.bh leak in ext4_xattr_inode_update_ref CVE-2026-23144: In the Linux …
first Mar 2, 2026 -
High max 8.7ALAS2023-2026-1454 12 CVEs
Important: freerdp security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-24684: Client side issue with FreeRDP CVE-2026-24683: Client side issue with FreeRDP CVE-2026-24682: Client side issue with FreeRDP CVE-2026-24681: Client sid…
first Mar 2, 2026 -
High max 7.7ALAS2023-2026-1453 1 CVE
Important: munge security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-25506: MUNGE is an authentication service for creating and validating user credentials. From 0.5 to 0.5.17, local attacker can exploit a buffer overflow vulne…
first Mar 2, 2026 -
High max 8.6ALAS2023-2026-1452 1 CVE
Important: python-pillow security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-25990: Pillow is a Python imaging library. From 10.3.0 to before 12.1.1, n out-of-bounds write may be triggered when loading a specially crafted PSD image. Th…
first Mar 2, 2026 -
Medium max 5.6ALAS2023-2026-1451 1 CVE
Moderate: evolution-data-server security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-2604: The Evolution backend server exposes the D-Bus service org.gnome.evolution.dataserver.AddressBook, that can be used in order to manage contacts. A Flatp…
first Mar 2, 2026 -
Medium max 7.8ALAS2023-2026-1450 10 CVEs
Moderate: wireshark security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-0962: SOME/IP-SD protocol dissector crash in Wireshark 4.6.0 to 4.6.2 and 4.4.0 to 4.4.12 allows denial of service CVE-2026-0961: BLF file parser crash in Wir…
first Mar 2, 2026 -
Medium max 8.2ALAS2023-2026-1449 1 CVE
Moderate: javapackages-bootstrap security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-24400: AssertJ provides Fluent testing assertions for Java and the Java Virtual Machine (JVM). Starting in version 1.4.0 and prior to version 3.27.7, an XML E…
first Mar 2, 2026 -
Medium max 8.2ALAS2023-2026-1448 1 CVE
Moderate: assertj-core security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-24400: AssertJ provides Fluent testing assertions for Java and the Java Virtual Machine (JVM). Starting in version 1.4.0 and prior to version 3.27.7, an XML E…
first Mar 2, 2026 -
Medium max 6.0ALAS2023-2026-1447 5 CVEs
Moderate: python3.11 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-1299: The email module, specifically the "BytesGenerator" class, didn't properly quote newlines for email headers when serializing an email message allowing f…
first Mar 2, 2026 -
Low max 6.2ALAS2023-2026-1446 1 CVE
Low: libxml2 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-1757: A flaw was identified in the interactive shell of the xmllint utility, part of the libxml2 project, where memory allocated for user input is not properl…
first Mar 2, 2026 -
Low max 6.8ALAS2023-2026-1445 1 CVE
Low: firefox security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-25727: time provides date and time handling in Rust. From 0.3.6 to before 0.3.47, when user-provided input is provided to any type that parses with the RFC 28…
first Mar 2, 2026 -
Medium max 6.5ALAS2-2025-3019 3 CVEs
Moderate: libtiff security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-8961: A vulnerability was identified in LibTIFF 4.7.0. This issue affects the function May of the file tiffcrop.c of the component tiffcrop. The manipulation lea…
first Oct 14, 2025 -
Medium max 7.5ALAS2023-2025-1328 2 CVEs
Moderate: runc security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-61729: Within HostnameError.Error(), when constructing an error string, there is no limit to the number of hosts that will be printed out. Furthermore, the er…
first Jan 7, 2026 -
Medium max 5.5ALAS2023-2025-1212 4 CVEs
Moderate: libtiff security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-8961: A vulnerability was identified in LibTIFF 4.7.0. This issue affects the function May of the file tiffcrop.c of the component tiffcrop. The manipulation …
first Oct 14, 2025 -
Medium max 9.1ALAS2023-2026-1443 6 CVEs
Moderate: ecs-init security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-68121: crypto/tls: Config.Clone copies automatically generated session ticket keys, session resumption does not account for the expiration of full certificate…
first Feb 16, 2026 -
Low max 4.3ALAS2-2026-3175 2 CVEs
Low: openssh security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-61984: ssh in OpenSSH before 10.1 allows control characters in usernames that originate from certain possibly untrusted sources, potentially leading to code exec…
first Feb 16, 2026 -
LowALAS2-2026-3174 0 CVEs
Low: amazon-cloudwatch-agent security update (Amazon Linux 2)
first Feb 16, 2026 -
Medium max 9.1ALAS2-2026-3146 4 CVEs
Moderate: nerdctl security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-68121: crypto/tls: Config.Clone copies automatically generated session ticket keys, session resumption does not account for the expiration of full certificate ch…
first Feb 5, 2026 -
Medium max 9.1ALAS2-2026-3138 4 CVEs
Moderate: golist security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-68121: crypto/tls: Config.Clone copies automatically generated session ticket keys, session resumption does not account for the expiration of full certificate ch…
first Feb 5, 2026 -
Medium max 9.1ALAS2-2026-3137 4 CVEs
Moderate: golang-github-cpuguy83-go-md2man security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-68121: crypto/tls: Config.Clone copies automatically generated session ticket keys, session resumption does not account for the expiration of full certificate ch…
first Feb 5, 2026 -
Medium max 9.1ALAS2-2026-3135 4 CVEs
Moderate: cri-tools security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-68121: crypto/tls: Config.Clone copies automatically generated session ticket keys, session resumption does not account for the expiration of full certificate ch…
first Feb 5, 2026 -
Medium max 9.1ALAS2-2026-3134 4 CVEs
Moderate: cni-plugins security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-68121: crypto/tls: Config.Clone copies automatically generated session ticket keys, session resumption does not account for the expiration of full certificate ch…
first Feb 5, 2026 -
LowALAS2023-2026-1442 0 CVEs
Low: amazon-cloudwatch-agent security update (Amazon Linux 2023)
first Feb 16, 2026 -
Medium max 9.1ALAS2023-2026-1421 4 CVEs
Moderate: soci-snapshotter security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-68121: crypto/tls: Config.Clone copies automatically generated session ticket keys, session resumption does not account for the expiration of full certificate…
first Feb 5, 2026