Amazon Linux 2023

Amazon Linux 2023 — runc — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Amazon Linux 2023

Amazon Linux 2023 — runc — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2023-2025-1286 Related CVEs: CVE-2025-31133 CVE-2025-47912 CVE-2025-52565 CVE-2025-52881 CVE-2025-58183 CVE-2025-58185 CVE-2025-58186 CVE-2025-58187  +12 more Upstream summary: Placeholder CVE. Details forthcoming (CVE-2025-31133) net/url: insufficient validation of bracketed IPv6 hostnames The Parse function […]

Read more
Amazon Linux 2023 — xmlunit — vulnerability — patch and remediation guide — diagnosis and fix on Amazon Linux 2023

Amazon Linux 2023 — xmlunit — vulnerability — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2023-2025-1260 Related CVEs: CVE-2024-31573 Upstream summary: XMLUnit for Java before 2.10.0, in the default configuration, might allow code execution via an untrusted stylesheet (used for an XSLT transformation), because XSLT […]

Read more
Amazon Linux 2023 — 7zip — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Amazon Linux 2023

Amazon Linux 2023 — 7zip — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2023-2025-1251 Related CVEs: CVE-2025-11001 CVE-2025-11002 Upstream summary: This vulnerability allows remote attackers to execute arbitrary code on affected installations of 7-Zip. Interaction with this product is required to exploit this […]

Read more
Amazon Linux 2023 — gi-docgen — vulnerability — patch and remediation guide — diagnosis and fix on Amazon Linux 2023

Amazon Linux 2023 — gi-docgen — vulnerability — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2023-2025-1247 Related CVEs: CVE-2025-11687 Upstream summary: gi-docgen does not encode search terms before inserting them into HTML, allowing XSS via a crafted URL. Description obtained from: https://gitlab.gnome.org/GNOME/gi-docgen/-/issues/228 (CVE-2025-11687) Table of […]

Read more
Amazon Linux 2023 — kernel-livepatch-6.1.141-167.250 — multiple vulnerabilities (7 CVEs) — patch and remediation guide — diagnosis and fix on Amazon Linux 2023

Amazon Linux 2023 — kernel-livepatch-6.1.141-167.250 — multiple vulnerabilities (7 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2023LIVEPATCH-2025-094 Related CVEs: CVE-2025-39923 CVE-2025-38248 CVE-2025-38386 CVE-2025-39673 CVE-2025-39677 CVE-2025-39691 CVE-2025-39730 Upstream summary: In the Linux kernel, the following vulnerability has been resolved: dmaengine: qcom: bam_dma: Fix DT error handling for […]

Read more
Amazon Linux 2023 — kernel-livepatch-6.1.144-170.251 — multiple vulnerabilities (6 CVEs) — patch and remediation guide — diagnosis and fix on Amazon Linux 2023

Amazon Linux 2023 — kernel-livepatch-6.1.144-170.251 — multiple vulnerabilities (6 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2023LIVEPATCH-2025-092 Related CVEs: CVE-2025-39923 CVE-2025-38248 CVE-2025-39673 CVE-2025-39677 CVE-2025-39691 CVE-2025-39730 Upstream summary: In the Linux kernel, the following vulnerability has been resolved: dmaengine: qcom: bam_dma: Fix DT error handling for num-channels/ees […]

Read more
Amazon Linux 2023 — kernel-livepatch-6.1.147-172.259 — multiple vulnerabilities (6 CVEs) — patch and remediation guide — diagnosis and fix on Amazon Linux 2023

Amazon Linux 2023 — kernel-livepatch-6.1.147-172.259 — multiple vulnerabilities (6 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2023LIVEPATCH-2025-093 Related CVEs: CVE-2025-39923 CVE-2025-38248 CVE-2025-39673 CVE-2025-39677 CVE-2025-39691 CVE-2025-39730 Upstream summary: In the Linux kernel, the following vulnerability has been resolved: dmaengine: qcom: bam_dma: Fix DT error handling for num-channels/ees […]

Read more
Amazon Linux 2023 — kernel-livepatch-6.12.37-61.105 — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on Amazon Linux 2023

Amazon Linux 2023 — kernel-livepatch-6.12.37-61.105 — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2023LIVEPATCH-2025-101 Related CVEs: CVE-2025-39923 CVE-2025-39677 CVE-2025-38248 Upstream summary: In the Linux kernel, the following vulnerability has been resolved: dmaengine: qcom: bam_dma: Fix DT error handling for num-channels/ees (CVE-2025-39923) Table of […]

Read more
Amazon Linux 2023 — kernel-livepatch-6.12.40-63.107 — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on Amazon Linux 2023

Amazon Linux 2023 — kernel-livepatch-6.12.40-63.107 — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2023LIVEPATCH-2025-100 Related CVEs: CVE-2025-39923 CVE-2025-39677 CVE-2025-38248 Upstream summary: In the Linux kernel, the following vulnerability has been resolved: dmaengine: qcom: bam_dma: Fix DT error handling for num-channels/ees (CVE-2025-39923) Table of […]

Read more
Amazon Linux 2023 — p7zip — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on Amazon Linux 2023

Amazon Linux 2023 — p7zip — multiple vulnerabilities (5 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2023-2025-1250 Related CVEs: CVE-2025-11001 CVE-2025-11002 CVE-2023-52168 CVE-2023-52169 CVE-2022-47069 Upstream summary: This vulnerability allows remote attackers to execute arbitrary code on affected installations of 7-Zip. Interaction with this product is required […]

Read more
CHAT