Threats affecting pkg:brew/aws-sam-cli

A vulnerability in setuptools on Windows allows a crafted wheel's namespace_packages.txt to cause legacy wheel installation to create an __init__.py file outside the intended installation directory. The attacker can control the destination path of this file but not its contents. This occurs because an absolute Windows path in namespace_packages.txt bypasses normal path restrictions during installation.

A Unicode normalization mismatch in setuptools causes MANIFEST.in exclusion rules to fail on macOS APFS/HFS+ filesystems. When building source distributions, excluded files with non-ASCII names may be included if their on-disk Unicode form (NFD) differs from the pattern form (NFC). This leads to unintended disclosure of files intended to be excluded from published packages.

A path traversal vulnerability in setuptools' PackageIndex.download function allows an attacker to write files arbitrarily on the filesystem. This flaw exists due to insufficient sanitization of URL-derived filenames, enabling os.path.join to be bypassed. The vulnerability affects aws-sam-cli versions from 1.107.0 up to but not including 1.138.0. A fix is available in version 1.138.0. Exploitation could lead to arbitrary file writes with the permissions of the running process, potentially escalating to remote code execution depending on context.

CVE-2024-6345 is a high-severity vulnerability in the setuptools package_index module used by aws-sam-cli versions 1.107.0 through 1.116.9. It allows remote code execution via command injection through unsafe handling of package URLs in download functions. The flaw is fixed in setuptools version 70.0 and aws-sam-cli version 1.117.0.

A path traversal vulnerability in AWS Serverless Application Model Command Line Interface (SAM CLI) prior to version 1.165.0 allows symlinked content from builds to be copied into the local workspace cache as regular files or directories. This can expose users to unauthorized access of files they otherwise could not access outside the Docker container. The issue is fixed in version 1.165.0, and users are advised to upgrade and rebuild their applications using the updated CLI.

A path traversal vulnerability in AWS Serverless Application Model Command Line Interface (SAM CLI) versions prior to 1.165.0 allows users running the build process with Docker and symlinks to access privileged files on the host. This occurs because the container environment permits copying restricted files via symlinks due to elevated permissions. The issue is fixed in version 1.165.0.

AWS SAM CLI versions from 1.70.0 up to but not including 1.122.0 expose sensitive information through insecure logging. Specifically, sensitive data provided in the DockerBuildArgs parameter of the SAM template is output in clear text to STDERR during the sam build command. This can lead to unintended disclosure of secrets. A patch is available in version 1.122.0 and later.

The RHTAS Model Transparency CLI image can be used to sign and verify AI/ML workloads