Amazon Linux

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2-2026-3164 Related CVEs: CVE-2025-15270 CVE-2025-15269 CVE-2025-15275 CVE-2025-15279 CVE-2025-50949 CVE-2024-25081 CVE-2024-25082 CVE-2020-5395 Upstream summary: FontForge SFD File Parsing Improper Validation of Array Index Remote Code Execution Vulnerability. This vulnerability allows remote […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2023-2024-575 Related CVEs: CVE-2022-31394 CVE-2025-3416 Upstream summary: RUSTSEC-2024-0006 NOTE: https://rustsec.org/advisories/RUSTSEC-2024-0006.html NOTE: https://github.com/comex/rust-shlex/security/advisories/GHSA-r7qv-8r2h-pg27 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2-2025-2887 Related CVEs: CVE-2025-47947 CVE-2025-48866 CVE-2022-39956 CVE-2022-48279 CVE-2023-24021 CVE-2025-54571 CVE-2025-52891 Upstream summary: ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. Versions […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2NITRO-ENCLAVES-2024-039 Related CVEs: CVE-2022-31394 CVE-2025-3416 Upstream summary: RUSTSEC-2024-0006 NOTE: https://rustsec.org/advisories/RUSTSEC-2024-0006.html NOTE: https://github.com/comex/rust-shlex/security/advisories/GHSA-r7qv-8r2h-pg27 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2023-2025-1349 Related CVEs: CVE-2025-14087 CVE-2025-13601 CVE-2025-3360 CVE-2025-6052 CVE-2023-24593 CVE-2023-25180 CVE-2023-29499 CVE-2023-32611  +1 more Upstream summary: Buffer underflow on Glib through glib/gvariant via bytestring_parse() or string_parse() leads to OOB Write. (CVE-2025-14087) […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2-2025-3082 Related CVEs: CVE-2025-57812 CVE-2025-64503 CVE-2025-64524 CVE-2024-47176 CVE-2024-47850 Upstream summary: CUPS is a standards-based, open-source printing system, and `libcupsfilters` contains the code of the filters of the former `cups-filters` package […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2-2025-2934 Related CVEs: CVE-2025-52999 Upstream summary: jackson-core contains core low-level incremental ("streaming") parser and generator abstractions used by Jackson Data Processor. In versions prior to 2.15.0, if a user parses […]

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2-2021-1730 Related CVEs: CVE-2021-44228 CVE-2021-45046 CVE-2022-42004 CVE-2025-49128 CVE-2021-44832 CVE-2021-45105 Upstream summary: Amazon Kinesis Agent versions within Amazon Linux 2 (AL2) prior to aws-kinesis-agent-2.0.4-1 included a version of Apache Log4j affected […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2023 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2023-2025-1020 Related CVEs: CVE-2025-6019 Upstream summary: LPE from allow_active to root in libblockdev via udisks (CVE-2025-6019) Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage […]