308 matches found
CVE-2026-54787 vulnerabilities
Vulnerabilities for packages: falcoctl-fips, policy-controller, skaffold-fips, policy-controller-fips, falcoctl, kyverno, spire-server, tkn, trivy-operator, trivy, tekton-chains, cloudbeat-fips, crossplane, docker-fips, cosign, kubescape, tkn-fips, cosign-fips, flux-source-controller-fips,...
GHSA-WQQC-JJCQ-VFXM vulnerabilities
Vulnerabilities for packages: falcoctl-fips, policy-controller, skaffold-fips, policy-controller-fips, falcoctl, kyverno, spire-server, tkn, trivy-operator, trivy, tekton-chains, cloudbeat-fips, crossplane, docker-fips, cosign, kubescape, tkn-fips, cosign-fips, flux-source-controller-fips,...
CLEANSTART-2026-BB97886 Security fixes in cosign 2.5.3-r0
Package cosign version 2.5.3-r0 fixes 82 vulnerabilities: CVE-2025-0913, CVE-2025-15558, CVE-2025-22868, CVE-2025-22869, CVE-2025-22870...
CLEANSTART-2026-BA61304 Security fixes in cosign 2.4.3-r0
Package cosign version 2.4.3-r0 fixes 82 vulnerabilities: CVE-2025-0913, CVE-2025-15558, CVE-2025-22868, CVE-2025-22869, CVE-2025-22870...
SUSE-SU-2026:3068-1 Security update for cosign
This update for cosign rebuilds it against the current go security release...
openSUSE 16: cosign / cosign-bash-completion / cosign-fish-completion / etc (openSUSE-SU-2026:21281-1)
The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21281-1 advisory. This update for cosign fixes the following issues - CVE-2026-25680,CVE-2026-25681,CVE-2026-27136,CVE-2026-42502,CVE-2026-42506: multiple issues...
SUSE-SU-2026:22613-1 Security update for cosign
This update for cosign fixes the following issues - CVE-2026-25680,CVE-2026-25681,CVE-2026-27136,CVE-2026-42502,CVE-2026-42506: multiple issues when parsing HTML files bsc1267044. - CVE-2026-33815: memory-safety vulnerability bsc1261811. -...
SUSE SLED15 / SLES15 Security Update : cosign (SUSE-SU-2026:2827-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2827-1 advisory. This update for cosign fixes the following issues -...
openSUSE 16 Security Update : hauler (openSUSE-SU-2026:21262-1)
The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21262-1 advisory. Changes in hauler: - update to 2.0.1 bsc1269433, CVE-2026-48702: bump go to 1.26.4 to squash CVE noise Full v2 Release notes:...
OPENSUSE-SU-2026:11198-1 cosign-3.1.1-1.1 on GA media
These are all security issues fixed in the cosign-3.1.1-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:21262-1 Security update for hauler
This update for hauler fixes the following issues: Changes in hauler: - update to 2.0.1 bsc1269433, CVE-2026-48702: bump go to 1.26.4 to squash CVE noise Full v2 Release notes: https://github.com/hauler- dev/hauler/releases/tag/v2.0.0 - update to 2.0.0: v2.0.0 is a major release. It replaces...
Security update for cosign (moderate)
openSUSE security update: security update for cosign ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21036-1 Rating: moderate References: bsc1261859 Cross-References: CVE-2026-39395 CVSS scores: CVE-2026-39395 SUSE : 6.5...
GO-2026-5694 Cosign's verify-blob-attestation reports false positive when payload parsing fails in github.com/sigstore/cosign
Cosign's verify-blob-attestation reports false positive when payload parsing fails in github.com/sigstore/cosign...
OPENSUSE-SU-2026:21036-1 Security update for cosign
This update for cosign fixes the following issues Security issue: - CVE-2026-39395: Incorrect attestation verification due to malformed payloads or mismatched predicate types bsc1261859. Non security issue: - Update to version 3.0.5 jscSLE-23879...
SUSE-SU-2026:22344-1 Security update for cosign
This update for cosign fixes the following issues Security issue: - CVE-2026-39395: Incorrect attestation verification due to malformed payloads or mismatched predicate types bsc1261859. Non security issue: - Update to version 3.0.5 jscSLE-23879...
SUSE SLED15 / SLES15 Security Update : cosign (SUSE-SU-2026:2365-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:2365-1 advisory. This update for cosign fixes the following issue - CVE-2026-39395: Incorrect attestation verification due to malformed...
Security update for cosign
This update for cosign fixes the following issue CVE-2026-39395: Incorrect attestation verification due to malformed payloads or mismatched predicate types bsc1261859. Changes for cosign: update to 3.0.6: Fix DSSE predicate check GHSA-w6c6-c85g-mmv6 4801 Handle whitespace-only certificate...
SUSE-SU-2026:2365-1 Security update for cosign
This update for cosign fixes the following issue - CVE-2026-39395: Incorrect attestation verification due to malformed payloads or mismatched predicate types bsc1261859. Changes for cosign: - update to 3.0.6: Fix DSSE predicate check GHSA-w6c6-c85g-mmv6 4801 Handle whitespace-only certificate...
Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: cosign: cosign-3.1.1-0.1.hum1 aarch64, x8664 cosign-3.1.1-0.1.hum1.src src...