# SUSE-SU-2026:0403-1: govulncheck-vulndb security update SUSE-SU-2026:0403-1, released February 6, 2026, fixes 73 CVEs in govulncheck-vulndb (version 0.0.20260205T172317-150000.1.146.1). None of them is reported as exploited. Patch Radar priority: Urgent. - Web page: https://patchblox.com/security/fix/linux/suse-su-2026-0403-1 - Platform: Linux - Released: Feb 6, 2026 - Priority: Urgent (Closes CVE-2025-62878, rated Critical) - CVEs: 73, exploited: 0, on CISA KEV: 0 - Vendor advisory: https://osv.dev/vulnerability/SUSE-SU-2026:0403-1 ## Applies to | Product | Release | Fixed in | |---|---|---| | [govulncheck-vulndb](https://patchblox.com/security/data/product/linux/govulncheck-vulndb.md) | opensuse-leap 15.6 | 0.0.20260205T172317-150000.1.146.1 | ## CVEs this fix closes | CVE | Priority | Title | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2025-62878](https://patchblox.com/security/data/cve/CVE-2025-62878.md) | Urgent | Local Path Provisioner vulnerable to Path Traversal via parameters.pathPattern | 9.9 | 0.0064 | | | [CVE-2025-68121](https://patchblox.com/security/data/cve/CVE-2025-68121.md) | High | Unexpected session resumption in crypto/tls | 10.0 | 0.0090 | | | [CVE-2026-23954](https://patchblox.com/security/data/cve/CVE-2026-23954.md) | High | govulncheck-vulndb: GO-2026-4357 GHSA-7f67-crqm-jgh7 | 8.7 | 0.0078 | | | [CVE-2025-61732](https://patchblox.com/security/data/cve/CVE-2025-61732.md) | High | Potential code smuggling via doc comments in cmd/cgo | 8.6 | 0.0053 | | | [CVE-2026-23953](https://patchblox.com/security/data/cve/CVE-2026-23953.md) | High | govulncheck-vulndb: GO-2026-4359 GHSA-x6jc-phwx-hp32 | 8.7 | 0.0049 | | | [CVE-2026-23829](https://patchblox.com/security/data/cve/CVE-2026-23829.md) | Routine | govulncheck-vulndb: GO-2026-4333 GHSA-54wq-72mp-cq7c | n/a | 0.0140 | | | [CVE-2025-69820](https://patchblox.com/security/data/cve/CVE-2025-69820.md) | Routine | govulncheck-vulndb: GO-2026-4390 GHSA-73jg-4qh6-3f4g | n/a | 0.0102 | | | [CVE-2026-25161](https://patchblox.com/security/data/cve/CVE-2026-25161.md) | Routine | govulncheck-vulndb: GO-2026-4415 GHSA-x4q4-7phh-42j9 | n/a | 0.0081 | | | [CVE-2026-24124](https://patchblox.com/security/data/cve/CVE-2026-24124.md) | Routine | govulncheck-vulndb: GO-2026-4356 GHSA-j8hf-cp34-g4j7 | n/a | 0.0078 | | | [CVE-2023-43632](https://patchblox.com/security/data/cve/CVE-2023-43632.md) | Routine | govulncheck-vulndb: GO-2026-4422 GHSA-6jp5-grgh-jw42 | n/a | 0.0066 | | | [CVE-2026-25059](https://patchblox.com/security/data/cve/CVE-2026-25059.md) | Routine | govulncheck-vulndb: GO-2026-4396 GHSA-qmj2-8r24-xxcq | n/a | 0.0065 | | | [CVE-2026-24735](https://patchblox.com/security/data/cve/CVE-2026-24735.md) | Routine | govulncheck-vulndb: GO-2026-4421 GHSA-5w5r-8xc6-2xhw | n/a | 0.0065 | | | [CVE-2026-23850](https://patchblox.com/security/data/cve/CVE-2026-23850.md) | Routine | govulncheck-vulndb: GO-2026-4347 GHSA-cv54-7wv7-qxcw | n/a | 0.0062 | | | [CVE-2026-23881](https://patchblox.com/security/data/cve/CVE-2026-23881.md) | Routine | govulncheck-vulndb: GO-2026-4382 GHSA-r2rj-wwm5-x6mq | n/a | 0.0062 | | | [CVE-2026-22039](https://patchblox.com/security/data/cve/CVE-2026-22039.md) | Routine | govulncheck-vulndb: GO-2026-4381 GHSA-8p9x-46gm-qfx2 | n/a | 0.0058 | | | [CVE-2026-24058](https://patchblox.com/security/data/cve/CVE-2026-24058.md) | Routine | govulncheck-vulndb: GO-2026-4353 GHSA-pchf-49fh-w34r | n/a | 0.0058 | | | [CVE-2025-47911](https://patchblox.com/security/data/cve/CVE-2025-47911.md) | Routine | alloy: golang.org/x/net/html: quadratic complexity algorithms used when parsing untrusted HTML documents | 5.3 | 0.0056 | | | [CVE-2026-21696](https://patchblox.com/security/data/cve/CVE-2026-21696.md) | Routine | govulncheck-vulndb: GO-2026-4329 GHSA-2497-gp99-2m74 | n/a | 0.0055 | | | [CVE-2026-24512](https://patchblox.com/security/data/cve/CVE-2026-24512.md) | Routine | govulncheck-vulndb: GO-2026-4426 GHSA-jx8c-56mg-h6vp | n/a | 0.0055 | | | [CVE-2025-58190](https://patchblox.com/security/data/cve/CVE-2025-58190.md) | Routine | alloy: golang.org/x/net/html: excessive memory consumption by `html.ParseFragment` when processing specially | 5.3 | 0.0054 | | | [CVE-2026-1580](https://patchblox.com/security/data/cve/CVE-2026-1580.md) | Routine | govulncheck-vulndb: GO-2026-4423 GHSA-9h3p-52vh-959w | n/a | 0.0053 | | | [CVE-2026-23851](https://patchblox.com/security/data/cve/CVE-2026-23851.md) | Routine | govulncheck-vulndb: GO-2026-4346 GHSA-94c7-g2fj-7682 | n/a | 0.0052 | | | [CVE-2026-24514](https://patchblox.com/security/data/cve/CVE-2026-24514.md) | Routine | govulncheck-vulndb: GO-2026-4417 GHSA-2pf9-vr92-6h3v | n/a | 0.0052 | | | [CVE-2026-23742](https://patchblox.com/security/data/cve/CVE-2026-23742.md) | Routine | govulncheck-vulndb: GO-2026-4327 GHSA-cc8m-98fm-rc9g | n/a | 0.0051 | | | [CVE-2026-25579](https://patchblox.com/security/data/cve/CVE-2026-25579.md) | Routine | govulncheck-vulndb: GO-2026-4411 GHSA-hrr4-3wgr-68x3 | n/a | 0.0051 | | | [CVE-2026-25499](https://patchblox.com/security/data/cve/CVE-2026-25499.md) | Routine | govulncheck-vulndb: GO-2026-4395 GHSA-gwch-7m8v-7544 | n/a | 0.0048 | | | [CVE-2026-23849](https://patchblox.com/security/data/cve/CVE-2026-23849.md) | Routine | govulncheck-vulndb: GO-2026-4344 GHSA-43mm-m3h2-3prc | n/a | 0.0048 | | | [CVE-2026-20897](https://patchblox.com/security/data/cve/CVE-2026-20897.md) | Routine | govulncheck-vulndb: GO-2026-4363 GHSA-393c-qgvj-3xph | n/a | 0.0046 | | | [CVE-2026-20912](https://patchblox.com/security/data/cve/CVE-2026-20912.md) | Routine | govulncheck-vulndb: GO-2026-4364 GHSA-4xx9-vc8v-87hv | n/a | 0.0046 | | | [CVE-2026-23990](https://patchblox.com/security/data/cve/CVE-2026-23990.md) | Routine | govulncheck-vulndb: GO-2026-4351 GHSA-4xh5-jcj2-ch8q | n/a | 0.0044 | | | [CVE-2026-25538](https://patchblox.com/security/data/cve/CVE-2026-25538.md) | Routine | govulncheck-vulndb: GO-2026-4416 GHSA-8wpc-j9q9-j5m2 | n/a | 0.0044 | | | [CVE-2026-20736](https://patchblox.com/security/data/cve/CVE-2026-20736.md) | Routine | govulncheck-vulndb: GO-2026-4367 GHSA-hgr3-x44x-33hx | n/a | 0.0043 | | | [CVE-2026-23845](https://patchblox.com/security/data/cve/CVE-2026-23845.md) | Routine | govulncheck-vulndb: GO-2026-4345 GHSA-6jxm-fv7w-rw5j | n/a | 0.0043 | | | [CVE-2026-20750](https://patchblox.com/security/data/cve/CVE-2026-20750.md) | Routine | govulncheck-vulndb: GO-2026-4370 