CVE-2025-14761: Use of a Broken or Risky Cryptographic Algorithm

Missing cryptographic key commitment in the AWS SDK for PHP may allow a user with write access to the S3 bucket to introduce a new EDK that decrypts to different plaintext when the encrypted data key is stored in an "instruction file" instead of S3's metadata record. To mitigate this issue, upgra...

Amazon S3 Encryption Client for .NET 安全漏洞

Amazon S3 Encryption Client for .NET is a client-side encryption library open-sourced by Amazon Web Services. A security vulnerability exists in Amazon S3 Encryption Client for .NET that stems from a lack of encryption key promises, which could cause a user with write access to an S3 storage buck...

USN-7926-1: OpenStack Keystone vulnerabilities

Kay discovered that OpenStack Keystone incorrectly handled the ec2tokens and s3tokens APIs. A remote attacker could possibly use this issue to obtain unauthorized access and escalate privileges. CVE-2025-65073 It was discovered that OpenStack Keystone only validated the first 72 bytes of an...

[SECURITY] Fedora 43 Update: rclone-1.72.0-1.fc43

"rsync for cloud storage" - Google Drive, S3, Dropbox, Backblaze B2, One Driv e, Swift, Hubic, Wasabi, Google Cloud Storage, Azure Blob, Azure Files, Yandex Files...

[SECURITY] Fedora 42 Update: migrate-4.19.0-1.fc42

Go database migrations library and program. This package is built with the following databases backends: cassandra cockroachdb mongodb mysql postgres redshift sqlite3 sqlite This package is built with the following source backends: github gitlab go-bindata godoc-vfs gcs iofs pkger s3...

[SECURITY] Fedora 43 Update: migrate-4.19.0-1.fc43

Go database migrations library and program. This package is built with the following databases backends: cassandra cockroachdb mongodb mysql postgres redshift sqlite3 sqlite This package is built with the following source backends: github gitlab go-bindata godoc-vfs gcs iofs pkger s3...

CVE-2025-65073

A flaw was found in OpenStack Keystone. This vulnerability allows an attacker to obtain a valid OpenStack's Keystone token, leading to access to unauthorized resources or privilege escalation within the OpenStack instance via sending a valid AWS Amazon Web Services signature to the /v3/ec2tokens ...

USN-7894-1: EDK II vulnerabilities

It was discovered that EDK II was susceptible to a predictable TCP Initial Sequence Number. An attacker could possibly use this issue to gain unauthorized access. This issue only affected Ubuntu 22.04 LTS, and Ubuntu 24.04 LTS. CVE-2023-45236, CVE-2023-45237 It was discovered that EDK II...

Access Control Bypass

Overview swift is an OpenStack Object Storage Affected versions of this package are vulnerable to Access Control Bypass via the ec2tokens or s3tokens process when a request with a valid AWS Signature is accepted for authorization. An attacker can gain unauthorized access by submitting specially...

CVE-2025-65073

OpenStack Keystone before 26.0.1, 27.0.0, and 28.0.0 allows a /v3/ec2tokens or /v3/s3tokens request with a valid AWS Signature to provide Keystone authorization...

HSEC-2023-0013 git-annex plaintext storage of embedded credentials on encrypted remotes

git-annex plaintext storage of embedded credentials on encrypted remotes git-annex had a bug in the S3 and Glacier remotes where if embedcreds=yes was set, and the remote used encryption=pubkey or encryption=hybrid, the embedded AWS credentials were stored in the Git repository in effectively...

CVE-2024-47866

Ceph is a distributed object, block, and file storage platform. In versions up to and including 19.2.3, using the argument x-amz-copy-source to put an object and specifying an empty string as its content leads to the RGW daemon crashing, resulting in a DoS attack. As of time of publication, no...

CVE-2024-47866

CVE-2024-47866 affects Ceph RGW: using x-amz-copy-source with an empty string as object content can crash RGW and cause DoS in Ceph versions up to 19.2.3. Public details confirm impact is a denial of service; no patch in initial disclosure. Some connected advisories note fixes or mitigations in d...

USN-7857-1: OpenStack Keystone vulnerability

Kay discovered that OpenStack Keystone incorrectly handled the ec2tokens and s3tokens APIs. A remote attacker could possibly use this issue to obtain unauthorized access and escalate privileges...

UBUNTU-CVE-2025-65073

OpenStack Keystone before 26.0.1, 27.0.0, and 28.0.0 allows a /v3/ec2tokens or /v3/s3tokens request with a valid AWS Signature to provide Keystone authorization...

CVE-2025-58186 vulnerabilities

Vulnerabilities for packages: vertical-pod-autoscaler, terraform, envconsul, vault-k8s, spark-operator, terraform-docs, dbmate, cadvisor, pulumi-kubernetes-operator, xcover, local-path-provisioner, step-kms-plugin, portieris, nfs-subdir-external-provisioner, podinfo, rootlesskit, sealed-secrets,...

CVE-2025-61724 vulnerabilities

Vulnerabilities for packages: vertical-pod-autoscaler, terraform, envconsul, vault-k8s, spark-operator, terraform-docs, dbmate, cadvisor, pulumi-kubernetes-operator, xcover, local-path-provisioner, step-kms-plugin, portieris, nfs-subdir-external-provisioner, podinfo, rootlesskit, sealed-secrets,...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: vertical-pod-autoscaler, terraform, envconsul, vault-k8s, spark-operator, terraform-docs, dbmate, cadvisor, pulumi-kubernetes-operator, xcover, local-path-provisioner, step-kms-plugin, portieris, nfs-subdir-external-provisioner, podinfo, rootlesskit, sealed-secrets,...

GHSA-FRHW-MQJ2-WXW2 vulnerabilities

Vulnerabilities for packages: envconsul, yace, dbmate, podinfo, terraform-provider-azuread, bank-vaults, mongodb-kubernetes-operator, terraform-provider-azapi, harbor, buildkitd, crane, timoni, kustomize, timescaledb-tune, kaf, argo-rollouts, falcosidekick, helm-docs, mesosphere-vsphere-csi, ctop...

GHSA-HJX7-FPXX-MJ48 vulnerabilities

Vulnerabilities for packages: vertical-pod-autoscaler, terraform, envconsul, vault-k8s, spark-operator, terraform-docs, dbmate, cadvisor, pulumi-kubernetes-operator, xcover, local-path-provisioner, step-kms-plugin, portieris, nfs-subdir-external-provisioner, podinfo, rootlesskit, sealed-secrets,...