Commit Graph

Select branches

Hide Pull Requests

factory

slfo-1.2

slfo-main

Mono Color

• 1ac1e9e389 Accepting request 1330066 from security factory Ana Guerrero 2026-01-30 17:31:23 +00:00
• 9d4beb88b0 - GHSA-4c4x-jm2x-pf9j / CVE-2026-24117 / bsc#1257135: Fixed Server-Side Request Forgery (SSRF) via provided public key URL - GHSA-273p-m2cw-6833 / CVE-2026-23831 / bsc#1257132: Fixed lack of input validation thatg can cause a thread crash - GHSA-j5w8-q4qc-rx2x / CVE-2025-58181 / bsc#1253817: Fixed golang.org/x/crypto/ssh: invalidated number of mechanisms can cause unbounded memory consumption Marcus Meissner 2026-01-23 15:39:04 +00:00
• d684df5576 This release fixes the following security issues: - GHSA-4c4x-jm2x-pf9j / CVE-2026-24117 / 1257135: Fixed Server-Side Request Forgery (SSRF) via provided public key URL - GHSA-273p-m2cw-6833 / CVE-2026-23831 / 1257132: Fixed lack of input validation thatg can cause a thread crash Marcus Meissner 2026-01-23 13:16:36 +00:00
• d31fa0bb88 update to 1.5.0 Marcus Meissner 2026-01-22 10:44:06 +00:00
• f70eab8a48 Accepting request 1318184 from security Ana Guerrero 2025-11-17 11:20:03 +00:00
• dc730e0a6a update to 1.4.3 Marcus Meissner 2025-11-17 08:53:56 +00:00
• 058679450e Accepting request 1305808 from security Ana Guerrero 2025-09-18 19:12:06 +00:00
• aaa44739f8 update to 1.4.2 Marcus Meissner 2025-09-18 13:19:30 +00:00
• 53b86a26c1 Accepting request 1302197 from security Ana Guerrero 2025-09-01 15:18:48 +00:00
• 5bb9ba9834 - Update to version 1.4.1 (jsc#SLE-23476):: * build(deps): Bump github.com/ulikunitz/xz from 0.5.12 to 0.5.14 (#2596) CVE-2025-58058: rekor: github.com/ulikunitz/xz: github.com/ulikunitz/xz leaks memory: (bsc#1248910) * build(deps): Bump github.com/redis/go-redis/v9 from 9.11.0 to 9.12.1 CVE-2025-29923: rekor: github.com/redis/go-redis: potential out of order responses when CLIENT SETINFO times out during connection establishment (bsc#1241153) * use less expensive gRPC call to implement GetLeafAndProofByHash (#2581) * move to per-shard trillian client manager (#2564) * use cheaper gRPC endpoint when we already have the inclusion proof (#2580) * simplify hash and signature verification in rekord type (#2579) * return correct error if GetLeafAndProofByHash fails (#2574) Marcus Meissner 2025-09-01 11:46:38 +00:00
• 15ce71243d Accepting request 1297304 from security Dominique Leuenberger 2025-08-04 13:24:43 +00:00
• 1d51cbf900 update to 1.4.0 Marcus Meissner 2025-08-03 16:19:53 +00:00
• 9457197d71 Accepting request 1268974 from security slfo-main slfo-1.2 Ana Guerrero 2025-04-14 10:58:11 +00:00
• 8ce0f99463 * Security fixes (over the last releases): - CVE-2024-6104: rekor: hashicorp/go-retryablehttp: url might write sensitive information to log file (bsc#1227053) - CVE-2023-45288: rekor: golang.org/x/net/http2: close connections when receiving too many headers (bsc#1236519) - CVE-2025-27144: rekor: gopkg.in/go-jose/go-jose.v2,github.com/go-jose/go-jose/v4,github.com/go-jose/go-jose/v3: Go JOSE's Parsing Vulnerable to Denial of Service (bsc#1237638) - CVE-2025-22868: rekor: golang.org/x/oauth2/jws: Unexpected memory consumption during token parsing in golang.org/x/oauth2 (bsc#1239191) - CVE-2025-22869: rekor: golang.org/x/crypto/ssh: Denial of Service in the Key Exchange of golang.org/x/crypto/ssh (bsc#1239327) - CVE-2025-30204: rekor: github.com/golang-jwt/jwt/v5: jwt-go allows excessive memory allocation during header parsing (bsc#1240468) Marcus Meissner 2025-04-13 12:15:41 +00:00
