Amazon Linux 2 : golist, --advisory ALAS2-2026-3818 (ALAS-2026-3818)

The version of golist installed on the remote host is prior to 0.10.1-10. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3818 advisory. On Unix systems, opening a file in an os.Root improperly follows symlinks to locations outside of the Root when the final...

Amazon Linux 2 : xorg-x11-server, --advisory ALAS2-2026-3806 (ALAS-2026-3806)

It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3806 advisory. glamor Font Atlas Heap Buffer Overflow CVE-2026-55999 Tenable has extracted the preceding description block directly from the tested product security advisory. Note that Nessus has not tested for this iss...

Amazon Linux 2 : rust, --advisory ALAS2-2026-3808 (ALAS-2026-3808)

The version of rust installed on the remote host is prior to 1.97.0-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3808 advisory. gix-submodule before 0.29.0 gitoxide before 0.5.21, gix before 0.84.0 incorrectly validates the update field in .gitmodules, allowing...

Amazon Linux 2 : vim, --advisory ALAS2-2026-3804 (ALAS-2026-3804)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3804 advisory. Vim is an open source, command line text editor. Prior to 9.2.0653, the treecountwords function in src/spellfile.c fills in the word-count fields of a spell-file word trie by walking it iterative...

Amazon Linux 2 : libXfont2, --advisory ALAS2-2026-3814 (ALAS-2026-3814)

The version of libXfont2 installed on the remote host is prior to 2.0.3-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3814 advisory. BitmapScaleBitmaps Integer Overflow Heap Buffer Overflow CVE-2026-56001 PCF Font Parsing Heap Buffer Overflow...

Amazon Linux 2 : tomcat, --advisory ALAS2TOMCAT9-2026-027 (ALASTOMCAT9-2026-027)

The version of tomcat installed on the remote host is prior to 9.0.120-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2TOMCAT9-2026-027 advisory. Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in the number guess examp...

Amazon Linux 2 : unbound, --advisory ALAS2UNBOUND-1.17-2026-008 (ALASUNBOUND-1.17-2026-008)

The version of unbound installed on the remote host is prior to 1.17.0-2. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2UNBOUND-1.17-2026-008 advisory. NLnet Labs Unbound 1.19.1 up to and including version 1.25.0 has a vulnerability in the DNSSEC validator that...

Amazon Linux 2 : php, --advisory ALAS2PHP8.2-2026-012 (ALASPHP8.2-2026-012)

The version of php installed on the remote host is prior to 8.2.32-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2PHP8.2-2026-012 advisory. PHP: ext/openssl: Memory corruption zendmmheap corrupted in opensslencrypt with AES-WRAP-PAD CVE-2026-14355 Tenable has extracted...

Amazon Linux 2 : kernel, --advisory ALAS2KERNEL-5.15-2026-110 (ALASKERNEL-5.15-2026-110)

"The version of kernel installed on the remote host is prior to 5.15.210-148.245. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.15-2026-110 advisory. In the Linux kernel, the following vulnerability has been resolved: nfsd: fix heap overflow in NFSv4.0...

Important: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: rtmutex: Use waiter::task instead of current in removewaiter CVE-2026-43499 Affected Packages: kernel Note: This advisory is applicable to Amazon Linux 2 - Kernel-5.15 Extra. Visit this page to learn more about...

Important: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: rtmutex: Use waiter::task instead of current in removewaiter CVE-2026-43499 Affected Packages: kernel Note: This advisory is applicable to Amazon Linux 2 - Kernel-5.4 Extra. Visit this page to learn more about...

Amazon Linux 2 : kernel, --advisory ALAS2KERNEL-5.4-2026-126 (ALASKERNEL-5.4-2026-126)

The version of kernel installed on the remote host is prior to 5.4.302-226.484. It is, therefore, affected by a vulnerability as referenced in the ALAS2KERNEL-5.4-2026-126 advisory. In the Linux kernel, the following vulnerability has been resolved: rtmutex: Use waiter::task instead of current in...

Amazon Linux 2 : kernel, --advisory ALAS2KERNEL-5.15-2026-109 (ALASKERNEL-5.15-2026-109)

The version of kernel installed on the remote host is prior to 5.15.210-148.247. It is, therefore, affected by a vulnerability as referenced in the ALAS2KERNEL-5.15-2026-109 advisory. In the Linux kernel, the following vulnerability has been resolved: rtmutex: Use waiter::task instead of current ...

Amazon Linux 2 : kernel, --advisory ALAS2-2026-3801 (ALAS-2026-3801)

The version of kernel installed on the remote host is prior to 4.14.355-284.740. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3801 advisory. In the Linux kernel, the following vulnerability has been resolved: rtmutex: Use waiter::task instead of current in...

Amazon Linux 2 : tigervnc, --advisory ALAS2-2026-3792 (ALAS-2026-3792)

The version of tigervnc installed on the remote host is prior to 1.8.0-24. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3792 advisory. A stack-based buffer overflow flaw was found in the X.Org X server and Xwayland. XkbSetMapChecks declares a fixed-size stack buff...

Amazon Linux 2 : nerdctl, --advisory ALAS2-2026-3497 (ALAS-2026-3497)

The version of nerdctl installed on the remote host is prior to 2.2.2-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3497 advisory. x509.Certificate.VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name SAN...

Amazon Linux 2 : gstreamer1-plugins-good, --advisory ALAS2-2026-3788 (ALAS-2026-3788)

The version of gstreamer1-plugins-good installed on the remote host is prior to 1.18.4-6. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3788 advisory. Heap buffer overflow in the Matroska MKV demuxer when calculating decompressed buffer sizes for...

Amazon Linux 2 : docker, --advisory ALAS2DOCKER-2026-134 (ALASDOCKER-2026-134)

The version of docker installed on the remote host is prior to 25.0.16-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2DOCKER-2026-134 advisory. x509.Certificate.VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name SAN...

Amazon Linux 2 : containerd, --advisory ALAS2NITRO-ENCLAVES-2026-114 (ALASNITRO-ENCLAVES-2026-114)

The version of containerd installed on the remote host is prior to 2.1.9-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2NITRO-ENCLAVES-2026-114 advisory. x509.Certificate.VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternativ...

Important: tigervnc

Issue Overview: A stack-based buffer overflow flaw was found in the X.Org X server and Xwayland. XkbSetMapChecks declares a fixed-size stack buffer mapWidths256 indexed by key type index. The helper function CheckKeyTypes writes to this buffer at a client-controlled offset, allowing a stack buffe...