CLEANSTART-2026-PQ72835 Security fixes in external-secrets-fips 0.17.0-r1

Package external-secrets-fips version 0.17.0-r1 fixes 5 vulnerabilities: CVE-2025-47913, CVE-2020-8911, CVE-2025-47914, CVE-2025-58181, CVE-2020-8912...

govulncheck-vulndb-0.0.20241119T173509-1.1 on GA media (moderate)

govulncheck-vulndb-0.0.20241119T173509-1.1 on GA media Announcement ID: openSUSE-SU-2024:14513-1 Rating: moderate Cross-References: CVE-2020-8911 CVE-2023-0109 CVE-2024-0793 CVE-2024-24425 CVE-2024-24426 CVE-2024-44625 CVE-2024-52010 CVE-2024-52308 CVE-2024-52522 CVE-2024-9526 CVSS scores:...

CVE-2020-8911 vulnerabilities

Vulnerabilities for packages: k3d, commercial-grafana, loki, external-secrets-operator-fips, external-secrets-operator, mattermost-fips, kube-arangodb-fips, elastic-agent, tigera-operator, zot, cluster-autoscaler, harbor-fips, dapr, kots, grafana-fips, consul, rancher-agent, grafana, dapr-fips,...

CVE-2020-8911 vulnerabilities

Vulnerabilities for packages: kots, mattermost, k3d, loki, opentelemetry-collector, external-secrets-operator, zot...

CVE-2020-8911

CVE-2020-8911 describes a padding oracle in the AWS S3 Crypto SDK for Go (older GoLang S3 encryption client). The vulnerability arises because AES-CBC encryption was used without a MAC, enabling an attacker with write access to the target S3 bucket to observe decryption outcomes and reconstruct p...