CVE-2025-22871 vulnerabilities

Vulnerabilities for packages: aws-application-networking-k8s, fq, libnvidia-container, hello-world-golang, kpt, nri-jmx, sbom-convert, oras, guac, trino, docker-credential-ecr-login, ytt, tw, flux-notification-controller, docker-cli-buildx, runc, git-credential-oauth, influx, kapp, go-md2man, wav...

GHSA-G9PC-8G42-G6VQ vulnerabilities

Vulnerabilities for packages: aws-application-networking-k8s, fq, libnvidia-container, hello-world-golang, kpt, nri-jmx, sbom-convert, oras, guac, trino, docker-credential-ecr-login, ytt, tw, flux-notification-controller, docker-cli-buildx, runc, git-credential-oauth, influx, kapp, go-md2man, wav...

CVE-2025-22871 vulnerabilities

Vulnerabilities for packages: chartmuseum, wire-go, distribution-fips, kube-logging-operator, packer, fuse-overlayfs-snapshotter, karpenter, trivy-fips, cilium, local-static-provisioner, kubernetes-csi-external-provisioner-fips, redka, crossplane-provider-keycloak, seaweedfs, kpt,...

AWS VDP: Private AWS AMIs are temporarily being exposed publicly

Temporary public exposure of private AWS AMIs was discovered. Multiple AMIs with internal AWS-related content were found in the public AMI community catalog, but were quickly removed. An EC2 instance was successfully created using one of the exposed AMIs, revealing the presence of undocumented...

Unauthorized File Access

awssamcli is vulnerable to Unauthorized File Access. The vulnerability is due to insecure symlink resolution during the build process, which causes the contents of symlinks to be copied into the local workspace cache as regular files, allows an attacker to access restricted files...

Amazon AWS CloudFormation Templates Uncontrolled Search Path Element Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Amazon AWS. Authentication is not required to exploit this vulnerability. The specific flaw exists within the installation of AWS Simple Storage Service. When installed from the official GitHub...

Amazon AWS CloudFormation Templates Uncontrolled Search Path Element Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Amazon AWS. Authentication is not required to exploit this vulnerability. The specific flaw exists within the installation of AWS Simple Storage Service. When installed from the official GitHub...

AWS SAM CLI Installed (Windows)

Binary data awssamcliwindetect.nbin...

AWS SAM CLI < 1.133.0 multiple vulnerabilities

The version of AWS SAM CLI installed on the remote host is prior to 1.133.0 and is, therefore, affected by multiple vulnerabilities: - When running the AWS SAM CLI build process with Docker and symlinks are included in the build files, the container environment allows a user to access privileged...

A Bootiful Podcast: AWS Developer Advocate and industry legend James Ward

Hi, Spring fans! In this installment I talk to AWS Developer Advocate and industry legend James Ward about AWS Bedrock, Amazon Cohere, Spring AI, MCP, and so much more!...

Overly Permissive Authorization

aws-cdk-lib is vulnerable to Overly Permissive Authorization. The vulnerability is due to the CDK Construct Library automatically generating an overly permissive AWS IAM trust policy, which allows any user with unrestricted sts:AssumeRole permissions to assume the role...

Exploit for CVE-2025-2825

CVE-2025-2825 - CrushFTP WebInterface Authentication bypass C...

aws-efs-utils-2.2.1-1.1 on GA media (moderate)

aws-efs-utils-2.2.1-1.1 on GA media Announcement ID: openSUSE-SU-2025:14951-1 Rating: moderate Cross-References: CVE-2020-35881 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the...

CVE-2025-3047

When running the AWS Serverless Application Model Command Line Interface SAM CLI build process with Docker and symlinks are included in the build files, the container environment allows a user to access privileged files on the host by leveraging the elevated permissions granted to the tool. A use...

CVE-2025-3048

After completing a build with AWS Serverless Application Model Command Line Interface SAM CLI which include symlinks, the content of those symlinks are copied to the cache of the local workspace as regular files or directories. As a result, a user who does not have access to those symlinks outsid...

USN-7406-2: Linux kernel (FIPS) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - GPU drivers; - SMB network file system; - Network namespace; - Networking core; CVE-2024-26928, CVE-2024-56658,...

OPENSUSE-SU-2025:14951-1 aws-efs-utils-2.2.1-1.1 on GA media

These are all security issues fixed in the aws-efs-utils-2.2.1-1.1 package on the GA media of openSUSE Tumbleweed...

USN-7401-1: Linux kernel (AWS) vulnerabilities

Chenyuan Yang discovered that the CEC driver driver in the Linux kernel contained a use-after-free vulnerability. A local attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2024-23848 Attila Szász discovered that the HFS+ file system...

Cannot create hosting connection for AWS "Failed to connect the AWS EC2 endpoint URL"

On entering API key and Secret key with Role Based Authentrication for AWS get the following error: Transaction ID:xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx Action Name: HostingEditHypervisorConnection Exception: StudioErrorId : ConnectionValidationFailure Reason : ManagedMachineGeneralException Exception :...

This Week in Sprng - April 1st, 2025

Hi, Spring fans! Welcome to another exciting installment of This Week in Spring! It's April Fools day, so be wary of things you read on the internet, but it's also the 11th anniversary of Spring Boot 1.0, which was released this day in 2014! that's not an April Fools. Happy birthday! I'm in...