🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read • Source: Amazon Linux advisory ALAS2023-2025-1200 Related CVEs: CVE-2025-40928 Upstream summary: JSON::XS before version 4.04 for Perl has an integer buffer overflow causing a segfault when parsing crafted JSON, enabling denial-of-service attacks or other unspecified […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read • Source: Amazon Linux advisory ALAS2023-2026-1552 Related CVEs: CVE-2026-25679 CVE-2026-27139 CVE-2026-27142 CVE-2026-33186 CVE-2025-65637 CVE-2025-47912 CVE-2025-58183 CVE-2025-58185 +12 more Upstream summary: url.Parse insufficiently validated the host/authority component and accepted some invalid URLs. (CVE-2026-25679) On Unix platforms, […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read • Source: Amazon Linux advisory ALAS2023-2026-1641 Related CVEs: CVE-2026-41564 CVE-2023-36328 CVE-2025-40914 Upstream summary: NOTE: https://lists.security.metacpan.org/cve-announce/msg/39209500/ NOTE: https://github.com/DCIT/perl-CryptX/security/advisories/GHSA-24c2-gp6c-24c6 NOTE: Fixed by: https://github.com/DCIT/perl-CryptX/commit/9a1dd3e0c27d68e32450be5538b864c2b115ee15 (v0.088) (CVE-2026-41564) Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read • Source: Amazon Linux advisory ALAS2023LIVEPATCH-2026-140 Related CVEs: CVE-2026-43284 Upstream summary: In the Linux kernel, the following vulnerability has been resolved: xfrm: esp: avoid in-place decrypt on shared skb frags "Dirty Frag" and other issues […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read • Source: Amazon Linux advisory ALAS2023-2026-1573 Related CVEs: CVE-2026-25679 CVE-2026-27139 CVE-2026-27142 CVE-2026-33186 CVE-2025-47912 CVE-2025-58183 CVE-2025-58185 CVE-2025-58186 +12 more Upstream summary: url.Parse insufficiently validated the host/authority component and accepted some invalid URLs. (CVE-2026-25679) On Unix platforms, […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read • Source: Amazon Linux advisory ALAS2023-2026-1448 Related CVEs: CVE-2026-24400 Upstream summary: AssertJ provides Fluent testing assertions for Java and the Java Virtual Machine (JVM). Starting in version 1.4.0 and prior to version 3.27.7, an XML […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read • Source: Amazon Linux advisory ALAS2023-2026-1461 Related CVEs: CVE-2026-0966 CVE-2026-0968 CVE-2026-0964 CVE-2026-0967 CVE-2025-8114 CVE-2025-8277 CVE-2025-4878 CVE-2025-5318 +5 more Upstream summary: libssh: Buffer underflow in ssh_get_hexa() on invalid input (CVE-2026-0966) Table of contents Symptom & Impact […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read • Source: Amazon Linux advisory ALAS2023-2023-402 Related CVEs: CVE-2023-46847 CVE-2026-32748 CVE-2026-33526 CVE-2025-62168 CVE-2025-59362 CVE-2023-49285 CVE-2023-49288 CVE-2023-5824 +12 more Upstream summary: Due to a buffer overflow bug Squid is vulnerable to a Denial of Service attack […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read • Source: Amazon Linux advisory ALAS2023-2026-1708 Related CVEs: CVE-2026-46300 CVE-2025-71269 CVE-2026-22986 CVE-2026-23302 CVE-2026-23374 CVE-2026-23389 CVE-2026-23442 CVE-2026-31407 +12 more Upstream summary: In the Linux kernel, the following vulnerability has been resolved: net: skbuff: propagate shared-frag marker […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read • Source: Amazon Linux advisory ALAS2023-2026-1451 Related CVEs: CVE-2026-2604 Upstream summary: The Evolution backend server exposes the D-Bus service org.gnome.evolution.dataserver.AddressBook, that can be used in order to manage contacts. A Flatpak application with access to […]
