4,948 results · Feed
-
Medium max 9.1ALAS2023-2026-1419 4 CVEs
Moderate: runc security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-68121: crypto/tls: Config.Clone copies automatically generated session ticket keys, session resumption does not account for the expiration of full certificate…
first Feb 16, 2026 -
Medium max 6.3ALAS2023-2026-1411 2 CVEs
Moderate: python3.13-filelock security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-22701: filelock is a platform-independent file lock for Python. Prior to version 3.20.3, a TOCTOU race condition vulnerability exists in the SoftFileLock impl…
first Feb 16, 2026 -
High max 7.1ALAS2023-2026-1410 1 CVE
Important: python3.12-wheel security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-24049: wheel is a command line tool for manipulating Python wheel files, as defined in PEP 427. In versions 0.46.1 and below, the unpack function is vulnerabl…
first Feb 16, 2026 -
High max 8.2ALAS2023-2026-1407 1 CVE
Important: protobuf security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-0994: A denial-of-service (DoS) vulnerability exists in google.protobuf.json_format.ParseDict() in Python, where the max_recursion_depth limit can be bypassed…
first Feb 16, 2026 -
Medium max 6.3ALAS2023-2026-1398 1 CVE
Moderate: log4j security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-68161: The Socket Appender in Apache Log4j Core versions 2.0-beta9 through 2.25.2 does not perform TLS hostname verification of the peer certificate, even whe…
first Feb 16, 2026 -
Medium max 9.1ALAS2023-2026-1376 4 CVEs
Moderate: docker security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-68121: crypto/tls: Config.Clone copies automatically generated session ticket keys, session resumption does not account for the expiration of full certificate…
first Feb 16, 2026 -
High max 9.8ALAS2023-2026-1423 56 CVEs
Important: kernel6.12 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-71157: In the Linux kernel, the following vulnerability has been resolved: RDMA/core: always drop device refcount in ib_del_sub_device_and_put() CVE-2025-7115…
first Feb 5, 2026 -
High max 9.8ALAS2023-2025-1350 54 CVEs
Important: kernel security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-68331: In the Linux kernel, the following vulnerability has been resolved: usb: uas: fix urb unmapping issue when the uas device is remove during ongoing data…
first Jan 7, 2026 -
High max 9.8ALAS2023-2024-784 57 CVEs
Important: kernel security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-58239: In the Linux kernel, the following vulnerability has been resolved: tls: stop recv() if initial process_rx_list gave us non-DATA CVE-2024-27431: In the…
first Dec 5, 2024 -
High max 9.8ALAS2023-2023-356 75 CVEs
Important: kernel security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-6176: A null pointer dereference flaw was found in the Linux kernel API for the cryptographic algorithm scatterwalk functionality. This issue occurs when a us…
first Sep 27, 2023 -
High max 9.8ALAS2023-2023-330 84 CVEs
Important: kernel security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-54303: In the Linux kernel, the following vulnerability has been resolved: bpf: Disable preemption in bpf_perf_event_output CVE-2023-54297: In the Linux kerne…
first Aug 31, 2023 -
High max 9.8ALAS2023-2023-299 55 CVEs
Important: kernel security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-0639: A denial of service vulnerability due to a deadlock was found in sctp_auto_asconf_init in net/sctp/socket.c in the Linux kernel's SCTP subsystem. This f…
first Aug 17, 2023 -
High max 9.8ALAS2023-2023-228 44 CVEs
Important: kernel security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-54269: In the Linux kernel, the following vulnerability has been resolved: SUNRPC: double free xprt_ctxt while still in use CVE-2023-54268: In the Linux kerne…
first Jun 21, 2023 -
High max 9.8ALAS2023-2023-184 50 CVEs
Important: kernel security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-0775: A use-after-free flaw was found in the __ext4_remount in fs/ext4/super.c in ext4 in the Linux kernel. This flaw allows a local user to cause an informat…
first May 25, 2023 -
High max 8.8ALAS2-2023-2264 56 CVEs
Important: kernel security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-54230: In the Linux kernel, the following vulnerability has been resolved: amba: bus: fix refcount leak CVE-2023-54220: In the Linux kernel, the following vulner…
first Sep 27, 2023 -
High max 9.8ALAS2-2023-1932 80 CVEs
Important: kernel security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-54110: In the Linux kernel, the following vulnerability has been resolved: usb: rndis_host: Secure rndis_query check against int overflow CVE-2023-53032: In the …
first Feb 3, 2023 -
LowALAS2-2025-2881 0 CVEs
Low: openssh security update (Amazon Linux 2)
first Jun 4, 2025 -
Low max 4.3ALAS2023-2025-1038 1 CVE
Low: openssh security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-32728: In sshd in OpenSSH before 10.0, the DisableForwarding directive does not adhere to the documentation stating that it disables X11 and agent forwarding.
