AWS dcv: Release notes: 2026.0-577 fixes node join auth vulnerability
Summary
Added release notes for version 2026.0-577 (October 28, 2026) documenting Amazon Linux 2027 support and enforcement of authentication and authorization for nodes joining the Broker cluster to address a security vulnerability.
Security assessment
The changed line explicitly states that authentication and authorization of nodes joining the Broker cluster was enforced to address a security vulnerability, indicating a fix for an unauthorized node-join/authentication weakness in the DCV Session Manager Broker cluster. No CVE identifier is given in the diff.
Evidence
+ * Enforced authentication and authorization of nodes joining the Broker cluster to address a security vulnerability.
Diff
diff --git a/dcv/latest/sm-admin/doc-history-release-notes.md b/dcv/latest/sm-admin/doc-history-release-notes.md index cbbddb9..f05dc09 100644 --- a//dcv/latest/sm-admin/doc-history-release-notes.md +++ b//dcv/latest/sm-admin/doc-history-release-notes.md @@ -27,0 +28,2 @@ This section provides an overview of the major updates, feature releases, and bu + * 2026.0-577— October 28, 2026 + @@ -82,0 +85,16 @@ This section provides an overview of the major updates, feature releases, and bu +### 2026.0-577— October 28, 2026 + +Build numbers | Changes and bug fixes +---|--- + + * Broker: 577 + * Agent: 920 + * CLI: 160 + +| + + * Added support for Amazon Linux 2027 for the Agent (64-bit x86 and 64-bit ARM) and the Broker (64-bit x86). + * Enforced authentication and authorization of nodes joining the Broker cluster to address a security vulnerability. + + + @@ -515,0 +534 @@ Change | Description | Date +Amazon DCV Version 2026.0-577 | Amazon DCV Session Manager has been updated for Amazon DCV 2026.0-577. For more information, see 2026.0-577— October 28, 2026. | October 28, 2026