4,948 results · Feed
-
High max 9.8ALAS2023-2026-3197 202 CVEs
Important: kernel security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-99999: In the Linux kernel, the following vulnerability has been resolved: ipv4: validate checksum_start before completing checksum If a packet with bad check…
first Oct 12, 2026 -
High max 10.0ALAS2023-2026-3196 432 CVEs
Important: kernel6.12 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-99999: In the Linux kernel, the following vulnerability has been resolved: ipv4: validate checksum_start before completing checksum If a packet with bad check…
first Oct 12, 2026 -
High max 8.8ALAS2023-2026-1817 9 CVEs
Important: kernel security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-97555: In the Linux kernel, the following vulnerability has been resolved: smb: client: fix heap overflow in DACL owner/group rewrite CVE-2026-64379: In the L…
first Jun 8, 2026 -
High max 9.8ALAS2-2026-3990 19 CVEs
Important: httpd security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-93546: Integer overflow in mod_dav_fs in Apache HTTP Server through 2.4.68 allows an authenticated WebDAV client with write access to crash worker processes and …
first Oct 12, 2026 -
High max 8.2ALAS2-2026-3950 3 CVEs
Important: ipa security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-73197: A flaw was found in FreeIPA. A remote, unauthenticated attacker can exploit this vulnerability by sending oversized form POST requests to the `/ipa/migrat…
first Sep 28, 2026 -
High max 9.8ALAS2023-2026-3202 19 CVEs
Important: httpd security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-93546: Integer overflow in mod_dav_fs in Apache HTTP Server through 2.4.68 allows an authenticated WebDAV client with write access to crash worker processes a…
first Oct 12, 2026 -
High max 9.8ALAS2-2026-3962 4 CVEs
Important: kernel security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-99999: In the Linux kernel, the following vulnerability has been resolved: ipv4: validate checksum_start before completing checksum If a packet with bad checksum…
first Sep 30, 2026 -
High max 8.8ALAS2-2026-3350 2 CVEs
Important: amazon-ssm-agent security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-81849: Improper limitation of a pathname to a restricted directory in the aws:downloadContent plugin in amazon-ssm-agent before 3.3.4515.0 might allow an authent…
first Jun 8, 2026 -
High max 8.7ALAS2023-2026-1870 5 CVEs
Important: clamav1.5 security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-45784: rust-openssl provides OpenSSL bindings for the Rust programming language. From 0.10.50 until 0.10.80, CipherCtxRef::cipher_update_inplace in openssl/sr…
first Jun 22, 2026 -
High max 8.8ALAS2023-2026-1813 2 CVEs
Important: amazon-ssm-agent security update (Amazon Linux 2023)
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-81849: Improper limitation of a pathname to a restricted directory in the aws:downloadContent plugin in amazon-ssm-agent before 3.3.4515.0 might allow an auth…
first Jun 8, 2026 -
HighALAS2-2026-4002 0 CVEs
Important: dnsmasq security update (Amazon Linux 2)
-
HighALAS2-2026-4001 0 CVEs
Important: bind security update (Amazon Linux 2)
-
HighALAS2-2026-4000 0 CVEs
Important: unbound security update (Amazon Linux 2)
-
HighALAS2023-2026-3224 0 CVEs
Important: systemd security update (Amazon Linux 2023)
-
HighALAS2023-2026-3223 0 CVEs
Important: dnsmasq security update (Amazon Linux 2023)
-
HighALAS2023-2026-3222 0 CVEs
Important: unbound security update (Amazon Linux 2023)
-
HighALAS2023-2026-3221 0 CVEs
Important: bind security update (Amazon Linux 2023)
-
LowALAS2023-2026-3217 0 CVEs
Low: device-mapper-persistent-data security update (Amazon Linux 2023)
first Oct 12, 2026 -
MediumALAS2023-2026-3216 0 CVEs
Moderate: loupe security update (Amazon Linux 2023)
first Oct 12, 2026 -
MediumALAS2023-2026-3215 0 CVEs
Moderate: glycin security update (Amazon Linux 2023)
first Oct 12, 2026 -
High max 8.6ALAS2-2026-3998 5 CVEs
Important: libsoup security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-15714: An out-of-bounds read vulnerability was found in libsoup's multipart processing subsystem. The flaw exists in the soup_multipart_input_stream_read_headers…
-
Medium max 9.1ALAS2-2026-3997 2 CVEs
Moderate: perl security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-57432: Perl versions through 5.43.10 have an integer overflow in S_measure_struct leading to an out-of-bounds heap read in pack and unpack. S_measure_struct adds…
-
Medium max 7.5ALAS2-2026-3996 1 CVE
Moderate: perl-HTTP-Date security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-14741: parse_date() -- and str2time(), which delegates to it -- used regexes with ambiguous adjacent greedy runs (year/clock/timezone digits and timezone/ASCII-t…
