Amazon Linux

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2023-2024-743 Related CVEs: CVE-2024-47220 CVE-2023-28755 CVE-2023-28756 CVE-2025-43857 CVE-2025-6442 CVE-2025-24294 CVE-2025-27221 CVE-2025-25186  +12 more Upstream summary: An issue was discovered in the WEBrick toolkit through 1.8.1 for Ruby. It allows HTTP […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2023-2024-726 Related CVEs: CVE-2024-42472 Upstream summary: A sandbox escape vulnerability was found in Flatpak due to a symlink-following issue when mounting persistent directories. This flaw allows a local user or […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2023-2024-722 Related CVEs: CVE-2024-47191 Upstream summary: oath-toolkit: Local root exploit in a PAM module (CVE-2024-47191) Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2023-2024-718 Related CVEs: CVE-2024-47175 CVE-2023-24805 CVE-2025-57812 CVE-2025-64503 CVE-2025-64524 CVE-2024-47076 CVE-2024-47176 CVE-2024-47850 Upstream summary: A flaw in cups-filters allows a remote unauthenticated client to create a PPD configuration file with code […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2023-2024-675 Related CVEs: CVE-2024-6655 Upstream summary: gtk3: gtk2: Library injection from CWD (CVE-2024-6655) Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2023-2024-667 Related CVEs: CVE-2024-21131 CVE-2024-21138 CVE-2024-21140 CVE-2024-21145 CVE-2024-21147 CVE-2024-21011 CVE-2024-21012 CVE-2024-21068 Upstream summary: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2023-2024-662 Related CVEs: CVE-2024-34069 CVE-2023-25577 CVE-2023-23934 Upstream summary: Werkzeug is a comprehensive WSGI web application library. The debugger in affected versions of Werkzeug can allow an attacker to execute code […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2023-2024-638 Related CVEs: CVE-2024-27322 Upstream summary: Deserialization of untrusted data can occur in the R statistical programming language, on any version starting at 1.4.0 up to and not including 4.4.0, […]