Security update for rekor
This update for rekor rebuilds it against the current go security release.
- Actualiza a 1.4.3-150400.4.42.1
PatchFirst · Vulnerabilidades recientes
Vulnerabilidades publicadas para rekor en los últimos 30 días: 2. Incluidas en el catálogo KEV: 0.
Vulnerabilidades: 7
This update for rekor rebuilds it against the current go security release.
This update for rekor rebuilds it against the current go security release.
This update for rekor rebuilds it against the current go security release.
This update for rekor rebuilds it against the current go security release.
This update for rekor rebuilds it against the current go security release.
This update for rekor rebuilds it against the current go 1.25 security release.
This update for rekor fixes the following issues: - CVE-2023-45288: rekor: golang.org/x/net/http2: Fixed close connections when receiving too many headers (bsc#1236519) - CVE-2024-6104: rekor: hashicorp/go-retryablehttp: Fixed sensitive information disclosure inside log file (bsc#1227053) - CVE-2025-22868: rekor: golang.org/x/oauth2/jws: Fixed unexpected memory consumption during token parsing (bsc#1239191) - CVE-2025-22869: rekor: golang.org/x/crypto/ssh: Fixed denial of service in the Key Exchange (bsc#1239327) - CVE-2025-27144: rekor: gopkg.in/go-jose/go-jose.v2,github.com/go-jose/go-jose/v4,github.com/go-jose/go-jose/v3: Fixed denial of
Compara tu pila y las versiones instaladas con las bases actuales de vulnerabilidades.