Amazon Linux 2 : ecs-init (ALASECS-2026-149)

The version of ecs-init installed on the remote host is prior to 1.108.1-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2ECS-2026-149 advisory. When Trailer headers are sent by a client, the HTTP server internally uses the header values to populate the Request.Trailer m...

Amazon Linux 2 : docker (ALASECS-2026-148)

The version of docker installed on the remote host is prior to 25.0.18-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2ECS-2026-148 advisory. The tar extraction routines in moby/go-archive Unpack, UnpackLayer, Untar/UntarUncompressed, and the ApplyLayer helpers...

Amazon Linux 2 : docker (ALASECS-2026-150)

The version of docker installed on the remote host is prior to 25.0.18-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2ECS-2026-150 advisory. Due to security concerns regarding a small set of intermediate certificates issued by a specific Certificate Authority CA, the...

Amazon Linux 2 : spice (ALAS-2026-4030)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-4030 advisory. A flaw was found in spice-server. Multiple migration data handlers use client-supplied offsets from SPICEMSGCMIGRATEDATA messages without bounds validation, allowing a malicious authenticated SPI...

Amazon Linux 2 : kernel (ALAS-2026-4036)

The version of kernel installed on the remote host is prior to 4.14.355-287.755. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-4036 advisory. In the Linux kernel, the following vulnerability has been resolved: nitroenclaves: fix use-after-free on SLOTALLOC failure...

Amazon Linux 2 : kernel (ALASKERNEL-5.4-2026-133)

The version of kernel installed on the remote host is prior to 5.4.302-229.501. It is, therefore, affected by a vulnerability as referenced in the ALAS2KERNEL-5.4-2026-133 advisory. In the Linux kernel, the following vulnerability has been resolved: mm: fix zswap writeback race condition...

Amazon Linux 2 : ca-certificates (ALAS-2026-4037)

The version of ca-certificates installed on the remote host is prior to 2025.2.76-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-4037 advisory. Mozilla blocked compromised intermediate eMudhra certificates via OneCRL on the 17th of October which was distributed t...

Amazon Linux 2 : firefox (ALASFIREFOX-2026-067)

The version of firefox installed on the remote host is prior to 153.5.0-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2FIREFOX-2026-067 advisory. Information disclosure in the Networking: JAR component. This vulnerability was fixed in Firefox ESR 153.4, Firefo...

Medium: ca-certificates

Issue Overview: Mozilla blocked compromised intermediate eMudhra certificates via OneCRL on the 17th of October which was distributed to clients via RemoteSettings the same day. This update contains the updated OneCRL block list, ensuring clients will block the compromised certificates even if...

Amazon Linux 2 : kernel (ALASKERNEL-5.4-2026-134)

The version of kernel installed on the remote host is prior to 5.4.302-229.500. It is, therefore, affected by a vulnerability as referenced in the ALAS2KERNEL-5.4-2026-134 advisory. In the Linux kernel, the following vulnerability has been resolved: nitroenclaves: fix use-after-free on SLOTALLOC...

Amazon Linux 2 : edk2 (ALAS-2026-4007)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-4007 advisory. Issue summary: A certificate with many nameRelativeToCRLIssuer CRLdistribution points causes disproportionate heap growth when OpenSSL cachesX.509 extensions. Impact summary: Receiving a crafted...

Amazon Linux 2 : firefox (ALASFIREFOX-2026-068)

The version of firefox installed on the remote host is prior to 153.5.1-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2FIREFOX-2026-068 advisory. Mozilla blocked compromised intermediate eMudhra certificates via OneCRL on the 17th of October which was distributed to...

Amazon Linux 2 : java-1.8.0-amazon-corretto (ALASCORRETTO8-2026-026)

The version of java-1.8.0-amazon-corretto installed on the remote host is prior to 1.8.0512.b08-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2CORRETTO8-2026-026 advisory. Mozilla blocked compromised intermediate eMudhra certificates via OneCRL on the 17th of...

Amazon Linux 2 : qemu (ALAS-2026-4009)

The version of qemu installed on the remote host is prior to 3.1.0-8. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-4009 advisory. NOTE: Fixed by: https://gitlab.com/qemu-project/qemu/-/commit/1f24066fc88d33455ee54a20f29994d9e69997ba v11.1.0-rc3NOTE: Fixed...

Amazon Linux 2 : docker (ALASNITRO-ENCLAVES-2026-129)

The version of docker installed on the remote host is prior to 25.0.18-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2NITRO-ENCLAVES-2026-129 advisory. Due to security concerns regarding a small set of intermediate certificates issued by a specific Certificate Authorit...

Medium: docker

Issue Overview: Due to security concerns regarding a small set of intermediate certificates issued by a specific Certificate Authority CA, the Go's crypto/x509 package is updated to not trust certificates issued by the affected intermediate certificates. This would prevent possible future misuse ...

Amazon Linux 2 : docker (ALASDOCKER-2026-155)

The version of docker installed on the remote host is prior to 25.0.18-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2DOCKER-2026-155 advisory. Due to security concerns regarding a small set of intermediate certificates issued by a specific Certificate Authority CA, th...

Amazon Linux 2 : runc (ALASDOCKER-2026-154)

The version of runc installed on the remote host is prior to 1.4.3-2. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2DOCKER-2026-154 advisory. Due to security concerns regarding a small set of intermediate certificates issued by a specific Certificate Authority C...

Medium: docker

Issue Overview: Due to security concerns regarding a small set of intermediate certificates issued by a specific Certificate Authority CA, the Go's crypto/x509 package is updated to not trust certificates issued by the affected intermediate certificates. This would prevent possible future misuse ...

Amazon Linux 2 : kernel (ALASKERNEL-5.15-2026-119)

The version of kernel installed on the remote host is prior to 5.15.222-158.255. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.15-2026-119 advisory. In the Linux kernel, the following vulnerability has been resolved: fou: Fix use-after-free in foucreate...