🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2-2025-2941 Related CVEs: CVE-2025-27613 CVE-2025-27614 CVE-2025-46835 CVE-2025-48384 CVE-2025-48385 CVE-2019-1348 CVE-2019-1349 CVE-2019-1350 +12 more Upstream summary: When a user clones an untrusted repository and runs Gitk without additional command arguments, any […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2-2025-3099 Related CVEs: CVE-2025-55753 CVE-2025-58098 CVE-2025-65082 CVE-2025-66200 CVE-2023-38709 CVE-2024-42516 CVE-2024-43204 CVE-2024-47252 +12 more Upstream summary: An integer overflow in the case of failed ACME certificate renewal leads, after a number […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2-2025-3114 Related CVEs: CVE-2025-13502 CVE-2025-13947 CVE-2025-31223 CVE-2025-31277 CVE-2025-43392 CVE-2025-43419 CVE-2025-43421 CVE-2025-43425 +12 more Upstream summary: A flaw was found in WebKitGTK and WPE WebKit. This vulnerability allows an out-of-bounds read […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2-2024-2571 Related CVEs: CVE-2024-5564 Upstream summary: A vulnerability was found in libndp. A buffer overflow in NetworkManager that can be triggered by sending a malformed IPv6 router advertisement packet via […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2-2026-3192 Related CVEs: CVE-2025-29070 Upstream summary: A heap buffer overflow vulnerability has been identified in thesmooth2() in cmsgamma.c in lcms2-2.16 which allows a remote attacker to cause a denial of […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2-2024-2672 Related CVEs: CVE-2024-39936 Upstream summary: An issue was discovered in HTTP2 in Qt before 5.15.18, 6.x before 6.2.13, 6.3.x through 6.5.x before 6.5.7, and 6.6.x through 6.7.x before 6.7.3. […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2MATE-DESKTOP1.X-2025-010 Related CVEs: CVE-2025-53367 CVE-2021-32490 CVE-2021-32491 CVE-2021-32492 CVE-2021-32493 CVE-2021-3500 CVE-2021-46312 CVE-2021-46310 +1 more Upstream summary: DjVuLibre is a GPL implementation of DjVu, a web-centric format for distributing documents and images. […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2LIVEPATCH-2025-243 Related CVEs: CVE-2023-53137 CVE-2025-21811 CVE-2025-21920 Upstream summary: In the Linux kernel, the following vulnerability has been resolved: ext4: Fix possible corruption when moving a directory (CVE-2023-53137) Table of contents […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2-2023-2034 Related CVEs: CVE-2023-31484 CVE-2018-18311 CVE-2025-40909 CVE-2020-10543 CVE-2020-10878 CVE-2020-12723 Upstream summary: HTTP::Tiny 0.082, a Perl core module since 5.13.9 and available standalone on CPAN, has an insecure default TLS configuration […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2LIVEPATCH-2025-282 Related CVEs: CVE-2022-50500 CVE-2023-53530 CVE-2025-38527 CVE-2025-39677 CVE-2025-39923 Upstream summary: In the Linux kernel, the following vulnerability has been resolved: netdevsim: fix memory leak in nsim_drv_probe() when nsim_dev_resources_register() failed (CVE-2022-50500) […]