-
High max 7.5ALAS2-2026-3995 7 CVEs
Important: bind security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-80274: If a BIND resolver sends a query for a DNSSEC-signed authoritative zone, and the authoritative server replies with a valid wildcard answer and signed NSEC…
-
Medium max 6.3ALAS2-2026-3994 4 CVEs
Moderate: qt5-qt3d security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-19999: A security vulnerability has been detected in Open Asset Import Library Assimp Assimp 17c12da. The affected element is the function Assimp::MDLImporter::P…
-
Medium max 5.4ALAS2-2026-3993 1 CVE
Moderate: apache-ivy security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-26032: The PackagerResolver of Apache Ivy is able to download online artifacts and to (re)package them in a format defined by a packager.xml file. This repackagi…
-
High max 8.2ALAS2-2026-3992 3 CVEs
Important: openssl security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-84782: A flaw was found in OpenSSL. The Datagram Transport Layer Security (DTLS) retransmission mechanism fails to properly handle handshake message writes that …
-
High max 8.2ALAS2-2026-3991 4 CVEs
Important: openssl11 security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-84782: A flaw was found in OpenSSL. The Datagram Transport Layer Security (DTLS) retransmission mechanism fails to properly handle handshake message writes that …
-
Medium max 9.8ALAS2-2026-3989 1 CVE
Moderate: perl-Storable security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-57433: Storable versions before 3.41 for Perl have a signed integer overflow when deserializing a crafted SX_HOOK record. retrieve_hook_common reads a signed 32-…
-
Medium max 7.5ALAS2-2026-3988 1 CVE
Moderate: fence-agents security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-59939: httplib2 is a comprehensive HTTP client library for Python. Prior to 0.32.0, httplib2 performs unbounded decompression of HTTP response bodies encoded wit…
-
High max 9.8ALAS2-2026-3987 11 CVEs
Important: webkitgtk4 security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-84635: A logic issue was addressed with improved state management. This issue is fixed in Safari 27, iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionO…
-
Medium max 7.1ALAS2-2026-3986 1 CVE
Moderate: perl-HTTP-Tiny security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-7017: HTTP::Tiny versions before 0.095 for Perl forward credential headers to cross-origin redirect targets. When the server returns a 3xx redirect, `_maybe_redi…
-
High max 9.8ALAS2-2026-3985 1 CVE
Important: perl-DBI security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-78030: A critical arbitrary code execution vulnerability (CWE-94) found in the DBD::DBM database driver, which is a core component shipped within the Perl DBI (D…
-
High max 7.0ALAS2-2026-3984 1 CVE
Important: rpm security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-78367: A flaw was found in rpmbuild. When rpmbuild processes a crafted tarball in tarball mode, a specially designed tar member name can lead to macro injection.…
-
High max 8.9ALAS2-2026-3983 1 CVE
Important: libXrender security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-88807: A heap overflow in libXrender before 0.9.13 in RenderQueryPictFormats could be used by malicious X servers to inject code into attached X clients.
-
High max 6.6ALAS2-2026-3982 2 CVEs
Important: parted security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-89088: heap buffer overflow in duplicate_legacy_root_dir NOTE: https://alioth-lists.debian.net/pipermail/parted-devel/2026-September/006032.html CVE-2026-89085: …
-
High max 5.3ALAS2-2026-3981 1 CVE
Important: fetchmail security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-94184: A stack-based buffer overflow flaw was found in fetchmail when built with NTLM support. A malicious or compromised mail server advertising NTLM authentica…
-
High max 6.3ALAS2-2026-3980 3 CVEs
Important: qt5-qtbase security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-9499: An out-of-bounds read (buffer over-read) vulnerability exists in QTextCodec::codecForName() in Qt. When the function is called with a QByteArray that is no…
-
High max 7.8ALAS2-2026-3979 1 CVE
Important: emacs security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-96442: A code execution flaw was found in Emacs, affecting versions prior to 31.2. The Flymake mode using language backends other than Lisp would execute arbitra…
-
High max 7.5ALAS2-2026-3977 1 CVE
Important: libX11 security update (Amazon Linux 2)
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-88806: A malicious X server could exploit a buffer overflow in libX11 before 1.8.14 during handling of XkbGetMap overflowing the key_sym_map.