AWS inspector: Inspector changelog: SBOM Generator CVE clarification and AMI scanning
Summary
Adds two changelog entries: one noting that the Amazon Inspector SBOM Generator may produce false vulnerability findings for CVE-2026-78661 and CVE-2026-97045 (confirmed not impacted, to be resolved next release), and one announcing support for continuously scanning account-owned machine images (AMIs) for OS and language package vulnerabilities.
Security assessment
The entry explicitly states the SBOM Generator is NOT impacted by the referenced CVEs, so it clarifies false-positive findings rather than fixing a vulnerability. The AMI scanning entry documents a new vulnerability-scanning capability, which is security-relevant documentation but not a fix for a specific weakness.
Evidence
+[Updates for the Amazon Inspector SBOM Generator](./doc-history.html)| Amazon Inspector is aware of a scenario where the Amazon Inspector SBOM Generator might generate vulnerability findings for CVE-2026-78661 and CVE-2026-97045. It was confirmed that the Amazon Inspector SBOM Generator is not impacted by these vulnerabilities. These findings will be resolved in the next release. | October 28, 2026
Diff
diff --git a/inspector/latest/user/doc-history.md b/inspector/latest/user/doc-history.md index 2c8762b..ae9333b 100644 --- a//inspector/latest/user/doc-history.md +++ b//inspector/latest/user/doc-history.md @@ -16,0 +17 @@ Change| Description| Date +[Updates for the Amazon Inspector SBOM Generator](./doc-history.html)| Amazon Inspector is aware of a scenario where the Amazon Inspector SBOM Generator might generate vulnerability findings for CVE-2026-78661 and CVE-2026-97045. It was confirmed that the Amazon Inspector SBOM Generator is not impacted by these vulnerabilities. These findings will be resolved in the next release. | October 28, 2026 @@ -24,0 +26 @@ Change| Description| Date +[Amazon Inspector adds support for scanning machine images](./doc-history.html)| Amazon Inspector can now continuously scan the machine images (AMIs) that your account owns for operating system and programming language package vulnerabilities. You control which machine images are in scope by using scan eligibility windows, a scan mode, and exclusion options for copied and backup images. For more information, see [Scanning machine images with Amazon Inspector](https://docs.aws.amazon.com/inspector/latest/user/scanning-machine-images.html) and [Configuring machine image scanning](https://docs.aws.amazon.com/inspector/latest/user/machine-image-scan-configuration.html). | September 8, 2026