Linux · openSUSE Leap · Security advisory · April 7, 2026

SUSE-SU-2026:1205-1: govulncheck-vulndb security update

SUSE-SU-2026:1205-1, released April 7, 2026, fixes 34 CVEs in govulncheck-vulndb (version 0.0.20260402T184258-150000.1.158.1). One of them is being exploited (CVE-2026-33634); 1 on CISA KEV. Patch Radar priority: Patch now.

Patch now1 on CISA KEV
CVEs closed
34
1 rated Critical
Exploited
1
CVE-2026-33634
Highest CVSS
9.8
Base score, 0 to 10
Highest EPSS
0.6043
99th percentile

Priority of the 34 CVEs

Patch now 1 Urgent 1 High 6 Routine 26

Fixed package versions

ProductReleaseFixed in
govulncheck-vulndbopensuse-leap 15.60.0.20260402T184258-150000.1.158.1

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
Patch now CVE-2026-33634 govulncheck-vulndb: GO-2026-4919 GHSA-69fq-xp46-6x23n/a 0.6043 KEVExploited
Urgent CVE-2026-33747 docker.io: BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner9.8 0.0051 None reported
High CVE-2026-34040 docker.io: Moby is an open source container framework7.8 0.0927 None reported
High CVE-2026-32241 Flannel vulnerable to cross-node remote code execution via extension backend BackendData injection7.5 0.0276 None reported
High CVE-2026-33186 gRPC-Go has an authorization bypass via missing leading slash in :path9.1 0.0162 None reported
High CVE-2026-32286 osbuild-composer: ELSA-2026-22714: osbuild-composer security update (IMPORTANT)9.1 0.0068 None reported
High CVE-2026-33748 docker.io: BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner7.5 0.0048 None reported
High CVE-2026-33997 docker.io: Moby is an open source container framework8.1 0.0040 None reported
Routine CVE-2026-33032 govulncheck-vulndb: GO-2026-4904 GHSA-h6c2-x2m2-mwhfn/a 0.3527 None reported
Routine CVE-2026-27018 govulncheck-vulndb: GO-2026-4905 GHSA-jjwv-57xh-xr6rn/a 0.0170 None reported
Routine CVE-2026-33029 govulncheck-vulndb: GO-2026-4902 GHSA-cp8r-8jvw-v3qgn/a 0.0099 None reported
Routine CVE-2026-34041 govulncheck-vulndb: GO-2026-4891 GHSA-xmgr-9pqc-h5vwn/a 0.0064 None reported
Routine CVE-2026-33028 govulncheck-vulndb: GO-2026-4906 GHSA-m468-xcm6-fxg4n/a 0.0055 None reported
Routine CVE-2026-33433 govulncheck-vulndb: GO-2026-4893 GHSA-qr99-7898-vr7cn/a 0.0049 None reported
Routine CVE-2026-32695 govulncheck-vulndb: GO-2026-4880 GHSA-67jx-r9pv-98rjn/a 0.0047 None reported
Routine CVE-2026-34042 govulncheck-vulndb: GO-2026-4890 GHSA-x34h-54cw-9825n/a 0.0047 None reported
Routine CVE-2026-26061 govulncheck-vulndb: GO-2026-4889 GHSA-99hj-44vg-hfcpn/a 0.0045 None reported
Routine CVE-2026-33027 govulncheck-vulndb: GO-2026-4907 GHSA-m8p8-53vf-8357n/a 0.0041 None reported
Routine CVE-2026-33906 govulncheck-vulndb: GO-2026-4873 GHSA-87j9-m7x6-hvw2n/a 0.0040 None reported
Routine CVE-2026-26060 govulncheck-vulndb: GO-2026-4888 GHSA-3458-r943-hmx4n/a 0.0035 None reported
Routine CVE-2026-33026 govulncheck-vulndb: GO-2026-4903 GHSA-fhh2-gg7w-gwpqn/a 0.0033 None reported
Routine CVE-2026-34386 govulncheck-vulndb: GO-2026-4913 GHSA-9p23-p2m4-2r4mn/a 0.0033 None reported
Routine CVE-2026-29180 govulncheck-vulndb: GO-2026-4892 GHSA-m2h6-4xpq-qw3mn/a 0.0033 None reported
Routine CVE-2026-33487 govulncheck-vulndb: GO-2026-4753 GHSA-479m-364c-43vcn/a 0.0032 None reported
Routine CVE-2026-26233 govulncheck-vulndb: GO-2026-4916 GHSA-247x-7qw8-fp98n/a 0.0031 None reported
Showing 1 to 25 of 34 1Next

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.