• b382bbeb79 update to 1.3.10 Marcus Meissner 2025-04-13 09:05:53 +00:00
• 7990a68af8 Accepting request 1240728 from security Ana Guerrero 2025-01-28 13:59:37 +00:00
• b4fc977e52 - Update to version 1.3.9 (jsc#SLE-23476): * Cache checkpoint for inactive shards (#2332) * Support per-shard signing keys (#2330) Marcus Meissner 2025-01-28 08:28:00 +00:00
• e30d8086ae Accepting request 1239797 from security Ana Guerrero 2025-01-23 17:05:33 +00:00
• f81949f946 update to 1.3.8 Robert Frohl 2025-01-23 10:23:11 +00:00
• 6280c4bfa2 Accepting request 1225792 from security Ana Guerrero 2024-11-22 22:52:46 +00:00
• 50287adcba update to 1.3.7 Marcus Meissner 2024-11-22 10:04:34 +00:00
• 52e029fb34 Accepting request 1189775 from security Dominique Leuenberger 2024-07-26 14:16:23 +00:00
• d5a79b63dc refactor spec, change to obs_scm (no longer hardcoding the commit hash) and update to 1.3.6 Marcus Meissner 2024-07-26 12:41:06 +00:00
• 467015097a Accepting request 1144326 from security Ana Guerrero 2024-02-05 21:02:38 +00:00
• 91a13d0d79 Accepting request 1144325 from home:msmeissn:branches:security Marcus Meissner 2024-02-05 14:47:58 +00:00
• 09ec3941cd Accepting request 1142230 from security Ana Guerrero 2024-01-29 21:32:47 +00:00
• 3dc243eed6 Accepting request 1142127 from home:dirkmueller:Factory Wolfgang Frisch 2024-01-29 11:09:57 +00:00
• 0b1cd6a84e Accepting request 1128622 from security Ana Guerrero 2023-11-24 22:35:37 +00:00
• 4c93cf3ca5 Accepting request 1128621 from home:msmeissn:branches:security Marcus Meissner 2023-11-24 16:29:01 +00:00
• fb9e23e4ba Accepting request 1108430 from security Dominique Leuenberger 2023-09-02 20:07:19 +00:00
• d08f200d7c Accepting request 1108429 from home:msmeissn:branches:security Marcus Meissner 2023-09-01 10:57:21 +00:00
• 44410421c8 Accepting request 1089753 from security Dominique Leuenberger 2023-05-30 20:02:53 +00:00
• dbe9cb9c1d Accepting request 1089735 from home:msmeissn:branches:security Marcus Meissner 2023-05-30 08:36:51 +00:00
• 008e52fdf6 Accepting request 1085763 from security Dominique Leuenberger 2023-05-10 14:17:15 +00:00
• cc70271fab Accepting request 1085762 from home:msmeissn:branches:security Marcus Meissner 2023-05-09 15:13:41 +00:00
• e13ff8d8ec Accepting request 1084327 from security Dominique Leuenberger 2023-05-04 15:10:23 +00:00
• 44481e3973 Accepting request 1084326 from home:msmeissn:branches:security Marcus Meissner 2023-05-03 12:50:54 +00:00
• 030f80ec14 Accepting request 1077494 from security Dominique Leuenberger 2023-04-05 19:28:33 +00:00
• 0340082614 Accepting request 1077454 from home:msmeissn:branches:security Marcus Meissner 2023-04-05 09:24:58 +00:00
