openSUSE Security Advisory (SUSE-SU-2026:0383-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

OPENSUSE-SU-2026:10127-1 rekor-1.5.0-1.1 on GA media

These are all security issues fixed in the rekor-1.5.0-1.1 package on the GA media of openSUSE Tumbleweed...

Server-side Request Forgery (SSRF)

Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the /api/v1/index/retrieve endpoint. An attacker can scan internal network resources by sending GET requests to retrieve a public key. Since only GET requests are allowed for this endpoint, it is not...

rekor-1.3.10-1.1 on GA media (moderate)

rekor-1.3.10-1.1 on GA media Announcement ID: openSUSE-SU-2025:14990-1 Rating: moderate Cross-References: CVE-2023-45288 CVE-2024-6104 CVE-2025-22868 CVE-2025-22869 CVE-2025-27144 CVE-2025-30204 CVSS scores: CVE-2023-45288 SUSE : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2023-45288 SUS...

OPENSUSE-SU-2025:14990-1 rekor-1.3.10-1.1 on GA media

These are all security issues fixed in the rekor-1.3.10-1.1 package on the GA media of openSUSE Tumbleweed...

openSUSE Security Advisory (SUSE-SU-2024:0460-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

OPENSUSE-SU-2024:13652-1 rekor-1.3.5-1.1 on GA media

These are all security issues fixed in the rekor-1.3.5-1.1 package on the GA media of openSUSE Tumbleweed...

SUSE-SU-2023:3557-1 Security update for rekor

This update of rekor fixes the following issues: - rebuild the package with the go 1.21 security release bsc1212475...

PT-2023-36259 · Go +1 · Go +1

Name of the Vulnerable Software and Affected Versions: rekor affected versions not specified Description: The issue is related to a security release in the Go programming language, specifically version 1.21. The rekor package has been rebuilt with this security release to address the issue. There...