CLEANSTART-2026-HX30295 Security fixes in cosign 2.6.5-r0

Package cosign version 2.6.5-r0 fixes 4 vulnerabilities: CVE-2026-49478, ghsa-3fxj-6jh8-hvhx, ghsa-9g5q-2w5x-hmxf, ghsa-rjr7-jggh-pgcp...

CVE-2026-49478

creationtimestamp| type| source ---|---|--- 2026-08-13 14:01:38+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msxsmaze5x2l...

Linux Distros Unpatched Vulnerability : CVE-2026-49478

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Fulcio is a certificate authority for issuing code signing certificates for an OpenID Connect OIDC identity. Versions through 1.8.5 improperly follow cross-host...

CVE-2026-49478 vulnerabilities

Vulnerabilities for packages: buildah-fips, ratify-fips, slsa-verifier, aactl, kubescape-server-fips, prometheus-podman-exporter, kyverno-notation-aws-fips, falcoctl-fips, kyverno-notation-aws, falcoctl, zarf-fips, falco-no-driver, flux-source-controller, gitsign, portieris-fips, buildah,...