CLEANSTART-2026-EK12616 Security fix for CVE-2025-14763 applied in: apache-nifi 2.7.2-r7

Security vulnerability affects the apache-nifi package. This issue is resolved in later releases. See references for vulnerability details...

CVE-2025-14763

Missing cryptographic key commitment in the Amazon S3 Encryption Client for Java may allow a user with write access to the S3 bucket to introduce a new EDK that decrypts to different plaintext when the encrypted data key is stored in an "instruction file" instead of S3's metadata record. To...