🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read • Source: Amazon Linux advisory ALAS2023-2026-1680 Related CVEs: CVE-2026-40355 CVE-2026-40356 CVE-2025-24528 CVE-2025-3576 CVE-2024-37370 CVE-2024-37371 CVE-2024-26458 CVE-2024-26461 +3 more Upstream summary: In MIT Kerberos 5 (aka krb5) before 1.22.3, there is a NULL pointer dereference if […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read • Source: Amazon Linux advisory ALAS2023-2026-1418 Related CVEs: CVE-2025-66418 CVE-2025-66471 CVE-2026-21441 CVE-2025-50181 CVE-2024-37891 CVE-2023-43804 Upstream summary: urllib3 is a user-friendly HTTP client library for Python. Starting in version 1.24 and prior to 2.6.0, the number […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read • Source: Amazon Linux advisory ALAS2023-2026-1563 Related CVEs: CVE-2026-33416 CVE-2026-33636 CVE-2025-66293 CVE-2025-64505 CVE-2025-64506 CVE-2025-64720 CVE-2025-65018 CVE-2026-34757 +5 more Upstream summary: LIBPNG is a reference library for use in applications that read, create, and manipulate PNG […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2-2026-3277 Related CVEs: CVE-2026-5795 CVE-2021-28165 CVE-2024-9823 CVE-2023-40167 CVE-2023-36479 CVE-2021-28169 CVE-2021-34428 Upstream summary: In Eclipse Jetty, the class JASPIAuthenticator initiates the authentication checks, which set two ThreadLocal variable. Upon returning from […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read • Source: Amazon Linux advisory ALAS2023NVIDIA-2025-154 Related CVEs: CVE-2025-23248 CVE-2025-23255 CVE-2025-23271 CVE-2025-23273 CVE-2025-23274 CVE-2025-23275 CVE-2025-23308 CVE-2025-23338 +3 more Upstream summary: NVIDIA CUDA Toolkit for all platforms contains a vulnerability in the nvdisasm binary where a […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read • Source: Amazon Linux advisory ALAS2023-2026-1686 Related CVEs: CVE-2026-22007 CVE-2026-22008 CVE-2026-22013 CVE-2026-22016 CVE-2026-22018 CVE-2026-22021 CVE-2026-34268 CVE-2026-34282 +7 more Upstream summary: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2-2026-3180 Related CVEs: CVE-2026-25990 CVE-2022-22817 CVE-2023-50447 CVE-2014-1932 CVE-2014-1933 CVE-2014-3007 CVE-2021-23437 CVE-2014-9601 +12 more Upstream summary: Pillow is a Python imaging library. From 10.3.0 to before 12.1.1, n out-of-bounds write may […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2-2026-3281 Related CVEs: CVE-2026-4519 CVE-2026-4786 CVE-2026-6100 CVE-2025-13462 CVE-2026-3479 CVE-2025-8194 CVE-2024-6232 CVE-2023-6597 +12 more Upstream summary: Mitgation of CVE-2026-4519 was incomplete. If the URL contained "%action" the mitigation could be bypassed […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read • Source: Amazon Linux advisory ALAS2023-2025-1331 Related CVEs: CVE-2025-13699 CVE-2026-21968 CVE-2025-30722 CVE-2023-52971 Upstream summary: A flaw was found in MariaDB. This vulnerability allows remote attackers to execute arbitrary code on affected installations via improper validation […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read • Source: Amazon Linux advisory ALAS2023LIVEPATCH-2026-116 Related CVEs: CVE-2025-71085 CVE-2025-71091 CVE-2025-71116 Upstream summary: In the Linux kernel, the following vulnerability has been resolved: ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CVE-2025-71085) In the Linux […]
