301 matches found
rekor
Rekor Rekór - Greek for “Record” Rekor's goals are to provide an immutable tamper resistant ledger of metadata generated within a software projects supply chain. Rekor will enable software maintainers and build systems to record signed metadata to an immutable record. Other parties can then query...
Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: rekor: rekor-server-1.5.4-0.3.hum1 aarch64, s390x, x8664 rekor-1.5.4-0.3.hum1.src src Security Fixes: rekor: CVE-2026-111943...
Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: rekor: rekor-server-1.5.4-0.2.hum1 aarch64, s390x, x8664 rekor-1.5.4-0.2.hum1.src src...
SUSE SLED15 / SLES15 Security Update : rekor (SUSE-SU-2026:2043-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:2043-1 advisory. This update for rekor rebuilds it against the current go security release. Tenable has extracted the preceding...
CLEANSTART-2026-IX15108 Security fix for CVE-2024-6104 applied in: prometheus 2.47.2-r0, rekor-backfill-index 1.2.2-r0
CVE-2024-6104 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-ME27346 Security fixes in rekor-backfill-index 1.4.3-r1
Package rekor-backfill-index version 1.4.3-r1 fixes 1 vulnerabilities: ghsa-fcv2-xgw5-pqxf...
CLEANSTART-2026-HZ27786 Security fixes in rekor-backfill-index 1.2.2-r0
Package rekor-backfill-index version 1.2.2-r0 fixes 7 vulnerabilities: CVE-2026-56864, CVE-2026-56865, CVE-2024-6104, ghsa-pmwq-pjrm-6p5r, CVE-2026-2303...
CLEANSTART-2026-EN93855 Security fixes in rekor-backfill-index 1.4.3-r2
Package rekor-backfill-index version 1.4.3-r2 fixes 3 vulnerabilities: ghsa-fw7p-63qq-7hpr, CVE-2026-26958, ghsa-mqqf-5wvp-8fh8...
CLEANSTART-2026-QY94875 Security fixes in rekor-backfill-index 1.4.3-r0
Package rekor-backfill-index version 1.4.3-r0 fixes 2 vulnerabilities: ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x...
PT-2026-89958
Package rekor-backfill-index version 1.4.3-r1 fixes 1 vulnerabilities: ghsa-fcv2-xgw5-pqxf...
PT-2026-89964
Package rekor-backfill-index version 1.4.3-r0 fixes 2 vulnerabilities: ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x...
Security update for rekor
This update for rekor rebuilds it against the current go security release. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the command listed for your product: SUSE Linux Enterprise...
SUSE-SU-2026:3852-1 Security update for rekor
This update for rekor rebuilds it against the current go security release...
PT-2026-86908
This update for rekor rebuilds it against the current go security release...
BIT-COSIGN-2026-22703 Cosign verification accepts any valid Rekor entry under certain conditions
Cosign provides code signing and transparency for containers and binaries. Prior to versions 2.6.2 and 3.0.4, Cosign bundle can be crafted to successfully verify an artifact even if the embedded Rekor entry does not reference the artifact's digest, signature or public key. When verifying a Rekor...
GO-2025-3540 vulnerabilities
Vulnerabilities for packages: atlantis, rekor-fips, gitea-fips, argo-cd, kots, authservice, dapr-fips, keda, dapr, loki, falcosidekick, opentelemetry-collector-contrib-fips, splunk-otel-collector, splunk-otel-collector-fips, gitea, fluent-bit-plugin-loki, oauth2-proxy, falcosidekick-fips,...
GO-2026-4349 vulnerabilities
Vulnerabilities for packages: trivy-operator-fips, vexctl, kyverno-fips, ratify-fips, rekor-fips, cloudbeat-fips, slsa-verifier, zot, tflint-fips, cosign-fips, skaffold-fips, aactl, witness, docker, neuvector-sigstore-interface, kubescape, ratify, buildkitd, spire-server, chainctl, tkn, skaffold,...
GO-2026-4348 vulnerabilities
Vulnerabilities for packages: trivy-operator-fips, vexctl, kyverno-fips, ratify-fips, rekor-fips, cloudbeat-fips, slsa-verifier, zot, tflint-fips, cosign-fips, skaffold-fips, aactl, witness, docker, neuvector-sigstore-interface, kubescape, ratify, buildkitd, spire-server, chainctl, tkn, skaffold,...
GO-2024-3166 vulnerabilities
Vulnerabilities for packages: vexctl, zot, slsa-verifier, cosign-fips, apko, aactl, neuvector-sigstore-interface, kubescape, spire-server, wolfictl, chainctl, tkn, trivy, gh, tekton-chains-fips, zarf, tkn-fips, spire-server-fips, falcoctl, sigstore-scaffolding, flux-source-controller-fips,...
