Packages / openSUSE Tumbleweed / Source / Unspecified / tekton-cli

Source Package: tekton-cli (0.46.0-1.1)

CLI for interacting with the Tekton CD system

The following binary packages are built from this source package:

tekton-cli
CLI for interacting with the Tekton CD system
tekton-cli-bash-completion
Bash Completion for tekton-cli
tekton-cli-fish-completion
Fish Completion for tekton-cli
tekton-cli-zsh-completion
Zsh Completion for tekton-cli

Known vulnerabilities

Matching against OpenFactory catalog package versions is in progress.

CVE	Severity	Version impact
[CVE-2026-111943] Published: Oct 20, 2026, 12:00:00 AM UTC golang-1.19: CVE-2026-111943	High(7.4)	Affected Details (4) `0.46.0-1.1` · noarch · tumbleweed Unknown · Fixed: `0.46.2-1.1` Version impact unknown dsa · tekton-cli · opensuse · tumbleweed `0.46.0-1.1` · x86_64 · tumbleweed Affected · Fixed: `0.46.2-1.1` dsa · tekton-cli · opensuse · tumbleweed `0.46.0-1.1` · noarch · tumbleweed Unknown · Fixed: `0.46.2-1.1` Version impact unknown dsa · tekton-cli · opensuse · tumbleweed `0.46.0-1.1` · noarch · tumbleweed Unknown · Fixed: `0.46.2-1.1` Version impact unknown dsa · tekton-cli · opensuse · tumbleweed
[CVE-2026-42505] Published: Jul 7, 2026, 10:00:00 PM UTC Handshakes which used Encrypted Client Hello could be de-anonymized by a passive network observer due to a disclosure of pre-shared key identities in the unencrypted client hello.	Medium(5.3)	Unknown Details (4) `0.46.0-1.1` · noarch · tumbleweed Unknown · Fixed: `0.46.0-1.1` Version impact unknown nvd · tekton-cli · opensuse · tumbleweed `0.46.0-1.1` · x86_64 · tumbleweed Fixed · Fixed: `0.46.0-1.1` nvd · tekton-cli · opensuse · tumbleweed `0.46.0-1.1` · noarch · tumbleweed Unknown · Fixed: `0.46.0-1.1` Version impact unknown nvd · tekton-cli · opensuse · tumbleweed `0.46.0-1.1` · noarch · tumbleweed Unknown · Fixed: `0.46.0-1.1` Version impact unknown nvd · tekton-cli · opensuse · tumbleweed
[CVE-2026-48702] Published: Jun 25, 2026, 9:33:36 PM UTC DEBIAN-CVE-2026-48702	High(7.5)	Unknown Details (4) `0.46.0-1.1` · noarch · tumbleweed Unknown · Fixed: `0.45.1-1.1` Version impact unknown pypi · tekton-cli · opensuse · tumbleweed `0.46.0-1.1` · x86_64 · tumbleweed Fixed · Fixed: `0.45.1-1.1` pypi · tekton-cli · opensuse · tumbleweed `0.46.0-1.1` · noarch · tumbleweed Unknown · Fixed: `0.45.1-1.1` Version impact unknown pypi · tekton-cli · opensuse · tumbleweed `0.46.0-1.1` · noarch · tumbleweed Unknown · Fixed: `0.45.1-1.1` Version impact unknown pypi · tekton-cli · opensuse · tumbleweed
[CVE-2026-34986] Published: Apr 3, 2026, 3:28:56 AM UTC Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web Token	High(7.5)	Unknown Details (4) `0.46.0-1.1` · noarch · tumbleweed Unknown · Fixed: `0.44.1-1.1` Version impact unknown nvd · tekton-cli · opensuse · tumbleweed `0.46.0-1.1` · x86_64 · tumbleweed Fixed · Fixed: `0.44.1-1.1` nvd · tekton-cli · opensuse · tumbleweed `0.46.0-1.1` · noarch · tumbleweed Unknown · Fixed: `0.44.1-1.1` Version impact unknown nvd · tekton-cli · opensuse · tumbleweed `0.46.0-1.1` · noarch · tumbleweed Unknown · Fixed: `0.44.1-1.1` Version impact unknown nvd · tekton-cli · opensuse · tumbleweed
[CVE-2026-25679] Published: Feb 26, 2026, 11:00:00 PM UTC url.Parse insufficiently validated the host/authority component and accepted some invalid URLs.	High(7.5)	Unknown Details (4) `0.46.0-1.1` · noarch · tumbleweed Unknown · Fixed: `0.45.0-1.1` Version impact unknown nvd · tekton-cli · opensuse · tumbleweed `0.46.0-1.1` · x86_64 · tumbleweed Fixed · Fixed: `0.45.0-1.1` nvd · tekton-cli · opensuse · tumbleweed `0.46.0-1.1` · noarch · tumbleweed Unknown · Fixed: `0.45.0-1.1` Version impact unknown nvd · tekton-cli · opensuse · tumbleweed `0.46.0-1.1` · noarch · tumbleweed Unknown · Fixed: `0.45.0-1.1` Version impact unknown nvd · tekton-cli · opensuse · tumbleweed

Last synced: Oct 28, 2026, 6:25:34 AM UTC

[CVE catalog]

Sources

openSUSE Tumbleweed OSSSep 1, 2026
Authoritative source; repository metadata signature verified
Signature evidence
tumbleweed-oss-multiarch:4db10cdde3ad82c7e22be35753c9e164b4bdd30f92db4aee17a0d4c94c5f902f
Repository-signature verification record
Signed object
https://download.opensuse.org/tumbleweed/repo/oss/repodata/repomd.xml
Signed-object SHA-256
4db10cdde3ad82c7e22be35753c9e164b4bdd30f92db4aee17a0d4c94c5f902f
Signer fingerprint
AD485664E901B867051AB15F35A2F86E29B700A4
Keyring revision
opensuse-project-signing-key.asc
SHA-256 b5745739ebfb95b25b8e810f9bcb847fe750ccda598bd85f02f0e974599a6d7e
Tool and policy
gpgv (GnuPG) 2.4.9
openfactory-software-catalog-signature-v1
Verification time
Sep 1, 2026
Repository metadata hash linkage
Result
Recorded as verified; digest details unavailable