Amazon Linux 2023

Amazon Linux 2023 — nss — multiple vulnerabilities (8 CVEs) — patch and remediation guide — diagnosis and fix on Amazon Linux 2023

Amazon Linux 2023 — nss — multiple vulnerabilities (8 CVEs) — patch and remediation guide

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2023-2023-031 Related CVEs: CVE-2021-43527 CVE-2023-7104 CVE-2023-0767 CVE-2026-6766 CVE-2026-6767 CVE-2026-6772 CVE-2023-6135 CVE-2023-5388 Upstream summary: NSS (Network Security Services) up to and including 3.73 is vulnerable to a heap overflow when handling […]

Read more
Amazon Linux 2023 — xmlrpc-c — multiple vulnerabilities (6 CVEs) — patch and remediation guide — diagnosis and fix on Amazon Linux 2023

Amazon Linux 2023 — xmlrpc-c — multiple vulnerabilities (6 CVEs) — patch and remediation guide

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2023-2023-068 Related CVEs: CVE-2022-25235 CVE-2023-52425 CVE-2023-52426 CVE-2024-28757 CVE-2024-8176 CVE-2025-59375 Upstream summary: A flaw was found in expat. Passing malformed 2- and 3-byte UTF-8 sequences (for example, from start tag names) […]

Read more
Amazon Linux 2023 — kernel — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Amazon Linux 2023

Amazon Linux 2023 — kernel — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2023-2026-1710 Related CVEs: CVE-2026-46300 CVE-2026-31533 CVE-2026-31628 CVE-2026-31634 CVE-2026-31656 CVE-2026-31662 CVE-2026-31664 CVE-2026-31665  +12 more Upstream summary: In the Linux kernel, the following vulnerability has been resolved: net: skbuff: propagate shared-frag marker […]

Read more
Amazon Linux 2023 — kernel6.12 — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Amazon Linux 2023

Amazon Linux 2023 — kernel6.12 — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2023-2026-1708 Related CVEs: CVE-2026-46300 CVE-2025-71269 CVE-2026-22986 CVE-2026-23302 CVE-2026-23374 CVE-2026-23389 CVE-2026-23442 CVE-2026-31407  +12 more Upstream summary: In the Linux kernel, the following vulnerability has been resolved: net: skbuff: propagate shared-frag marker […]

Read more
Amazon Linux 2023 — kernel6.18 — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Amazon Linux 2023

Amazon Linux 2023 — kernel6.18 — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2023-2026-1709 Related CVEs: CVE-2026-46300 CVE-2025-71239 CVE-2025-71265 CVE-2025-71266 CVE-2025-71267 CVE-2025-71295 CVE-2025-71298 CVE-2025-71301  +12 more Upstream summary: In the Linux kernel, the following vulnerability has been resolved: net: skbuff: propagate shared-frag marker […]

Read more
Amazon Linux 2023 — python-pip — multiple vulnerabilities (13 CVEs) — patch and remediation guide — diagnosis and fix on Amazon Linux 2023

Amazon Linux 2023 — python-pip — multiple vulnerabilities (13 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2023-2026-1689 Related CVEs: CVE-2026-6357 CVE-2026-21441 CVE-2025-66418 CVE-2025-66471 CVE-2025-8869 CVE-2025-50181 CVE-2001-1267 CVE-2007-4559  +5 more Upstream summary: pip prior to version 26.1 would run self-update check functionality after installing wheel files which […]

Read more
Amazon Linux 2023 — ruby3.4 — vulnerability — patch and remediation guide — diagnosis and fix on Amazon Linux 2023

Amazon Linux 2023 — ruby3.4 — vulnerability — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2023-2026-1690 Related CVEs: CVE-2026-41316 Upstream summary: ERB is a templating system for Ruby. Ruby 2.7.0 (before ERB 2.2.0 was published on rubygems.org) introduced an `@_init` instance variable guard in `ERB#result` […]

Read more
Amazon Linux 2023 — PackageKit — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Amazon Linux 2023

Amazon Linux 2023 — PackageKit — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2023-2026-1639 Related CVEs: CVE-2026-41651 CVE-2024-0217 Upstream summary: PackageKit is a a D-Bus abstraction layer that allows the user to manage packages in a secure way using a cross-distro, cross-architecture API. […]

Read more
Amazon Linux 2023 — bouncycastle — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on Amazon Linux 2023

Amazon Linux 2023 — bouncycastle — multiple vulnerabilities (5 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2023-2026-1688 Related CVEs: CVE-2025-14813 CVE-2024-29857 CVE-2024-34447 CVE-2023-33202 CVE-2023-33201 Upstream summary: Use of a Broken or Risky Cryptographic Algorithm vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA bcprov on all […]

Read more
Amazon Linux 2023 — dnsmasq — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on Amazon Linux 2023

Amazon Linux 2023 — dnsmasq — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2023-2026-1516 Related CVEs: CVE-2023-50387 CVE-2023-50868 CVE-2023-28450 CVE-2022-0934 Upstream summary: No CVE associated with this advisory Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step […]

Read more
CHAT