AWS systems-manager documentation change
Summary
Removed Amazon Linux 1, Amazon Linux 2022, and SUSE Linux Enterprise Server from CVE reporting list. Deleted note about CentOS CVE limitations and statement about CVE ID reporting scope.
Security assessment
Changes appear to update supported OS list for CVE reporting but don't explicitly address vulnerabilities. Removal of CentOS note could reduce visibility into security data limitations, but no concrete evidence of addressing a specific vulnerability.
Diff
diff --git a/systems-manager/latest/userguide/patch-manager-view-compliance-results.md b/systems-manager/latest/userguide/patch-manager-view-compliance-results.md index b76ee9ae7..eff860913 100644 --- a//systems-manager/latest/userguide/patch-manager-view-compliance-results.md +++ b//systems-manager/latest/userguide/patch-manager-view-compliance-results.md @@ -25,2 +24,0 @@ CVE details are included for supported versions of the following operating syste - * Amazon Linux 1 - @@ -29,2 +26,0 @@ CVE details are included for supported versions of the following operating syste - * Amazon Linux 2022 - @@ -39,6 +34,0 @@ CVE details are included for supported versions of the following operating syste - * SUSE Linux Enterprise Server (SLES) - - - - -###### Note @@ -46 +35,0 @@ CVE details are included for supported versions of the following operating syste -By default, CentOS and CentOS Stream don't provide CVE information about updates. You can, however, allow this support by using third-party repositories such as the Extra Packages for Enterprise Linux (EPEL) repository published by Fedora. For information, see [EPEL](https://fedoraproject.org/wiki/EPEL) on the Fedora Wiki. @@ -48 +36,0 @@ By default, CentOS and CentOS Stream don't provide CVE information about updates -Currently, CVE ID values are reported only for patches with a status of `Missing` or `Failed`.