Amazon Linux 2 (EOS) Security Advisory: ALAS2-2026-3873
Advisory Released Date: 2026-08-31
Advisory Updated Date: 2026-08-31
FAQs regarding Amazon Linux ALAS/CVE Severity
libvirt: newline injection in network xml dns txt/srv fields allows dnsmasq config directive injection (CVE-2026-61477)
libvirt: Check for empty string condition and skip inclusion of the XML document context in the error message. (CVE-2026-61478)
A flaw was found in libvirt. A local attacker, specifically a process running as the confined `swtpm` user, could exploit a symlink-following vulnerability in the `virFileChownFiles()` function. By planting a symbolic link within the `swtpm` state directory, the attacker could trick the root-level libvirt daemon into changing the ownership of an arbitrary file to the `swtpm` user. This allows for privilege escalation from the `swtpm` sandbox to root-level file ownership control. (CVE-2026-63622)
A flaw was found in libvirt. During storage volume clone or convert operations, newly created volume images were temporarily world-readable. This was caused by the `qemu-img` utility running with overly permissive file creation settings, allowing any local user to read the full guest disk contents. This vulnerability could lead to sensitive information disclosure from guest virtual machines. (CVE-2026-63623)
Affected Packages:
libvirt
Note:
This advisory is applicable to Amazon Linux 2 (AL2) Core repository. Visit this FAQ section for the difference between AL2 Core and AL2 Extras advisories.
Issue Correction:
Run yum update libvirt or yum update --advisory ALAS2-2026-3873 to update your system.
aarch64:
libvirt-4.5.0-36.amzn2.3.3.aarch64
libvirt-docs-4.5.0-36.amzn2.3.3.aarch64
libvirt-daemon-4.5.0-36.amzn2.3.3.aarch64
libvirt-daemon-config-network-4.5.0-36.amzn2.3.3.aarch64
libvirt-daemon-config-nwfilter-4.5.0-36.amzn2.3.3.aarch64
libvirt-daemon-driver-network-4.5.0-36.amzn2.3.3.aarch64
libvirt-daemon-driver-nwfilter-4.5.0-36.amzn2.3.3.aarch64
libvirt-daemon-driver-nodedev-4.5.0-36.amzn2.3.3.aarch64
libvirt-daemon-driver-interface-4.5.0-36.amzn2.3.3.aarch64
libvirt-daemon-driver-secret-4.5.0-36.amzn2.3.3.aarch64
libvirt-daemon-driver-storage-core-4.5.0-36.amzn2.3.3.aarch64
libvirt-daemon-driver-storage-logical-4.5.0-36.amzn2.3.3.aarch64
libvirt-daemon-driver-storage-disk-4.5.0-36.amzn2.3.3.aarch64
libvirt-daemon-driver-storage-scsi-4.5.0-36.amzn2.3.3.aarch64
libvirt-daemon-driver-storage-iscsi-4.5.0-36.amzn2.3.3.aarch64
libvirt-daemon-driver-storage-mpath-4.5.0-36.amzn2.3.3.aarch64
libvirt-daemon-driver-storage-4.5.0-36.amzn2.3.3.aarch64
libvirt-daemon-driver-qemu-4.5.0-36.amzn2.3.3.aarch64
libvirt-daemon-driver-lxc-4.5.0-36.amzn2.3.3.aarch64
libvirt-daemon-kvm-4.5.0-36.amzn2.3.3.aarch64
libvirt-daemon-lxc-4.5.0-36.amzn2.3.3.aarch64
libvirt-client-4.5.0-36.amzn2.3.3.aarch64
libvirt-libs-4.5.0-36.amzn2.3.3.aarch64
libvirt-admin-4.5.0-36.amzn2.3.3.aarch64
libvirt-bash-completion-4.5.0-36.amzn2.3.3.aarch64
libvirt-login-shell-4.5.0-36.amzn2.3.3.aarch64
libvirt-devel-4.5.0-36.amzn2.3.3.aarch64
libvirt-lock-sanlock-4.5.0-36.amzn2.3.3.aarch64
