Amazon Linux 2 Security Advisory: ALAS2ECS-2025-052
Advisory Released Date: 2025-04-16
Advisory Updated Date: 2025-04-29
Envoy is a cloud-native high-performance edge/middle/service proxy. Prior to 1.33.1, 1.32.4, 1.31.6, and 1.30.10, Envoy's ext_proc HTTP filter is at risk of crashing if a local reply is sent to the external server due to the filter's life time issue. A known situation is the failure of a websocket handshake will trigger a local reply leading to the crash of Envoy. This vulnerability is fixed in 1.33.1, 1.32.4, 1.31.6, and 1.30.10. (CVE-2025-30157)
Affected Packages:
ecs-service-connect-agent
Note:
This advisory is applicable to Amazon Linux 2 - Ecs Extra. Visit this page to learn more about Amazon Linux 2 (AL2) Extras and this FAQ section for the difference between AL2 Core and AL2 Extras advisories.
Issue Correction:
Run yum update ecs-service-connect-agent to update your system.
aarch64:
ecs-service-connect-agent-v1.29.12.1-1.amzn2.aarch64
src:
ecs-service-connect-agent-v1.29.12.1-1.amzn2.src
x86_64:
ecs-service-connect-agent-v1.29.12.1-1.amzn2.x86_64