Important: compat-rpm-411

Issue Overview: A command injection flaw was found in rpm. Installing or rebuilding a source RPM whose source or spec file basenames contain a % macro construct causes rpm to execute an attacker-controlled shell command via popen while relocating the source file list. This allows arbitrary comman...

Medium: python-botocore

Issue Overview: Mozilla blocked compromised intermediate eMudhra certificates via OneCRL on the 17th of October which was distributed to clients via RemoteSettings the same day. This update contains the updated OneCRL block list, ensuring clients will block the compromised certificates even if...

Medium: gstreamer1-plugins-base

Issue Overview: A flaw was found in GStreamer's gst-plugins-base MicroDVD subtitle parser. When processing a specially crafted subtitle file, the parser may dereference a NULL pointer, causing the application to crash when a user opens or plays media with a malformed MicroDVD .sub subtitle file...

Amazon Linux 2 : docker (ALASDOCKER-2026-162)

The version of docker installed on the remote host is prior to 25.0.18-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2DOCKER-2026-162 advisory. eStargz layer decoder in the estartgz package contains a vulnerability that an input containing a cyclic hardlink...

Amazon Linux 2 : docker (ALASECS-2026-157)

The version of docker installed on the remote host is prior to 25.0.18-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2ECS-2026-157 advisory. eStargz layer decoder in the estartgz package contains a vulnerability that an input containing a cyclic hardlink crash...

Amazon Linux 2 : docker (ALASNITRO-ENCLAVES-2026-133)

The version of docker installed on the remote host is prior to 25.0.18-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2NITRO-ENCLAVES-2026-133 advisory. eStargz layer decoder in the estartgz package contains a vulnerability that an input containing a cyclic...

Amazon Linux 2 : kernel (ALASKERNEL-5.10-2026-138)

The version of kernel installed on the remote host is prior to 5.10.272-274.1151. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.10-2026-138 advisory. In the Linux kernel, the following vulnerability has been resolved: cifs: validate DFS referral string...

Amazon Linux 2 : kernel (ALAS-2026-4065)

The version of kernel installed on the remote host is prior to 4.14.355-287.758. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-4065 advisory. In the Linux kernel, the following vulnerability has been resolved: ipv4: free inetopt and ireqopt after an RCU grace perio...

Amazon Linux 2 : amazon-cloudwatch-agent (ALAS-2026-4049)

The version of amazon-cloudwatch-agent installed on the remote host is prior to 1.300073.2-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-4049 advisory. Due to security concerns regarding a small set of intermediate certificates issued by a specific...

Amazon Linux 2 : amazon-ssm-agent (ALAS-2026-4063)

The version of amazon-ssm-agent installed on the remote host is prior to 3.3.5700.0-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-4063 advisory. Due to security concerns regarding a small set of intermediate certificates issued by a specific Certificate Authorit...

Amazon Linux 2 : containerd (ALASNITRO-ENCLAVES-2026-130)

The version of containerd installed on the remote host is prior to 2.3.7-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2NITRO-ENCLAVES-2026-130 advisory. Due to security concerns regarding a small set of intermediate certificates issued by a specific Certificate...

Amazon Linux 2 : oci-add-hooks (ALASNITRO-ENCLAVES-2026-132)

The version of oci-add-hooks installed on the remote host is prior to 0-0.13.20200504git325a340. It is, therefore, affected by a vulnerability as referenced in the ALAS2NITRO-ENCLAVES-2026-132 advisory. Due to security concerns regarding a small set of intermediate certificates issued by a specif...

Medium: nerdctl

Issue Overview: Due to security concerns regarding a small set of intermediate certificates issued by a specific Certificate Authority CA, the Go's crypto/x509 package is updated to not trust certificates issued by the affected intermediate certificates. This would prevent possible future misuse ...

Medium: cni-plugins

Issue Overview: Due to security concerns regarding a small set of intermediate certificates issued by a specific Certificate Authority CA, the Go's crypto/x509 package is updated to not trust certificates issued by the affected intermediate certificates. This would prevent possible future misuse ...

Medium: golang-github-cpuguy83-go-md2man

Issue Overview: Due to security concerns regarding a small set of intermediate certificates issued by a specific Certificate Authority CA, the Go's crypto/x509 package is updated to not trust certificates issued by the affected intermediate certificates. This would prevent possible future misuse ...

Medium: containerd

Issue Overview: Due to security concerns regarding a small set of intermediate certificates issued by a specific Certificate Authority CA, the Go's crypto/x509 package is updated to not trust certificates issued by the affected intermediate certificates. This would prevent possible future misuse ...

Medium: runfinch-finch

Issue Overview: Due to security concerns regarding a small set of intermediate certificates issued by a specific Certificate Authority CA, the Go's crypto/x509 package is updated to not trust certificates issued by the affected intermediate certificates. This would prevent possible future misuse ...

Amazon Linux 2 : amazon-ecr-credential-helper (ALASECS-2026-153)

The version of amazon-ecr-credential-helper installed on the remote host is prior to 0.12.0-6. It is, therefore, affected by a vulnerability as referenced in the ALAS2ECS-2026-153 advisory. Due to security concerns regarding a small set of intermediate certificates issued by a specific Certificat...

Amazon Linux 2 : thunderbird (ALAS-2026-4057)

The version of thunderbird installed on the remote host is prior to 153.5.1-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-4057 advisory. Sandbox escape due to use-after-free in the DOM: Content Processes component. This vulnerability was fixed in Firefo...

Amazon Linux 2 : kernel (ALASKERNEL-5.15-2026-120)

The version of kernel installed on the remote host is prior to 5.15.222-158.256. It is, therefore, affected by a vulnerability as referenced in the ALAS2KERNEL-5.15-2026-120 advisory. In the Linux kernel, the following vulnerability has been resolved: ipv4: free inetopt and ireqopt after an RCU...