cosign

cosign Sigstore를 사용하여 OCI 컨테이너및 기타 아티팩트에 서명하세요! Cosign은 서명을 보이지 않는 인프라 로 만드는 것을 목표로 합니다. Cosign이 지원하는 기능: Sigstore 공공재 Fulcio 인증 기관과 Rekor 투명성 로그를 사용한 "키리스 서명" 기본값 하드웨어 및 KMS 서명 cosign으로 생성된 암호화된 개인/공개 키페어로 서명 OCI 레지스트리에서 컨테이너 서명, 검증 및 저장 자체 PKI 사용Bring-your-own PKI 정보 Cosign은 sigstore 프로젝트의 일부로...

sops

SOPS: Secrets OPerationS SOPS è un editor di file cifrati che supporta i formati YAML, JSON, ENV, INI e BINARY e cifra con AWS KMS, GCP KMS, Azure Key Vault, HuaweiCloud KMS, age e PGP. demo .. image:: https://i.imgur.com/X0TM5NI.gif .. image::...

Zeus

Zeus Strumento di audit e hardening AWS Zeus è un potente strumento per le migliori pratiche di hardening per AWS EC2 / S3 / CloudTrail / CloudWatch / KMS. Controlla le impostazioni di sicurezza in base ai profili creati dall'utente e le modifica secondo le impostazioni consigliate basate sul CIS...

CVE-2026-81530

MongoDB C# Driver has a weakness in its client-side encryption configuration where KMS key-management credentials supplied by the application are serialized verbatim into the driver's human-readable diagnostic settings representation instead of being masked like other secret fields. An attacker w...

CVE-2026-81530 KMS master key exposure via unredacted credential serialization in driver settings string

A weakness in the client-side encryption configuration surface of the MongoDB C Driver causes sensitive key-management credential material supplied by the application to be reproduced verbatim in the driver's human-readable diagnostic representation of its client settings, instead of being masked...

KMS master key exposure via unredacted credential serialization in driver settings string

A weakness in the client-side encryption configuration surface of the MongoDB C Driver causes sensitive key-management credential material supplied by the application to be reproduced verbatim in the driver's human-readable diagnostic representation of its client settings, instead of being masked...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-managedidentity, cloud-provider-aws, policy-controller, steampipe, traefik, crossplane-provider-aws-memorydb, ko, flux, crossplane-provider-aws-route53, cluster-api-azure-controller, trivy-operator, buildah, glab,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: cass-operator, grafana-rollout-operator, temporal-ui-server, kuma, mesosphere-vsphere-csi, cert-manager-cmctl, ip-masq-agent, cloud-provider-aws, kube-bench, policy-controller, sftpgo-plugin-pubsub, steampipe, ytt, hydra, traefik, gitness, xeol, gatekeeper, influx,...

GO-2026-4503 vulnerabilities

Vulnerabilities for packages: step-ca, temporal, openfga, sops, grafana-alloy, dgraph, hydra, rekor, k3s, db-operator, crossplane-provider-sql, nri-mysql, tailscale, ratify, mattermost, trillian, openbao, dex, chezmoi, sftpgo, fulcio, cerbos, gitsign, trufflehog, apko, certificate-transparency,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: grafana-rollout-operator, cloud-provider-gcp-cloud-controller-manager, ip-masq-agent, kube-bench, steampipe, grafana-alloy, migrate, ko, kubernetes-dashboard-auth, flux, rclone, terraform-mcp-server, cluster-api-azure-controller, azure-service-operator, k3d,...

SUSE-RU-2026:2816-1 Recommended update for python-aioresponses, python-google-api-core, python-google-api-python-client, python-google-auth, python-google-auth-httplib2, python-google-cloud-appengine-logging, python-google-cloud-artifact-registry, python-google-cloud-audit-log, python-google-cloud-build, python-google-cloud-compute, python-google-cloud-core, python-google-cloud-dns, python-google-cloud-domains, python-google-cloud-iam, python-google-cloud-kms, python-google-cloud-kms-inventory, python-google-cloud-logging, python-google-cloud-run, python-google-cloud-secret-manager, python-google-cloud-service-directory, python-google-cloud-spanner, python-google-cloud-storage, python-google-cloud-vpc-access, python-google-crc32c, python-google-resumable-media, python-googleapis-common-protos, python-grpc-google-iam-v1, python-grpc-interceptor, python-mmh3, python-mypy, python-opentelemetry-resourcedetector-gcp, python-poetry-core, python-proto-plus, python-pytest-asyncio, python-syrupy, python-typed-ast, python-uritemplate, python-dnspython, python-trio, python-websocket-client

This update for python-aioresponses, python-google-api-core, python-google-api-python-client, python-google-auth, python-google-auth-httplib2, python-google-cloud-appengine-logging, python-google-cloud-artifact-registry, python-google-cloud-audit-log, python-google-cloud-build,...

Linux Distros Unpatched Vulnerability : CVE-2026-53347

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/virtio: Fix driver removal with disabled KMS DRM atomic and modesetting aren't initialized if virtio- gpu driver built with disabled KMS, leading to access ...

CVE-2026-53347

In the Linux kernel, the following vulnerability has been resolved: drm/virtio: Fix driver removal with disabled KMS DRM atomic and modesetting aren't initialized if virtio-gpu driver built with disabled KMS, leading to access of uninitialized data on driver removal/unbinding and crashing kernel...

GO-2026-5614 arnika is affected by medium-severity issues in UDP rotation, PQC handling, and KMS TLS in github.com/arnika-project/arnika

arnika is affected by medium-severity issues in UDP rotation, PQC handling, and KMS TLS in github.com/arnika-project/arnika...

EUVD-2025-210081

In the Linux kernel, the following vulnerability has been resolved: drm/vkms: Convert to DRM's vblank timer Replace vkms' vblank timer with the DRM implementation. The DRM code is identical in concept, but differs in implementation. Vblank timers are covered in vblank helpers and initializer...

Astra Linux – Vulnerability in Linux, Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: lib/fonts: Fixed undefined behavior in bit shifting for getdefaultfont. Shifting a signed 32-bit value by 31 bits is undefined; therefore, the significant bit was changed to unsigned. The UBSAN warning “calltrace” is as follow...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Do not overwrite the KMS surface dirty tracker. We were overwriting the surface’s dirty tracker, which caused a memory leak...

arnika is affected by medium-severity issues in UDP rotation, PQC handling, and KMS TLS

Summary Three medium-severity issues in arnika affecting the UDP key-rotation protocol, PQC key file handling, and KMS TLS client. All require specific preconditions to exploit and do not allow direct code execution or immediate key extraction. A self-contained PoC is attached. Details 1 ACK...

tough-kms (>=0.1.0, <=0.5.0), tough-ssm (>=0.4.0, <=0.8.0) +1 more potentially affected by CVE-2026-6967 via tough (>=0.9.0, <=0.13.0)

tough CARGO version =0.9.0, =0.1.0, =0.4.0, =0.5.0, =0.9.0 Source cves: CVE-2026-6967 Source advisory: OSV:GHSA-4V58-8P28-2RQ3...

tough-kms (>=0.1.0, <=0.5.0), tough-ssm (>=0.1.0, <=0.8.0) +1 more potentially affected by CVE-2026-6966 via tough (>=0.1.0, <=0.13.0)

tough CARGO version =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.9.0 Source cves: CVE-2026-6966 Source advisory: OSV:GHSA-8M7C-8M39-RV4X...