p PatchFirst

SUSE-SU-2026:0383-1

SUSE-SU-2026:0383-1 · Security update for rekor

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This update for rekor fixes the following issues: Security fixes: - CVE-2025-58058: Fixed github.com/ulikunitz/xz leaks memory (bsc#1248910) - CVE-2025-29923: Fixed potential out of order responses when `CLIENT SETINFO` times out during connection establishment (bsc#1241153) Other fixes: - Update to version 1.4.3 - Update to version 1.4.2 - Update to version 1.4.1 (jsc#SLE-23476)

Fix available

Published
Updated

Stack: system

Affected products and versions

  • rekor SUSE:Linux Enterprise Module for Basesystem 15 SP7

    Affected ranges
    • ECOSYSTEM: < 1.4.3-150400.4.28.1

    Update to 1.4.3-150400.4.28.1

  • rekor openSUSE:Leap 15.6

    Affected ranges
    • ECOSYSTEM: < 1.4.3-150400.4.28.1

    Update to 1.4.3-150400.4.28.1

Original sources

Check your server →