Medium: rclone

Issue Overview: Due to security concerns regarding a small set of intermediate certificates issued by a specific Certificate Authority CA, the Go's crypto/x509 package is updated to not trust certificates issued by the affected intermediate certificates. This would prevent possible future misuse ...

Medium: containerd

Issue Overview: Due to security concerns regarding a small set of intermediate certificates issued by a specific Certificate Authority CA, the Go's crypto/x509 package is updated to not trust certificates issued by the affected intermediate certificates. This would prevent possible future misuse ...

Medium: golist

Issue Overview: Due to security concerns regarding a small set of intermediate certificates issued by a specific Certificate Authority CA, the Go's crypto/x509 package is updated to not trust certificates issued by the affected intermediate certificates. This would prevent possible future misuse ...

Amazon Linux 2023 : openssh, openssh-clients, openssh-keycat (ALAS2023-2026-3354)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3354 advisory. In sftp in OpenSSH before 10.6, a server can trigger directory traversal causing files to be written to unintended locations during a recursive copy operation. CVE-2026-106552 In sshd in OpenS...

Amazon Linux 2023 : java-11-amazon-corretto, java-11-amazon-corretto-devel, java-11-amazon-corretto-headless (ALAS2023-2026-3372)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3372 advisory. Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JSSE. Supported versions that are affected are Oracle Java SE:...

Amazon Linux 2 : kernel (ALASKERNEL-5.4-2026-135)

The version of kernel installed on the remote host is prior to 5.4.302-229.503. It is, therefore, affected by a vulnerability as referenced in the ALAS2KERNEL-5.4-2026-135 advisory. In the Linux kernel, the following vulnerability has been resolved: ipv4: free inetopt and ireqopt after an RCU gra...

Amazon Linux 2023 : golang-github-burntsushi-toml, golang-github-burntsushi-toml-devel (ALAS2023-2026-3364)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3364 advisory. Due to security concerns regarding a small set of intermediate certificates issued by a specific Certificate Authority CA, the Go's crypto/x509 package is updated to not trust certificates issued by th...

Amazon Linux 2 : containerd (ALASDOCKER-2026-156)

The version of containerd installed on the remote host is prior to 2.3.7-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2DOCKER-2026-156 advisory. Due to security concerns regarding a small set of intermediate certificates issued by a specific Certificate Authority CA,...

Amazon Linux 2023 : amazon-ecr-credential-helper (ALAS2023-2026-3345)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3345 advisory. Due to security concerns regarding a small set of intermediate certificates issued by a specific Certificate Authority CA, the Go's crypto/x509 package is updated to not trust certificates issued by th...

Amazon Linux 2023 : yq (ALAS2023-2026-3347)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3347 advisory. Due to security concerns regarding a small set of intermediate certificates issued by a specific Certificate Authority CA, the Go's crypto/x509 package is updated to not trust certificates issued by th...

Amazon Linux 2023 : cni-plugins (ALAS2023-2026-3349)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3349 advisory. Due to security concerns regarding a small set of intermediate certificates issued by a specific Certificate Authority CA, the Go's crypto/x509 package is updated to not trust certificates issued by th...

Amazon Linux 2023 : golang-github-burntsushi-toml-test, golang-github-burntsushi-toml-test-devel (ALAS2023-2026-3363)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3363 advisory. Due to security concerns regarding a small set of intermediate certificates issued by a specific Certificate Authority CA, the Go's crypto/x509 package is updated to not trust certificates issued by th...

Amazon Linux 2023 : oci-add-hooks (ALAS2023-2026-3346)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3346 advisory. Due to security concerns regarding a small set of intermediate certificates issued by a specific Certificate Authority CA, the Go's crypto/x509 package is updated to not trust certificates issued by th...

Amazon Linux 2023 : credentials-fetcher (ALAS2023-2026-3360)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3360 advisory. Due to security concerns regarding a small set of intermediate certificates issued by a specific Certificate Authority CA, the Go's crypto/x509 package is updated to not trust certificates issued by th...

Amazon Linux 2023 : golist (ALAS2023-2026-3361)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3361 advisory. Due to security concerns regarding a small set of intermediate certificates issued by a specific Certificate Authority CA, the Go's crypto/x509 package is updated to not trust certificates issued by th...

Amazon Linux 2 : runfinch-finch (ALASDOCKER-2026-158)

The version of runfinch-finch installed on the remote host is prior to 1.19.0-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2DOCKER-2026-158 advisory. Due to security concerns regarding a small set of intermediate certificates issued by a specific Certificate Authority...

Amazon Linux 2 : oci-add-hooks (ALASECS-2026-154)

The version of oci-add-hooks installed on the remote host is prior to 0-0.13.20200504git325a340. It is, therefore, affected by a vulnerability as referenced in the ALAS2ECS-2026-154 advisory. Due to security concerns regarding a small set of intermediate certificates issued by a specific...

Amazon Linux 2 : containerd (ALASECS-2026-152)

The version of containerd installed on the remote host is prior to 2.3.7-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2ECS-2026-152 advisory. Due to security concerns regarding a small set of intermediate certificates issued by a specific Certificate Authority CA, the...

Medium: amazon-ecr-credential-helper

Issue Overview: Due to security concerns regarding a small set of intermediate certificates issued by a specific Certificate Authority CA, the Go's crypto/x509 package is updated to not trust certificates issued by the affected intermediate certificates. This would prevent possible future misuse ...

Medium: amazon-ecr-credential-helper

Issue Overview: Due to security concerns regarding a small set of intermediate certificates issued by a specific Certificate Authority CA, the Go's crypto/x509 package is updated to not trust certificates issued by the affected intermediate certificates. This would prevent possible future misuse ...