Security update for rekor
This update for rekor rebuilds it against the current go security release.
- Auf 1.4.3-150400.4.42.1 aktualisieren
PatchFirst · Aktuelle Sicherheitslücken
In den letzten 30 Tagen veröffentlichte Sicherheitslücken für rekor: 2. Davon im KEV-Katalog: 0.
Sicherheitslücken: 7
This update for rekor rebuilds it against the current go security release.
This update for rekor rebuilds it against the current go security release.
This update for rekor rebuilds it against the current go security release.
This update for rekor rebuilds it against the current go security release.
This update for rekor rebuilds it against the current go security release.
This update for rekor rebuilds it against the current go 1.25 security release.
This update for rekor fixes the following issues: - CVE-2023-45288: rekor: golang.org/x/net/http2: Fixed close connections when receiving too many headers (bsc#1236519) - CVE-2024-6104: rekor: hashicorp/go-retryablehttp: Fixed sensitive information disclosure inside log file (bsc#1227053) - CVE-2025-22868: rekor: golang.org/x/oauth2/jws: Fixed unexpected memory consumption during token parsing (bsc#1239191) - CVE-2025-22869: rekor: golang.org/x/crypto/ssh: Fixed denial of service in the Key Exchange (bsc#1239327) - CVE-2025-27144: rekor: gopkg.in/go-jose/go-jose.v2,github.com/go-jose/go-jose/v4,github.com/go-jose/go-jose/v3: Fixed denial of
Gleichen Sie Ihren installierten Stack und seine Versionen mit den aktuellen Sicherheitsmeldungen ab.