ALAS2023-2026-1406: CVEs fixed (Amazon Linux)

ALAS2023-2026-1406 fixes 1 tracked CVE. Affected systems and fixed versions.

CVE-2025-15467 HIGH 8.8 UPGRADE Issue summary: Parsing CMS AuthEnvelopedData or EnvelopedData message with maliciously crafted AEAD parameters

Applies to

Amazon Linux 2023

← Back to latest CVEs

PatchTheCVE.com

Ranks CVEs by real-world risk and shows the exact fix for your system. Built from public sources and updated automatically.

Data from NVD, the CVE Program, CISA KEV, EPSS and distro, Microsoft, GitHub and OSV advisories. Priority is a guide, not a guarantee. Commands are templates: package names can differ from product names, so check the vendor advisory and test before patching production. PatchTheCVE is an independent project and is not affiliated with any government agency or vendor named here.