shield Security update for cosign

SUSE-SLES-16.0-1049

This update for cosign fixes the following issues Security issue: - CVE-2026-39395: Incorrect attestation verification due to malformed payloads or mismatched predicate types (bsc#1261859). Non security issue: - Update to version 3.0.5 (jsc#SLE-23879).

• Release Date
  Jun 22 2026
• References
  Bugzilla: 1261859
  CVEs: CVE-2026-39395
• Type
  security
• Severity
  moderate

cloud_download Downloads

SUSE Linux Enterprise Server 16.0 ppc64le

• Packages
  cosign
  Container Signing, Verification and Storage in an OCI registry

  3.0.6-160000.1.1 lock rpm

SUSE Linux Enterprise Server 16.0 x86_64

• Packages
  cosign
  Container Signing, Verification and Storage in an OCI registry

  3.0.6-160000.1.1 lock rpm

SUSE Linux Enterprise Server 16.0 aarch64

• Packages
  cosign
  Container Signing, Verification and Storage in an OCI registry

  3.0.6-160000.1.1 lock rpm

SUSE Linux Enterprise Server 16.0 s390x

• Packages
  cosign
  Container Signing, Verification and Storage in an OCI registry

  3.0.6-160000.1.1 lock rpm

SUSE Linux Enterprise Server for SAP applications 16.0 x86_64

• Packages
  cosign
  Container Signing, Verification and Storage in an OCI registry

  3.0.6-160000.1.1 lock rpm

SUSE Linux Enterprise Server for SAP applications 16.0 ppc64le

• Packages
  cosign
  Container Signing, Verification and Storage in an OCI registry

  3.0.6-160000.1.1 lock rpm