356 matches found
CVE-2024-45395 vulnerabilities
Vulnerabilities for packages: cosign, slsa-verifier, gh...
CVE-2024-45395 vulnerabilities
Vulnerabilities for packages: slsa-verifier, cosign-fips, gh, cosign...
GHSA-CQ38-JH5F-37MQ vulnerabilities
Vulnerabilities for packages: cosign, slsa-verifier, gh...
GHSA-CQ38-JH5F-37MQ vulnerabilities
Vulnerabilities for packages: slsa-verifier, cosign-fips, gh, cosign...
GHSA-C77R-FH37-X2PX vulnerabilities
Vulnerabilities for packages: snyk-cli, conftest-fips, conftest, spire-server, zarf, kots, cosign-fips, kubescape, opa, policy-controller, spire-server-fips, zot, k8sgpt, tfsec, policy-controller-fips, cosign...
GHSA-C77R-FH37-X2PX vulnerabilities
Vulnerabilities for packages: cosign, conftest, zot, kots, spire-server, kubescape, opa, policy-controller, tfsec, zarf, k8sgpt, snyk-cli...
CVE-2024-8260 vulnerabilities
Vulnerabilities for packages: cosign, conftest, zot, kots, spire-server, kubescape, opa, policy-controller, tfsec, zarf, k8sgpt, snyk-cli...
CVE-2024-8260 vulnerabilities
Vulnerabilities for packages: snyk-cli, conftest-fips, conftest, spire-server, zarf, kots, cosign-fips, kubescape, opa, policy-controller, spire-server-fips, zot, k8sgpt, tfsec, policy-controller-fips, cosign...
openSUSE Security Advisory (SUSE-SU-2024:1486-2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
cosign: Malicious artifects can cause machine-wide denial of service
A flaw was found in the Cosign package where maliciously crafted software artifacts can trigger uncontrolled resource consumption by allocating too much memory and starving out the system. A successful attack may result in a denial of service of the machine running Cosign, impacting availability...
cosign: Malicious attachments can cause system-wide denial of service
A flaw was found in the Cosign package where a malicious attachment may trigger uncontrolled resource consumption by allocating too much memory. This flaw allows an attacker to craft a malicious attachment, resulting in a denial of service, possibly impacting other applications running on the sam...
SUSE-SU-2024:1486-2 Security update for cosign
This update for cosign fixes the following issues: - CVE-2024-29902: Fixed denial of service on host machine via remote image with a malicious attachments bsc1222835 - CVE-2024-29903: Fixed denial of service on host machine via malicious software artifacts bsc1222837 Other fixes: - Updated to 2.2...
OPENSUSE-SU-2024:12331-1 cosign-1.12.0-1.1 on GA media
These are all security issues fixed in the cosign-1.12.0-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:11860-1 cosign-1.5.2-1.1 on GA media
These are all security issues fixed in the cosign-1.5.2-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:13402-1 cosign-2.2.1-1.1 on GA media
These are all security issues fixed in the cosign-2.2.1-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:13646-1 cosign-2.2.3-1.1 on GA media
These are all security issues fixed in the cosign-2.2.3-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:13863-1 cosign-2.2.4-1.1 on GA media
These are all security issues fixed in the cosign-2.2.4-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:12240-1 cosign-1.10.1-1.1 on GA media
These are all security issues fixed in the cosign-1.10.1-1.1 package on the GA media of openSUSE Tumbleweed...
CVE-2024-35255 vulnerabilities
Vulnerabilities for packages: chezmoi, cosign, tekton-chains, step, tempo, kubescape, policy-controller, boring-registry, grafana-agent-operator, sops, fulcio, argo-workflows, ksops, sqlpad, wal-g, rekor, pulumi, timestamp-authority, flux-kustomize-controller, restic, harbor-registry, flyte,...