194 matches found
Medium: amazon-ssm-agent
Issue Overview: When coalescing adjacent text nodes in addText and fosterParent, appending to an existing TextNode's Data via string concatenation n.Data += text reallocated and copied the accumulated string on every token. Inputs containing many short text runs separated by ignored end tags such...
Medium: amazon-ssm-agent
Issue Overview: When coalescing adjacent text nodes in addText and fosterParent, appending to an existing TextNode's Data via string concatenation n.Data += text reallocated and copied the accumulated string on every token. Inputs containing many short text runs separated by ignored end tags such...
Amazon Linux 2 : amazon-ssm-agent (ALAS-2026-4063)
The version of amazon-ssm-agent installed on the remote host is prior to 3.3.5700.0-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-4063 advisory. Due to security concerns regarding a small set of intermediate certificates issued by a specific Certificate Authorit...
Amazon Linux 2023 : amazon-ssm-agent (ALAS2023-2026-3358)
It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3358 advisory. Due to security concerns regarding a small set of intermediate certificates issued by a specific Certificate Authority CA, the Go's crypto/x509 package is updated to not trust certificates issued by th...
Medium: amazon-ssm-agent
Issue Overview: Due to security concerns regarding a small set of intermediate certificates issued by a specific Certificate Authority CA, the Go's crypto/x509 package is updated to not trust certificates issued by the affected intermediate certificates. This would prevent possible future misuse ...
Medium: amazon-ssm-agent
Issue Overview: Due to security concerns regarding a small set of intermediate certificates issued by a specific Certificate Authority CA, the Go's crypto/x509 package is updated to not trust certificates issued by the affected intermediate certificates. This would prevent possible future misuse ...
PT-2026-132722
These are all security issues fixed in the amazon-ssm-agent-3.3.5678.0-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:12314-1 amazon-ssm-agent-3.3.5678.0-1.1 on GA media
These are all security issues fixed in the amazon-ssm-agent-3.3.5678.0-1.1 package on the GA media of openSUSE Tumbleweed...
Medium: amazon-ssm-agent
Issue Overview: Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. Now, we handle all RFC 4254 channel messages; global requests are handled explicitly. Then, treat all other messages as a protocol error and te...
Medium: amazon-ssm-agent
Issue Overview: Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. Now, we handle all RFC 4254 channel messages; global requests are handled explicitly. Then, treat all other messages as a protocol error and te...
Amazon Linux 2023 : amazon-ssm-agent (ALAS2023-2026-3160)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3160 advisory. Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. Now, we handle all RFC 4254 channel messages; global...
Amazon Linux 2 : amazon-ssm-agent (ALAS-2026-3969)
The version of amazon-ssm-agent installed on the remote host is prior to 3.3.5390.0-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3969 advisory. Previously, after a channel has been established, a malicious peer could send crafted messages that would...
Critical: amazon-ssm-agent
Issue Overview: Handshakes which used Encrypted Client Hello could be de-anonymized by a passive network observer due to a disclosure of pre-shared key identities in the unencrypted client hello. CVE-2026-42505 go-git is an extensible git implementation library written in pure Go. Prior to 5.19.2...
Amazon Linux 2 : amazon-ssm-agent (ALAS-2026-3963)
The version of amazon-ssm-agent installed on the remote host is prior to 3.3.5226.0-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3963 advisory. Handshakes which used Encrypted Client Hello could be de-anonymized by a passive network observer due to a...
Amazon Linux 2023 : amazon-ssm-agent (ALAS2023-2026-3149)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3149 advisory. Handshakes which used Encrypted Client Hello could be de-anonymized by a passive network observer due to a disclosure of pre-shared key identities in the unencrypted client hello. CVE-2026-425...
Critical: amazon-ssm-agent
Issue Overview: Handshakes which used Encrypted Client Hello could be de-anonymized by a passive network observer due to a disclosure of pre-shared key identities in the unencrypted client hello. CVE-2026-42505 go-git is an extensible git implementation library written in pure Go. Prior to 5.19.2...
Amazon Linux 2 : amazon-ssm-agent (ALAS-2026-3933)
The version of amazon-ssm-agent installed on the remote host is prior to 3.3.5226.0-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3933 advisory. Handshakes which used Encrypted Client Hello could be de-anonymized by a passive network observer due to a...
Important: amazon-ssm-agent
Issue Overview: Handshakes which used Encrypted Client Hello could be de-anonymized by a passive network observer due to a disclosure of pre-shared key identities in the unencrypted client hello. CVE-2026-42505 go-git is an extensible git implementation library written in pure Go. Prior to 5.19.2...
Security update for amazon-ssm-agent
This update for amazon-ssm-agent fixes the following issue: CVE-2026-56854: golang.org/x/crypto/ssh: source-address restriction bypassed in 5 callback families bsc1278681 CVE-2026-56855: golang.org/x/crypto/ssh: prevent DoS on deadlocked established channel bsc1278681 CVE-2026-78662:...
SUSE-SU-2026:4372-1 Security update for amazon-ssm-agent
This update for amazon-ssm-agent fixes the following issue: - CVE-2026-56854: golang.org/x/crypto/ssh: source-address restriction bypassed in 5 callback families bsc1278681 - CVE-2026-56855: golang.org/x/crypto/ssh: prevent DoS on deadlocked established channel bsc1278681 - CVE-2026-78662:...