libvirt-nss-4.5.0-36.amzn2.3.3.aarch64
libvirt-debuginfo-4.5.0-36.amzn2.3.3.aarch64
i686:
libvirt-4.5.0-36.amzn2.3.3.i686
libvirt-docs-4.5.0-36.amzn2.3.3.i686
libvirt-daemon-4.5.0-36.amzn2.3.3.i686
libvirt-daemon-config-network-4.5.0-36.amzn2.3.3.i686
libvirt-daemon-config-nwfilter-4.5.0-36.amzn2.3.3.i686
libvirt-daemon-driver-network-4.5.0-36.amzn2.3.3.i686
libvirt-daemon-driver-nwfilter-4.5.0-36.amzn2.3.3.i686
libvirt-daemon-driver-nodedev-4.5.0-36.amzn2.3.3.i686
libvirt-daemon-driver-interface-4.5.0-36.amzn2.3.3.i686
libvirt-daemon-driver-secret-4.5.0-36.amzn2.3.3.i686
libvirt-daemon-driver-storage-core-4.5.0-36.amzn2.3.3.i686
libvirt-daemon-driver-storage-logical-4.5.0-36.amzn2.3.3.i686
libvirt-daemon-driver-storage-disk-4.5.0-36.amzn2.3.3.i686
libvirt-daemon-driver-storage-scsi-4.5.0-36.amzn2.3.3.i686
libvirt-daemon-driver-storage-iscsi-4.5.0-36.amzn2.3.3.i686
libvirt-daemon-driver-storage-mpath-4.5.0-36.amzn2.3.3.i686
libvirt-daemon-driver-storage-4.5.0-36.amzn2.3.3.i686
libvirt-daemon-driver-lxc-4.5.0-36.amzn2.3.3.i686
libvirt-daemon-lxc-4.5.0-36.amzn2.3.3.i686
libvirt-client-4.5.0-36.amzn2.3.3.i686
libvirt-libs-4.5.0-36.amzn2.3.3.i686
libvirt-admin-4.5.0-36.amzn2.3.3.i686
libvirt-bash-completion-4.5.0-36.amzn2.3.3.i686
libvirt-login-shell-4.5.0-36.amzn2.3.3.i686
libvirt-devel-4.5.0-36.amzn2.3.3.i686
libvirt-nss-4.5.0-36.amzn2.3.3.i686
libvirt-debuginfo-4.5.0-36.amzn2.3.3.i686
src:
libvirt-4.5.0-36.amzn2.3.3.src
x86_64:
libvirt-4.5.0-36.amzn2.3.3.x86_64
libvirt-docs-4.5.0-36.amzn2.3.3.x86_64
libvirt-daemon-4.5.0-36.amzn2.3.3.x86_64
libvirt-daemon-config-network-4.5.0-36.amzn2.3.3.x86_64
libvirt-daemon-config-nwfilter-4.5.0-36.amzn2.3.3.x86_64
libvirt-daemon-driver-network-4.5.0-36.amzn2.3.3.x86_64
libvirt-daemon-driver-nwfilter-4.5.0-36.amzn2.3.3.x86_64
libvirt-daemon-driver-nodedev-4.5.0-36.amzn2.3.3.x86_64
libvirt-daemon-driver-interface-4.5.0-36.amzn2.3.3.x86_64
libvirt-daemon-driver-secret-4.5.0-36.amzn2.3.3.x86_64
libvirt-daemon-driver-storage-core-4.5.0-36.amzn2.3.3.x86_64
libvirt-daemon-driver-storage-logical-4.5.0-36.amzn2.3.3.x86_64
libvirt-daemon-driver-storage-disk-4.5.0-36.amzn2.3.3.x86_64
libvirt-daemon-driver-storage-scsi-4.5.0-36.amzn2.3.3.x86_64
libvirt-daemon-driver-storage-iscsi-4.5.0-36.amzn2.3.3.x86_64
libvirt-daemon-driver-storage-mpath-4.5.0-36.amzn2.3.3.x86_64
libvirt-daemon-driver-storage-gluster-4.5.0-36.amzn2.3.3.x86_64
libvirt-daemon-driver-storage-rbd-4.5.0-36.amzn2.3.3.x86_64
libvirt-daemon-driver-storage-4.5.0-36.amzn2.3.3.x86_64
libvirt-daemon-driver-qemu-4.5.0-36.amzn2.3.3.x86_64
libvirt-daemon-driver-lxc-4.5.0-36.amzn2.3.3.x86_64
libvirt-daemon-kvm-4.5.0-36.amzn2.3.3.x86_64
libvirt-daemon-lxc-4.5.0-36.amzn2.3.3.x86_64
libvirt-client-4.5.0-36.amzn2.3.3.x86_64
libvirt-libs-4.5.0-36.amzn2.3.3.x86_64
libvirt-admin-4.5.0-36.amzn2.3.3.x86_64
libvirt-bash-completion-4.5.0-36.amzn2.3.3.x86_64
libvirt-login-shell-4.5.0-36.amzn2.3.3.x86_64
libvirt-devel-4.5.0-36.amzn2.3.3.x86_64
libvirt-lock-sanlock-4.5.0-36.amzn2.3.3.x86_64
libvirt-nss-4.5.0-36.amzn2.3.3.x86_64
libvirt-debuginfo-4.5.0-36.amzn2.3.3.x86_64