Amazon Linux 2 : xorg-x11-server, --advisory ALAS2-2026-3806 (ALAS-2026-3806)

It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3806 advisory. glamor Font Atlas Heap Buffer Overflow CVE-2026-55999 Tenable has extracted the preceding description block directly from the tested product security advisory. Note that Nessus has not tested for this iss...

Amazon Linux 2 : krb5, --advisory ALAS2-2026-3798 (ALAS-2026-3798)

It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3798 advisory. An integer underflow vulnerability was found in MIT krb5 in the berval2tldata function in plugins/kdb/ldap/libkdbldap/ldapprincipal2.c. The function performs an unsigned subtraction bvlen - 2 without a...

Amazon Linux 2 : golist, --advisory ALAS2-2026-3818 (ALAS-2026-3818)

The version of golist installed on the remote host is prior to 0.10.1-10. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3818 advisory. On Unix systems, opening a file in an os.Root improperly follows symlinks to locations outside of the Root when the final...

Amazon Linux 2 : rust, --advisory ALAS2-2026-3808 (ALAS-2026-3808)

The version of rust installed on the remote host is prior to 1.97.0-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3808 advisory. gix-submodule before 0.29.0 gitoxide before 0.5.21, gix before 0.84.0 incorrectly validates the update field in .gitmodules, allowing...

Amazon Linux 2 : python3-pygments, --advisory ALAS2-2026-3817 (ALAS-2026-3817)

The version of python3-pygments installed on the remote host is prior to 2.2.0-3. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3817 advisory. A security flaw has been discovered in pygments up to 2.19.2. The impacted element is the function AdlLexer of the file...

Amazon Linux 2 : libXfont2, --advisory ALAS2-2026-3814 (ALAS-2026-3814)

The version of libXfont2 installed on the remote host is prior to 2.0.3-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3814 advisory. BitmapScaleBitmaps Integer Overflow Heap Buffer Overflow CVE-2026-56001 PCF Font Parsing Heap Buffer Overflow...

Amazon Linux 2 : vim, --advisory ALAS2-2026-3804 (ALAS-2026-3804)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3804 advisory. Vim is an open source, command line text editor. Prior to 9.2.0653, the treecountwords function in src/spellfile.c fills in the word-count fields of a spell-file word trie by walking it iterative...

Amazon Linux 2 : tomcat, --advisory ALAS2TOMCAT9-2026-027 (ALASTOMCAT9-2026-027)

The version of tomcat installed on the remote host is prior to 9.0.120-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2TOMCAT9-2026-027 advisory. Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in the number guess examp...

Amazon Linux 2 : unbound, --advisory ALAS2UNBOUND-1.17-2026-008 (ALASUNBOUND-1.17-2026-008)

The version of unbound installed on the remote host is prior to 1.17.0-2. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2UNBOUND-1.17-2026-008 advisory. NLnet Labs Unbound 1.19.1 up to and including version 1.25.0 has a vulnerability in the DNSSEC validator that...

Amazon Linux 2 : kernel, --advisory ALAS2KERNEL-5.15-2026-110 (ALASKERNEL-5.15-2026-110)

"The version of kernel installed on the remote host is prior to 5.15.210-148.245. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.15-2026-110 advisory. In the Linux kernel, the following vulnerability has been resolved: nfsd: fix heap overflow in NFSv4.0...

Amazon Linux 2 : php, --advisory ALAS2PHP8.2-2026-012 (ALASPHP8.2-2026-012)

The version of php installed on the remote host is prior to 8.2.32-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2PHP8.2-2026-012 advisory. PHP: ext/openssl: Memory corruption zendmmheap corrupted in opensslencrypt with AES-WRAP-PAD CVE-2026-14355 Tenable has extracted...

Important: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: rtmutex: Use waiter::task instead of current in removewaiter CVE-2026-43499 Affected Packages: kernel Note: This advisory is applicable to Amazon Linux 2 - Kernel-5.4 Extra. Visit this page to learn more about...

Important: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: rtmutex: Use waiter::task instead of current in removewaiter CVE-2026-43499 Affected Packages: kernel Note: This advisory is applicable to Amazon Linux 2 - Kernel-5.15 Extra. Visit this page to learn more about...

Amazon Linux 2 : virtuoso-opensource, --advisory ALAS2-2026-3799 (ALAS-2026-3799)

The version of virtuoso-opensource installed on the remote host is prior to 7.2.14-2. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3799 advisory. An issue in the chasharray component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Deni...

Amazon Linux 2 : kernel, --advisory ALAS2-2026-3801 (ALAS-2026-3801)

The version of kernel installed on the remote host is prior to 4.14.355-284.740. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3801 advisory. In the Linux kernel, the following vulnerability has been resolved: rtmutex: Use waiter::task instead of current in...

Amazon Linux 2 : kernel, --advisory ALAS2KERNEL-5.4-2026-126 (ALASKERNEL-5.4-2026-126)

The version of kernel installed on the remote host is prior to 5.4.302-226.484. It is, therefore, affected by a vulnerability as referenced in the ALAS2KERNEL-5.4-2026-126 advisory. In the Linux kernel, the following vulnerability has been resolved: rtmutex: Use waiter::task instead of current in...

Amazon Linux 2 : kernel, --advisory ALAS2KERNEL-5.15-2026-109 (ALASKERNEL-5.15-2026-109)

The version of kernel installed on the remote host is prior to 5.15.210-148.247. It is, therefore, affected by a vulnerability as referenced in the ALAS2KERNEL-5.15-2026-109 advisory. In the Linux kernel, the following vulnerability has been resolved: rtmutex: Use waiter::task instead of current ...

Amazon Linux 2 : qemu, --advisory ALAS2-2026-3793 (ALAS-2026-3793)

The version of qemu installed on the remote host is prior to 3.1.0-8. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3793 advisory. A flaw was found in QEMU's virtio-blk device. The issue arises because the device does not properly validate the size of input...

Amazon Linux 2 : gstreamer1-plugins-good, --advisory ALAS2-2026-3788 (ALAS-2026-3788)

The version of gstreamer1-plugins-good installed on the remote host is prior to 1.18.4-6. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3788 advisory. Heap buffer overflow in the Matroska MKV demuxer when calculating decompressed buffer sizes for...

Amazon Linux 2 : docker, --advisory ALAS2DOCKER-2026-134 (ALASDOCKER-2026-134)

The version of docker installed on the remote host is prior to 25.0.16-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2DOCKER-2026-134 advisory. x509.Certificate.VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name SAN...