Linux · openSUSE Leap · Security advisory · January 6, 2026

SUSE-SU-2026:0037-1: govulncheck-vulndb security update

SUSE-SU-2026:0037-1, released January 6, 2026, fixes 74 CVEs in govulncheck-vulndb (version 0.0.20251230T014957-150000.1.134.1). One of them is being exploited (CVE-2025-8110); 1 on CISA KEV. Patch Radar priority: Patch now.

Patch now1 on CISA KEV
CVEs closed
74
None rated Critical
Exploited
1
CVE-2025-8110
Highest CVSS
7.5
Base score, 0 to 10
Highest EPSS
0.8025
99th percentile

Priority of the 74 CVEs

Patch now 1 Urgent 0 High 2 Routine 71

Fixed package versions

ProductReleaseFixed in
govulncheck-vulndbopensuse-leap 15.60.0.20251230T014957-150000.1.134.1

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
Patch now CVE-2025-8110 govulncheck-vulndb: GO-2025-4225 GHSA-mq8m-42gh-wq7rn/a 0.8025 KEVExploited
High CVE-2025-47913 Potential denial of service in golang.org/x/crypto/ssh/agent7.5 0.0067 None reported
High CVE-2025-68156 Expr has Denial of Service via Unbounded Recursion in Builtin Functions7.5 0.0042 None reported
Routine CVE-2017-18874 govulncheck-vulndb: GO-2025-4148 GHSA-8qg8-c7mw-6fj7n/a 0.0124 None reported
Routine CVE-2017-18885 govulncheck-vulndb: GO-2025-4200 GHSA-g78f-6xq7-rrhqn/a 0.0118 None reported
Routine CVE-2017-18888 govulncheck-vulndb: GO-2025-4203 GHSA-v2vm-hq26-5jv6n/a 0.0111 None reported
Routine CVE-2025-64702 govulncheck-vulndb: GO-2025-4233 GHSA-g754-hx8w-x2g65.3 0.0098 None reported
Routine CVE-2017-18886 govulncheck-vulndb: GO-2025-4204 GHSA-wvjg-33p9-938hn/a 0.0096 None reported
Routine CVE-2017-18887 govulncheck-vulndb: GO-2025-4199 GHSA-35c4-5qfp-wxj6n/a 0.0093 None reported
Routine CVE-2025-67818 govulncheck-vulndb: GO-2025-4237 GHSA-7v39-2hx7-7c43n/a 0.0091 None reported
Routine CVE-2017-18878 govulncheck-vulndb: GO-2025-4191 GHSA-h564-6gc2-fcc6n/a 0.0078 None reported
Routine CVE-2017-18890 govulncheck-vulndb: GO-2025-4202 GHSA-m497-hq5x-6jcvn/a 0.0078 None reported
Routine CVE-2025-66626 govulncheck-vulndb: GO-2025-4223 GHSA-xrqc-7xgx-c9vhn/a 0.0073 None reported
Routine CVE-2025-13888 govulncheck-vulndb: GO-2025-4242 GHSA-pcqx-8qww-7f4vn/a 0.0069 None reported
Routine CVE-2017-18889 govulncheck-vulndb: GO-2025-4201 GHSA-jp57-4x34-5v94n/a 0.0067 None reported
Routine CVE-2025-68476 govulncheck-vulndb: GO-2025-4257 GHSA-c4p6-qg4m-9jmrn/a 0.0063 None reported
Routine CVE-2025-68274 govulncheck-vulndb: GO-2025-4244 GHSA-c623-f998-8hhvn/a 0.0055 None reported
Routine CVE-2025-66565 govulncheck-vulndb: GO-2025-4208 GHSA-m98w-cqp3-qcqrn/a 0.0050 None reported
Routine CVE-2025-67819 govulncheck-vulndb: GO-2025-4238 GHSA-hmmh-292h-3364n/a 0.0050 None reported
Routine CVE-2025-66507 govulncheck-vulndb: GO-2025-4209 GHSA-qmg5-v42x-qqhqn/a 0.0050 None reported
Routine CVE-2025-67494 govulncheck-vulndb: GO-2025-4210 GHSA-7wfc-4796-gmg5n/a 0.0048 None reported
Routine CVE-2024-41260 govulncheck-vulndb: GO-2024-3057 GHSA-9v35-4xcr-w9phn/a 0.0047 None reported
Routine CVE-2025-65754 govulncheck-vulndb: GO-2025-4228 GHSA-8jqm-8qm3-qgqmn/a 0.0047 None reported
Routine CVE-2025-66490 govulncheck-vulndb: GO-2025-4206 GHSA-gm3x-23wp-hc2cn/a 0.0047 None reported
Routine CVE-2025-67488 govulncheck-vulndb: GO-2025-4221 GHSA-gqfv-g4v7-m366n/a 0.0047 None reported
Showing 1 to 25 of 74 1Next

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.