Amazon Linux 2

Amazon Linux 2 — nspr — multiple vulnerabilities (11 CVEs) — patch and remediation guide — diagnosis and fix on Amazon Linux 2

Amazon Linux 2 — nspr — multiple vulnerabilities (11 CVEs) — patch and remediation guide

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2-2021-1722 Related CVEs: CVE-2021-43527 CVE-2019-11719 CVE-2019-11727 CVE-2019-11756 CVE-2019-17006 CVE-2019-17023 CVE-2020-12400 CVE-2020-12401  +3 more Upstream summary: NSS (Network Security Services) up to and including 3.73 is vulnerable to a heap overflow […]

Read more
Amazon Linux 2 — nss — multiple vulnerabilities (19 CVEs) — patch and remediation guide — diagnosis and fix on Amazon Linux 2

Amazon Linux 2 — nss — multiple vulnerabilities (19 CVEs) — patch and remediation guide

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2-2021-1722 Related CVEs: CVE-2021-43527 CVE-2023-7104 CVE-2023-0767 CVE-2019-11729 CVE-2019-11745 CVE-2020-25648 CVE-2019-11719 CVE-2019-11727  +11 more Upstream summary: NSS (Network Security Services) up to and including 3.73 is vulnerable to a heap overflow […]

Read more
Amazon Linux 2 — nss-softokn — multiple vulnerabilities (16 CVEs) — patch and remediation guide — diagnosis and fix on Amazon Linux 2

Amazon Linux 2 — nss-softokn — multiple vulnerabilities (16 CVEs) — patch and remediation guide

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2-2021-1722 Related CVEs: CVE-2021-43527 CVE-2023-4421 CVE-2023-6135 CVE-2023-5388 CVE-2019-11719 CVE-2019-11727 CVE-2019-11756 CVE-2019-17006  +8 more Upstream summary: NSS (Network Security Services) up to and including 3.73 is vulnerable to a heap overflow […]

Read more
Amazon Linux 2 — nss-util — multiple vulnerabilities (13 CVEs) — patch and remediation guide — diagnosis and fix on Amazon Linux 2

Amazon Linux 2 — nss-util — multiple vulnerabilities (13 CVEs) — patch and remediation guide

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2-2021-1722 Related CVEs: CVE-2021-43527 CVE-2019-11729 CVE-2019-11745 CVE-2019-11719 CVE-2019-11727 CVE-2019-11756 CVE-2019-17006 CVE-2019-17023  +5 more Upstream summary: NSS (Network Security Services) up to and including 3.73 is vulnerable to a heap overflow […]

Read more
Amazon Linux 2 — openslp — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Amazon Linux 2

Amazon Linux 2 — openslp — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2-2019-1378 Related CVEs: CVE-2019-5544 CVE-2017-17833 Upstream summary: A heap-based buffer overflow was discovered in OpenSLP in the way the slpd service processes URLs in service request messages. A remote unauthenticated […]

Read more
Amazon Linux 2 — php — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Amazon Linux 2

Amazon Linux 2 — php — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2-2019-1344 Related CVEs: CVE-2019-11043 CVE-2017-9226 CVE-2019-19203 CVE-2022-31631 CVE-2023-0568 CVE-2023-3824 CVE-2024-8925 CVE-2024-8928  +12 more Upstream summary: In PHP versions 7.1.x below 7.1.33, 7.2.x below 7.2.24 and 7.3.x below 7.3.11 in certain […]

Read more
Amazon Linux 2 — dnsmasq — multiple vulnerabilities (15 CVEs) — patch and remediation guide — diagnosis and fix on Amazon Linux 2

Amazon Linux 2 — dnsmasq — multiple vulnerabilities (15 CVEs) — patch and remediation guide

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2-2019-1251 Related CVEs: CVE-2017-14491 CVE-2017-14492 CVE-2017-14493 CVE-2017-14494 CVE-2017-14495 CVE-2017-14496 CVE-2023-50387 CVE-2023-50868  +7 more Upstream summary: A memory exhaustion flaw was found in dnsmasq in the EDNS0 code. An attacker could […]

Read more
Amazon Linux 2 — kernel — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Amazon Linux 2

Amazon Linux 2 — kernel — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2-2019-1222 Related CVEs: CVE-2019-11477 CVE-2019-11478 CVE-2019-11479 CVE-2018-3615 CVE-2018-3620 CVE-2018-3646 CVE-2018-5391 CVE-2018-13093  +12 more Upstream summary: CVE-2019-11477, CVE-2019-11478 and CVE-2019-11479 describe vulnerabilities in the Linux kernel that can be remotely exploited […]

Read more
Amazon Linux 2 — dhcp — multiple vulnerabilities (8 CVEs) — patch and remediation guide — diagnosis and fix on Amazon Linux 2

Amazon Linux 2 — dhcp — multiple vulnerabilities (8 CVEs) — patch and remediation guide

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2-2018-1021 Related CVEs: CVE-2018-1111 CVE-2021-25217 CVE-2018-5732 CVE-2018-5733 CVE-2022-2928 CVE-2022-2929 CVE-2019-6470 CVE-2017-3144 Upstream summary: Command injection vulnerability in the DHCP client NetworkManager integration script: A command injection flaw was found in […]

Read more
Amazon Linux 2 — librelp — vulnerability — patch and remediation guide — diagnosis and fix on Amazon Linux 2

Amazon Linux 2 — librelp — vulnerability — patch and remediation guide

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2-2018-998 Related CVEs: CVE-2018-1000140 Upstream summary: Stack-based buffer overflow in relpTcpChkPeerName function in src/tcp.c: rsyslog librelp version 1.2.14 and earlier contains a Buffer Overflow vulnerability in the checking of x509 […]

Read more
CHAT