< back to search

gpp_maybe Security update for cosign
SUSE-SLE-Module-Basesystem-15-SP7-2025-2592

This update for cosign fixes the following issues: Update to version 2.5.3 (jsc#SLE-23879): - CVE-2025-46569: Fixed OPA server Data API HTTP path injection of Rego (bsc#1246725) Changelog: Update to 2.5.3: - Add signing-config create command (#4280) - Allow multiple services to be specified for trusted-root create (#4285) - force when copying the latest image to overwrite (#4298) - Fix cert verification logic for trusted-root/SCTs (#4294) - Fix lint error for types package (#4295) - feat: Add OCI 1.1+ experimental support to tree (#4205) - Add validity period end for trusted-root create (#4271) - avoid double-loading trustedroot from file (#4264) Update to 2.5.2: - Do not load trusted root when CT env key is set - docs: improve doc for --no-upload option (#4206) Update to 2.5.1: - Add Rekor v2 support for trusted-root create (#4242) - Add baseUrl and Uri to trusted-root create command - Upgrade to TUF v2 client with trusted root - Don't verify SCT for a private PKI cert (#4225) - Bump TSA library to relax EKU chain validation rules (#4219) - Bump sigstore-go to pick up log index=0 fix (#4162) - remove unused recursive flag on attest command (#4187)

  • Release Date
    Aug 1 2025
  • References
    Bugzilla: 1246725
    CVEs: CVE-2025-46569
  • Type
    security
  • Severity
    important

cloud_download Downloads

Basesystem Module 15.7 aarch64
  • Packages
    cosign
    Container Signing, Verification and Storage in an OCI registry
    2.5.3-150400.3.30.1 lock rpm lock src
    cosign-bash-completion
    Bash Completion for cosign
    2.5.3-150400.3.30.1 lock rpm
    cosign-zsh-completion
    Zsh Completion for cosign
    2.5.3-150400.3.30.1 lock rpm
Basesystem Module 15.7 ppc64le
  • Packages
    cosign
    Container Signing, Verification and Storage in an OCI registry
    2.5.3-150400.3.30.1 lock rpm lock src
    cosign-bash-completion
    Bash Completion for cosign
    2.5.3-150400.3.30.1 lock rpm
    cosign-zsh-completion
    Zsh Completion for cosign
    2.5.3-150400.3.30.1 lock rpm
Basesystem Module 15.7 s390x
  • Packages
    cosign
    Container Signing, Verification and Storage in an OCI registry
    2.5.3-150400.3.30.1 lock rpm lock src
    cosign-bash-completion
    Bash Completion for cosign
    2.5.3-150400.3.30.1 lock rpm
    cosign-zsh-completion
    Zsh Completion for cosign
    2.5.3-150400.3.30.1 lock rpm
Basesystem Module 15.7 x86_64
  • Packages
    cosign
    Container Signing, Verification and Storage in an OCI registry
    2.5.3-150400.3.30.1 lock rpm lock src
    cosign-bash-completion
    Bash Completion for cosign
    2.5.3-150400.3.30.1 lock rpm
    cosign-zsh-completion
    Zsh Completion for cosign
    2.5.3-150400.3.30.1 lock rpm