{"id":"SUSE-SU-2026:5101-1","summary":"Security update for aws-efs-utils","details":"This update for aws-efs-utils fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2026-16317: s2n-tls: man-in-the-middle attack can silently discard individual application data records\n  (bsc#1272354).\n- CVE-2026-16318: s2n-tls: Denial of Service due to memory leak in QUIC transport parameters handler (bsc#1272349).\n- CVE-2026-25541: bytes: integer overflow in 'BytesMut:reserve' can lead to undefined behavior and crashes\n  (bsc#1274202).\n\nChanges for aws-efs-utils:\n\n- Update to version 3.3.4\n","modified":"2026-11-05T13:15:07.550193736Z","published":"2026-11-04T18:01:29Z","related":["CVE-2026-16317","CVE-2026-16318","CVE-2026-25541"],"upstream":["CVE-2026-16317","CVE-2026-16318","CVE-2026-25541"],"references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/2026/suse-su-20265101-1/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1263683"},{"type":"REPORT","url":"https://bugzilla.suse.com/1272349"},{"type":"REPORT","url":"https://bugzilla.suse.com/1272354"},{"type":"REPORT","url":"https://bugzilla.suse.com/1274202"},{"type":"REPORT","url":"https://bugzilla.suse.com/1275449"},{"type":"REPORT","url":"https://bugzilla.suse.com/1275450"},{"type":"REPORT","url":"https://bugzilla.suse.com/1281947"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-16317"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-16318"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-25541"}],"affected":[{"package":{"name":"aws-efs-utils","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP6","purl":"pkg:rpm/suse/aws-efs-utils&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Public%20Cloud%2015%20SP6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.4-150600.17.12.1"}]}],"ecosystem_specific":{"binaries":[{"aws-efs-utils":"3.3.4-150600.17.12.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:5101-1.json"}},{"package":{"name":"aws-efs-utils","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP7","purl":"pkg:rpm/suse/aws-efs-utils&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Public%20Cloud%2015%20SP7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.4-150600.17.12.1"}]}],"ecosystem_specific":{"binaries":[{"aws-efs-utils":"3.3.4-150600.17.12.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:5101-1.json"}}],"schema_version":"1.9.2"}