Amazon Linux 2023

Amazon Linux 2023 — kernel-livepatch-6.1.124-134.200 — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on Amazon Linux 2023

Amazon Linux 2023 — kernel-livepatch-6.1.124-134.200 — multiple vulnerabilities (5 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2023LIVEPATCH-2025-039 Related CVEs: CVE-2024-56631 CVE-2025-21631 CVE-2025-21647 CVE-2024-36899 CVE-2024-50246 Upstream summary: In the Linux kernel, the following vulnerability has been resolved: scsi: sg: Fix slab-use-after-free read in sg_release() (CVE-2024-56631) In the […]

Read more
Amazon Linux 2023 — python-jinja2 — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on Amazon Linux 2023

Amazon Linux 2023 — python-jinja2 — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2023-2025-894 Related CVEs: CVE-2025-27516 CVE-2024-56326 CVE-2024-22195 CVE-2024-34064 Upstream summary: Jinja is an extensible templating engine. Prior to 3.1.6, an oversight in how the Jinja sandboxed environment interacts with the |attr […]

Read more
Amazon Linux 2023 — aws-kinesis-agent — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Amazon Linux 2023

Amazon Linux 2023 — aws-kinesis-agent — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2023-2025-889 Related CVEs: CVE-2022-42004 CVE-2025-49128 Upstream summary: In FasterXML jackson-databind before 2.13.4, resource exhaustion can occur because of a lack of a check in BeanDeserializer._deserializeFromArray to prevent use of deeply […]

Read more
Amazon Linux 2023 — emacs — multiple vulnerabilities (14 CVEs) — patch and remediation guide — diagnosis and fix on Amazon Linux 2023

Amazon Linux 2023 — emacs — multiple vulnerabilities (14 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2023-2025-867 Related CVEs: CVE-2025-1244 CVE-2024-53920 CVE-2024-30203 CVE-2024-30204 CVE-2024-30205 CVE-2024-39331 CVE-2024-30202 CVE-2023-28617  +6 more Upstream summary: A flaw was found in the Emacs text editor. Improper handling of custom "man" URI […]

Read more
Amazon Linux 2023 — libpq — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Amazon Linux 2023

Amazon Linux 2023 — libpq — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2023-2025-868 Related CVEs: CVE-2025-1094 CVE-2025-12818 Upstream summary: Improper neutralization of quoting syntax in PostgreSQL libpq functions PQescapeLiteral(), PQescapeIdentifier(), PQescapeString(), and PQescapeStringConn() allows a database input provider to achieve SQL injection […]

Read more
Amazon Linux 2023 — libtirpc — vulnerability — patch and remediation guide — diagnosis and fix on Amazon Linux 2023

Amazon Linux 2023 — libtirpc — vulnerability — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2023-2025-890 Related CVEs: CVE-2021-46828 Upstream summary: In libtirpc before 1.3.3rc1, remote attackers could exhaust the file descriptors of a process that uses libtirpc because idle TCP connections are mishandled. This […]

Read more
Amazon Linux 2023 — kernel-livepatch-6.1.112-124.190 — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Amazon Linux 2023

Amazon Linux 2023 — kernel-livepatch-6.1.112-124.190 — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2023LIVEPATCH-2025-037 Related CVEs: CVE-2024-36899 CVE-2024-47701 CVE-2024-47742 CVE-2024-49855 CVE-2024-49860 CVE-2024-49936 CVE-2024-49960 CVE-2024-49983  +12 more Upstream summary: In the Linux kernel, the following vulnerability has been resolved: gpiolib: cdev: Fix use after […]

Read more
Amazon Linux 2023 — kernel-livepatch-6.1.115-126.197 — multiple vulnerabilities (11 CVEs) — patch and remediation guide — diagnosis and fix on Amazon Linux 2023

Amazon Linux 2023 — kernel-livepatch-6.1.115-126.197 — multiple vulnerabilities (11 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2023LIVEPATCH-2025-035 Related CVEs: CVE-2024-36899 CVE-2024-49960 CVE-2024-49996 CVE-2024-50055 CVE-2024-50121 CVE-2024-50242 CVE-2024-50246 CVE-2024-50247  +3 more Upstream summary: In the Linux kernel, the following vulnerability has been resolved: gpiolib: cdev: Fix use after […]

Read more
Amazon Linux 2023 — kernel-livepatch-6.1.119-129.201 — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on Amazon Linux 2023

Amazon Linux 2023 — kernel-livepatch-6.1.119-129.201 — multiple vulnerabilities (5 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2023LIVEPATCH-2025-036 Related CVEs: CVE-2024-36899 CVE-2024-50055 CVE-2024-50121 CVE-2024-50246 CVE-2024-53206 Upstream summary: In the Linux kernel, the following vulnerability has been resolved: gpiolib: cdev: Fix use after free in lineinfo_changed_notify (CVE-2024-36899) In […]

Read more
Amazon Linux 2023 — kernel-livepatch-6.1.92-99.174 — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Amazon Linux 2023

Amazon Linux 2023 — kernel-livepatch-6.1.92-99.174 — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2023LIVEPATCH-2024-032 Related CVEs: CVE-2024-41090 CVE-2024-41091 Upstream summary: kernel: virtio-net: tap: mlx5_core short frame denial of service (CVE-2024-41090) kernel: virtio-net: tun: mlx5_core short frame denial of service (CVE-2024-41091) Table of contents […]

Read more
CHAT