308 matches found
OPENSUSE-SU-2025:15355-1 cosign-2.5.3-1.1 on GA media
These are all security issues fixed in the cosign-2.5.3-1.1 package on the GA media of openSUSE Tumbleweed...
SUSE: Security Advisory (SUSE-SU-2024:1486-2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2025-46569 vulnerabilities
Vulnerabilities for packages: policy-controller, trivy, spire-server, kyverno-notation-aws, conftest, kots, witness, tfsec, cosign...
GHSA-6M8W-JC87-6CR7 vulnerabilities
Vulnerabilities for packages: policy-controller, trivy, spire-server, kyverno-notation-aws, conftest, kots, witness, tfsec, cosign...
SUSE SLED15 / SLES15 / openSUSE 15 Security Update : cosign (SUSE-SU-2025:1333-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:1333-1 advisory. - CVE-2024-6104: cosign: hashicorp/go-retryablehttp: Fixed sensitive information disclosure to l...
Security update for cosign
This update for cosign fixes the following issues: CVE-2024-6104: cosign: hashicorp/go-retryablehttp: Fixed sensitive information disclosure to log file bsc1227031 CVE-2024-51744: cosign: github.com/golang-jwt/jwt/v4: Fixed bad documentation of error handling in ParseWithClaims leading to...
SUSE-SU-2025:1333-1 Security update for cosign
This update for cosign fixes the following issues: - CVE-2024-6104: cosign: hashicorp/go-retryablehttp: Fixed sensitive information disclosure to log file bsc1227031 - CVE-2024-51744: cosign: github.com/golang-jwt/jwt/v4: Fixed bad documentation of error handling in ParseWithClaims leading to...
cosign-2.5.0-1.1 on GA media (moderate)
cosign-2.5.0-1.1 on GA media Announcement ID: openSUSE-SU-2025:14988-1 Rating: moderate Cross-References: CVE-2024-51744 CVE-2024-6104 CVE-2025-22868 CVE-2025-22869 CVE-2025-22870 CVE-2025-27144 CVSS scores: CVE-2024-51744 SUSE : 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N CVE-2024-51744 SUS...
OPENSUSE-SU-2025:14988-1 cosign-2.5.0-1.1 on GA media
These are all security issues fixed in the cosign-2.5.0-1.1 package on the GA media of openSUSE Tumbleweed...
Improper Verification of Cryptographic Signature
Overview Affected versions of this package are vulnerable to Improper Verification of Cryptographic Signature in the matchSignatures function in cosign.go, which does not check for subjectRegExp or issuerRegExp values during artifact signature verification. An attacker can deploy unauthorized...
GHSA-3WHM-J4XM-RV8X vulnerabilities
Vulnerabilities for packages: nri-apache, nri-redis, buildkitd, docker-cli-buildx, gomplate, grafana-operator, cni-plugins, newrelic-infrastructure-agent, kyverno-notation-aws, addon-resizer, mailpit, fluent-bit-plugin-loki, cue, kubernetes-dashboard, mage, nri-elasticsearch,...
CVE-2025-22866 vulnerabilities
Vulnerabilities for packages: nri-apache, nri-redis, buildkitd, docker-cli-buildx, gomplate, grafana-operator, cni-plugins, newrelic-infrastructure-agent, kyverno-notation-aws, addon-resizer, mailpit, fluent-bit-plugin-loki, cue, kubernetes-dashboard, mage, nri-elasticsearch,...
CVE-2024-45395 vulnerabilities
Vulnerabilities for packages: gh, cosign, slsa-verifier, cosign-fips...
CVE-2024-45395 vulnerabilities
Vulnerabilities for packages: gh, slsa-verifier, cosign...
GHSA-CQ38-JH5F-37MQ vulnerabilities
Vulnerabilities for packages: gh, slsa-verifier, cosign...
GHSA-CQ38-JH5F-37MQ vulnerabilities
Vulnerabilities for packages: gh, cosign, slsa-verifier, cosign-fips...
GHSA-C77R-FH37-X2PX vulnerabilities
Vulnerabilities for packages: conftest-fips, k8sgpt, conftest, kyverno, policy-controller-fips, zarf, kubescape, tfsec, opa, kots, snyk-cli, cosign-fips, kyverno-fips, spire-server-fips, cosign, policy-controller, spire-server, zot...
GHSA-C77R-FH37-X2PX vulnerabilities
Vulnerabilities for packages: k8sgpt, policy-controller, zarf, opa, spire-server, zot, conftest, snyk-cli, kots, kubescape, tfsec, cosign...
CVE-2024-8260 vulnerabilities
Vulnerabilities for packages: conftest-fips, k8sgpt, conftest, kyverno, policy-controller-fips, zarf, kubescape, tfsec, opa, kots, snyk-cli, cosign-fips, kyverno-fips, spire-server-fips, cosign, policy-controller, spire-server, zot...