sisu

sisu ⚡ AWS をファイルシステムとして使う。 このように: grep -l "AdministratorAccess" iam/users//policies.json この代わりに: aws iam list-users --query 'Users.UserName' --output text | \ xargs -I sh -c 'aws iam list-attached-user-policies --user-name --query "AttachedPolicies.PolicyArn" --output text' | \ grep...

terraform-aws-secure-baseline

terraform-aws-secure-baseline Terraform Module Registry A terraform module to set up your AWS account with the reasonably secure configuration baseline. Most configurations are based on CIS Amazon Web Services Foundations v1.4.0 and AWS Foundational Security Best Practices v1.0.0. See Benchmark...

AWS-Threat-Simulation-and-Detection

AWS 위협 탐지 with Stratus Red Team 이 저장소는 Stratus Red Team을 사용한 나의 모험을 기록한 문서입니다. Stratus Red Team은 클라우드를 위한 적대자 에뮬레이션 도구입니다. Stratus Red Team은 "클라우드를 위한 Atomic Red Team"으로, 공격 기술을 세분화되고 자체 포함된 방식으로 에뮬레이션할 수 있습니다. 우리는 Stratus Red Team 저장소에 포함된 공격을 AWS 계정에서 하나씩 실행합니다. 이를 모니터링하기 위해 CloudTrail과...

SUSE SLES15 Security Update : amazon-cloudwatch-agent (SUSE-SU-2026:4388-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4388-1 advisory. - CVE-2026-84303: google.golang.org/grpc: xDS RBAC HTTP filter implementation issue allows for bypass of authorization policies via...

SUSE-SU-2026:4388-1 Security update for amazon-cloudwatch-agent

This update for amazon-cloudwatch-agent fixes the following issues: - CVE-2026-84303: google.golang.org/grpc: xDS RBAC HTTP filter implementation issue allows for bypass of authorization policies via mixed-case or canonical-case header matches bsc1279334. - CVE-2026-84304: google.golang.org/grpc:...

amazon-cloudwatch-agent-1.300072.0-1.1 on GA media (moderate)

amazon-cloudwatch-agent-1.300072.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11828-1 Rating: moderate Cross-References: CVE-2026-37236 CVE-2026-84304 CVE-2026-84445 CVSS scores: CVE-2026-37236 SUSE : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N CVE-2026-37236 SUSE : 6.3...

OPENSUSE-SU-2026:11828-1 amazon-cloudwatch-agent-1.300072.0-1.1 on GA media

These are all security issues fixed in the amazon-cloudwatch-agent-1.300072.0-1.1 package on the GA media of openSUSE Tumbleweed...

SUSE SLES15 Security Update : amazon-cloudwatch-agent (SUSE-SU-2026:4045-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4045-1 advisory. - CVE-2026-37236: github.com/grpc-ecosystem/grpc-gateway/v2/runtime: client can override the HTTP method of a POST request through...

CLEANSTART-2026-MV16544 Security fix for CVE-2026-46597 applied in: amazon-cloudwatch-agent 1.300070.0-r1, amazon-cloudwatch-agent 1.300071.0-r1, amazon-cloudwatch-agent-fips 1.300066.1-r1, apko 1.2.13-r0, apko 1.2.2-r2, argo-cd 3.3.5-r1, argo-cd-fips 3.1.14-r2, argo-workflows 4.0.5-r0, authservice 1.1.5-r1, authservice 1.1.6-r1, cadvisor 0.55.1-r1, cadvisor 0.57.0-r0, cadvisor-fips 0.55.1-r0, calico 3.30.7-r2, cert-manager 1.17.4-r2, cert-manager 1.18.6-r1, cert-manager 1.20.0-r0, cert-manager 1.20.2-r0, cert-manager-webhook-pdns-fips 2.5.5-r1, cfssl 1.5.0-r1, cluster-autoscaler 1.35.2-r2, consul 2.0.1-r0, cortex 1.21.0-r2, cosign 3.0.6-r1, crossplane-provider-sql-fips 0.15.0-r3, dynatrace-operator 1.6.3-r1, elastic-beats 8.19.15-r5, elastic-beats 9.2.8-r2, elastic-beats-fips 9.2.8-r0, external-secrets-fips 0.17.0-r2, external-secrets-operator 2.5.0-r1, flux-image-automation-controller 1.2.1-r1, flux-notification-controller-fips 1.5.0-r0, forecastle 1.0.159-r1, fulcio-fips 1.7.1-r3, gostatsd 28.3.0-r2, gotenberg 8.31.0-r0, gotenberg 8.32.0-r0, haproxy-ingress 0.14.12-r1, helm 4.0.5-r2, helm-operator 1.42.2-r0, istio 1.28.5-r3, istio 1.29.2-r1, istio-fips 1.26.8-r4, istio-fips 1.27.9-r2, istio-fips 1.30.0-r1, kube-rbac-proxy 0.20.2-r2, kube-rbac-proxy 0.21.2-r0, kube-rbac-proxy-fips 0.20.2-r2, kube-state-metrics 2.10.1-r2, kube-state-metrics-fips 2.18.0-r1, kube-vip 1.1.0-r1, kubernetes 1.36.1-r0, kubernetes-csi-external-provisioner-fips 6.1.0-r4, kubernetes-csi-external-provisioner-fips 6.2.1-r3, kubernetes-csi-external-resizer-fips 2.1.0-r1, kubernetes-csi-external-snapshotter-fips 8.4.0-r4, kubernetes-event-exporter 1.7-r1, kubernetes-event-exporter-fips 1.7-r0, local-static-provisioner 2.8.0-r2, melange 0.50.0-r1, melange 0.56.1-r1, memcached-exporter 0.16.0-r0, minio-client 0.20250721.052808-r1, mongodb 7.0.32-r1, mongodb 8.0.20-r1, mongodb 8.0.21-r1, mongodb 8.2.6-r1, mongodb 8.3.2-r1, ollama 0.20.3-r2, ollama 0.31.2-r2, ollama 0.32.11-r2, ollama-fips 0.32.11-r2, opa 1.17.0-r1, percona-server-mongodb-operator 1.22.0-r1, percona-server-mongodb-operator 1.23.0-r0, policy-controller-fips 0.15.1-r1, postgres-operator 1.12.2-r2, postgres-operator 1.15.1-r1, prometheus 3.11.2-r0, prometheus 3.5.2-r1, prometheus-alertmanager 0.32.0-r1, prometheus-blackbox-exporter 0.28.0-r2, prometheus-mysqld-exporter 0.15.0-r2, prometheus-node-exporter-fips 1.11.1-r1, prometheus-pushgateway 1.10.0-r3, prometheus-pushgateway 1.11.3-r1, prometheus-pushgateway 1.8.0-r1, prometheus-pushgateway 1.9.0-r1, prometheus-pushgateway-fips 1.10.0-r3, prometheus-pushgateway-fips 1.11.3-r1, prometheus-pushgateway-fips 1.8.0-r2, prometheus-redis-exporter-fips 1.84.0-r0, prometheus-redis-exporter-fips 1.87.0-r3, promxy-fips 0.0.93-r1, pulumi-kubernetes-operator 2.7.0-r0, rabbitmq-messaging-topology-operator 1.16.0-r0, rancher-fleet-agent 0.12.17-r3, rancher-fleet-agent 0.13.13-r1, rancher-fleet-agent 0.14.10-r1, rancher-fleet-agent 0.14.8-r3, rancher-fleet-agent 0.15.4-r3, rancher-fleet-agent 0.15.6-r0, rancher-fleet-agent 0.16.1-r1, rclone 1.69.0-r3, restic-fips 0.18.1-r7, rundeck 6.0.0-r0, sealed-secrets 0.34.0-r0, sealed-secrets 0.35.0-r4, sealed-secrets 0.36.6-r1, secrets-store-csi-driver-provider-gcp 1.15.0-r1, secrets-store-csi-driver-provider-gcp 1.17.0-r2, spire-server 1.13.5-r1, spire-server 1.14.5-r1, spire-server-fips 1.14.5-r1, step-ca-fips 0.30.2-r1, step-issuer 0.10.2-r1, step-issuer 0.9.11-r1, syft 1.45.0-r2, tempo 2.10.4-r1, temporal 1.5.1-r0, temporal-server 1.31.0.153.1-r0, temporal-ui-server-fips 2.51.1-r1, terraform 1.14.8-r2, tigera-operator 1.42.0-r0, tigera-operator-fips 1.37.2-r4, tkn 0.42.2-r1, tkn 0.43.2-r1, tkn 0.45.0-r1, tkn-fips 0.44.2-r0, trust-manager-fips 0.20.3-r2, trust-manager-fips 0.21.1-r2, vault 1.20.4-r5, vault 1.21.4-r5, vault 2.0.0-r1, vault-k8s 1.7.4-r0, velero 1.18.1-r0, velero-fips 1.18.2-r6, weaviate 1.37.4-r1, weaviate 1.37.6-r1, weaviate-fips 1.36.17-r0, weaviate-fips 1.37.9-r0, weaviate-fips 1.38.1-r0

