ALAS2-2023-2285
This advisory is applicable to Amazon Linux 2 (AL2) Core repository. Visit this FAQ section for the difference between AL2 Core and …
Amazon Linux 2 (EOS) Security Advisories
Amazon Linux 2 (EOS) Security Advisories
CVE-2023-33733
Jun 5, 2023 · Reportlab up to v3.6.12 allows attackers to execute arbitrary code via supplying a crafted PDF file.
CVE-2026-120434
Netpbm before 10.86.51, 11.x before 11.02.30, and 11.03 before 11.15.08 contains a stack-based buffer overflow in picttoppm's …
Amazon Linux 2023 Security Advisories
Below are bulletins for security or privacy events pertaining to Amazon Linux 2023. You can also subscribe to our RSS feed.
ALAS2-2026-3963 - alas.aws.amazon.com
Oct 1, 2026 · Issue Overview: Handshakes which used Encrypted Client Hello could be de-anonymized by a passive network …
ALAS2KERNEL-5.10-2026-136 - alas.aws.amazon.com
Oct 28, 2026 · Amazon Linux 2 (EOS) Security Advisory: ALAS2KERNEL-5.10-2026-136 Advisory Released Date: 2026-10-28 …
CVE-2026-99142
5 days ago · In the Linux kernel, the following vulnerability has been resolved: tracing: Check operator stack capacity before pushing
ALAS2023-2026-3091
Sep 17, 2026 · Issue Overview: A security flaw has been discovered in valkey-io valkey 9.1.0. The affected element is the function …
ALAS2023-2026-2058
Aug 17, 2026 · Issue Overview: In the Linux kernel, the following vulnerability has been resolved: NFSv4/flexfiles: reject zero …
ALAS2023-2026-1747
May 26, 2026 · Issue Overview: Arithmetic over induction variables in loops were not correctly checked for underflow or overflow in …