Amazon Linux 2 : bind (ALAS-2026-4001)

The version of bind installed on the remote host is prior to 9.11.4-26.P2. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-4001 advisory. Amazon Linuxvended DNS resolvers shipped with an older DNSSEC root signing key. For hosts configured with DNSSEC validation...

Amazon Linux 2023 : systemd, systemd-boot-unsigned, systemd-container (ALAS2023-2026-3224)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3224 advisory. Amazon Linuxvended DNS resolvers shipped with an older DNSSEC root signing key. For hosts configured with DNSSEC validation enabled, this could result in DNS resolution failures, including for names in...

Amazon Linux 2023 : bind, bind-chroot, bind-devel (ALAS2023-2026-3221)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3221 advisory. Amazon Linuxvended DNS resolvers shipped with an older DNSSEC root signing key. For hosts configured with DNSSEC validation enabled, this could result in DNS resolution failures, including for names in...

Amazon Linux 2023 : glycin-loaders (ALAS2023-2026-3215)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3215 advisory. Fix RUSTSEC-2026-0221: event-listener allows !Send tags to cross thread boundaries via StackSlot Fix RUSTSEC-2026-0186: Unchecked pointer offset in crate memmap2 Tenable has extracted the preceding...

Amazon Linux 2023 : loupe (ALAS2023-2026-3216)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3216 advisory. Fix RUSTSEC-2026-0221: event-listener allows !Send tags to cross thread boundaries via StackSlot Fix RUSTSEC-2026-0186: Unchecked pointer offset in crate memmap2 Fix RUSTSEC-2026-0190: Unsoundness in...

Amazon Linux 2 : dnsmasq (ALASDNSMASQ-2026-005)

The version of dnsmasq installed on the remote host is prior to 2.90-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2DNSMASQ-2026-005 advisory. Amazon Linuxvended DNS resolvers shipped with an older DNSSEC root signing key. For hosts configured with DNSSEC validation...

Amazon Linux 2 : kernel (ALASKERNEL-5.10-2026-135)

The version of kernel installed on the remote host is prior to 5.10.270-271.1109. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.10-2026-135 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnatsip: rewind offset...

Amazon Linux 2023: CVE-2026-89085: Important priority package update for parted

A flaw was found in parted. A heap-based buffer overflow can occur when processing a specially crafted FAT32 filesystem due to an integer calculation error during buffer allocation. A local attacker could exploit this by enticing a user or automated service to open a malicious filesystem image,...

Amazon Linux 2023 : mount-s3 (ALAS2023-2026-3233)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3233 advisory. Improper handling of HPACK dynamic table size updates in the AWS Common Runtime aws-c-http library might allow a remote threat actor operating a server to cause memory corruption on a connecting client...

Important: unbound

Issue Overview: Amazon Linux–vended DNS resolvers shipped with an older DNSSEC root signing key. For hosts configured with DNSSEC validation enabled, this could result in DNS resolution failures, including for names in unsigned zones. This applies where the resolver is still using the trust ancho...

Important: dnsmasq

Issue Overview: Amazon Linux–vended DNS resolvers shipped with an older DNSSEC root signing key. For hosts configured with DNSSEC validation enabled, this could result in DNS resolution failures, including for names in unsigned zones. This applies where the resolver is still using the trust ancho...

Important: fetchmail

Issue Overview: A stack-based buffer overflow flaw was found in fetchmail when built with NTLM support. A malicious or compromised mail server advertising NTLM authentication can send a crafted Type 2 challenge that causes fetchmail to write past a fixed stack buffer while building the NTLM...

Amazon Linux 2 : docker (ALASNITRO-ENCLAVES-2026-122)

The version of docker installed on the remote host is prior to 25.0.16-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2NITRO-ENCLAVES-2026-122 advisory. On Unix systems, opening a file in an os.Root improperly follows symlinks to locations outside of the Root...

Amazon Linux 2023 : sudo, sudo-devel, sudo-logsrvd (ALAS2023-2026-3156)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3156 advisory. A flaw was found in sudo. When sudoers rules use NOTBEFORE or NOTAFTER time-based access restrictions with timestamps that omit the trailing 'Z' timezone indicator, the time evaluation relies on the TZ...

Important: krb5

Issue Overview: No CVE associated with this advisory Affected Packages: krb5 Issue Correction: Run dnf update krb5 --releasever 2023.12.20261012 or dnf update --advisory ALAS2023-2026-3182 --releasever 2023.12.20261012 to update your system. More information on how to update your system can be...

Medium: oci-add-hooks

Issue Overview: On Unix systems, opening a file in an os.Root improperly follows symlinks to locations outside of the Root when the final path component of the a path is a symbolic link and the path ends in /. For example, 'root.Open"symlink/"' will open "symlink" even when "symlink" is a symboli...

Important: rpcbind

Issue Overview: A flaw was found in rpcbind. This vulnerability allows a remote, unauthenticated attacker to cause a Denial of Service DoS by sending a large number of unique requests. The rpcbind service records previously unseen RPC Remote Procedure Call statistics in unbounded in-memory lists,...

Amazon Linux 2 : kernel (ALASKERNEL-5.15-2026-117)

The version of kernel installed on the remote host is prior to 5.15.221-157.262. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.15-2026-117 advisory. An issue in the Linux kernel's virtio-net/TAP networking path could allow an actor with privileged acces...

Amazon Linux 2 : oci-add-hooks (ALASNITRO-ENCLAVES-2026-123)

The version of oci-add-hooks installed on the remote host is prior to 0-0.11.20200504git325a340. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2NITRO-ENCLAVES-2026-123 advisory. On Unix systems, opening a file in an os.Root improperly follows symlinks to location...

Amazon Linux 2023 : php8.5, php8.5-bcmath, php8.5-cli (ALAS2023-2026-3164)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3164 advisory. The mysqlnd wire protocol parser reads fields out of server packets before checking that the packet still holds enough bytes for them. A malicious or compromised MySQL server can send a...