Amazon Linux 2 : amazon-ssm-agent, --advisory ALAS2-2026-3207 (ALAS-2026-3207)

The version of amazon-ssm-agent installed on the remote host is prior to 3.3.3883.0-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3207 advisory. cmd/go: bypass of flag sanitization can lead to arbitrary code execution CVE-2025-61731 cmd/go: unexpected...

openSUSE 16 Security Update : amazon-ssm-agent (openSUSE-SU-2026:20351-1)

The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2026:20351-1 advisory. - CVE-2025-47913: client process termination when receiving an unexpected message type in response to a key listing or signing request bsc1253611. Tenab...

Security update for amazon-ssm-agent (important)

openSUSE security update: security update for amazon-ssm-agent ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20351-1 Rating: important References: bsc1253611 Cross-References: CVE-2025-47913 CVSS scores: CVE-2025-47913 SUSE : 7.5...

OPENSUSE-SU-2026:20351-1 Security update for amazon-ssm-agent

This update for amazon-ssm-agent fixes the following issues: - CVE-2025-47913: client process termination when receiving an unexpected message type in response to a key listing or signing request bsc1253611...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: grafana-alloy-fips, argo-events, argocd-image-updater-fips, gitlab-rails-ce, cloudbeat-fips, crossplane-provider-aws-cognitoidentity, src-fingerprint-fips, argo-cd-fips, kubevela-fips, ratify, terraform-fips, ksops, pulumi-language-yaml, packer-fips,...

GHSA-Q9HV-HPM4-HJ6X vulnerabilities

Vulnerabilities for packages: grafana-alloy-fips, argo-events, argocd-image-updater-fips, gitlab-rails-ce, cloudbeat-fips, crossplane-provider-aws-cognitoidentity, src-fingerprint-fips, argo-cd-fips, kubevela-fips, ratify, terraform-fips, ksops, pulumi-language-yaml, packer-fips,...

GHSA-37CX-329C-33X3 vulnerabilities

Vulnerabilities for packages: grafana-alloy-fips, argo-events, argocd-image-updater-fips, gitlab-rails-ce, cloudbeat-fips, src-fingerprint-fips, argo-cd-fips, kubevela-fips, packer-fips, flux-operator, rancher-fleet, gitea, xeol-fips, google-osconfig-agent, syft-fips, apko-fips, snyk-cli,...

CVE-2026-25934 vulnerabilities

Vulnerabilities for packages: grafana-alloy-fips, argo-events, argocd-image-updater-fips, gitlab-rails-ce, cloudbeat-fips, src-fingerprint-fips, argo-cd-fips, kubevela-fips, packer-fips, flux-operator, rancher-fleet, gitea, xeol-fips, google-osconfig-agent, syft-fips, apko-fips, snyk-cli,...

CVE-2025-61732 vulnerabilities

Vulnerabilities for packages: cert-manager-csi-driver-fips, gh, dynamic-localpv-provisioner-fips, cert-manager-google-cas-issuer-fips, podinfo-fips, protoc-gen-go-grpc, request-1279, src-fingerprint-fips, rancher-system-agent, falcosidekick-fips, azcopy-fips, octo-sts, ksops,...

GHSA-8JVR-VH7G-F8GX vulnerabilities

Vulnerabilities for packages: cert-manager-csi-driver-fips, gh, dynamic-localpv-provisioner-fips, cert-manager-google-cas-issuer-fips, podinfo-fips, protoc-gen-go-grpc, request-1279, src-fingerprint-fips, rancher-system-agent, falcosidekick-fips, azcopy-fips, octo-sts, ksops,...

Amazon Linux 2 : amazon-ssm-agent, --advisory ALAS2-2025-3121 (ALAS-2025-3121)

The version of amazon-ssm-agent installed on the remote host is prior to 3.3.3572.0-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2025-3121 advisory. Calling Verify with a VerifyOptions.KeyUsages that contains ExtKeyUsageAny unintentionally disabledpolicy...

SUSE SLES12 Security Update : amazon-ssm-agent (SUSE-SU-2025:4244-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2025:4244-1 advisory. - CVE-2025-47913: Fixed a bug in the client process termination when receiving an unexpected message type in response to a key listing or...

Security update for amazon-ssm-agent

This update for amazon-ssm-agent fixes the following issues: CVE-2025-47913: Fixed a bug in the client process termination when receiving an unexpected message type in response to a key listing or signing request. bsc1253598 Patch Instructions: To install this SUSE update use the SUSE recommended...

SUSE-SU-2025:4244-1 Security update for amazon-ssm-agent

This update for amazon-ssm-agent fixes the following issues: - CVE-2025-47913: Fixed a bug in the client process termination when receiving an unexpected message type in response to a key listing or signing request. bsc1253598...

openSUSE Security Advisory (SUSE-SU-2025:4191-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLES15 / openSUSE 15 Security Update : amazon-ssm-agent (SUSE-SU-2025:4191-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2025:4191-1 advisory. - CVE-2025-47913: Fixed a bug in the client process termination when receiving an unexpected message type in response to a key...

Security update for amazon-ssm-agent

This update for amazon-ssm-agent fixes the following issues: CVE-2025-47913: Fixed a bug in the client process termination when receiving an unexpected message type in response to a key listing or signing request. bsc1253598 Patch Instructions: To install this SUSE update use the SUSE recommended...

SUSE-SU-2025:4191-1 Security update for amazon-ssm-agent

This update for amazon-ssm-agent fixes the following issues: - CVE-2025-47913: Fixed a bug in the client process termination when receiving an unexpected message type in response to a key listing or signing request. bsc1253598...

OPENSUSE-SU-2025:15744-1 amazon-ssm-agent-3.3.3270.0-2.1 on GA media

These are all security issues fixed in the amazon-ssm-agent-3.3.3270.0-2.1 package on the GA media of openSUSE Tumbleweed...

Important: amazon-ssm-agent

Issue Overview: The net/http package accepted data in the chunked transfer encoding containing an invalid chunk-size line terminated by a bare LF. When used in conjunction with a server or proxy which incorrectly interprets a bare LF in a chunk extension as part of the extension, this could permi...