< back to search

shield Security update for rekor

SUSE-SLE-Module-Basesystem-15-SP7-2026-383

This update for rekor fixes the following issues: Security fixes: - CVE-2025-58058: Fixed github.com/ulikunitz/xz leaks memory (bsc#1248910) - CVE-2025-29923: Fixed potential out of order responses when `CLIENT SETINFO` times out during connection establishment (bsc#1241153) Other fixes: - Update to version 1.4.3 - Update to version 1.4.2 - Update to version 1.4.1 (jsc#SLE-23476)

Release Date

Feb 4 2026
References

Bugzilla: 1248910, 1241153
CVEs: CVE-2025-29923, CVE-2025-58058
Type

security
Severity

moderate

cloud_download Downloads

To download packages, you need to log in and have a valid subscription.

Basesystem Module 15.7 ppc64le

Packages

rekor
Supply Chain Transparency Log

1.4.3-150400.4.28.1 lock rpm lock src

Basesystem Module 15.7 aarch64

Packages

rekor
Supply Chain Transparency Log

1.4.3-150400.4.28.1 lock rpm lock src

Basesystem Module 15.7 s390x

Packages

rekor
Supply Chain Transparency Log

1.4.3-150400.4.28.1 lock rpm lock src

Basesystem Module 15.7 x86_64

Packages

rekor
Supply Chain Transparency Log

1.4.3-150400.4.28.1 lock rpm lock src