ALAS2023-2026-2023: CVEs fixed (Amazon Linux)

ALAS2023-2026-2023 fixes 2 tracked CVEs. Affected systems and fixed versions.

• CVE-2026-48702 HIGH 7.5 Rekor is a software supply chain transparency log
• CVE-2026-49478 HIGH 8.7 Fulcio is a certificate authority for issuing code signing certificates for an OpenID Connect (OIDC) identity

Applies to

• Amazon Linux 2023

← Back to latest CVEs