PatchFirst · Свежие уязвимости
За последние 30 дней в rekor опубликовано уязвимостей: 0; в каталоге KEV: 0.
Уязвимостей: 2
This update for rekor fixes the following issues: Security fixes: - CVE-2025-58058: Fixed github.com/ulikunitz/xz leaks memory (bsc#1248910) - CVE-2025-29923: Fixed potential out of order responses when `CLIENT SETINFO` times out during connection establishment (bsc#1241153) Other fixes: - Update to version 1.4.3 - Update to version 1.4.2 - Update to version 1.4.1 (jsc#SLE-23476)
This update for rekor fixes the following issues: - CVE-2023-45288: rekor: golang.org/x/net/http2: Fixed close connections when receiving too many headers (bsc#1236519) - CVE-2024-6104: rekor: hashicorp/go-retryablehttp: Fixed sensitive information disclosure inside log file (bsc#1227053) - CVE-2025-22868: rekor: golang.org/x/oauth2/jws: Fixed unexpected memory consumption during token parsing (bsc#1239191) - CVE-2025-22869: rekor: golang.org/x/crypto/ssh: Fixed denial of service in the Key Exchange (bsc#1239327) - CVE-2025-27144: rekor: gopkg.in/go-jose/go-jose.v2,github.com/go-jose/go-jose/v4,github.com/go-jose/go-jose/v3: Fixed denial of
Сопоставьте установленный стек и версии со свежими базами уязвимостей.