Skip to content
OpenAdvisories
Low ALAS2023-2026-2137 1 CVE

Low: mount-s3 security update (Amazon Linux 2023)

Published Sep 14, 2026 · Updated Sep 14, 2026

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-53584: libgit2 Submodule path traversal

Fixed packages 3

ReleasePackageFixed in
Amazon Linux · 2023 mount-s3 0:1.24.0-1.amzn2023
Amazon Linux · 2023 mount-s3-debuginfo 0:1.24.0-1.amzn2023
Amazon Linux · 2023 mount-s3-debugsource 0:1.24.0-1.amzn2023

Vulnerabilities 1

  • Medium 4.3
    CVE-2026-53584

    libgit2: Submodule path traversal

    libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git functionality into your application. Prior to 1.8.6 and 1.9.5, libgit2 does not reject traversal components in a submodule pa…

    libgit2 libgit2 libgit2 libgit2 Debian Ubuntu Azure Linux Alpine

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2026-53584.html