GHSA-rw22-5hhq-pfpf | n/a | 0.0043 | | | [CVE-2026-23831](https://patchblox.com/security/data/cve/CVE-2026-23831.md) | Routine | govulncheck-vulndb: GO-2026-4354 GHSA-273p-m2cw-6833 | 5.3 | 0.0043 | | | [CVE-2026-24740](https://patchblox.com/security/data/cve/CVE-2026-24740.md) | Routine | govulncheck-vulndb: GO-2026-4380 GHSA-m855-r557-5rc5 | n/a | 0.0042 | | | [CVE-2026-23960](https://patchblox.com/security/data/cve/CVE-2026-23960.md) | Routine | govulncheck-vulndb: GO-2026-4350 GHSA-cv78-6m8q-ph82 | n/a | 0.0041 | | | [CVE-2026-25121](https://patchblox.com/security/data/cve/CVE-2026-25121.md) | Routine | govulncheck-vulndb: GO-2026-4405 GHSA-5g94-c2wx-8pxw | n/a | 0.0041 | | | [CVE-2026-20800](https://patchblox.com/security/data/cve/CVE-2026-20800.md) | Routine | govulncheck-vulndb: GO-2026-4362 GHSA-2vgv-hgv4-22mh | n/a | 0.0041 | | | [CVE-2026-24748](https://patchblox.com/security/data/cve/CVE-2026-24748.md) | Routine | govulncheck-vulndb: GO-2026-4385 GHSA-w5wv-wvrp-v5m5 | n/a | 0.0039 | | | [CVE-2026-24117](https://patchblox.com/security/data/cve/CVE-2026-24117.md) | Routine | govulncheck-vulndb: GO-2026-4355 GHSA-4c4x-jm2x-pf9j | 5.3 | 0.0036 | | | [CVE-2026-20883](https://patchblox.com/security/data/cve/CVE-2026-20883.md) | Routine | govulncheck-vulndb: GO-2026-4368 GHSA-j8xr-c56q-m8jj | n/a | 0.0036 | | | [CVE-2026-24513](https://patchblox.com/security/data/cve/CVE-2026-24513.md) | Routine | govulncheck-vulndb: GO-2026-4419 GHSA-4g2f-xcph-2335 | n/a | 0.0035 | | | [CVE-2026-25578](https://patchblox.com/security/data/cve/CVE-2026-25578.md) | Routine | govulncheck-vulndb: GO-2026-4413 GHSA-rh3r-8pxm-hg4w | n/a | 0.0034 | | | [CVE-2026-20888](https://patchblox.com/security/data/cve/CVE-2026-20888.md) | Routine | govulncheck-vulndb: GO-2026-4366 GHSA-9cgq-wp42-4rpq | n/a | 0.0033 | | | [CVE-2026-23847](https://patchblox.com/security/data/cve/CVE-2026-23847.md) | Routine | govulncheck-vulndb: GO-2026-4343 GHSA-w836-5gpm-7r93 | n/a | 0.0031 | | | [CVE-2026-24470](https://patchblox.com/security/data/cve/CVE-2026-24470.md) | Routine | govulncheck-vulndb: GO-2026-4378 GHSA-mxxc-p822-2hx9 | n/a | 0.0031 | | | [CVE-2026-20904](https://patchblox.com/security/data/cve/CVE-2026-20904.md) | Routine | govulncheck-vulndb: GO-2026-4369 GHSA-qqgv-v353-cv8p | n/a | 0.0030 | | | [CVE-2025-69199](https://patchblox.com/security/data/cve/CVE-2025-69199.md) | Routine | govulncheck-vulndb: GO-2026-4331 GHSA-8w7m-w749-rx98 | n/a | 0.0030 | | | [CVE-2026-23517](https://patchblox.com/security/data/cve/CVE-2026-23517.md) | Routine | govulncheck-vulndb: GO-2026-4334 GHSA-4r5r-ccr6-q6f6 | n/a | 0.0029 | | | [CVE-2025-14525](https://patchblox.com/security/data/cve/CVE-2025-14525.md) | Routine | kubevirt: A VM reporting many guest-internal | n/a | 0.0029 | | | [CVE-2025-70849](https://patchblox.com/security/data/cve/CVE-2025-70849.md) | Routine | govulncheck-vulndb: GO-2026-4404 GHSA-mw8w-q3f7-2v85 | n/a | 0.0028 | | | [CVE-2026-24738](https://patchblox.com/security/data/cve/CVE-2026-24738.md) | Routine | govulncheck-vulndb: GO-2026-4379 GHSA-j49h-6577-5xwq | n/a | 0.0028 | | | [CVE-2026-23645](https://patchblox.com/security/data/cve/CVE-2026-23645.md) | Routine | govulncheck-vulndb: