OPENSUSE-SU-2026:20351-1 Security update for amazon-ssm-agent

This update for amazon-ssm-agent fixes the following issues: - CVE-2025-47913: client process termination when receiving an unexpected message type in response to a key listing or signing request bsc1253611...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: argo-cd-fips, crossplane-fips, kubescape, grafana, snyk-cli, argo-workflows-fips, pulumi-language-dotnet, cloudbeat-fips, xeol-fips, argo-cd, crossplane-provider-aws-rds, gitlab-rails-ce-fips, tekton-pipelines-fips, zot, crossplane-provider-aws-memorydb,...

GHSA-Q9HV-HPM4-HJ6X vulnerabilities

Vulnerabilities for packages: argo-cd-fips, crossplane-fips, kubescape, grafana, snyk-cli, argo-workflows-fips, pulumi-language-dotnet, cloudbeat-fips, xeol-fips, argo-cd, crossplane-provider-aws-rds, gitlab-rails-ce-fips, tekton-pipelines-fips, zot, crossplane-provider-aws-memorydb,...

GHSA-37CX-329C-33X3 vulnerabilities

Vulnerabilities for packages: argo-cd-fips, bom, crossplane-fips, kubescape, grafana, nemo, snyk-cli, argo-workflows-fips, pulumi-language-dotnet, cloudbeat-fips, xeol-fips, argo-cd, tekton-pipelines-fips, gitlab-rails-ce-fips, zot, kyverno, guac, skaffold, grype, cerbos, chainctl, cloudbeat,...

CVE-2026-25934 vulnerabilities

Vulnerabilities for packages: argo-cd-fips, bom, crossplane-fips, kubescape, grafana, nemo, snyk-cli, argo-workflows-fips, pulumi-language-dotnet, cloudbeat-fips, xeol-fips, argo-cd, tekton-pipelines-fips, gitlab-rails-ce-fips, zot, kyverno, guac, skaffold, grype, cerbos, chainctl, cloudbeat,...

CVE-2025-61732 vulnerabilities

Vulnerabilities for packages: external-dns-fips, argo-cd-fips, kubeflow, kubescape-http-request-fips, cloud-provider-aws-fips, tempo, fleet-server, grafana-mimir, xeol-fips, zot, terraform-provider-tls, crossplane-provider-aws-rds, fuse-overlayfs-snapshotter, gitlab-rails-ce-fips,...

GHSA-8JVR-VH7G-F8GX vulnerabilities

Vulnerabilities for packages: external-dns-fips, argo-cd-fips, kubeflow, kubescape-http-request-fips, cloud-provider-aws-fips, tempo, fleet-server, grafana-mimir, xeol-fips, zot, terraform-provider-tls, crossplane-provider-aws-rds, fuse-overlayfs-snapshotter, gitlab-rails-ce-fips,...

Amazon Linux 2 : amazon-ssm-agent, --advisory ALAS2-2025-3121 (ALAS-2025-3121)

The version of amazon-ssm-agent installed on the remote host is prior to 3.3.3572.0-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2025-3121 advisory. Calling Verify with a VerifyOptions.KeyUsages that contains ExtKeyUsageAny unintentionally disabledpolicy...

SUSE SLES12 Security Update : amazon-ssm-agent (SUSE-SU-2025:4244-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2025:4244-1 advisory. - CVE-2025-47913: Fixed a bug in the client process termination when receiving an unexpected message type in response to a key listing or...

Security update for amazon-ssm-agent

This update for amazon-ssm-agent fixes the following issues: CVE-2025-47913: Fixed a bug in the client process termination when receiving an unexpected message type in response to a key listing or signing request. bsc1253598 Patch Instructions: To install this SUSE update use the SUSE recommended...

SUSE-SU-2025:4244-1 Security update for amazon-ssm-agent

This update for amazon-ssm-agent fixes the following issues: - CVE-2025-47913: Fixed a bug in the client process termination when receiving an unexpected message type in response to a key listing or signing request. bsc1253598...

openSUSE Security Advisory (SUSE-SU-2025:4191-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLES15 / openSUSE 15 Security Update : amazon-ssm-agent (SUSE-SU-2025:4191-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2025:4191-1 advisory. - CVE-2025-47913: Fixed a bug in the client process termination when receiving an unexpected message type in response to a key...

Security update for amazon-ssm-agent

This update for amazon-ssm-agent fixes the following issues: CVE-2025-47913: Fixed a bug in the client process termination when receiving an unexpected message type in response to a key listing or signing request. bsc1253598 Patch Instructions: To install this SUSE update use the SUSE recommended...

SUSE-SU-2025:4191-1 Security update for amazon-ssm-agent

This update for amazon-ssm-agent fixes the following issues: - CVE-2025-47913: Fixed a bug in the client process termination when receiving an unexpected message type in response to a key listing or signing request. bsc1253598...

OPENSUSE-SU-2025:15744-1 amazon-ssm-agent-3.3.3270.0-2.1 on GA media

These are all security issues fixed in the amazon-ssm-agent-3.3.3270.0-2.1 package on the GA media of openSUSE Tumbleweed...

Important: amazon-ssm-agent

Issue Overview: The net/http package accepted data in the chunked transfer encoding containing an invalid chunk-size line terminated by a bare LF. When used in conjunction with a server or proxy which incorrectly interprets a bare LF in a chunk extension as part of the extension, this could permi...

Important: amazon-ssm-agent

Issue Overview: The net/http package accepted data in the chunked transfer encoding containing an invalid chunk-size line terminated by a bare LF. When used in conjunction with a server or proxy which incorrectly interprets a bare LF in a chunk extension as part of the extension, this could permi...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: external-dns-fips, argo-cd-fips, kubeflow, cloud-provider-aws-fips, xeol-fips, zot, fuse-overlayfs-snapshotter, nfs-subdir-external-provisioner, kepler, aws-node-termination-handler, direnv, guac, pgpool2exporter-fips, conjur-cli, pgpool2exporter, kpt, fulcio, cerbos...

Important: amazon-ssm-agent

Issue Overview: SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or not at all, causing pending content to be read into memory, but never transmitted. CVE-2025-22869 Affected Packages:...