Amazon Linux

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2-2026-3252 Related CVEs: CVE-2026-27856 CVE-2026-27857 CVE-2020-12100 CVE-2020-12673 CVE-2020-12674 CVE-2019-11500 CVE-2024-23185 CVE-2022-30550  +2 more Upstream summary: Doveadm credentials are verified using direct comparison which is susceptible to timing oracle attack. An […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2023-2026-1582 Related CVEs: CVE-2025-47911 CVE-2025-58190 CVE-2025-61730 CVE-2026-25679 CVE-2026-27139 CVE-2026-27142 CVE-2026-32280 CVE-2026-32288 Upstream summary: The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2-2026-3209 Related CVEs: CVE-2026-3083 CVE-2026-3085 CVE-2024-47540 CVE-2024-47606 CVE-2024-47537 CVE-2024-47613 CVE-2023-37327 CVE-2026-1940  +12 more Upstream summary: Heap-based buffer overflow and out-of-bounds write in the RTP QDM2 depayloader. (CVE-2026-3083) Heap-based buffer overflow […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2023-2026-1460 Related CVEs: CVE-2026-1536 CVE-2026-1539 CVE-2026-2369 CVE-2026-0719 CVE-2025-14523 CVE-2025-11021 CVE-2025-12105 CVE-2025-4945  +12 more Upstream summary: A flaw was found in libsoup. An attacker who can control the input for the […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2023-2026-1504 Related CVEs: CVE-2026-2921 CVE-2025-47806 CVE-2025-47807 CVE-2025-47808 Upstream summary: An integer overflow in the RIFF parser that can cause crashes for certain input files. (CVE-2026-2921) Table of contents Symptom & […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2-2025-3046 Related CVEs: CVE-2025-61770 CVE-2025-61771 CVE-2025-61772 CVE-2025-46727 CVE-2022-30122 CVE-2022-30123 CVE-2018-1000119 CVE-2018-1079  +8 more Upstream summary: Rack is a modular Ruby web server interface. In versions prior to 2.2.19, 3.1.17, and […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2-2026-3222 Related CVEs: CVE-2026-3082 CVE-2024-0444 CVE-2023-44429 CVE-2023-44446 CVE-2023-40474 CVE-2023-40475 CVE-2023-40476 Upstream summary: GStreamer JPEG Parser Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2023-2025-1154 Related CVEs: CVE-2025-7425 CVE-2025-49794 CVE-2025-49795 CVE-2025-49796 CVE-2025-6021 CVE-2017-9047 CVE-2024-56171 CVE-2025-24928  +12 more Upstream summary: A flaw was found in libxslt where the attribute type, atype, flags are modified in […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2023-2026-1679 Related CVEs: CVE-2026-41066 Upstream summary: lxml is a library for processing XML and HTML in the Python language. Prior to 6.1.0, using either of the two parsers in the […]