🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2-2025-3101 Related CVEs: CVE-2025-12385 CVE-2024-39936 Upstream summary: Allocation of Resources Without Limits or Throttling, Improper Validation of Specified Quantity in Input vulnerability in The Qt Company Qt on Windows, MacOS, […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2-2025-2770 Related CVEs: CVE-2025-1244 CVE-2024-53920 CVE-2024-30203 CVE-2024-30204 CVE-2024-30205 CVE-2024-39331 CVE-2023-28617 CVE-2022-48337 +3 more Upstream summary: A flaw was found in the Emacs text editor. Improper handling of custom "man" URI […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2POSTGRESQL13-2025-010 Related CVEs: CVE-2025-1094 CVE-2016-2193 CVE-2023-2455 CVE-2024-10976 CVE-2024-10977 CVE-2024-10978 CVE-2024-10979 CVE-2024-7348 +6 more Upstream summary: Improper neutralization of quoting syntax in PostgreSQL libpq functions PQescapeLiteral(), PQescapeIdentifier(), PQescapeString(), and PQescapeStringConn() allows […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2-2021-1623 Related CVEs: CVE-2021-26937 CVE-2025-46802 CVE-2023-24626 Upstream summary: A flaw was found in screen. A specially crafted sequence of combining characters could cause an out of bounds write leading to […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2LIVEPATCH-2025-269 Related CVEs: CVE-2025-38527 CVE-2025-39677 CVE-2025-39691 CVE-2025-39730 CVE-2025-38386 CVE-2022-49935 Upstream summary: In the Linux kernel, the following vulnerability has been resolved: smb: client: fix use-after-free in cifs_oplock_break (CVE-2025-38527) In the […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2NITRO-ENCLAVES-2025-075 Related CVEs: CVE-2025-47912 CVE-2025-58183 CVE-2025-58185 CVE-2025-58186 CVE-2025-58187 CVE-2025-58188 CVE-2025-58189 CVE-2025-61723 +12 more Upstream summary: net/url: insufficient validation of bracketed IPv6 hostnames The Parse function permitted values other than IPv6 […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2-2026-3207 Related CVEs: CVE-2025-61731 CVE-2025-68119 CVE-2025-22874 CVE-2025-4673 CVE-2025-47912 CVE-2025-58183 CVE-2025-58185 CVE-2025-58186 +12 more Upstream summary: cmd/go: bypass of flag sanitization can lead to arbitrary code execution (CVE-2025-61731) cmd/go: unexpected code […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2LIVEPATCH-2025-277 Related CVEs: CVE-2022-50500 CVE-2023-53530 CVE-2025-39923 Upstream summary: In the Linux kernel, the following vulnerability has been resolved: netdevsim: fix memory leak in nsim_drv_probe() when nsim_dev_resources_register() failed (CVE-2022-50500) In the […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2LIVEPATCH-2025-226 Related CVEs: CVE-2024-47757 CVE-2024-49882 CVE-2024-50036 CVE-2024-50264 CVE-2024-50301 CVE-2024-56650 CVE-2025-21796 CVE-2024-53103 +3 more Upstream summary: In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix potential oob read […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2-2025-2969 Related CVEs: CVE-2025-32990 CVE-2024-12243 CVE-2018-10844 CVE-2018-10845 CVE-2018-10846 Upstream summary: A heap-buffer-overflow (off-by-one) flaw was found in the GnuTLS software in the template parsing logic within the certtool utility. When […]
