CVE-2026-54787 vulnerabilities

Vulnerabilities for packages: tbot, teleport-operator-fips, falcoctl, flux-source-controller, cloudbeat-fips, kyverno, trivy-fips, cosign, neuvector-sigstore-interface-fips, skaffold, skaffold-fips, falcoctl-fips, kyverno-notation-aws-fips, tkn-fips, ko, trivy-operator, commercial-kyverno,...

CLEANSTART-2026-AC92865 Security fixes in cosign 1.5.2-r0

Package cosign version 1.5.2-r0 fixes 1 vulnerabilities: CVE-2022-23649...

CLEANSTART-2026-GJ23876 Security fixes in cosign 2.2.1-r0

Package cosign version 2.2.1-r0 fixes 1 vulnerabilities: CVE-2023-46737...

CLEANSTART-2026-VQ25749 Security fixes in cosign 3.0.6-r1

Package cosign version 3.0.6-r1 fixes 32 vulnerabilities: CVE-2026-39820, CVE-2026-42499, CVE-2026-39836, CVE-2026-33814, CVE-2026-33811...

CLEANSTART-2026-TT07353 Security fixes in cosign 3.1.1-r2

Package cosign version 3.1.1-r2 fixes 1 vulnerabilities: CVE-2026-49834...

CLEANSTART-2026-BB97886 Security fixes in cosign 2.5.3-r0

Package cosign version 2.5.3-r0 fixes 82 vulnerabilities: CVE-2025-0913, CVE-2025-15558, CVE-2025-22868, CVE-2025-22869, CVE-2025-22870...

CLEANSTART-2026-ZY02248 Security fixes in cosign 3.0.4-r0

Package cosign version 3.0.4-r0 fixes 1 vulnerabilities: ghsa-59jp-pj84-45mr...

CLEANSTART-2026-RH34927 Security fixes in cosign 1.12.1-r0

Package cosign version 1.12.1-r0 fixes 1 vulnerabilities: CVE-2022-36056...

CLEANSTART-2026-BA61304 Security fixes in cosign 2.4.3-r0

Package cosign version 2.4.3-r0 fixes 82 vulnerabilities: CVE-2025-0913, CVE-2025-15558, CVE-2025-22868, CVE-2025-22869, CVE-2025-22870...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: cosign: cosign-3.1.2-0.2.hum1 aarch64, x8664 cosign-3.1.2-0.2.hum1.src src Security Fixes: cosign: CVE-2026-56852...

SUSE-SU-2026:3068-1 Security update for cosign

This update for cosign rebuilds it against the current go security release...

openSUSE 16: cosign / cosign-bash-completion / cosign-fish-completion / etc (openSUSE-SU-2026:21281-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21281-1 advisory. This update for cosign fixes the following issues - CVE-2026-25680,CVE-2026-25681,CVE-2026-27136,CVE-2026-42502,CVE-2026-42506: multiple issues...

SUSE-SU-2026:22613-1 Security update for cosign

This update for cosign fixes the following issues - CVE-2026-25680,CVE-2026-25681,CVE-2026-27136,CVE-2026-42502,CVE-2026-42506: multiple issues when parsing HTML files bsc1267044. - CVE-2026-33815: memory-safety vulnerability bsc1261811. -...

SUSE SLED15 / SLES15 Security Update : cosign (SUSE-SU-2026:2827-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2827-1 advisory. This update for cosign fixes the following issues -...

openSUSE 16 Security Update : hauler (openSUSE-SU-2026:21262-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21262-1 advisory. Changes in hauler: - update to 2.0.1 bsc1269433, CVE-2026-48702: bump go to 1.26.4 to squash CVE noise Full v2 Release notes:...

OPENSUSE-SU-2026:11198-1 cosign-3.1.1-1.1 on GA media

These are all security issues fixed in the cosign-3.1.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:21262-1 Security update for hauler

This update for hauler fixes the following issues: Changes in hauler: - update to 2.0.1 bsc1269433, CVE-2026-48702: bump go to 1.26.4 to squash CVE noise Full v2 Release notes: https://github.com/hauler- dev/hauler/releases/tag/v2.0.0 - update to 2.0.0: v2.0.0 is a major release. It replaces...

Security update for cosign (moderate)

openSUSE security update: security update for cosign ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21036-1 Rating: moderate References: bsc1261859 Cross-References: CVE-2026-39395 CVSS scores: CVE-2026-39395 SUSE : 6.5...

GO-2026-5694 Cosign's verify-blob-attestation reports false positive when payload parsing fails in github.com/sigstore/cosign

Cosign's verify-blob-attestation reports false positive when payload parsing fails in github.com/sigstore/cosign...

OPENSUSE-SU-2026:21036-1 Security update for cosign

This update for cosign fixes the following issues Security issue: - CVE-2026-39395: Incorrect attestation verification due to malformed payloads or mismatched predicate types bsc1261859. Non security issue: - Update to version 3.0.5 jscSLE-23879...