SUSE-SU-2026:23234-1
- Source
- https://www.suse.com/support/update/announcement/2026/suse-su-202623234-1/
- Import Source
- https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:23234-1.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/SUSE-SU-2026:23234-1
- Upstream
- Related
- Published
- 2026-08-12T16:07:50Z
- Modified
- 2026-08-27T18:23:33Z
- Summary
- Security update for amazon-ecs-init
- Details
-
This update for amazon-ecs-init fixes the following issue:
Update to version 1.106.0.
Security issues fixed:
- CVE-2026-10722: github.com/cilium/ebpf: interger overflow when performing BTF string offset boundary check can lead to crash when malformed ELF/BTF input is parsed (bsc#1267794).
Other updates and bugfixes:
- Version 1.106.0:
- Feature - Feature - Add FIS-driven DNS refresh add-sources endpoint for network-latency and network-packet-loss faults (#5029)
- Enhancement - Enhancement: Update SSM Agent version to 3.3.4624.0 for ECS exec (#5054)
- Enhancement - Backfill host DNS config on isolated platform (#5047)
- Enhancement - Bump github.com/aws/smithy-go from 1.27.3 to 1.27.4 in /agent (#5051)
- Enhancement - Bump github.com/aws/aws-sdk-go-v2/credentials in /ecs-agent, /agent and /ecs-init to 1.19.29 (#5050)
- Enhancement - Bump actions/setup-go from 6 to 7 in /.github/workflows (#5049)
- Enhancement - Update Go version to 1.25.12 (#5048)
- Enhancement - Bump github.com/vishvananda/netlink from 1.2.1-beta.2 to 1.3.1 in /ecs-agent, /agent and /ecs-init (#5037)
- Enhancement - Bump github.com/aws/aws-sdk-go-v2/credentials from 1.19.22 to 1.19.28 in /agent (#5038)
- Enhancement - Bump github.com/hectane/go-acl from 0.0.0-20190604041725-da78bae5fc95 to 1.0.0 in /agent (#5022)
- Enhancement - chore(deps): bump github.com/cilium/ebpf from v0.16.0 to v0.22.0 in /agent (#5034)
- Enhancement - Bump golang.org/x/net from 0.48.0 to 0.55.0 in /ecs-agent/daemonimages/csidriver (#5031)
- Enhancement - api-2.json: Add CONFIDENTIAL_PARTITION and attestationPolicy to api model (#5033)
- Bugfix - Fix flaky TestHostResourceManagerTrickleQueue integration test (#5026)
- References
Affected packages
SUSE:Linux Enterprise Server 16.0 / amazon-ecs-init
Package
- Name
- amazon-ecs-init
- Purl
- pkg:rpm/suse/amazon-ecs-init&distro=SUSE%20Linux%20Enterprise%20Server%2016.0