🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2-2025-3082 Related CVEs: CVE-2025-57812 CVE-2025-64503 CVE-2025-64524 CVE-2024-47176 CVE-2024-47850 Upstream summary: CUPS is a standards-based, open-source printing system, and `libcupsfilters` contains the code of the filters of the former `cups-filters` package […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2-2025-2934 Related CVEs: CVE-2025-52999 Upstream summary: jackson-core contains core low-level incremental ("streaming") parser and generator abstractions used by Jackson Data Processor. In versions prior to 2.15.0, if a user parses […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2-2021-1730 Related CVEs: CVE-2021-44228 CVE-2021-45046 CVE-2022-42004 CVE-2025-49128 CVE-2021-44832 CVE-2021-45105 Upstream summary: Amazon Kinesis Agent versions within Amazon Linux 2 (AL2) prior to aws-kinesis-agent-2.0.4-1 included a version of Apache Log4j affected […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2LIVEPATCH-2025-244 Related CVEs: CVE-2023-53137 CVE-2025-21811 Upstream summary: In the Linux kernel, the following vulnerability has been resolved: ext4: Fix possible corruption when moving a directory (CVE-2023-53137) Table of contents Symptom […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2-2025-3077 Related CVEs: CVE-2025-46404 CVE-2025-46705 CVE-2025-46784 CVE-2025-47151 CVE-2021-28091 Upstream summary: A denial of service vulnerability exists in the lasso_provider_verify_saml_signature functionality of Entr'ouvert Lasso 2.5.1. A specially crafted SAML response can […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2-2023-1915 Related CVEs: CVE-2022-42898 CVE-2025-24528 CVE-2025-3576 CVE-2024-37370 CVE-2024-37371 CVE-2024-26458 CVE-2024-26461 CVE-2023-36054 +6 more Upstream summary: Integer overflow vulnerabilities in PAC parsing (CVE-2022-42898) Table of contents Symptom & Impact Environment & […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2-2025-2793 Related CVEs: CVE-2025-27516 CVE-2024-56326 CVE-2019-10906 CVE-2024-22195 CVE-2024-34064 Upstream summary: Jinja is an extensible templating engine. Prior to 3.1.6, an oversight in how the Jinja sandboxed environment interacts with the […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2LIVEPATCH-2025-223 Related CVEs: CVE-2025-21703 CVE-2025-21796 CVE-2025-21647 CVE-2025-21702 CVE-2024-56631 Upstream summary: In the Linux kernel, the following vulnerability has been resolved: netem: Update sch->q.qlen before qdisc_tree_reduce_backlog() (CVE-2025-21703) Table of contents Symptom […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2-2025-2771 Related CVEs: CVE-2025-0840 CVE-2020-19724 CVE-2021-46174 CVE-2022-35205 CVE-2022-47007 CVE-2022-47008 CVE-2022-47010 CVE-2022-48064 +12 more Upstream summary: A vulnerability, which was classified as problematic, was found in GNU Binutils up to 2.43. […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2-2026-3133 Related CVEs: CVE-2025-67873 Upstream summary: Capstone is a disassembly framework. In versions 6.0.0-Alpha5 and prior, Skipdata length is not bounds-checked, so a user-provided skipdata callback can make cs_disasm/cs_disasm_iter memcpy […]
