ALAS2023-2026-1673: CVEs fixed (Amazon Linux)

ALAS2023-2026-1673 fixes 2 tracked CVEs. Affected systems and fixed versions.

• CVE-2026-29146 HIGH 7.5 UPGRADE Padding Oracle vulnerability in Apache Tomcat's EncryptInterceptor with default configuration. This issue aff
• CVE-2026-29145 CRITICAL 9.1 UPGRADE UPGRADE CLIENT_CERT authentication does not fail as expected for some scenarios when soft fail is disabled vulnerabili

Applies to

• Amazon Linux 2023

← Back to latest CVEs