first Jun 18, 2025 -
High max 8.2
Important: kernel security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-0775: A use-after-free flaw was found in the __ext4_remount in fs/ext4/super.c in ext4 in the Linux kernel. This flaw allows a local user to cause an information…
first Jun 21, 2023 -
High max 7.8ALAS2-2023-2027 18 CVEs
Important: kernel security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-54265: In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix an uninit variable access bug in __ip6_make_skb() CVE-2023-53623: In the Lin…
first Apr 27, 2023 -
High max 8.8ALAS2-2023-1987 44 CVEs
Important: kernel security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-7324: In the Linux kernel, the following vulnerability has been resolved: scsi: ses: Fix possible addl_desc_ptr out-of-bounds accesses CVE-2023-7192: kernel: ref…
first Mar 17, 2023 -
High max 9.8ALAS2-2022-1876 34 CVEs
Important: kernel security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2022-50884: In the Linux kernel, the following vulnerability has been resolved: drm: Prevent drm_copy_field() to attempt copying a NULL pointer CVE-2022-50733: In the…
first Oct 31, 2022 -
High max 7.8ALAS2-2025-2837 7 CVEs
Important: kernel security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-53019: In the Linux kernel, the following vulnerability has been resolved: net: mdio: validate parameter addr in mdiobus_get_phy() CVE-2023-53015: In the Linux k…
first Apr 15, 2025 -
High max 8.8ALAS2-2024-2615 20 CVEs
Important: kernel security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-35944: In the Linux kernel, the following vulnerability has been resolved: VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host() CVE-2024-35936: In the Li…
first Aug 1, 2024 -
HighALAS2-2024-2588 2 CVEs
Important: kernel security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-53998: In the Linux kernel, the following vulnerability has been resolved: hwrng: virtio - Fix race on data_avail and actual data CVE-2023-1077: kernel: Type con…
first Jul 3, 2024 -
High max 8.8ALAS2-2023-2268 29 CVEs
Important: kernel security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-0639: A denial of service vulnerability due to a deadlock was found in sctp_auto_asconf_init in net/sctp/socket.c in the Linux kernel's SCTP subsystem. This flaw…
first Sep 27, 2023 -
High max 9.8ALAS2023-2025-1297 30 CVEs
Important: kernel security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-40346: In the Linux kernel, the following vulnerability has been resolved: arch_topology: Fix incorrect error check in topology_parse_cpu_capacity() CVE-2025-…
first Dec 8, 2025 -
High max 9.8ALAS2023-2025-1054 21 CVEs
Important: kernel security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-54236: In the Linux kernel, the following vulnerability has been resolved: net/net_failover: fix txq exceeding warning CVE-2023-53684: In the Linux kernel, th…
first Jul 1, 2025 -
High max 9.8ALAS2023-2024-779 34 CVEs
Important: kernel security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-47660: In the Linux kernel, the following vulnerability has been resolved: fsnotify: clear PARENT_WATCHED flags lazily CVE-2024-46763: In the Linux kernel, th…
first Dec 5, 2024 -
High max 9.8ALAS2023-2024-744 29 CVEs
Important: kernel security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-47674: In the Linux kernel, the following vulnerability has been resolved: mm: avoid leaving partial pfn mappings around in error case CVE-2024-47668: In the …
first Oct 24, 2024 -
High max 7.8ALAS2023-2023-430 5 CVEs
Important: kernel security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-5717: A heap out-of-bounds write vulnerability in the Linux kernel's Linux Kernel Performance Events (perf) component can be exploited to achieve local privil…
first Nov 9, 2023 -
High max 7.8ALAS2023-2023-385 22 CVEs
Important: kernel security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-54324: In the Linux kernel, the following vulnerability has been resolved: dm: fix a race condition in retrieve_deps CVE-2023-5345: A use-after-free vulnerabi…
first Oct 12, 2023 -
High max 7.8ALAS2023-2023-251 10 CVEs
Important: kernel security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-54135: In the Linux kernel, the following vulnerability has been resolved: maple_tree: fix potential out-of-bounds access in mas_wr_end_piv() CVE-2023-53759: …
first Jul 17, 2023 -
High max 8.2ALAS2023-2023-169 22 CVEs
Important: kernel security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-54265: In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix an uninit variable access bug in __ip6_make_skb() CVE-2023-54202: In the …
first Apr 27, 2023 -
High max 7.8ALAS2023-2023-138 69 CVEs
Important: kernel security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-7192: kernel: refcount leak in ctnetlink_create_conntrack() CVE-2023-54321: In the Linux kernel, the following vulnerability has been resolved: driver core: f…
first Mar 20, 2023 -
High max 7.8ALAS2-2026-3161 3 CVEs
Important: kernel security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-40173: In the Linux kernel, the following vulnerability has been resolved: net/ip6_tunnel: Prevent perpetual tunnel growth CVE-2025-40070: In the Linux kernel, t…
-
Medium max 4.3ALAS2-2026-3157 1 CVE
Moderate: rsync security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-10158: A malicious client acting as the receiver of an rsync file transfer can trigger an out of bounds read of a heap based buffer, via a negative array index. …
-
Medium max 8.9ALAS2-2026-3156 2 CVEs
Moderate: python-urllib3 security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-66471: urllib3 is a user-friendly HTTP client library for Python. Starting in version 1.0 and prior to 2.6.0, the Streaming API improperly handles highly compres…
-
High max 8.8ALAS2-2026-3153 3 CVEs
Important: fontforge security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-15279: FontForge GUtils BMP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute ar…
-
High max 8.9ALAS2-2026-3149 1 CVE
Important: python-urllib3 security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-21441: urllib3 is an HTTP client library for Python. urllib3's streaming API is designed for the efficient handling of large HTTP responses by reading the conten…