Every CVESearch/Get API key

SUSE-SU-2023:2665-1

Security update for cosign

No scoreFix available

SUSE-SU-2023:2665-1 is a vulnerability with no CVSS score yet in cosign, published June 27, 2023. No source lists public exploit code. Fixed in cosign 2.0.1-150400.3.11.1.

Severity
UnratedNo CVSS score yet
Exploit chance
UnscoredNo EPSS score yet
Exploitation
None knownNot on CISA’s or ENISA’s lists
Fixed in
2.0.1-150400.3.11.1cosign +3 more

Description

This update of cosign fixes the following issues:

  • rebuild the package with the go 1.20 security release (bsc#1206346).

Affected packages

Affected packages
PackageAffectedFixed
cosign
SUSE:Linux Enterprise Module for Basesystem 15 SP4
before 2.0.1-150400.3.11.1
2.0.1-150400.3.11.1
cosign
SUSE:Linux Enterprise Module for Basesystem 15 SP5
before 2.0.1-150400.3.11.1
2.0.1-150400.3.11.1
cosign
openSUSE:Leap 15.4
before 2.0.1-150400.3.11.1
2.0.1-150400.3.11.1
cosign
openSUSE:Leap 15.5
before 2.0.1-150400.3.11.1
2.0.1-150400.3.11.1

What each source reports

OSVNo score

Security update for cosign

This update of cosign fixes the following issues:

  • rebuild the package with the go 1.20 security release (bsc#1206346).
Record
SUSE-SU-2023:2665-1
Updated
2026-11-02

History

History
RecordedChangedSources
first indexedOSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

MoveEnter Open