Every CVESearch/Get API key

SUSE-SU-2026:1098-1

Security update for cosign

No scoreFix available

SUSE-SU-2026:1098-1 is a vulnerability with no CVSS score yet in cosign, published March 26, 2026. No source lists public exploit code. Fixed in cosign 3.0.5-150400.3.37.1.

What does this mean?
Severity
UnratedNo CVSS score yet
Exploit chance
UnscoredNo EPSS score yet
Exploitation
None knownNot on CISA’s or ENISA’s lists
Fixed in
3.0.5-150400.3.37.1cosign +11 more

Description

This update for cosign rebuilds it against the current go 1.25 security release.

Affected packages

Affected packages
PackageAffectedFixed
cosign
SUSE:Linux Enterprise Module for Basesystem 15 SP7
before 3.0.5-150400.3.37.1
3.0.5-150400.3.37.1
cosign
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
before 3.0.5-150400.3.37.1
3.0.5-150400.3.37.1
cosign
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
before 3.0.5-150400.3.37.1
3.0.5-150400.3.37.1
cosign
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
before 3.0.5-150400.3.37.1
3.0.5-150400.3.37.1
cosign
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
before 3.0.5-150400.3.37.1
3.0.5-150400.3.37.1
cosign
SUSE:Linux Enterprise Server 15 SP4-LTSS
before 3.0.5-150400.3.37.1
3.0.5-150400.3.37.1
cosign
SUSE:Linux Enterprise Server 15 SP5-LTSS
before 3.0.5-150400.3.37.1
3.0.5-150400.3.37.1
cosign
SUSE:Linux Enterprise Server 15 SP6-LTSS
before 3.0.5-150400.3.37.1
3.0.5-150400.3.37.1
cosign
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
before 3.0.5-150400.3.37.1
3.0.5-150400.3.37.1
cosign
SUSE:Linux Enterprise Server for SAP Applications 15 SP5
before 3.0.5-150400.3.37.1
3.0.5-150400.3.37.1
cosign
SUSE:Linux Enterprise Server for SAP Applications 15 SP6
before 3.0.5-150400.3.37.1
3.0.5-150400.3.37.1
cosign
openSUSE:Leap 15.6
before 3.0.5-150400.3.37.1
3.0.5-150400.3.37.1

What each source reports

OSVNo score

Security update for cosign

This update for cosign rebuilds it against the current go 1.25 security release.

Record
SUSE-SU-2026:1098-1
Updated
2026-11-02

History

History
RecordedChangedSources
first indexedOSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

MoveEnter Open