openSUSE-SU-2026:21574-1

See a problem?
Import Source
https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:21574-1.json
JSON Data
https://api.test.osv.dev/v1/vulns/openSUSE-SU-2026:21574-1
Upstream
Related
Published
2026-08-12T16:07:50Z
Modified
2026-08-14T18:24:05Z
Summary
Security update for amazon-ecs-init
Details

This update for amazon-ecs-init fixes the following issue:

Update to version 1.106.0.

Security issues fixed:

  • CVE-2026-10722: github.com/cilium/ebpf: interger overflow when performing BTF string offset boundary check can lead to crash when malformed ELF/BTF input is parsed (bsc#1267794).

Other updates and bugfixes:

  • Version 1.106.0:
    • Feature - Feature - Add FIS-driven DNS refresh add-sources endpoint for network-latency and network-packet-loss faults (#5029)
    • Enhancement - Enhancement: Update SSM Agent version to 3.3.4624.0 for ECS exec (#5054)
    • Enhancement - Backfill host DNS config on isolated platform (#5047)
    • Enhancement - Bump github.com/aws/smithy-go from 1.27.3 to 1.27.4 in /agent (#5051)
    • Enhancement - Bump github.com/aws/aws-sdk-go-v2/credentials in /ecs-agent, /agent and /ecs-init to 1.19.29 (#5050)
    • Enhancement - Bump actions/setup-go from 6 to 7 in /.github/workflows (#5049)
    • Enhancement - Update Go version to 1.25.12 (#5048)
    • Enhancement - Bump github.com/vishvananda/netlink from 1.2.1-beta.2 to 1.3.1 in /ecs-agent, /agent and /ecs-init (#5037)
    • Enhancement - Bump github.com/aws/aws-sdk-go-v2/credentials from 1.19.22 to 1.19.28 in /agent (#5038)
    • Enhancement - Bump github.com/hectane/go-acl from 0.0.0-20190604041725-da78bae5fc95 to 1.0.0 in /agent (#5022)
    • Enhancement - chore(deps): bump github.com/cilium/ebpf from v0.16.0 to v0.22.0 in /agent (#5034)
    • Enhancement - Bump golang.org/x/net from 0.48.0 to 0.55.0 in /ecs-agent/daemonimages/csidriver (#5031)
    • Enhancement - api-2.json: Add CONFIDENTIAL_PARTITION and attestationPolicy to api model (#5033)
    • Bugfix - Fix flaky TestHostResourceManagerTrickleQueue integration test (#5026)
References

Affected packages

openSUSE:Leap 16.0 / amazon-ecs-init

Package

Name
amazon-ecs-init
Purl
pkg:rpm/opensuse/amazon-ecs-init&distro=openSUSE%20Leap%2016.0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.106.0-160000.1.1

Ecosystem specific

{
    "binaries":  [
        {
            "amazon-ecs-init":  "1.106.0-160000.1.1"
        }
    ]
}

Database specific

source
"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:21574-1.json"