Amazon Linux

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2023-2026-1457 Related CVEs: CVE-2026-2003 CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 CVE-2012-0868 CVE-2017-7484 CVE-2019-10130 CVE-2024-21096  +6 more Upstream summary: Improper validation of type "oidvector" in PostgreSQL allows a database user to disclose a few […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2023-2025-1301 Related CVEs: CVE-2025-11412 CVE-2025-7546 CVE-2025-1176 CVE-2025-1182 CVE-2024-57360 CVE-2025-0840 CVE-2023-1579 CVE-2022-45703  +8 more Upstream summary: A vulnerability has been found in GNU Binutils 2.45. This impacts the function bfd_elf_gc_record_vtentry of […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2023-2026-1547 Related CVEs: CVE-2026-4775 CVE-2025-61143 CVE-2025-61144 CVE-2025-9900 CVE-2022-3570 CVE-2022-3598 CVE-2022-48281 CVE-2023-30775  +12 more Upstream summary: A flaw was found in the libtiff library. A remote attacker could exploit a signed […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2023NVIDIA-2025-136 Related CVEs: CVE-2025-23277 CVE-2025-23278 CVE-2025-23244 Upstream summary: NVIDIA Display Driver for Linux and Windows contains a vulnerability in the kernel mode driver, where an attacker could access memory outside […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2023-2026-1690 Related CVEs: CVE-2026-41316 Upstream summary: ERB is a templating system for Ruby. Ruby 2.7.0 (before ERB 2.2.0 was published on rubygems.org) introduced an `@_init` instance variable guard in `ERB#result` […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2-2026-3262 Related CVEs: CVE-2026-35385 CVE-2016-10009 CVE-2023-38408 CVE-2025-26465 CVE-2023-51385 CVE-2023-48795 CVE-2019-6111 CVE-2023-35812  +7 more Upstream summary: In OpenSSH before 10.3, a file downloaded by scp may be installed setuid or setgid, […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2023-2026-1566 Related CVEs: CVE-2025-62518 CVE-2026-33055 CVE-2026-33056 CVE-2026-0810 CVE-2026-25727 CVE-2025-58160 Upstream summary: tar-rs is a tar archive reading/writing library for Rust. Versions 0.4.44 and below have conditional logic that skips the […]