🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2-2026-3284 Related CVEs: CVE-2026-41316 CVE-2024-47220 CVE-2021-33621 CVE-2017-17742 CVE-2019-15845 CVE-2019-16201 CVE-2019-16254 CVE-2019-16255 +12 more Upstream summary: ERB is a templating system for Ruby. Ruby 2.7.0 (before ERB 2.2.0 was published on […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2LIVEPATCH-2025-278 Related CVEs: CVE-2022-50500 CVE-2023-53530 CVE-2025-39923 Upstream summary: In the Linux kernel, the following vulnerability has been resolved: netdevsim: fix memory leak in nsim_drv_probe() when nsim_dev_resources_register() failed (CVE-2022-50500) In the […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2OPENSSL-SNAPSAFE-2026-009 Related CVEs: CVE-2025-68160 CVE-2025-69420 CVE-2025-69421 CVE-2026-22796 CVE-2022-4304 CVE-2023-0215 CVE-2023-0286 CVE-2023-0464 +12 more Upstream summary: Writing large, newline-free data into a BIO chain using the line-buffering filter where the next […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2-2026-3249 Related CVEs: CVE-2026-28387 CVE-2026-28388 CVE-2026-28389 CVE-2026-28390 CVE-2025-68160 CVE-2025-69418 CVE-2025-69419 CVE-2025-69420 +12 more Upstream summary: Potential use-after-free in DANE client code (CVE-2026-28387) NULL Pointer Dereference When Processing a Delta CRL […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2-2022-1764 Related CVEs: CVE-2022-25235 CVE-2022-25236 CVE-2024-45490 CVE-2022-43680 CVE-2022-40674 CVE-2022-25315 CVE-2026-25210 CVE-2024-50602 +12 more Upstream summary: A flaw was found in expat. Passing malformed 2- and 3-byte UTF-8 sequences (for example, […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2-2026-3212 Related CVEs: CVE-2026-23868 CVE-2021-40633 CVE-2023-48161 Upstream summary: Giflib contains a double-free vulnerability that is the result of a shallow copy in GifMakeSavedImage and incorrect error handling. The conditions needed […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2-2025-3117 Related CVEs: CVE-2025-14087 CVE-2025-13601 CVE-2023-29499 CVE-2023-32611 CVE-2023-32636 CVE-2023-32643 CVE-2023-32665 CVE-2020-35457 +9 more Upstream summary: Buffer underflow on Glib through glib/gvariant via bytestring_parse() or string_parse() leads to OOB Write. (CVE-2025-14087) […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2-2026-3216 Related CVEs: CVE-2026-4177 CVE-2025-11683 Upstream summary: YAML::Syck versions through 1.36 for Perl has several potential security vulnerabilities including a high-severity heap buffer overflow in the YAML emitter. The heap […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2-2026-3276 Related CVEs: CVE-2026-20031 Upstream summary: A vulnerability in the HTML Cascading Style Sheets (CSS) module of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2-2026-3124 Related CVEs: CVE-2025-68615 CVE-2020-15862 CVE-2022-44793 CVE-2022-24805 CVE-2022-24806 CVE-2022-24807 CVE-2022-24808 CVE-2022-24809 +2 more Upstream summary: net-snmp is a SNMP application library, tools and daemon. Prior to versions 5.9.5 and 5.10.pre2, […]