• c8249d91cf Accepting request 1040165 from security Dominique Leuenberger 2022-12-05 17:01:40 +00:00
• 79ec9db9f1 Accepting request 1038886 from home:msmeissn:branches:security Marcus Meissner 2022-12-05 08:36:59 +00:00
• 4d34320645 Accepting request 1029934 from security Dominique Leuenberger 2022-10-19 11:18:02 +00:00
• 19d8611522 Accepting request 1029932 from home:msmeissn:branches:security Marcus Meissner 2022-10-19 08:39:53 +00:00
• c2f11c5b4b Accepting request 1007909 from security Richard Brown 2022-10-04 18:38:15 +00:00
• 913f1b929f Accepting request 1007274 from home:msmeissn:branches:security Marcus Meissner 2022-10-04 13:04:17 +00:00
• 2991d02eb6 Accepting request 1006397 from security Richard Brown 2022-09-27 18:14:31 +00:00
• 820202823b OBS-URL: https://build.opensuse.org/package/show/security/rekor?expand=0&rev=19 Marcus Meissner 2022-09-27 12:52:26 +00:00
• 7b96b3214e Accepting request 1006388 from home:msmeissn:branches:security Marcus Meissner 2022-09-27 12:37:10 +00:00
• df4aac75f6 Accepting request 1003863 from security Dominique Leuenberger 2022-09-15 21:00:05 +00:00
• e704b23e12 Accepting request 1003862 from home:msmeissn:branches:security Marcus Meissner 2022-09-15 13:15:19 +00:00
• e3becf26fd Accepting request 991395 from security Richard Brown 2022-07-28 18:58:38 +00:00
• 6fe6a0c040 Accepting request 991394 from home:msmeissn:branches:security Marcus Meissner 2022-07-27 13:39:29 +00:00
• b7f6cf8192 Accepting request 991392 from home:msmeissn:branches:security Marcus Meissner 2022-07-27 13:37:41 +00:00
• 140fb9f380 Accepting request 985790 from security Dominique Leuenberger 2022-06-30 11:18:16 +00:00
• b4625ce4ba Accepting request 985788 from home:msmeissn:branches:security Marcus Meissner 2022-06-29 12:42:40 +00:00
• 2e94635e92 Accepting request 983855 from security Dominique Leuenberger 2022-06-20 13:38:21 +00:00
• 6c1414acb5 Accepting request 983852 from home:msmeissn:branches:security Marcus Meissner 2022-06-20 07:17:29 +00:00
• 919f40a835 Accepting request 972809 from security Dominique Leuenberger 2022-04-26 18:15:39 +00:00
• 65092aae15 Accepting request 972808 from home:msmeissn:branches:security Marcus Meissner 2022-04-26 09:47:47 +00:00
• 35c728fc23 Accepting request 966624 from security Dominique Leuenberger 2022-04-03 19:31:08 +00:00
• 08eb060c06 Accepting request 966623 from home:msmeissn:branches:security Marcus Meissner 2022-04-03 09:03:38 +00:00
• 99e043716c Accepting request 948953 from security Dominique Leuenberger 2022-01-25 16:36:07 +00:00
• f4647966d7 Accepting request 948951 from home:bmwiedemann:branches:security Marcus Meissner 2022-01-25 08:44:46 +00:00
• 07b56f0910 Accepting request 944481 from security Dominique Leuenberger 2022-01-07 11:45:52 +00:00
• 23276d55ac Accepting request 944479 from home:msmeissn:branches:security Marcus Meissner 2022-01-06 15:04:12 +00:00
• 1f0bbe482a Accepting request 943481 from security Dominique Leuenberger 2022-01-03 09:49:56 +00:00
• 3dbaf89a4d Accepting request 939034 from home:msmeissn Marcus Meissner 2021-12-10 09:11:57 +00:00