rekor

Rekor Rekór - du grec « Record » Les objectifs de Rekor sont de fournir un registre immuable et résistant à la falsification des métadonnées générées dans la chaîne d'approvisionnement d'un projet logiciel. Rekor permettra aux mainteneurs de logiciels et aux systèmes de build d'enregistrer des...

SUSE SLED15 / SLES15 Security Update : rekor (SUSE-SU-2026:2043-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:2043-1 advisory. This update for rekor rebuilds it against the current go security release. Tenable has extracted the preceding...

CLEANSTART-2026-IX15108 Security fix for CVE-2024-6104 applied in: prometheus 2.47.2-r0, rekor-backfill-index 1.2.2-r0

CVE-2024-6104 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-ME27346 Security fixes in rekor-backfill-index 1.4.3-r1

Package rekor-backfill-index version 1.4.3-r1 fixes 1 vulnerabilities: ghsa-fcv2-xgw5-pqxf...

CLEANSTART-2026-QY94875 Security fixes in rekor-backfill-index 1.4.3-r0

Package rekor-backfill-index version 1.4.3-r0 fixes 2 vulnerabilities: ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x...

CLEANSTART-2026-EN93855 Security fixes in rekor-backfill-index 1.4.3-r2

Package rekor-backfill-index version 1.4.3-r2 fixes 3 vulnerabilities: ghsa-fw7p-63qq-7hpr, CVE-2026-26958, ghsa-mqqf-5wvp-8fh8...

CLEANSTART-2026-HZ27786 Security fixes in rekor-backfill-index 1.2.2-r0

Package rekor-backfill-index version 1.2.2-r0 fixes 7 vulnerabilities: CVE-2026-56864, CVE-2026-56865, CVE-2024-6104, ghsa-pmwq-pjrm-6p5r, CVE-2026-2303...

PT-2026-89958

Package rekor-backfill-index version 1.4.3-r1 fixes 1 vulnerabilities: ghsa-fcv2-xgw5-pqxf...

PT-2026-89964

Package rekor-backfill-index version 1.4.3-r0 fixes 2 vulnerabilities: ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x...

Security update for rekor

This update for rekor rebuilds it against the current go security release. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the command listed for your product: SUSE Linux Enterprise...

SUSE-SU-2026:3852-1 Security update for rekor

This update for rekor rebuilds it against the current go security release...

PT-2026-86908

This update for rekor rebuilds it against the current go security release...

BIT-COSIGN-2026-22703 Cosign verification accepts any valid Rekor entry under certain conditions

Cosign provides code signing and transparency for containers and binaries. Prior to versions 2.6.2 and 3.0.4, Cosign bundle can be crafted to successfully verify an artifact even if the embedded Rekor entry does not reference the artifact's digest, signature or public key. When verifying a Rekor...

GO-2025-3540 vulnerabilities

Vulnerabilities for packages: argo-cd-fips, falcosidekick-fips, juicefs, gitea-fips, dapr-fips, keda, kots, fluent-bit-plugin-loki, traefik-fips, falcosidekick, atlantis, dapr, argo-cd, loki, authservice, rekor-fips, splunk-otel-collector, oauth2-proxy, gitea, opentelemetry-collector-contrib-fips...

GO-2026-4348 vulnerabilities

Vulnerabilities for packages: crossplane, policy-controller, tekton-chains, teleport, kyverno-notation-aws, chainctl, kyverno-policy-reporter-plugins-kyverno-fips, aactl, neuvector-sigstore-interface-fips, policy-controller-fips, slsa-verifier, flux-source-controller-fips, tflint-fips, gitsign,...

GO-2026-4349 vulnerabilities

Vulnerabilities for packages: crossplane, policy-controller, tekton-chains, teleport, kyverno-notation-aws, chainctl, kyverno-policy-reporter-plugins-kyverno-fips, aactl, neuvector-sigstore-interface-fips, policy-controller-fips, slsa-verifier, flux-source-controller-fips, tflint-fips, gitsign,...

GO-2024-3166 vulnerabilities

Vulnerabilities for packages: wolfictl, policy-controller, tekton-chains, chainctl, neuvector-sigstore-interface-fips, aactl, policy-controller-fips, melange, slsa-verifier, flux-source-controller-fips, gitsign, tkn-fips, falcoctl, zarf, spire-server, neuvector-sigstore-interface, vexctl,...

GO-2024-2883 vulnerabilities

Vulnerabilities for packages: cortex, prometheus-alertmanager, fulcio, timestamp-authority, grafana-mimir, rekor...

GO-2026-4394 vulnerabilities

Vulnerabilities for packages: task, octo-sts, gitaly, op-geth, kube-metrics-adapter, docker, juicefs, conftest, jaeger-operator, migrate, kubescape-operator, kubernetes-csi-external-health-monitor, pulumi-kubernetes-operator, azurefile-csi, opentofu, azure-workload-identity-webhook,...

GO-2024-2918 vulnerabilities

Vulnerabilities for packages: trino, nuclei, up, fulcio, py3-azure-identity, rclone, step, flux-kustomize-controller, kubescape, flux-image-reflector-controller, sigstore-scaffolding, airflow, flux-source-controller, rekor, grafana-agent-operator, argo-workflows, restic, policy-controller, zarf,...