Amazon Linux 2 — unzip — multiple vulnerabilities (8 CVEs) — patch and remediation guide
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2-2021-1604 Related CVEs: CVE-2015-7697 CVE-2016-9844 CVE-2018-1000035 CVE-2021-4217 CVE-2022-0529 CVE-2022-0530 CVE-2019-13232 CVE-2018-18384 Upstream summary: Info-ZIP UnZip 6.0 allows remote attackers to cause a denial of service (infinite loop) via empty bzip2 […]