Amazon Linux 2

Amazon Linux 2 — gzip — vulnerability — patch and remediation guide — diagnosis and fix on Amazon Linux 2

Amazon Linux 2 — gzip — vulnerability — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2-2022-1782 Related CVEs: CVE-2022-1271 Upstream summary: An arbitrary file write vulnerability was found in GNU gzip's zgrep utility. When zgrep is applied on the attacker's chosen file name (for example, […]

Read more
Amazon Linux 2 — xz — vulnerability — patch and remediation guide — diagnosis and fix on Amazon Linux 2

Amazon Linux 2 — xz — vulnerability — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2-2022-1782 Related CVEs: CVE-2022-1271 Upstream summary: An arbitrary file write vulnerability was found in GNU gzip's zgrep utility. When zgrep is applied on the attacker's chosen file name (for example, […]

Read more
Amazon Linux 2 — zlib — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on Amazon Linux 2

Amazon Linux 2 — zlib — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2-2022-1772 Related CVEs: CVE-2018-25032 CVE-2023-45853 CVE-2022-37434 Upstream summary: An out-of-bounds access flaw was found in zlib, which allows memory corruption when deflating (ex: when compressing) if the input has many […]

Read more
Amazon Linux 2 — kernel-livepatch-4.14.256-197.484 — vulnerability — patch and remediation guide — diagnosis and fix on Amazon Linux 2

Amazon Linux 2 — kernel-livepatch-4.14.256-197.484 — vulnerability — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2LIVEPATCH-2022-075 Related CVEs: CVE-2021-4155 Upstream summary: A data leak flaw was found in the way XFS_IOC_ALLOCSP IOCTL in the XFS filesystem allowed for size increase of files with unaligned size. […]

Read more
Amazon Linux 2 — kernel-livepatch-5.10.82-83.359 — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Amazon Linux 2

Amazon Linux 2 — kernel-livepatch-5.10.82-83.359 — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2LIVEPATCH-2022-076 Related CVEs: CVE-2021-4155 CVE-2022-0185 Upstream summary: A data leak flaw was found in the way XFS_IOC_ALLOCSP IOCTL in the XFS filesystem allowed for size increase of files with unaligned […]

Read more
Amazon Linux 2 — log4j — multiple vulnerabilities (7 CVEs) — patch and remediation guide — diagnosis and fix on Amazon Linux 2

Amazon Linux 2 — log4j — multiple vulnerabilities (7 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2-2022-1750 Related CVEs: CVE-2022-23302 CVE-2022-23305 CVE-2022-23307 CVE-2017-5645 CVE-2019-17571 CVE-2021-4104 CVE-2021-44228 Upstream summary: A flaw was found in the Java logging library Apache Log4j in version 1.x. JMSSink in Log4j 1.x […]

Read more
Amazon Linux 2 — polkit — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on Amazon Linux 2

Amazon Linux 2 — polkit — multiple vulnerabilities (5 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2-2022-1745 Related CVEs: CVE-2021-4034 CVE-2019-6133 CVE-2025-7519 CVE-2018-19788 CVE-2018-1116 Upstream summary: A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to […]

Read more
Amazon Linux 2 — mailman — multiple vulnerabilities (8 CVEs) — patch and remediation guide — diagnosis and fix on Amazon Linux 2

Amazon Linux 2 — mailman — multiple vulnerabilities (8 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2-2022-1740 Related CVEs: CVE-2016-6893 CVE-2021-42097 CVE-2021-44227 CVE-2021-43331 CVE-2021-43332 CVE-2018-0618 CVE-2018-13796 CVE-2018-5950 Upstream summary: Cross-site request forgery (CSRF) vulnerability in the user options page in GNU Mailman 2.1.x before 2.1.23 allows […]

Read more
Amazon Linux 2 — kernel-livepatch-5.10.62-55.141 — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on Amazon Linux 2

Amazon Linux 2 — kernel-livepatch-5.10.62-55.141 — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2LIVEPATCH-2021-074 Related CVEs: CVE-2021-4002 CVE-2021-43267 CVE-2021-41073 Upstream summary: A memory leak flaw in the Linux kernel's hugetlbfs memory usage was found in the way the user maps some regions of […]

Read more
CHAT