CLEANSTART-2026-OJ52622 Security fixes in spire-server-fips 1.15.1-r1

Package spire-server-fips version 1.15.1-r1 fixes 9 vulnerabilities: CVE-2026-34040, CVE-2026-33997, CVE-2026-48702, CVE-2026-49834, CVE-2026-49835...

CLEANSTART-2026-TT07353 Security fixes in cosign 3.1.1-r2

Package cosign version 3.1.1-r2 fixes 1 vulnerabilities: CVE-2026-49834...

Linux Distros Unpatched Vulnerability : CVE-2026-49834

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sigstore-go is a Go library for Sigstore signing and verification. Prior to 1.2.0, a verifier configured with WithTransparencyLogN1 or...

UBUNTU-CVE-2026-49834

sigstore-go is a Go library for Sigstore signing and verification. Prior to 1.2.0, a verifier configured with WithTransparencyLogN1 or WithSignedCertificateTimestampsN1 counts verified witnesses per entry or per validation path rather than per log authority, allowing a single compromised...

CVE-2026-49834

sigstore-go is a Go library for Sigstore signing and verification. Prior to 1.2.0, a verifier configured with WithTransparencyLogN1 or WithSignedCertificateTimestampsN1 counts verified witnesses per entry or per validation path rather than per log authority, allowing a single compromised...

CVE-2026-49834

creationtimestamp| type| source ---|---|--- 2026-07-17 19:53:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqujodq3y72b...

CVE-2026-49834 sigstore-go: Multi-log threshold bypass via single compromised log

sigstore-go is a Go library for Sigstore signing and verification. Prior to 1.2.0, a verifier configured with WithTransparencyLogN1 or WithSignedCertificateTimestampsN1 counts verified witnesses per entry or per validation path rather than per log authority, allowing a single compromised...

SUSE CVE-2026-49834

sigstore-go is a Go library for Sigstore signing and verification. Prior to 1.2.0, a verifier configured with WithTransparencyLogN1 or WithSignedCertificateTimestampsN1 counts verified witnesses per entry or per validation path rather than per log authority, allowing a single compromised...