# SUSE-SU-2025:4395-1: govulncheck-vulndb security update SUSE-SU-2025:4395-1, released December 15, 2025, fixes 37 CVEs in govulncheck-vulndb (version 0.0.20251209T172047-150000.1.127.1). None of them is reported as exploited. Patch Radar priority: Urgent. - Web page: https://patchblox.com/security/fix/linux/suse-su-2025-4395-1 - Platform: Linux - Released: Dec 15, 2025 - Priority: Urgent (Closes CVE-2025-44005, rated Critical) - CVEs: 37, exploited: 0, on CISA KEV: 0 - Vendor advisory: https://osv.dev/vulnerability/SUSE-SU-2025:4395-1 ## Applies to | Product | Release | Fixed in | |---|---|---| | [govulncheck-vulndb](https://patchblox.com/security/data/product/linux/govulncheck-vulndb.md) | opensuse-leap 15.6 | 0.0.20251209T172047-150000.1.127.1 | | [govulncheck-vulndb](https://patchblox.com/security/data/product/linux/govulncheck-vulndb.md) | sles 15.6 | 0.0.20251209T172047-150000.1.127.1 | ## CVEs this fix closes | CVE | Priority | Title | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2025-44005](https://patchblox.com/security/data/cve/CVE-2025-44005.md) | Urgent | govulncheck-vulndb: GO-2025-4180 GHSA-h8cp-697h-8c8p | n/a | 0.0909 | | | [CVE-2025-61729](https://patchblox.com/security/data/cve/CVE-2025-61729.md) | High | Excessive resource consumption when printing error string for host certificate validation in crypto/x509 | 8.1 | 0.0049 | | | [CVE-2025-66564](https://patchblox.com/security/data/cve/CVE-2025-66564.md) | High | govulncheck-vulndb: GO-2025-4192 GHSA-4qg8-fj49-pxjh | 7.5 | 0.0048 | | | [CVE-2025-66506](https://patchblox.com/security/data/cve/CVE-2025-66506.md) | High | govulncheck-vulndb: GO-2025-4193 GHSA-f83f-xpx7-ffpw | 7.5 | 0.0023 | | | [CVE-2025-41115](https://patchblox.com/security/data/cve/CVE-2025-41115.md) | Routine | govulncheck-vulndb: GO-2025-4153 GHSA-w62r-7c53-fmc5 | n/a | 0.1750 | | | [CVE-2018-21258](https://patchblox.com/security/data/cve/CVE-2018-21258.md) | Routine | govulncheck-vulndb: GO-2025-4146 GHSA-5mh6-p63g-3mv5 | n/a | 0.0117 | | | [CVE-2017-18883](https://patchblox.com/security/data/cve/CVE-2017-18883.md) | Routine | govulncheck-vulndb: GO-2025-4198 GHSA-w8cc-3h7q-jhc3 | n/a | 0.0113 | | | [CVE-2017-18871](https://patchblox.com/security/data/cve/CVE-2017-18871.md) | Routine | govulncheck-vulndb: GO-2025-4184 GHSA-jc6w-8r7f-vmp5 | n/a | 0.0112 | | | [CVE-2017-18902](https://patchblox.com/security/data/cve/CVE-2017-18902.md) | Routine | govulncheck-vulndb: GO-2025-4185 GHSA-jwfv-5hwq-f97r | n/a | 0.0093 | | | [CVE-2017-18876](https://patchblox.com/security/data/cve/CVE-2017-18876.md) | Routine | govulncheck-vulndb: GO-2025-4187 GHSA-hjqh-j6rj-gh8q | n/a | 0.0087 | | | [CVE-2017-18884](https://patchblox.com/security/data/cve/CVE-2017-18884.md) | Routine | govulncheck-vulndb: GO-2025-4197 GHSA-876j-jfqf-m7j7 | n/a | 0.0081 | | | [CVE-2017-18875](https://patchblox.com/security/data/cve/CVE-2017-18875.md) | Routine | govulncheck-vulndb: GO-2025-4186 GHSA-9rr5-q43r-ccv4 | n/a | 0.0073 | | | [CVE-2017-18877](https://patchblox.com/security/data/cve/CVE-2017-18877.md) | Routine | govulncheck-vulndb: GO-2025-4190 GHSA-9x8x-w6g5-hx4w | n/a | 0.0069 | | | [CVE-2017-18879](https://patchblox.com/security/data/cve/CVE-2017-18879.md) | Routine | govulncheck-vulndb: GO-2025-4189 GHSA-498j-wxww-j897 | n/a | 0.0069 | | | [CVE-2025-61725](https://patchblox.com/security/data/cve/CVE-2025-61725.md) | Routine | Excessive CPU consumption in ParseAddress in net/mail | 6.5 | 0.0065 | | | [CVE-2025-66410](https://patchblox.com/security/data/cve/CVE-2025-66410.md) | Routine | govulncheck-vulndb: GO-2025-4171 GHSA-jrhg-82w2-vvj7 | n/a | 0.0062 | | | [CVE-2017-18870](https://patchblox.com/security/data/cve/CVE-2017-18870.md) | Routine | govulncheck-vulndb: GO-2025-4183 GHSA-9j9j-mm2r-9rfm | n/a | 0.0062 | | | [CVE-2025-65025](https://patchblox.com/security/data/cve/CVE-2025-65025.md) | Routine | govulncheck-vulndb: GO-2025-4138 GHSA-h3mw-4f23-gwpw | n/a | 0.0057 | | | [CVE-2025-13357](https://patchblox.com/security/data/cve/CVE-2025-13357.md) | Routine | govulncheck-vulndb: GO-2025-4152 GHSA-gmm6-j2g5-r52m | n/a | 0.0053 | | | [CVE-2025-65026](https://patchblox.com/security/data/cve/CVE-2025-65026.md) | Routine | govulncheck-vulndb: GO-2025-4139 GHSA-hcpf-qv9m-vfgp | n/a | 0.0051 | | | [CVE-2025-64443](https://patchblox.com/security/data/cve/CVE-2025-64443.md) | Routine | govulncheck-vulndb: GO-2025-4179 GHSA-46gc-mwh4-cc5r | n/a | 0.0046 | | | [CVE-2025-64761](https://patchblox.com/security/data/cve/CVE-2025-64761.md) | Routine | govulncheck-vulndb: GO-2025-4156 GHSA-7ff4-jw48-3436 | n/a | 0.0039 | | | [CVE-2025-60638](https://patchblox.com/security/data/cve/CVE-2025-60638.md) | Routine | govulncheck-vulndb: GO-2025-4163 GHSA-f2hj-vpp9-6vm2 | n/a | 0.0037 | | | [CVE-2025-64751](https://patchblox.com/security/data/cve/CVE-2025-64751.md) | Routine | grafana: Dropped experimental implementation of authorization Zanzana server/client (version 11.5.10) | n/a | 0.0031 | | | [CVE-2025-61727](https://patchblox.com/security/data/cve/CVE-2025-61727.md) | Routine | Improper application of excluded DNS name constraints when verifying wildcard names in crypto/x509 | 6.5 | 0.0030 | | | [CVE-2025-60632](https://patchblox.com/security/data/cve/CVE-2025-60632.md) | Routine | govulncheck-vulndb: GO-2025-4164 GHSA-vgq7-9r5r-j9v3 | n/a | 0.0026 | | | [CVE-2025-65105](https://patchblox.com/security/data/cve/CVE-2025-65105.md) | Routine | apptainer: Fixed security bypass due to disabling security | 5.3 | 0.0025 | | | [CVE-2025-66411](https://patchblox.com/security/data/cve/CVE-2025-66411.md) | Routine | govulncheck-vulndb: GO-2025-4182 GHSA-jf75-p25m-pw74 | n/a | 0.0025 | | | [CVE-2025-13870](https://patchblox.com/security/data/cve/CVE-2025-13870.md) | Routine | govulncheck-vulndb: GO-2025-4178 GHSA-58w6-w55x-6wq8 | n/a | 0.0024 | | | [CVE-2025-65111](https://patchblox.com/security/data/cve/CVE-2025-65111.md) | Routine | govulncheck-vulndb: GO-2025-4151 GHSA-9m7r-g8hg-x3vr | n/a | 0.0023 | | | [CVE-2025-12756](https://patchblox.com/security/data/cve/CVE-2025-12756.md) | Routine | govulncheck-vulndb: GO-2025-4172 GHSA-p6gj-jc38-x2m7 | n/a | 0.0020 | | | [CVE-2025-55074](https://patchblox.com/security/data/cve/CVE-2025-55074.md) | Routine | govulncheck-vulndb: GO-2025-4133 GHSA-9hh7-6558-qfp2 | n/a | 0.0018 | | | [CVE-2025-13353](https://patchblox.com/security/data/cve/CVE-2025-13353.md) | Routine | govulncheck-vulndb: GO-2025-4174 GHSA-69jw-4jj8-fcxm | 5.5 | 0.0017 | | | [CVE-2025-64750](https://patchblox.com/security/data/cve/CVE-2025-64750.md) | Routine | govulncheck-vulndb: GO-2025-4177 GHSA-wwrx-w7c9-rf87 | n/a | 0.0017 | | | [CVE-2025-66406](https://patchblox.com/security/data/cve/CVE-2025-66406.md) | Routine | govulncheck-vulndb: GO-2025-4181 GHSA-j7c9-79x7-8hpr | n/a | 0.0016 | | | [CVE-2025-65965](https://patchblox.com/security/data/cve/CVE-2025-65965.md) | Routine | govulncheck-vulndb: GO-2025-4160 GHSA-6gxw-85q2-q646 | n/a | 0.0016 | | | [CVE-2025-13425](https://patchblox.com/security/data/cve/CVE-2025-13425.md) | Routine | govulncheck-vulndb: GO-2025-4149 GHSA-f786-75f3-74xj | n/a | 0.0011 | | --- Data as of 2026-11-11T01:43:54Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.