openSUSE-SU-2026:20386-1

Security update for cosign

Advisory ansehen veröffentlicht 2026-03-18

Security update for cosign

beschreibt (9)

Zugehörige CVEs.

ID	Schweregrad	EPSS	ausnutzbar	veröffentlicht
CVE-2026-26958US	—	0.50% (42nd)	—	2026-02-19
filippo.io/edwards25519 is a Go library implementing the edwards25519 elliptic curve with APIs for building cryptographic primitives. In versions 1.1.0 and earlier, MultiScalarMult…
CVE-2026-24122US	—	0.21% (11th)	—	2026-02-19
Cosign provides code signing and transparency for containers and binaries. In versions 3.0.4 and below, an issuing certificate with a validity that expires before the leaf certific…
CVE-2025-11065US	—	0.40% (33rd)	—	2026-01-26
A flaw was found in github.com/go-viper/mapstructure/v2, in the field processing component using mapstructure.WeakDecode. This vulnerability allows information disclosure through d…
CVE-2026-24137US	—	0.39% (32nd)	—	2026-01-23
sigstore framework is a common go library shared across sigstore services and clients. In versions 1.10.3 and below, the legacy TUF client (pkg/tuf/client.go) supports caching targ…
CVE-2026-23992US	high7.5	0.21% (11th)	—	2026-01-22
go-tuf is a Go implementation of The Update Framework (TUF). Starting in version 2.0.0 and prior to version 2.3.1, a compromised or misconfigured TUF repository can have the config…
CVE-2026-23991US	high7.5	0.58% (47th)	—	2026-01-22
go-tuf is a Go implementation of The Update Framework (TUF). Starting in version 2.0.0 and prior to version 2.3.1, if the TUF repository (or any of its mirrors) returns invalid TUF…
CVE-2026-22772US	medium5.3	0.23% (13th)	—	2026-01-12
Fulcio is a certificate authority for issuing code signing certificates for an OpenID Connect (OIDC) identity. Prior to 1.8.5, Fulcio's metaRegex() function uses unanchored regex,…
CVE-2026-22703US	medium5.5OT erhöht	0.11% (1st)	—	2026-01-10
Cosign provides code signing and transparency for containers and binaries. Prior to versions 2.6.2 and 3.0.4, Cosign bundle can be crafted to successfully verify an artifact even i…
CVE-2025-58181US	—	0.60% (48th)	—	2025-11-19
SSH servers parsing GSSAPI authentication requests do not validate the number of mechanisms specified in the request, allowing an attacker to cause unbounded memory consumption.

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

Behebungen (63)

Behobencosign-0:3.0.5-160000.1.1.aarch64 as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobencosign-0:3.0.5-160000.1.1.aarch64 as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobencosign-0:3.0.5-160000.1.1.aarch64 as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobencosign-0:3.0.5-160000.1.1.aarch64 as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobencosign-0:3.0.5-160000.1.1.aarch64 as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobencosign-0:3.0.5-160000.1.1.aarch64 as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobencosign-0:3.0.5-160000.1.1.aarch64 as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobencosign-0:3.0.5-160000.1.1.aarch64 as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobencosign-0:3.0.5-160000.1.1.aarch64 as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobencosign-0:3.0.5-160000.1.1.ppc64le as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobencosign-0:3.0.5-160000.1.1.ppc64le as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobencosign-0:3.0.5-160000.1.1.ppc64le as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobencosign-0:3.0.5-160000.1.1.ppc64le as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobencosign-0:3.0.5-160000.1.1.ppc64le as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobencosign-0:3.0.5-160000.1.1.ppc64le as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobencosign-0:3.0.5-160000.1.1.ppc64le as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobencosign-0:3.0.5-160000.1.1.ppc64le as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobencosign-0:3.0.5-160000.1.1.ppc64le as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobencosign-0:3.0.5-160000.1.1.s390x as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobencosign-0:3.0.5-160000.1.1.s390x as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobencosign-0:3.0.5-160000.1.1.s390x as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobencosign-0:3.0.5-160000.1.1.s390x as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobencosign-0:3.0.5-160000.1.1.s390x as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobencosign-0:3.0.5-160000.1.1.s390x as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobencosign-0:3.0.5-160000.1.1.s390x as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobencosign-0:3.0.5-160000.1.1.s390x as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobencosign-0:3.0.5-160000.1.1.s390x as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobencosign-0:3.0.5-160000.1.1.x86_64 as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobencosign-0:3.0.5-160000.1.1.x86_64 as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobencosign-0:3.0.5-160000.1.1.x86_64 as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobencosign-0:3.0.5-160000.1.1.x86_64 as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobencosign-0:3.0.5-160000.1.1.x86_64 as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobencosign-0:3.0.5-160000.1.1.x86_64 as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobencosign-0:3.0.5-160000.1.1.x86_64 as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobencosign-0:3.0.5-160000.1.1.x86_64 as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobencosign-0:3.0.5-160000.1.1.x86_64 as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobencosign-bash-completion-0:3.0.5-160000.1.1.noarch as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobencosign-bash-completion-0:3.0.5-160000.1.1.noarch as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobencosign-bash-completion-0:3.0.5-160000.1.1.noarch as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobencosign-bash-completion-0:3.0.5-160000.1.1.noarch as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobencosign-bash-completion-0:3.0.5-160000.1.1.noarch as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobencosign-bash-completion-0:3.0.5-160000.1.1.noarch as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobencosign-bash-completion-0:3.0.5-160000.1.1.noarch as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobencosign-bash-completion-0:3.0.5-160000.1.1.noarch as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobencosign-bash-completion-0:3.0.5-160000.1.1.noarch as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobencosign-fish-completion-0:3.0.5-160000.1.1.noarch as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobencosign-fish-completion-0:3.0.5-160000.1.1.noarch as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobencosign-fish-completion-0:3.0.5-160000.1.1.noarch as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobencosign-fish-completion-0:3.0.5-160000.1.1.noarch as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobencosign-fish-completion-0:3.0.5-160000.1.1.noarch as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobencosign-fish-completion-0:3.0.5-160000.1.1.noarch as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobencosign-fish-completion-0:3.0.5-160000.1.1.noarch as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobencosign-fish-completion-0:3.0.5-160000.1.1.noarch as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobencosign-fish-completion-0:3.0.5-160000.1.1.noarch as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobencosign-zsh-completion-0:3.0.5-160000.1.1.noarch as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobencosign-zsh-completion-0:3.0.5-160000.1.1.noarch as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobencosign-zsh-completion-0:3.0.5-160000.1.1.noarch as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobencosign-zsh-completion-0:3.0.5-160000.1.1.noarch as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobencosign-zsh-completion-0:3.0.5-160000.1.1.noarch as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobencosign-zsh-completion-0:3.0.5-160000.1.1.noarch as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobencosign-zsh-completion-0:3.0.5-160000.1.1.noarch as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobencosign-zsh-completion-0:3.0.5-160000.1.1.noarch as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobencosign-zsh-completion-0:3.0.5-160000.1.1.noarch as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan