Security update for rekor
This update for rekor rebuilds it against the current go security release.
- Обновитесь до 1.4.3-150400.4.42.1
PatchFirst · Свежие уязвимости
За последние 30 дней в rekor опубликовано уязвимостей: 2; в каталоге KEV: 0.
Уязвимостей: 7
This update for rekor rebuilds it against the current go security release.
This update for rekor rebuilds it against the current go security release.
This update for rekor rebuilds it against the current go security release.
This update for rekor rebuilds it against the current go security release.
This update for rekor rebuilds it against the current go security release.
This update for rekor rebuilds it against the current go 1.25 security release.
This update for rekor fixes the following issues: - CVE-2023-45288: rekor: golang.org/x/net/http2: Fixed close connections when receiving too many headers (bsc#1236519) - CVE-2024-6104: rekor: hashicorp/go-retryablehttp: Fixed sensitive information disclosure inside log file (bsc#1227053) - CVE-2025-22868: rekor: golang.org/x/oauth2/jws: Fixed unexpected memory consumption during token parsing (bsc#1239191) - CVE-2025-22869: rekor: golang.org/x/crypto/ssh: Fixed denial of service in the Key Exchange (bsc#1239327) - CVE-2025-27144: rekor: gopkg.in/go-jose/go-jose.v2,github.com/go-jose/go-jose/v4,github.com/go-jose/go-jose/v3: Fixed denial of
Сопоставьте установленный стек и версии со свежими базами уязвимостей.