Linux · SUSE Linux Enterprise · Security advisory · December 15, 2025

SUSE-SU-2025:4395-1: govulncheck-vulndb security update

SUSE-SU-2025:4395-1, released December 15, 2025, fixes 37 CVEs in govulncheck-vulndb (version 0.0.20251209T172047-150000.1.127.1). None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent
CVEs closed
37
1 rated Critical
Exploited
0
None reported
Highest CVSS
8.1
Base score, 0 to 10
Highest EPSS
0.1750
97th percentile

Priority of the 37 CVEs

Patch now 0 Urgent 1 High 3 Routine 33

Fixed package versions

ProductReleaseFixed in
govulncheck-vulndbopensuse-leap 15.60.0.20251209T172047-150000.1.127.1
govulncheck-vulndbsles 15.60.0.20251209T172047-150000.1.127.1

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
Urgent CVE-2025-44005 govulncheck-vulndb: GO-2025-4180 GHSA-h8cp-697h-8c8pn/a 0.0909 None reported
High CVE-2025-61729 Excessive resource consumption when printing error string for host certificate validation in crypto/x5098.1 0.0049 None reported
High CVE-2025-66564 govulncheck-vulndb: GO-2025-4192 GHSA-4qg8-fj49-pxjh7.5 0.0048 None reported
High CVE-2025-66506 govulncheck-vulndb: GO-2025-4193 GHSA-f83f-xpx7-ffpw7.5 0.0023 None reported
Routine CVE-2025-41115 govulncheck-vulndb: GO-2025-4153 GHSA-w62r-7c53-fmc5n/a 0.1750 None reported
Routine CVE-2018-21258 govulncheck-vulndb: GO-2025-4146 GHSA-5mh6-p63g-3mv5n/a 0.0117 None reported
Routine CVE-2017-18883 govulncheck-vulndb: GO-2025-4198 GHSA-w8cc-3h7q-jhc3n/a 0.0113 None reported
Routine CVE-2017-18871 govulncheck-vulndb: GO-2025-4184 GHSA-jc6w-8r7f-vmp5n/a 0.0112 None reported
Routine CVE-2017-18902 govulncheck-vulndb: GO-2025-4185 GHSA-jwfv-5hwq-f97rn/a 0.0093 None reported
Routine CVE-2017-18876 govulncheck-vulndb: GO-2025-4187 GHSA-hjqh-j6rj-gh8qn/a 0.0087 None reported
Routine CVE-2017-18884 govulncheck-vulndb: GO-2025-4197 GHSA-876j-jfqf-m7j7n/a 0.0081 None reported
Routine CVE-2017-18875 govulncheck-vulndb: GO-2025-4186 GHSA-9rr5-q43r-ccv4n/a 0.0073 None reported
Routine CVE-2017-18877 govulncheck-vulndb: GO-2025-4190 GHSA-9x8x-w6g5-hx4wn/a 0.0069 None reported
Routine CVE-2017-18879 govulncheck-vulndb: GO-2025-4189 GHSA-498j-wxww-j897n/a 0.0069 None reported
Routine CVE-2025-61725 Excessive CPU consumption in ParseAddress in net/mail6.5 0.0065 None reported
Routine CVE-2025-66410 govulncheck-vulndb: GO-2025-4171 GHSA-jrhg-82w2-vvj7n/a 0.0062 None reported
Routine CVE-2017-18870 govulncheck-vulndb: GO-2025-4183 GHSA-9j9j-mm2r-9rfmn/a 0.0062 None reported
Routine CVE-2025-65025 govulncheck-vulndb: GO-2025-4138 GHSA-h3mw-4f23-gwpwn/a 0.0057 None reported
Routine CVE-2025-13357 govulncheck-vulndb: GO-2025-4152 GHSA-gmm6-j2g5-r52mn/a 0.0053 None reported
Routine CVE-2025-65026 govulncheck-vulndb: GO-2025-4139 GHSA-hcpf-qv9m-vfgpn/a 0.0051 None reported
Routine CVE-2025-64443 govulncheck-vulndb: GO-2025-4179 GHSA-46gc-mwh4-cc5rn/a 0.0046 None reported
Routine CVE-2025-64761 govulncheck-vulndb: GO-2025-4156 GHSA-7ff4-jw48-3436n/a 0.0039 None reported
Routine CVE-2025-60638 govulncheck-vulndb: GO-2025-4163 GHSA-f2hj-vpp9-6vm2n/a 0.0037 None reported
Routine CVE-2025-64751 grafana: Dropped experimental implementation of authorization Zanzana server/client (version 11.5.10)n/a 0.0031 None reported
Routine CVE-2025-61727 Improper application of excluded DNS name constraints when verifying wildcard names in crypto/x5096.5 0.0030 None reported
Showing 1 to 25 of 37 1Next

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.