# SUSE-SU-2026:0142-1: govulncheck-vulndb security update SUSE-SU-2026:0142-1, released January 17, 2026, fixes 31 CVEs in govulncheck-vulndb (version 0.0.20260114T191543-150000.1.137.1). None of them is reported as exploited. Patch Radar priority: High. - Web page: https://patchblox.com/security/fix/linux/suse-su-2026-0142-1 - Platform: Linux - Released: Jan 17, 2026 - Priority: High (Closes CVE-2025-68151, high severity) - CVEs: 31, exploited: 0, on CISA KEV: 0 - Vendor advisory: https://osv.dev/vulnerability/SUSE-SU-2026:0142-1 ## Applies to | Product | Release | Fixed in | |---|---|---| | [govulncheck-vulndb](https://patchblox.com/security/data/product/linux/govulncheck-vulndb.md) | opensuse-leap 15.6 | 0.0.20260114T191543-150000.1.137.1 | ## CVEs this fix closes | CVE | Priority | Title | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2025-68151](https://patchblox.com/security/data/cve/CVE-2025-68151.md) | High | CoreDNS gRPC/HTTPS/HTTP3 servers lack resource limits, enabling DoS via unbounded connections and oversized messages | 7.5 | 0.0049 | | | [CVE-2026-22688](https://patchblox.com/security/data/cve/CVE-2026-22688.md) | Routine | govulncheck-vulndb: GO-2026-4292 GHSA-78h3-63c4-5fqc | n/a | 0.0194 | | | [CVE-2026-0650](https://patchblox.com/security/data/cve/CVE-2026-0650.md) | Routine | govulncheck-vulndb: GO-2026-4286 GHSA-rwp9-5g7q-73q3 | n/a | 0.0152 | | | [CVE-2017-18900](https://patchblox.com/security/data/cve/CVE-2017-18900.md) | Routine | govulncheck-vulndb: GO-2026-4303 GHSA-8q4v-35v6-g8wr | n/a | 0.0130 | | | [CVE-2017-18898](https://patchblox.com/security/data/cve/CVE-2017-18898.md) | Routine | govulncheck-vulndb: GO-2026-4300 GHSA-9589-mq83-f749 | n/a | 0.0111 | | | [CVE-2017-18895](https://patchblox.com/security/data/cve/CVE-2017-18895.md) | Routine | govulncheck-vulndb: GO-2026-4295 GHSA-h742-xx59-r9pq | n/a | 0.0093 | | | [CVE-2017-18901](https://patchblox.com/security/data/cve/CVE-2017-18901.md) | Routine | govulncheck-vulndb: GO-2026-4304 GHSA-c253-8hr4-r8v9 | n/a | 0.0093 | | | [CVE-2017-18894](https://patchblox.com/security/data/cve/CVE-2017-18894.md) | Routine | govulncheck-vulndb: GO-2026-4297 GHSA-gg42-mwr6-p82c | n/a | 0.0083 | | | [CVE-2026-21859](https://patchblox.com/security/data/cve/CVE-2026-21859.md) | Routine | govulncheck-vulndb: GO-2026-4284 GHSA-8v65-47jx-7mfr | n/a | 0.0081 | | | [CVE-2017-18896](https://patchblox.com/security/data/cve/CVE-2017-18896.md) | Routine | govulncheck-vulndb: GO-2026-4299 GHSA-63wg-qmrv-7q66 | n/a | 0.0078 | | | [CVE-2017-18905](https://patchblox.com/security/data/cve/CVE-2017-18905.md) | Routine | govulncheck-vulndb: GO-2026-4306 GHSA-g24c-fx4v-xg9w | n/a | 0.0078 | | | [CVE-2025-63389](https://patchblox.com/security/data/cve/CVE-2025-63389.md) | Routine | govulncheck-vulndb: GO-2025-4251 GHSA-f6mr-38g8-39rg | n/a | 0.0071 | | | [CVE-2017-18891](https://patchblox.com/security/data/cve/CVE-2017-18891.md) | Routine | govulncheck-vulndb: GO-2026-4298 GHSA-vrh2-rprg-rgc6 | n/a | 0.0069 | | | [CVE-2017-18897](https://patchblox.com/security/data/cve/CVE-2017-18897.md) | Routine | govulncheck-vulndb: GO-2026-4301 GHSA-f7c3-7vp3-44p6 | n/a | 0.0069 | | | [CVE-2017-18893](https://patchblox.com/security/data/cve/CVE-2017-18893.md) | Routine | govulncheck-vulndb: GO-2026-4296 GHSA-887v-xh2x-47cm | n/a | 0.0069 | | | [CVE-2017-18904](https://patchblox.com/security/data/cve/CVE-2017-18904.md) | Routine | govulncheck-vulndb: GO-2026-4302 GHSA-8pff-p3gx-w4jf | n/a | 0.0069 | | | [CVE-2025-15107](https://patchblox.com/security/data/cve/CVE-2025-15107.md) | Routine | govulncheck-vulndb: GO-2025-4269 GHSA-43h9-hc38-qph5 | n/a | 0.0062 | | | [CVE-2025-62877](https://patchblox.com/security/data/cve/CVE-2025-62877.md) | Routine | govulncheck-vulndb: GO-2026-4281 GHSA-6g8q-hp2j-gvwv | n/a | 0.0051 | | | [CVE-2025-14986](https://patchblox.com/security/data/cve/CVE-2025-14986.md) | Routine | govulncheck-vulndb: GO-2025-4272 GHSA-p2gr-hm8g-q772 | n/a | 0.0043 | | | [CVE-2025-60538](https://patchblox.com/security/data/cve/CVE-2025-60538.md) | Routine | govulncheck-vulndb: GO-2026-4308 GHSA-mw8h-g64c-rxv4 | n/a | 0.0041 | | | [CVE-2025-14987](https://patchblox.com/security/data/cve/CVE-2025-14987.md) | Routine | govulncheck-vulndb: GO-2026-4273 GHSA-hmhp-gh8m-c8xp | n/a | 0.0040 | | | [CVE-2024-6717](https://patchblox.com/security/data/cve/CVE-2024-6717.md) | Routine | govulncheck-vulndb: GO-2026-4278 GHSA-5mqx-rpxv-mvxj | n/a | 0.0039 | | | [CVE-2025-69413](https://patchblox.com/security/data/cve/CVE-2025-69413.md) | Routine | govulncheck-vulndb: GO-2026-4274 GHSA-pc73-rj2c-wvf9 | n/a | 0.0039 | | | [CVE-2026-22687](https://patchblox.com/security/data/cve/CVE-2026-22687.md) | Routine | govulncheck-vulndb: GO-2026-4293 GHSA-pcwc-3fw3-8cqv | n/a | 0.0038 | | | [CVE-2026-22253](https://patchblox.com/security/data/cve/CVE-2026-22253.md) | Routine | govulncheck-vulndb: GO-2026-4290 GHSA-6jm8-x3g6-r33j | n/a | 0.0030 | | | [CVE-2026-21885](https://patchblox.com/security/data/cve/CVE-2026-21885.md) | Routine | govulncheck-vulndb: GO-2026-4287 GHSA-xwh2-742g-w3wp | 6.5 | 0.0030 | | | [CVE-2025-14273](https://patchblox.com/security/data/cve/CVE-2025-14273.md) | Routine | govulncheck-vulndb: GO-2026-4275 GHSA-qvmc-92vg-6r35 | n/a | 0.0026 | | | [CVE-2025-68954](https://patchblox.com/security/data/cve/CVE-2025-68954.md) | Routine | govulncheck-vulndb: GO-2026-4283 GHSA-8c39-xppg-479c | n/a | 0.0024 | | | [CVE-2026-21483](https://patchblox.com/security/data/cve/CVE-2026-21483.md) | Routine | govulncheck-vulndb: GO-2026-4277 GHSA-jmr4-p576-v565 | n/a | 0.0023 | | | [CVE-2025-62690](https://patchblox.com/security/data/cve/CVE-2025-62690.md) | Routine | govulncheck-vulndb: GO-2025-4248 GHSA-q66g-q98c-q454 | n/a | 0.0015 | | | [CVE-2026-22703](https://patchblox.com/security/data/cve/CVE-2026-22703.md) | Routine | cosign: Verification accepts any valid Rekor entry under certain conditions (bsc#1256496). | 5.5 | 0.0011 | | --- Data as of 2026-11-11T19:49:26Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.