CLEANSTART-2026-HX30295 Security fixes in cosign 2.6.5-r0

Package cosign version 2.6.5-r0 fixes 4 vulnerabilities: CVE-2026-49478, ghsa-3fxj-6jh8-hvhx, ghsa-9g5q-2w5x-hmxf, ghsa-rjr7-jggh-pgcp...

CVE-2026-49478

creationtimestamp| type| source ---|---|--- 2026-08-13 14:01:38+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msxsmaze5x2l...

Linux Distros Unpatched Vulnerability : CVE-2026-49478

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Fulcio is a certificate authority for issuing code signing certificates for an OpenID Connect OIDC identity. Versions through 1.8.5 improperly follow cross-host...

CVE-2026-49478 vulnerabilities

Vulnerabilities for packages: kyverno, podman-fips, buildah, falcoctl, chainctl, skopeo, kyverno-fips, prometheus-podman-exporter, undock, podman, prometheus-podman-exporter-fips, chainctl-fips, tekton-chains-fips, slsa-verifier, flux-source-controller-fips, kots, flux-source-controller,...