aws-sdk-s3 1.228.0 → 1.228.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: fe2533aad3235a6cf67c16f38d9805ec0aca46995678eb8deda7f08ab788ffba
-  data.tar.gz: 7b2bc5855ea45c2c60e51126c73576b3a15bcd61d949269c5660d5d92bc90f0d
+  metadata.gz: 5957df832c6080c73dbf559974579e122f334320e4ce7c81a780f08e3b73b820
+  data.tar.gz: 4e3921416a74055d610ca07144e6e21aa846fe153fce09b065cc8e62f4ee5294
 SHA512:
-  metadata.gz: f7c856929d54f29f463c253c333c58a5f14195813b639ce948df18256b6784c655db2ed2f7fc313f76d9447525e8b9caf82db87640e22c0d53f0e70a8bd3def6
-  data.tar.gz: e52b55c1f7f50ba07cdb6c191e6bf9b7d1ae60dfc04b92fcf7be8760711bb70733932580a43e1e074fb77008b3b3d612e71d9408266173c9c7b04124053d311e
+  metadata.gz: adc68f9009d30922126bed8afd6fe8ba849ce29f4aa623331f42d867341076e78a85a9b2784334657c0763f7d86a66d41dac7601a522bfa7fdfb8bebd261da76
+  data.tar.gz: e850c4122c4fb0304cd2b7c3cac882cc9e64883a43913a7c936f68bb21831f88c5f74936f092977c17b4d653a900438ff31fc47463c758973cd2477bb5593d62

data/CHANGELOG.md

@@ -1,6 +1,16 @@
 Unreleased Changes
 ------------------
 
+1.228.2 (2026-07-30)
+------------------
+
+* Issue - S3 Encryption Client, encryptionV2 and encryptionV3, returns a decryption error for a malformed material description.
+
+1.228.1 (2026-07-23)
+------------------
+
+* Issue - Ensure the source file is closed on multipart `upload_file` part failure, preventing leaked file descriptors (#3408).
+
 1.228.0 (2026-07-16)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.228.0
+1.228.2

data/lib/aws-sdk-s3/client.rb

@@ -24102,7 +24102,7 @@ module Aws::S3
         tracer: tracer
       )
       context[:gem_name] = 'aws-sdk-s3'
-      context[:gem_version] = '1.228.0'
+      context[:gem_version] = '1.228.2'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-s3/encryptionV2/kms_cipher_provider.rb

@@ -50,7 +50,7 @@ module Aws
         # @return [Cipher] Given an encryption envelope, returns a
         #   decryption cipher.
         def decryption_cipher(envelope, options = {})
-          encryption_context = Json.load(envelope['x-amz-matdesc'])
+          encryption_context = extract_encryption_context(envelope['x-amz-matdesc'])
           cek_alg = envelope['x-amz-cek-alg']
 
           case envelope['x-amz-wrap-alg']
@@ -115,6 +115,19 @@ module Aws
 
         private
 
+        # Raise a decryption error for a malformed material description. A
+        # material description must be a JSON object.
+        def extract_encryption_context(matdesc)
+          context = Json.load(matdesc) if matdesc.is_a?(String)
+          unless context.is_a?(Hash)
+            raise Errors::DecryptionError, 'Malformed material description'
+          end
+
+          context
+        rescue Aws::Json::ParseError, EncodingError
+          raise Errors::DecryptionError, 'Malformed material description'
+        end
+
         def validate_key_wrap(key_wrap_schema)
           case key_wrap_schema
           when :kms_context then 'kms+context'

data/lib/aws-sdk-s3/encryptionV3/kms_cipher_provider.rb

@@ -54,7 +54,7 @@ module Aws
             cek_alg = envelope['x-amz-c']
             encryption_context =
               if !envelope['x-amz-t'].nil?
-                Json.load(envelope['x-amz-t'])
+                extract_encryption_context(envelope['x-amz-t'])
               else
                 ##= ../specification/s3-encryption/data-format/content-metadata.md#v3-only
                 ##% If the mapkey x-amz-t is not present, the default Material Description value MUST be set to an empty map (`{}`).
@@ -102,6 +102,18 @@ module Aws
 
         private
 
+        # Raise a decryption error for a malformed material description.
+        def extract_encryption_context(matdesc)
+          context = Json.load(matdesc) if matdesc.is_a?(String)
+          unless context.is_a?(Hash)
+            raise Errors::DecryptionError, 'Malformed material description'
+          end
+
+          context
+        rescue Aws::Json::ParseError, EncodingError
+          raise Errors::DecryptionError, 'Malformed material description'
+        end
+
         def validate_key_wrap(key_wrap_schema)
           case key_wrap_schema
           when :kms_context then '12'

data/lib/aws-sdk-s3/multipart_file_uploader.rb

@@ -154,7 +154,6 @@ module Aws
             Thread.current[:net_http_override_body_stream_chunk] = @http_chunk_size if @http_chunk_size
             update_progress(progress, p)
             resp = @client.upload_part(p)
-            p[:body].close
             completed_part = { etag: resp.etag, part_number: p[:part_number] }
             apply_part_checksum(resp, completed_part)
             completed.push(completed_part)
@@ -162,6 +161,7 @@ module Aws
             abort_upload = true
             errors << e
           ensure
+            p[:body].close
             Thread.current[:net_http_override_body_stream_chunk] = nil if @http_chunk_size
             completion_queue << :done
           end

data/lib/aws-sdk-s3.rb

@@ -75,7 +75,7 @@ module Aws::S3
   autoload :ObjectVersion, 'aws-sdk-s3/object_version'
   autoload :EventStreams, 'aws-sdk-s3/event_streams'
 
-  GEM_VERSION = '1.228.0'
+  GEM_VERSION = '1.228.2'
 
 end
 

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-s3
 version: !ruby/object:Gem::Version
-  version: 1.228.0
+  version: 1.228.2
 platform: ruby
 authors:
 - Amazon Web Services