SUSE-SU-2026:5101-1: Security update for aws-efs-utils
This update for aws-efs-utils fixes the following issues:
Security issues fixed:
- CVE-2026-16317: s2n-tls: man-in-the-middle attack can silently discard individual application data records (bsc#1272354). - CVE-2026-16318: s2n-tls: Denial of Service due to memory leak in QUIC transport parameters handler (bsc#1272349). - CVE-2026-25541: bytes: integer overflow in 'BytesMut:reserve' can lead to undefined behavior and crashes (bsc#1274202).
Changes for aws-efs-utils:
- Update to version 3.3.4
Other sources
This update for aws-efs-utils fixes the following issues: Security issues fixed: CVE-2026-16317: s2n-tls: man-in-the-middle attack can silently discard individual application data records (bsc#1272354). CVE-2026-16318: s2n-tls: denial of service due to memory leak in QUIC transport parameters handler (bsc#1272349). CVE-2026-25541: bytes: integer overflow in BytesMut:reserve can lead to undefined behavior and crashes (bsc#1274202). Changes for aws-efs-utils: Update to version 3.3.4
— SUSE
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
suse/aws-efs-utilsto a version that resolves this vulnerability.Fixed in 3.3.4-150600.17.12.1 - Upgrade
Upgrade
suse/aws-efs-utils-debugsourceto a version that resolves this vulnerability.Fixed in 3.3.4-150600.17.12.1 - Upgrade
Upgrade
suse/aws-efs-utils-debuginfoto a version that resolves this vulnerability.Fixed in 3.3.4-150600.17.12.1 - Upgrade
Upgrade
aws-efs-utilsto a version that resolves this vulnerability.Fixed in 3.3.4
Event History
Child vulnerabilities
Contains the following vulnerabilities.