CVE-2026-46597 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-JK73485 Security fix for CVE-2026-41568 applied in: amazon-cloudwatch-agent 1.300070.0-r1, amazon-cloudwatch-agent 1.300071.0-r1, prometheus-fips 3.10.0-r2, prometheus-fips 3.11.3-r2, rancher-agent 2.11.15-r1, spire-server 1.14.7-r0, vault 1.19.5-r1

CVE-2026-41568 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-FX37210 Security fix for CVE-2026-42306 applied in: amazon-cloudwatch-agent 1.300070.0-r1, amazon-cloudwatch-agent 1.300071.0-r1, prometheus-fips 3.10.0-r2, prometheus-fips 3.11.3-r2, rancher-agent 2.11.15-r1, vault 1.19.5-r1

CVE-2026-42306 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-AC15686 Security fix for CVE-2026-41567 applied in: amazon-cloudwatch-agent 1.300070.0-r1, amazon-cloudwatch-agent 1.300071.0-r1, prometheus-fips 3.10.0-r2, prometheus-fips 3.11.3-r2, rancher-agent 2.11.15-r1

CVE-2026-41567 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-TQ82043 Security fix for CVE-2025-63811 applied in: amazon-cloudwatch-agent 1.300070.0-r1, vault 1.20.4-r0

CVE-2025-63811 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

Security update for amazon-cloudwatch-agent

This update for amazon-cloudwatch-agent fixes the following issues: CVE-2026-37236: github.com/grpc-ecosystem/grpc-gateway/v2/runtime: client can override the HTTP method of a POST request through the X-HTTP-Method-Override header and bypass established access control bsc1277995. CVE-2026-41178:...

SUSE-SU-2026:4045-1 Security update for amazon-cloudwatch-agent

This update for amazon-cloudwatch-agent fixes the following issues: - CVE-2026-37236: github.com/grpc-ecosystem/grpc-gateway/v2/runtime: client can override the HTTP method of a POST request through the X-HTTP-Method-Override header and bypass established access control bsc1277995. -...

CLEANSTART-2026-GU39170 Security fixes in amazon-cloudwatch-agent 1.300070.0-r1

Package amazon-cloudwatch-agent version 1.300070.0-r1 fixes 37 vulnerabilities: CVE-2026-42508, CVE-2026-39835, CVE-2026-46598, CVE-2026-39828, CVE-2026-39829...

CLEANSTART-2026-CY42435 Security fixes in amazon-cloudwatch-agent 1.300071.0-r1

Package amazon-cloudwatch-agent version 1.300071.0-r1 fixes 36 vulnerabilities: CVE-2026-42508, CVE-2026-39835, CVE-2026-46598, CVE-2026-39828, CVE-2026-39829...

OPENSUSE-SU-2026:11603-1 amazon-cloudwatch-agent-1.300071.0-2.1 on GA media

These are all security issues fixed in the amazon-cloudwatch-agent-1.300071.0-2.1 package on the GA media of openSUSE Tumbleweed...

CVE-2026-54428 vulnerabilities

Vulnerabilities for packages: zipkin, opensearch, druid, flyway, akhq, cassandra-reaper, kserve-modelmesh, thingsboard, nrjmx, apicurio-registry, sonarqube, wavefront-proxy, cloudwatch-exporter, logstash...

GHSA-V3JC-474W-2WM6 vulnerabilities

Vulnerabilities for packages: zipkin, opensearch, druid, flyway, akhq, cassandra-reaper, kserve-modelmesh, thingsboard, nrjmx, apicurio-registry, sonarqube, wavefront-proxy, cloudwatch-exporter, logstash...