Important: amazon-ssm-agent

Issue Overview: cmd/go: bypass of flag sanitization can lead to arbitrary code execution CVE-2025-61731 cmd/go: unexpected code execution when invoking toolchain CVE-2025-68119 Affected Packages: amazon-ssm-agent Note: This advisory is applicable to Amazon Linux 2 AL2 Core repository. Visit this...

Amazon Linux 2 : amazon-ssm-agent, --advisory ALAS2-2026-3207 (ALAS-2026-3207)

The version of amazon-ssm-agent installed on the remote host is prior to 3.3.3883.0-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3207 advisory. cmd/go: bypass of flag sanitization can lead to arbitrary code execution CVE-2025-61731 cmd/go: unexpected...

openSUSE 16 Security Update : amazon-ssm-agent (openSUSE-SU-2026:20351-1)

The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2026:20351-1 advisory. - CVE-2025-47913: client process termination when receiving an unexpected message type in response to a key listing or signing request bsc1253611. Tenab...

Security update for amazon-ssm-agent (important)

openSUSE security update: security update for amazon-ssm-agent ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20351-1 Rating: important References: bsc1253611 Cross-References: CVE-2025-47913 CVSS scores: CVE-2025-47913 SUSE : 7.5...

OPENSUSE-SU-2026:20351-1 Security update for amazon-ssm-agent

This update for amazon-ssm-agent fixes the following issues: - CVE-2025-47913: client process termination when receiving an unexpected message type in response to a key listing or signing request bsc1253611...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: trufflehog-fips, tekton-pipelines, crossplane-provider-family-aws, gitlab-runner-fips, lazygit, atlantis-fips, actions-runner-controller-fips, external-secrets-operator-fips, openbao-fips, atlantis, gitsign, crossplane-provider-aws-efs-fips,...

GHSA-Q9HV-HPM4-HJ6X vulnerabilities

Vulnerabilities for packages: trufflehog-fips, tekton-pipelines, crossplane-provider-family-aws, gitlab-runner-fips, lazygit, atlantis-fips, actions-runner-controller-fips, external-secrets-operator-fips, openbao-fips, atlantis, gitsign, crossplane-provider-aws-efs-fips,...

GHSA-37CX-329C-33X3 vulnerabilities

Vulnerabilities for packages: trufflehog-fips, tekton-pipelines, gitlab-runner-fips, gitsign, tekton-pipelines-fips, packer, src-fingerprint, guac, argo-workflows, grafana, wolfictl, trivy-operator-fips, argo-events-fips, goreleaser, argocd-image-updater, argo-cd, chainctl, flux-source-watcher,...

CVE-2026-25934 vulnerabilities

Vulnerabilities for packages: trufflehog-fips, tekton-pipelines, gitlab-runner-fips, gitsign, tekton-pipelines-fips, packer, src-fingerprint, guac, argo-workflows, grafana, wolfictl, trivy-operator-fips, argo-events-fips, goreleaser, argocd-image-updater, argo-cd, chainctl, flux-source-watcher,...

CVE-2025-61732 vulnerabilities

Vulnerabilities for packages: kubernetes-dashboard-web-fips, prometheus-stackdriver-exporter, cephcsi-fips, clickhouse-operator, aws-iam-authenticator-fips, step-fips, apisix-ingress-controller, tekton-pipelines-fips, gatekeeper, langfuse-fips, crossplane-aws-provider-fips,...

GHSA-8JVR-VH7G-F8GX vulnerabilities

Vulnerabilities for packages: kubernetes-dashboard-web-fips, prometheus-stackdriver-exporter, cephcsi-fips, clickhouse-operator, aws-iam-authenticator-fips, step-fips, apisix-ingress-controller, tekton-pipelines-fips, gatekeeper, langfuse-fips, crossplane-aws-provider-fips,...

CVE-2025-68121 vulnerabilities

Vulnerabilities for packages: kubernetes-dashboard-web-fips, prometheus-stackdriver-exporter, cephcsi-fips, clickhouse-operator, aws-iam-authenticator-fips, step-fips, apisix-ingress-controller, tekton-pipelines-fips, gatekeeper, langfuse-fips, crossplane-aws-provider-fips,...

Amazon Linux 2 : amazon-ssm-agent, --advisory ALAS2-2025-3121 (ALAS-2025-3121)

The version of amazon-ssm-agent installed on the remote host is prior to 3.3.3572.0-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2025-3121 advisory. Calling Verify with a VerifyOptions.KeyUsages that contains ExtKeyUsageAny unintentionally disabledpolicy...

SUSE SLES12 Security Update : amazon-ssm-agent (SUSE-SU-2025:4244-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2025:4244-1 advisory. - CVE-2025-47913: Fixed a bug in the client process termination when receiving an unexpected message type in response to a key listing or...

Security update for amazon-ssm-agent

This update for amazon-ssm-agent fixes the following issues: CVE-2025-47913: Fixed a bug in the client process termination when receiving an unexpected message type in response to a key listing or signing request. bsc1253598 Patch Instructions: To install this SUSE update use the SUSE recommended...

SUSE-SU-2025:4244-1 Security update for amazon-ssm-agent

This update for amazon-ssm-agent fixes the following issues: - CVE-2025-47913: Fixed a bug in the client process termination when receiving an unexpected message type in response to a key listing or signing request. bsc1253598...

openSUSE Security Advisory (SUSE-SU-2025:4191-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLES15 / openSUSE 15 Security Update : amazon-ssm-agent (SUSE-SU-2025:4191-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2025:4191-1 advisory. - CVE-2025-47913: Fixed a bug in the client process termination when receiving an unexpected message type in response to a key...

Security update for amazon-ssm-agent

This update for amazon-ssm-agent fixes the following issues: CVE-2025-47913: Fixed a bug in the client process termination when receiving an unexpected message type in response to a key listing or signing request. bsc1253598 Patch Instructions: To install this SUSE update use the SUSE recommended...

SUSE-SU-2025:4191-1 Security update for amazon-ssm-agent

This update for amazon-ssm-agent fixes the following issues: - CVE-2025-47913: Fixed a bug in the client process termination when receiving an unexpected message type in response to a key listing or signing request. bsc1253598...