Amazon Linux 2

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2ECS-2026-109 Related CVEs: CVE-2026-27143 CVE-2026-27144 CVE-2026-32280 CVE-2026-32281 CVE-2026-32282 CVE-2026-32283 CVE-2026-32288 CVE-2026-32289  +12 more Upstream summary: Arithmetic over induction variables in loops were not correctly checked for underflow or overflow in […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2-2025-2989 Related CVEs: CVE-2025-50422 Upstream summary: An issue was discovered in freedesktop poppler v25.04.0. The heap memory containing PDF stream objects is not cleared upon program exit, allowing attackers to […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2-2025-2897 Related CVEs: CVE-2025-5283 CVE-2024-5197 CVE-2023-44488 CVE-2023-6349 CVE-2017-0393 CVE-2019-9232 CVE-2019-9433 CVE-2020-0034  +1 more Upstream summary: Use after free in libvpx in Google Chrome prior to 137.0.7151.55 allowed a remote attacker […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2REDIS6-2025-015 Related CVEs: CVE-2025-46817 CVE-2025-46818 CVE-2025-46819 CVE-2025-49844 CVE-2025-32023 CVE-2025-48367 CVE-2025-21605 CVE-2024-46981  +12 more Upstream summary: Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2-2026-3285 Related CVEs: CVE-2026-41176 CVE-2026-41179 CVE-2026-33186 CVE-2025-47912 CVE-2025-58183 CVE-2025-58185 CVE-2025-58186 CVE-2025-58187  +7 more Upstream summary: Rclone is a command-line program to sync files and directories to and from different cloud […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2-2026-3252 Related CVEs: CVE-2026-27856 CVE-2026-27857 CVE-2020-12100 CVE-2020-12673 CVE-2020-12674 CVE-2019-11500 CVE-2024-23185 CVE-2022-30550  +2 more Upstream summary: Doveadm credentials are verified using direct comparison which is susceptible to timing oracle attack. An […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2-2026-3209 Related CVEs: CVE-2026-3083 CVE-2026-3085 CVE-2024-47540 CVE-2024-47606 CVE-2024-47537 CVE-2024-47613 CVE-2023-37327 CVE-2026-1940  +12 more Upstream summary: Heap-based buffer overflow and out-of-bounds write in the RTP QDM2 depayloader. (CVE-2026-3083) Heap-based buffer overflow […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2-2025-3046 Related CVEs: CVE-2025-61770 CVE-2025-61771 CVE-2025-61772 CVE-2025-46727 CVE-2022-30122 CVE-2022-30123 CVE-2018-1000119 CVE-2018-1079  +8 more Upstream summary: Rack is a modular Ruby web server interface. In versions prior to 2.2.19, 3.1.17, and […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2-2026-3222 Related CVEs: CVE-2026-3082 CVE-2024-0444 CVE-2023-44429 CVE-2023-44446 CVE-2023-40474 CVE-2023-40475 CVE-2023-40476 Upstream summary: GStreamer JPEG Parser Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2-2025-3005 Related CVEs: CVE-2025-40928 Upstream summary: JSON::XS before version 4.04 for Perl has an integer buffer overflow causing a segfault when parsing crafted JSON, enabling denial-of-service attacks or other unspecified […]