slot2

slot2 slot2: a two-stage UEFI GRUB2 bootkit that persists a pre-OS networked implant on Amazon Linux 2023 on AWS EC2 UEFI x8664. by cenobyte [email protected] 2026 https://github.com/cenobyte-vincit/slot2 Summary slot2 is a bootkit for Amazon Linux 2023 on EC2. The AWS EC2 UEFI firmware load...

Amazon Linux 2023 : python3-pillow, python3-pillow-devel, python3-pillow-tk (ALAS2023-2026-3411)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3411 advisory. Pillow is a Python imaging library. From 7.2.0 until 13.0.0, Pillow can enter an infinite loop while determining the frame count of a MIC image. MicImageFile inherits TIFF frame traversal, but...

Amazon Linux 2023 : python3.14, python3.14-devel, python3.14-freethreading (ALAS2023-2026-3406)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3406 advisory. tarfile.tarfilter could be bypassed using crafted link entries, including symlinks with empty or directory-like names, to redirect later archive members outside the intended extraction...

Amazon Linux 2023 : python3.13, python3.13-devel, python3.13-freethreading (ALAS2023-2026-3407)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3407 advisory. tarfile.tarfilter could be bypassed using crafted link entries, including symlinks with empty or directory-like names, to redirect later archive members outside the intended extraction...

Amazon Linux 2023 : aws-workload-credentials-provider (ALAS2023-2026-3375)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3375 advisory. rustls-webpki through 0.103.12 and 0.104.0-alpha releases before 0.104.0-alpha.7 contains a reachable panic in bitstringflags in src/der.rs. The input guard fails to reject a named-bit BIT...

Amazon Linux 2023 : polkit, polkit-devel, polkit-libs (ALAS2023-2026-3379)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3379 advisory. A flaw was found in polkit. A regression in the fix for CVE-2026-4897 introduced a stack buffer underflow out-of-bounds read in the readcookie function of the polkit-agent-helper-1 setuid helper. When ...

Amazon Linux 2023 : docker (ALAS2023-2026-3391)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3391 advisory. eStargz layer decoder in the estartgz package contains a vulnerability that an input containing a cyclic hardlink crashes the process with Go's unrecoverable stack overflow error. Stargz...

Amazon Linux 2023 : python3.12, python3.12-devel, python3.12-idle (ALAS2023-2026-3408)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3408 advisory. tarfile.tarfilter could be bypassed using crafted link entries, including symlinks with empty or directory-like names, to redirect later archive members outside the intended extraction...

Amazon Linux 2023 : bpftool, kernel, kernel-devel (ALAS2023-2026-3389)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3389 advisory. In the Linux kernel, the following vulnerability has been resolved: vhost: fix vhostgetavailidx for a non empty ring CVE-2026-74356 In the Linux kernel, the following vulnerability has been...

Amazon Linux 2023 : ecs-init (ALAS2023-2026-3359)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3359 advisory. Due to security concerns regarding a small set of intermediate certificates issued by a specific Certificate Authority CA, the Go's crypto/x509 package is updated to not trust certificates issued by th...

Amazon Linux 2023 : ecs-service-connect-agent (ALAS2023-2026-3355)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3355 advisory. Issue summary: A certificate with many nameRelativeToCRLIssuer CRLdistribution points causes disproportionate heap growth when OpenSSL cachesX.509 extensions. Impact summary: Receiving a crafted...

Amazon Linux 2023 : python3.11, python3.11-devel, python3.11-idle (ALAS2023-2026-3356)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3356 advisory. tarfile.tarfilter could be bypassed using crafted link entries, including symlinks with empty or directory-like names, to redirect later archive members outside the intended extraction...

Amazon Linux 2023 : bpftool, kernel, kernel-devel (ALAS2023-2026-3365)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3365 advisory. In the Linux kernel, the following vulnerability has been resolved: ipv4: free inetopt and ireqopt after an RCU grace period CVE-2026-98432 Tenable has extracted the preceding description block directl...

Amazon Linux 2023 : aspnetcore-runtime-9.0, aspnetcore-runtime-dbg-9.0, aspnetcore-targeting-pack-9.0 (ALAS2023-2026-3374)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3374 advisory. Incorrect default permissions in ASP.NET Core allows an authorized attacker to elevate privileges locally. CVE-2026-114148 Out-of-bounds write in .NET allows an unauthorized attacker to execut...

Amazon Linux 2023 : rclone (ALAS2023-2026-3348)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3348 advisory. Due to security concerns regarding a small set of intermediate certificates issued by a specific Certificate Authority CA, the Go's crypto/x509 package is updated to not trust certificates issued by th...

Amazon Linux 2023 : containerd, containerd-stress (ALAS2023-2026-3339)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3339 advisory. Due to security concerns regarding a small set of intermediate certificates issued by a specific Certificate Authority CA, the Go's crypto/x509 package is updated to not trust certificates issued by th...

Amazon Linux 2023 : nerdctl (ALAS2023-2026-3344)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3344 advisory. Due to security concerns regarding a small set of intermediate certificates issued by a specific Certificate Authority CA, the Go's crypto/x509 package is updated to not trust certificates issued by th...

Amazon Linux 2023 : amazon-ssm-agent (ALAS2023-2026-3358)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3358 advisory. Due to security concerns regarding a small set of intermediate certificates issued by a specific Certificate Authority CA, the Go's crypto/x509 package is updated to not trust certificates issued by th...

Amazon Linux 2023 : amazon-ecr-credential-helper (ALAS2023-2026-3345)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3345 advisory. Due to security concerns regarding a small set of intermediate certificates issued by a specific Certificate Authority CA, the Go's crypto/x509 package is updated to not trust certificates issued by th...

Amazon Linux 2023 : yq (ALAS2023-2026-3347)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3347 advisory. Due to security concerns regarding a small set of intermediate certificates issued by a specific Certificate Authority CA, the Go's crypto/x509 package is updated to not trust certificates issued by th...