Linux · SUSE Linux Enterprise · Security advisory · September 22, 2025

SUSE-SU-2025:03289-1: govulncheck-vulndb security update

SUSE-SU-2025:03289-1, released September 22, 2025, fixes 35 CVEs in govulncheck-vulndb (version 0.0.20250918T182144-150000.1.107.1). None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
35
None rated Critical
Exploited
0
None reported
Highest CVSS
8.1
Base score, 0 to 10
Highest EPSS
0.1091
95th percentile

Priority of the 35 CVEs

Patch now 0 Urgent 0 High 4 Routine 31

Fixed package versions

ProductReleaseFixed in
govulncheck-vulndbopensuse-leap 15.60.0.20250918T182144-150000.1.107.1
govulncheck-vulndbsles 15.60.0.20250918T182144-150000.1.107.1

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
High CVE-2025-9566 Podman: podman kube play command may overwrite host files8.1 0.0121 None reported
High CVE-2025-4953 Podman: build context bind mount8.1 0.0066 None reported
High CVE-2025-47906 go1.23: Fixed LookPath returning unexpected paths (bsc#1247719)7.5 0.0055 None reported
High CVE-2025-58063 CoreDNS: DNS Cache Pinning via etcd Lease ID Confusion7.1 0.0051 None reported
Routine CVE-2025-54123 govulncheck-vulndb: GO-2025-3944 GHSA-r4h8-hfp2-ggmfn/a 0.1091 None reported
Routine CVE-2025-55190 govulncheck-vulndb: GO-2025-3934 GHSA-786q-9hcg-v9ffn/a 0.0566 None reported
Routine CVE-2025-59361 govulncheck-vulndb: GO-2025-3949 GHSA-2gcv-3qpf-c5qrn/a 0.0339 None reported
Routine CVE-2025-59359 govulncheck-vulndb: GO-2025-3952 GHSA-369h-6j28-wwcgn/a 0.0303 None reported
Routine CVE-2025-59360 govulncheck-vulndb: GO-2025-3954 GHSA-xv9f-728h-9jgvn/a 0.0292 None reported
Routine CVE-2025-59358 govulncheck-vulndb: GO-2025-3951 GHSA-2gg8-85m5-8r2pn/a 0.0081 None reported
Routine CVE-2025-6203 govulncheck-vulndb: GO-2025-3924 GHSA-8f82-53h8-2p34n/a 0.0073 None reported
Routine CVE-2025-54376 govulncheck-vulndb: GO-2025-3945 GHSA-jxmr-2h4q-rhxpn/a 0.0071 None reported
Routine CVE-2025-5187 govulncheck-vulndb: GO-2025-3915 GHSA-4x4m-3c2p-qppc6.7 0.0057 None reported
Routine CVE-2025-8077 govulncheck-vulndb: GO-2025-3918 GHSA-8pxw-9c75-6w56n/a 0.0056 None reported
Routine CVE-2025-58157 govulncheck-vulndb: GO-2025-3929 GHSA-9fvj-xqr2-xwg8n/a 0.0054 None reported
Routine CVE-2024-58259 govulncheck-vulndb: GO-2025-3923 GHSA-4h45-jpvh-6p5jn/a 0.0052 None reported
Routine CVE-2025-58158 govulncheck-vulndb: GO-2025-3926 GHSA-w469-hj2f-jpr5n/a 0.0050 None reported
Routine CVE-2025-58445 govulncheck-vulndb: GO-2025-3940 GHSA-xh7v-965r-23f7n/a 0.0046 None reported
Routine CVE-2025-58450 govulncheck-vulndb: GO-2025-3941 GHSA-p46v-f2x8-qp98n/a 0.0044 None reported
Routine CVE-2025-58058 github.com/ulikunitz/xz leaks memory when decoding a corrupted multiple LZMA archives5.3 0.0043 None reported
Routine CVE-2025-58437 govulncheck-vulndb: GO-2025-3938 GHSA-j6xf-jwrj-v5qpn/a 0.0041 None reported
Routine CVE-2025-8396 govulncheck-vulndb: GO-2025-3953 GHSA-p768-c3pr-6459n/a 0.0039 None reported
Routine CVE-2025-56760 govulncheck-vulndb: GO-2025-3936 GHSA-78j5-8vq7-jxv5n/a 0.0035 None reported
Routine CVE-2025-58355 govulncheck-vulndb: GO-2025-3930 GHSA-33pr-m977-5w97n/a 0.0035 None reported
Routine CVE-2025-56761 govulncheck-vulndb: GO-2025-3937 GHSA-cgrg-86m5-xm4wn/a 0.0027 None reported
Showing 1 to 25 of 35 1Next

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.