Amazon Linux 2

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2TOMCAT9-2026-024 Related CVEs: CVE-2025-66614 CVE-2026-24733 CVE-2026-24734 CVE-2025-55752 CVE-2025-61795 CVE-2025-48989 CVE-2025-52434 CVE-2025-52520  +12 more Upstream summary: mproper Input Validation vulnerability. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.14, from 10.1.0-M1 […]

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2-2023-2318 Related CVEs: CVE-2019-12524 CVE-2019-12529 CVE-2019-18677 CVE-2019-18678 CVE-2019-18860 CVE-2021-28116 CVE-2023-46847 CVE-2026-32748  +12 more Upstream summary: An issue was discovered in Squid through 4.7. When handling requests from users, Squid checks […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2-2025-2895 Related CVEs: CVE-2025-6019 Upstream summary: LPE from allow_active to root in libblockdev via udisks (CVE-2025-6019) Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2-2026-3279 Related CVEs: CVE-2026-34978 CVE-2026-34979 CVE-2026-34980 CVE-2026-34990 CVE-2025-58060 CVE-2024-47176 CVE-2025-58364 CVE-2023-4504  +7 more Upstream summary: OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2-2026-3236 Related CVEs: CVE-2026-32285 CVE-2026-33186 CVE-2025-47912 CVE-2025-58183 CVE-2025-58185 CVE-2025-58186 CVE-2025-58187 CVE-2025-58188  +12 more Upstream summary: The Delete function fails to properly validate offsets when processing malformed JSON input. This can […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2-2025-3007 Related CVEs: CVE-2025-50952 CVE-2024-56826 CVE-2024-56827 CVE-2018-20845 CVE-2018-20847 CVE-2018-5727 CVE-2018-5785 CVE-2018-6616  +11 more Upstream summary: openjpeg v 2.5.0 was discovered to contain a NULL pointer dereference via the component /openjp2/dwt.c. […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2ECS-2026-101 Related CVEs: CVE-2026-25679 CVE-2026-27139 CVE-2026-27142 CVE-2026-33186 CVE-2025-65637 CVE-2025-47912 CVE-2025-58183 CVE-2025-58185  +12 more Upstream summary: url.Parse insufficiently validated the host/authority component and accepted some invalid URLs. (CVE-2026-25679) On Unix platforms, […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2GIMP-2026-014 Related CVEs: CVE-2026-4150 CVE-2026-4153 CVE-2026-4154 CVE-2026-0797 CVE-2026-2044 CVE-2026-2045 CVE-2026-2048 CVE-2025-14422  +12 more Upstream summary: GIMP PSD File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2-2026-3149 Related CVEs: CVE-2026-21441 CVE-2025-66418 CVE-2025-66471 CVE-2025-50181 CVE-2024-37891 CVE-2023-45803 CVE-2021-33503 CVE-2020-26137  +1 more Upstream summary: urllib3 is an HTTP client library for Python. urllib3's streaming API is designed for the […]