Amazon Linux

Latest advisories

• High max 10.0
  ALAS2-2026-4091 1 CVE

  Important: ruby security update (Amazon Linux 2)

  Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-110264: An issue has been discovered in GitLab CE/EE affecting all versions from 7.0 before 18.11.13, 19.0 before 19.0.10, 19.1 before 19.1.9, 19.2 before 19.2.9…

  Nov 9, 2026
• High max 10.0
  ALAS2-2026-4090 1 CVE 1 exploited

  Important: ruby security update (Amazon Linux 2)

  Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-97229: GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under cert…

  Nov 9, 2026
• High max 8.1
  ALAS2-2026-4089 1 CVE

  Important: tomcat security update (Amazon Linux 2)

  Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-101296: A missing critical step in authentication vulnerability in Apache Tomcat when the JNDI realm was configured with with a non GSSAPI SASL authentication me…

  Nov 9, 2026
• High max 7.5
  ALAS2-2026-4088 2 CVEs

  Important: libXi security update (Amazon Linux 2)

  Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-109090: libXi XGetDeviceControl DEVICE_ENABLE Heap Buffer Overflow NOTE: https://lists.x.org/archives/xorg-announce/2026-October/003752.html NOTE: https://gitlab…

  Nov 9, 2026
• High max 7.1
  ALAS2-2026-4087 12 CVEs

  Important: freerdp security update (Amazon Linux 2)

  Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2026-110837: FreeRDP 2.0.0 before 3.32.0, when built with WITH_LAME=ON and WITH_DSP_FFMPEG=OFF, has a heap-based buffer overflow in freerdp_dsp_decode_mp3 because the…

  Nov 9, 2026