Amazon Linux 2023 Security Advisory: ALAS2023-2026-2068
Advisory Released Date: 2026-08-17
Advisory Updated Date: 2026-08-17
Severity:
Important
Issue Overview:
A flaw was found in gnome-remote-desktop as shipped in Red Hat Enterprise Linux. When the daemon is running in system mode with RDP enabled, the incoming connection handler bypasses the connection throttler, allowing an unauthenticated remote attacker to open many parallel pre-authentication connections to the RDP listener. This can accumulate accepted sockets and pending routing-token operations until timeout, exhausting resources and preventing legitimate users from establishing RDP sessions. This issue does not affect the upstream version. (CVE-2026-18358)
Affected Packages:
gnome-remote-desktop
Issue Correction:
Run dnf update gnome-remote-desktop --releasever 2023.12.20260817 or dnf update --advisory ALAS2023-2026-2068 --releasever 2023.12.20260817 to update your system.
More information on how to update your system can be found on this page: Amazon Linux 2023 documentation
New Packages:
aarch64:
gnome-remote-desktop-debugsource-47.3-1.amzn2023.0.3.aarch64
gnome-remote-desktop-debuginfo-47.3-1.amzn2023.0.3.aarch64
gnome-remote-desktop-47.3-1.amzn2023.0.3.aarch64
src:
gnome-remote-desktop-47.3-1.amzn2023.0.3.src
x86_64:
gnome-remote-desktop-debuginfo-47.3-1.amzn2023.0.3.x86_64
gnome-remote-desktop-debugsource-47.3-1.amzn2023.0.3.x86_64
gnome-remote-desktop-47.3-1.amzn2023.0.3.x86_64