Security update for rekor
This update for rekor rebuilds it against the current go security release.
- Update to 1.4.3-150400.4.42.1
Published Updated
PatchFirst · Latest vulnerabilities
rekor vulnerabilities
Vulnerabilities published for rekor in the last 30 days: 2. Listed in the KEV catalogue: 0.
Vulnerabilities: 7
Security update for rekor
This update for rekor rebuilds it against the current go security release.
- Update to 1.4.3-150400.4.40.1
Published UpdatedSecurity update for rekor
This update for rekor rebuilds it against the current go security release.
- Update to 1.4.3-150400.4.38.1
Published UpdatedSecurity update for rekor
This update for rekor rebuilds it against the current go security release.
- Update to 1.4.3-150400.4.36.1
Published UpdatedSecurity update for rekor
This update for rekor rebuilds it against the current go security release.
- Update to 1.4.3-150400.4.34.1
Published UpdatedSecurity update for rekor
This update for rekor rebuilds it against the current go 1.25 security release.
- Update to 1.4.3-150400.4.30.1
Published UpdatedSecurity update for rekor
This update for rekor fixes the following issues: - CVE-2023-45288: rekor: golang.org/x/net/http2: Fixed close connections when receiving too many headers (bsc#1236519) - CVE-2024-6104: rekor: hashicorp/go-retryablehttp: Fixed sensitive information disclosure inside log file (bsc#1227053) - CVE-2025-22868: rekor: golang.org/x/oauth2/jws: Fixed unexpected memory consumption during token parsing (bsc#1239191) - CVE-2025-22869: rekor: golang.org/x/crypto/ssh: Fixed denial of service in the Key Exchange (bsc#1239327) - CVE-2025-27144: rekor: gopkg.in/go-jose/go-jose.v2,github.com/go-jose/go-jose/v4,github.com/go-jose/go-jose/v3: Fixed denial of
- Update to 1.3.10-150400.4.25.1
Published Updated
Check your server
Check your installed stack and versions against the current vulnerability feeds.