🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2-2026-3257 Related CVEs: CVE-2026-5121 CVE-2025-5914 CVE-2019-18408 CVE-2025-5917 CVE-2021-31566 CVE-2017-14503 CVE-2018-1000877 CVE-2018-1000878 +3 more Upstream summary: A flaw was found in libarchive. On 32-bit systems, an integer overflow vulnerability exists in […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2-2023-1911 Related CVEs: CVE-2022-35737 CVE-2019-13734 CVE-2025-6965 Upstream summary: SQLite 1.0.12 through 3.39.x before 3.39.2 sometimes allows an array-bounds overflow if billions of bytes are used in a string argument to […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2-2025-3092 Related CVEs: CVE-2025-54514 CVE-2025-62626 CVE-2023-31315 CVE-2017-5715 CVE-2023-20593 Upstream summary: Improper isolation of shared resources on a system on a chip by a malicious local attacker with high privileges could […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2-2026-3179 Related CVEs: CVE-2026-2604 CVE-2019-3890 Upstream summary: The Evolution backend server exposes the D-Bus service org.gnome.evolution.dataserver.AddressBook, that can be used in order to manage contacts. A Flatpak application with access […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2-2026-3275 Related CVEs: CVE-2026-28387 CVE-2026-28388 CVE-2026-28389 CVE-2026-28390 CVE-2025-68160 CVE-2025-69418 CVE-2025-69419 CVE-2025-69420 +12 more Upstream summary: Potential use-after-free in DANE client code (CVE-2026-28387) NULL Pointer Dereference When Processing a Delta CRL […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2-2026-3277 Related CVEs: CVE-2026-5795 CVE-2021-28165 CVE-2024-9823 CVE-2023-40167 CVE-2023-36479 CVE-2021-28169 CVE-2021-34428 Upstream summary: In Eclipse Jetty, the class JASPIAuthenticator initiates the authentication checks, which set two ThreadLocal variable. Upon returning from […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2-2026-3180 Related CVEs: CVE-2026-25990 CVE-2022-22817 CVE-2023-50447 CVE-2014-1932 CVE-2014-1933 CVE-2014-3007 CVE-2021-23437 CVE-2014-9601 +12 more Upstream summary: Pillow is a Python imaging library. From 10.3.0 to before 12.1.1, n out-of-bounds write may […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2-2026-3281 Related CVEs: CVE-2026-4519 CVE-2026-4786 CVE-2026-6100 CVE-2025-13462 CVE-2026-3479 CVE-2025-8194 CVE-2024-6232 CVE-2023-6597 +12 more Upstream summary: Mitgation of CVE-2026-4519 was incomplete. If the URL contained "%action" the mitigation could be bypassed […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2-2026-3141 Related CVEs: CVE-2026-0719 CVE-2025-14523 CVE-2025-32049 CVE-2025-4948 CVE-2025-32906 CVE-2025-32907 CVE-2025-32911 CVE-2025-32913 +5 more Upstream summary: A flaw was identified in the NTLM authentication handling of the libsoup HTTP library, used […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2-2026-3210 Related CVEs: CVE-2026-2921 CVE-2024-4453 CVE-2024-47538 CVE-2024-47607 CVE-2024-47615 CVE-2023-37327 CVE-2023-37328 CVE-2025-47806 +7 more Upstream summary: An integer overflow in the RIFF parser that can cause crashes for certain input files. […]
