SUSE SLED15 / SLES15 / openSUSE 15 Security Update : rekor (SUSE-SU-2023:2210-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2023:2210-1 advisory. Updated to version 1.1.1 jscSLE-23476: Functional Enhancements - Refactor Trillian client with exported...

CVE-2023-30551 vulnerabilities

Vulnerabilities for packages: apko, ko, aactl...

CVE-2023-30551 vulnerabilities

Vulnerabilities for packages: aactl, ko, apko...

CVE-2023-30551

CVE-2023-30551 affects Rekor (open source transparency log). Prior to version 1.1.1, an out-of-memory (OOM) condition can occur when Rekor reads archive metadata files into memory without validating their sizes. Specifically, JAR submissions can trigger OOM during verification if large META-INF e...