GO-2026-4324 GHSA-pcjq-j3mq-jv5j | n/a | 0.0028 | | | [CVE-2026-0798](https://patchblox.com/security/data/cve/CVE-2026-0798.md) | Routine | govulncheck-vulndb: GO-2026-4365 GHSA-8fwc-qjw5-rvgp | n/a | 0.0027 | | | [CVE-2026-23518](https://patchblox.com/security/data/cve/CVE-2026-23518.md) | Routine | govulncheck-vulndb: GO-2026-4335 GHSA-63m5-974w-448v | n/a | 0.0025 | | | [CVE-2026-25060](https://patchblox.com/security/data/cve/CVE-2026-25060.md) | Routine | govulncheck-vulndb: GO-2026-4397 GHSA-wf93-3ghh-h389 | n/a | 0.0025 | | | [CVE-2026-25160](https://patchblox.com/security/data/cve/CVE-2026-25160.md) | Routine | govulncheck-vulndb: GO-2026-4414 GHSA-8jmm-3xwx-w974 | n/a | 0.0025 | | | [CVE-2026-22808](https://patchblox.com/security/data/cve/CVE-2026-22808.md) | Routine | govulncheck-vulndb: GO-2026-4336 GHSA-gfpw-jgvr-cw4j | n/a | 0.0025 | | | [CVE-2025-22873](https://patchblox.com/security/data/cve/CVE-2025-22873.md) | Routine | go1.24: os: Root permits access to parent directory | 3.8 | 0.0023 | | | [CVE-2026-25143](https://patchblox.com/security/data/cve/CVE-2026-25143.md) | Routine | govulncheck-vulndb: GO-2026-4412 GHSA-rf4g-89h5-crcr | n/a | 0.0020 | | | [CVE-2026-24844](https://patchblox.com/security/data/cve/CVE-2026-24844.md) | Routine | govulncheck-vulndb: GO-2026-4408 GHSA-vqqr-rmpc-hhg2 | n/a | 0.0020 | | | [CVE-2026-22822](https://patchblox.com/security/data/cve/CVE-2026-22822.md) | Routine | govulncheck-vulndb: GO-2026-4330 GHSA-77v3-r3jw-j2v2 | n/a | 0.0019 | | | [CVE-2026-25145](https://patchblox.com/security/data/cve/CVE-2026-25145.md) | Routine | govulncheck-vulndb: GO-2026-4409 GHSA-2w4f-9fgg-q2v9 | n/a | 0.0019 | | | [CVE-2026-24846](https://patchblox.com/security/data/cve/CVE-2026-24846.md) | Routine | govulncheck-vulndb: GO-2026-4391 GHSA-923j-vrcg-hxwh | n/a | 0.0019 | | | [CVE-2026-24843](https://patchblox.com/security/data/cve/CVE-2026-24843.md) | Routine | govulncheck-vulndb: GO-2026-4407 GHSA-qxx2-7h4c-83f4 | n/a | 0.0019 | | | [CVE-2023-43634](https://patchblox.com/security/data/cve/CVE-2023-43634.md) | Routine | govulncheck-vulndb: GO-2026-4432 GHSA-wc42-fcjp-v8vq | n/a | 0.0017 | | | [CVE-2023-43631](https://patchblox.com/security/data/cve/CVE-2023-43631.md) | Routine | govulncheck-vulndb: GO-2026-4418 GHSA-3mq9-xhgq-r7gj | n/a | 0.0017 | | | [CVE-2023-43633](https://patchblox.com/security/data/cve/CVE-2023-43633.md) | Routine | govulncheck-vulndb: GO-2026-4428 GHSA-4c4v-42hc-72p6 | n/a | 0.0017 | | | [CVE-2025-67601](https://patchblox.com/security/data/cve/CVE-2025-67601.md) | Routine | govulncheck-vulndb: GO-2026-4393 GHSA-mc24-7m59-4q5p | n/a | 0.0017 | | | [CVE-2026-1237](https://patchblox.com/security/data/cve/CVE-2026-1237.md) | Routine | govulncheck-vulndb: GO-2026-4388 GHSA-j477-6vpg-6c8x | n/a | 0.0014 | | | [CVE-2026-25122](https://patchblox.com/security/data/cve/CVE-2026-25122.md) | Routine | govulncheck-vulndb: GO-2026-4406 GHSA-6p9p-q6wh-9j89 | n/a | 0.0013 | | | [CVE-2023-43630](https://patchblox.com/security/data/cve/CVE-2023-43630.md) | Routine | govulncheck-vulndb: GO-2026-4430 GHSA-phcg-h58r-gmcq | n/a | 0.0011 | | --- Data as of 2026-11-11T19:49:26Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.