Ubuntu: Security Advisory (USN-7928-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Medium: aws-cfn-bootstrap

Issue Overview: Requests is a HTTP library. Due to a URL parsing issue, Requests releases prior to 2.32.4 may leak .netrc credentials to third parties for specific maliciously-crafted URLs. Users should upgrade to version 2.32.4 to receive a fix. For older versions of Requests, use of the .netrc...

CVE-2025-65637 vulnerabilities

Vulnerabilities for packages: kpt, aws-flb-kinesis, kube-fluentd-operator, kubeflow, smokescreen, docker-credential-gcr, src-fingerprint, aws-flb-cloudwatch, neuvector-dbgen, go-discover, gostatsd, hello-world-golang, newrelic-nri-statsd, php-fpmexporter, sonobuoy, terraform-provider-google,...

GHSA-4F99-4Q7P-P3GH vulnerabilities

Vulnerabilities for packages: kpt, wavefront-collector-for-kubernetes, neuvector-dbgen, smokescreen, aws-flb-kinesis, terraform-provider-google, src-fingerprint-fips, kubeflow-fips, kubeflow, prometheus-beat-exporter, sonobuoy-fips, aws-flb-kinesis-fips, src-fingerprint,...

CVE-2025-65637 vulnerabilities

Vulnerabilities for packages: kpt, wavefront-collector-for-kubernetes, neuvector-dbgen, smokescreen, aws-flb-kinesis, terraform-provider-google, src-fingerprint-fips, kubeflow-fips, kubeflow, prometheus-beat-exporter, sonobuoy-fips, aws-flb-kinesis-fips, src-fingerprint,...

GHSA-5MH9-3JWC-RP59 vulnerabilities

Vulnerabilities for packages: rootlesskit-fips, logstash, longhorn-backing-image-manager-fips, longhorn-backing-image-manager, sops-fips, go-fips, chisel, osv-scanner, kube-bench, apm-server-fips, newrelic-nri-kube-events-fips, sonobuoy, nri-kafka, kubernetes-csi-livenessprobe-fips,...

CVE-2025-61729 vulnerabilities

Vulnerabilities for packages: terraform-provider-time, rekor, grpc-health-probe, mods, nats-top, pluto, dask-gateway, steampipe, kubescape, sftpgo-plugin-kms, sbom-convert, ksops, k8sgpt, skaffold, temporal-server, terraform-docs, newrelic-fluent-bit-output, opa, k8ssandra-operator,...

Ubuntu: Security Advisory (USN-7906-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-7907-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

BIT-CILIUM-OPERATOR-2025-64715 Cilium with misconfigured toGroups in policies can lead to unrestricted egress traffic

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Prior to versions 1.16.17, 1.17.10, and 1.18.4, CiliumNetworkPolicys which use egress.toGroups.aws.securityGroupsIds to reference AWS security group IDs that do not exist or are not attached to any network...

CVE-2025-38678 vulnerabilities

Vulnerabilities for packages: linux-aws, linux-azure, linux-gcp...

PT-2025-48715

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Prior to versions 1.16.17, 1.17.10, and 1.18.4, CiliumNetworkPolicys which use egress.toGroups.aws.securityGroupsIds to reference AWS security group IDs that do not exist or are not attached to any network...

PT-2025-48716

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Prior to versions 1.16.17, 1.17.10, and 1.18.4, CiliumNetworkPolicys which use egress.toGroups.aws.securityGroupsIds to reference AWS security group IDs that do not exist or are not attached to any network...

PT-2025-48722

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Prior to versions 1.16.17, 1.17.10, and 1.18.4, CiliumNetworkPolicys which use egress.toGroups.aws.securityGroupsIds to reference AWS security group IDs that do not exist or are not attached to any network...

PT-2025-48726

Impact CiliumNetworkPolicys which use egress.toGroups.aws.securityGroupsIds to reference AWS security group IDs that do not exist or are not attached to any network interface may unintentionally allow broader outbound access than intended by the policy authors. In such cases, the toCIDRset sectio...

EUVD-2025-199886

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Prior to versions 1.16.17, 1.17.10, and 1.18.4, CiliumNetworkPolicys which use egress.toGroups.aws.securityGroupsIds to reference AWS security group IDs that do not exist or are not attached to any network...

CVE-2025-64715 Cilium with misconfigured toGroups in policies can lead to unrestricted egress traffic

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Prior to versions 1.16.17, 1.17.10, and 1.18.4, CiliumNetworkPolicys which use egress.toGroups.aws.securityGroupsIds to reference AWS security group IDs that do not exist or are not attached to any network...

CVE-2025-64715: Improper Access Control

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Prior to versions 1.16.17, 1.17.10, and 1.18.4, CiliumNetworkPolicys which use egress.toGroups.aws.securityGroupsIds to reference AWS security group IDs that do not exist or are not attached to any network...

ROS-20251128-03

A vulnerability in the Vault access control system and Vault enterprise information archiving platform Enterprise is related to authentication bypass using an alternate path or channel in AWS authentication method. AWS authentication method. Exploitation of the vulnerability could allow an attack...

Ubuntu: Security Advisory (USN-7889-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...