Amazon Linux 2

Amazon Linux 2 — runc — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Amazon Linux 2

Amazon Linux 2 — runc — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2NITRO-ENCLAVES-2025-077 Related CVEs: CVE-2025-31133 CVE-2025-47912 CVE-2025-52565 CVE-2025-52881 CVE-2025-58183 CVE-2025-58185 CVE-2025-58186 CVE-2025-58187  +12 more Upstream summary: Placeholder CVE. Details forthcoming (CVE-2025-31133) net/url: insufficient validation of bracketed IPv6 hostnames The Parse function […]

Read more
Amazon Linux 2 — rust — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Amazon Linux 2

Amazon Linux 2 — rust — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2-2026-3296 Related CVEs: CVE-2026-6654 CVE-2024-24575 CVE-2024-24577 CVE-2023-38497 CVE-2025-62518 CVE-2026-0810 CVE-2026-33055 CVE-2026-33056  +12 more Upstream summary: Double-Free / Use-After-Free (UAF) in the `IntoIter::drop` and `ThinVec::clear` functions in the thin_vec crate. A […]

Read more
Amazon Linux 2 — unbound — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Amazon Linux 2

Amazon Linux 2 — unbound — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2UNBOUND-1.17-2025-005 Related CVEs: CVE-2025-5994 CVE-2023-50387 CVE-2023-50868 CVE-2024-1488 CVE-2024-33655 CVE-2020-10772 CVE-2020-12662 CVE-2020-12663  +12 more Upstream summary: A multi-vendor cache poisoning vulnerability named 'Rebirthday Attack' has been discovered in caching resolvers that […]

Read more
Amazon Linux 2 — kernel-livepatch-5.10.234-225.917 — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Amazon Linux 2

Amazon Linux 2 — kernel-livepatch-5.10.234-225.917 — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2LIVEPATCH-2025-240 Related CVEs: CVE-2025-21991 CVE-2025-21796 Upstream summary: In the Linux kernel, the following vulnerability has been resolved: x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes (CVE-2025-21991) Table of contents […]

Read more
Amazon Linux 2 — runfinch-finch — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Amazon Linux 2

Amazon Linux 2 — runfinch-finch — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2DOCKER-2026-106 Related CVEs: CVE-2026-33186 CVE-2025-47912 CVE-2025-58183 CVE-2025-58185 CVE-2025-58186 CVE-2025-58187 CVE-2025-58188 CVE-2025-58189  +12 more Upstream summary: gRPC-Go is the Go language implementation of gRPC. Versions prior to 1.79.3 have an authorization […]

Read more
Amazon Linux 2 — tigervnc — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Amazon Linux 2

Amazon Linux 2 — tigervnc — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2-2026-3273 Related CVEs: CVE-2026-33999 CVE-2026-34001 CVE-2026-34002 CVE-2026-34003 CVE-2025-62229 CVE-2025-62230 CVE-2025-62231 CVE-2024-9632  +12 more Upstream summary: XKB Integer Underflow in XkbSetCompatMap() (CVE-2026-33999) XSYNC Use-after-free in miSyncTriggerFence() (CVE-2026-34001) XKB Out-of-bounds read in […]

Read more
Amazon Linux 2 — qemu — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Amazon Linux 2

Amazon Linux 2 — qemu — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2-2025-3061 Related CVEs: CVE-2021-4206 CVE-2022-26354 CVE-2025-11234 CVE-2024-6519 CVE-2024-3447 CVE-2024-4467 CVE-2024-3446 CVE-2019-20382  +12 more Upstream summary: A flaw was found in the QXL display device emulation in QEMU. An integer overflow […]

Read more
Amazon Linux 2 — kernel-livepatch-5.10.233-223.887 — multiple vulnerabilities (8 CVEs) — patch and remediation guide — diagnosis and fix on Amazon Linux 2

Amazon Linux 2 — kernel-livepatch-5.10.233-223.887 — multiple vulnerabilities (8 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2LIVEPATCH-2025-216 Related CVEs: CVE-2025-21796 CVE-2025-21647 CVE-2025-21702 CVE-2024-56631 CVE-2023-52760 CVE-2024-36899 CVE-2024-49960 CVE-2024-50143 Upstream summary: In the Linux kernel, the following vulnerability has been resolved: nfsd: clear acl_access/acl_default after releasing them (CVE-2025-21796) […]

Read more
Amazon Linux 2 — libXpm — multiple vulnerabilities (8 CVEs) — patch and remediation guide — diagnosis and fix on Amazon Linux 2

Amazon Linux 2 — libXpm — multiple vulnerabilities (8 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2-2023-1962 Related CVEs: CVE-2022-44617 CVE-2022-46285 CVE-2022-4883 CVE-2026-4367 CVE-2023-43786 CVE-2023-43787 CVE-2023-43788 CVE-2023-43789 Upstream summary: A flaw was found in libXpm. When processing a file with width of 0 and a very […]

Read more
Amazon Linux 2 — kernel-livepatch-4.14.355-276.618 — multiple vulnerabilities (10 CVEs) — patch and remediation guide — diagnosis and fix on Amazon Linux 2

Amazon Linux 2 — kernel-livepatch-4.14.355-276.618 — multiple vulnerabilities (10 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2LIVEPATCH-2025-242 Related CVEs: CVE-2023-53137 CVE-2025-21811 CVE-2025-21858 CVE-2025-21920 CVE-2024-47757 CVE-2024-49882 CVE-2024-50036 CVE-2024-50264  +2 more Upstream summary: In the Linux kernel, the following vulnerability has been resolved: ext4: Fix possible corruption when […]

Read more
CHAT