Linux · SUSE Linux Enterprise · Security advisory · September 8, 2026

SUSE-SU-2026:23712-1: govulncheck-vulndb security update

SUSE-SU-2026:23712-1, released September 8, 2026, fixes 39 CVEs in govulncheck-vulndb (version 0.0.20260902T191204-160000.1.1). None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
39
None rated Critical
Exploited
0
None reported
Highest CVSS
7.7
Base score, 0 to 10
Highest EPSS
0.0075
55th percentile

Priority of the 39 CVEs

Patch now 0 Urgent 0 High 5 Routine 34

Fixed package versions

ProductReleaseFixed in
govulncheck-vulndbsles 16.00.0.20260902T191204-160000.1.1

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
High CVE-2026-56855 Prevent DoS on deadlocked established channel in golang.org/x/crypto/ssh7.5 0.0050 None reported
High CVE-2026-55622 incus: Incus is a system container and virtual machine manager7.7 0.0045 None reported
High CVE-2026-56854 amazon-ssm-agent: golang.org/x/crypto/ssh: source-address restriction bypassed in 5 callback families (bsc#1278681)7.5 0.0044 None reported
High CVE-2026-78662 Prevent DoS on deadlocked undecided channel in golang.org/x/crypto/ssh7.5 0.0043 None reported
High CVE-2026-55621 govulncheck-vulndb: GO-2026-6318 GHSA-64f3-v33m-w89f7.7 0.0042 None reported
Routine CVE-2026-55108 govulncheck-vulndb: GO-2026-6312 GHSA-fmgp-q6jx-gg3xn/a 0.0075 None reported
Routine CVE-2026-55678 govulncheck-vulndb: GO-2026-6322 GHSA-p378-jp5r-gpgwn/a 0.0067 None reported
Routine CVE-2026-26307 govulncheck-vulndb: GO-2026-6341 GHSA-h9c5-x7g8-4q7fn/a 0.0063 None reported
Routine CVE-2026-55245 govulncheck-vulndb: GO-2026-6320 GHSA-w98g-5w9p-p3rcn/a 0.0061 None reported
Routine CVE-2026-55874 govulncheck-vulndb: GO-2026-6327 GHSA-56wq-x3wv-3ff4n/a 0.0061 None reported
Routine CVE-2026-55068 govulncheck-vulndb: GO-2026-6316 GHSA-x8mj-6p3q-g5ppn/a 0.0059 None reported
Routine CVE-2026-25718 govulncheck-vulndb: GO-2026-6340 GHSA-h697-89cp-24q8n/a 0.0056 None reported
Routine CVE-2026-54755 govulncheck-vulndb: GO-2026-6310 GHSA-cgc5-v3f2-8m2vn/a 0.0056 None reported
Routine CVE-2026-55588 oras: ORAS (OCI Registry As Storage) is a CLI and library for managing artifacts in OCI registries6.5 0.0054 None reported
Routine CVE-2026-55764 govulncheck-vulndb: GO-2026-6330 GHSA-mrpp-v6pg-p54xn/a 0.0054 None reported
Routine CVE-2026-22547 govulncheck-vulndb: GO-2026-6338 GHSA-922f-hfwp-p56fn/a 0.0052 None reported
Routine CVE-2026-55763 govulncheck-vulndb: GO-2026-6323 GHSA-v358-wf77-39xvn/a 0.0051 None reported
Routine CVE-2026-55065 govulncheck-vulndb: GO-2026-6313 GHSA-gg93-x632-9ccvn/a 0.0050 None reported
Routine CVE-2026-26232 govulncheck-vulndb: GO-2026-6336 GHSA-5v69-g2m3-3hq3n/a 0.0050 None reported
Routine CVE-2026-26247 govulncheck-vulndb: GO-2026-6342 GHSA-m5ch-ppfx-xv3vn/a 0.0050 None reported
Routine CVE-2026-55761 govulncheck-vulndb: GO-2026-6324 GHSA-x626-fcwx-f5pcn/a 0.0049 None reported
Routine CVE-2026-55484 govulncheck-vulndb: GO-2026-6321 GHSA-hr6j-w4mw-g9mjn/a 0.0049 None reported
Routine CVE-2026-25712 govulncheck-vulndb: GO-2026-6333 GHSA-37w2-86g3-h4qhn/a 0.0048 None reported
Routine CVE-2026-24690 govulncheck-vulndb: GO-2026-6334 GHSA-47rq-xp99-92mxn/a 0.0045 None reported
Routine CVE-2026-27657 govulncheck-vulndb: GO-2026-6335 GHSA-4c8f-3m6h-m56rn/a 0.0045 None reported
Showing 1 to 25 of 39 1Next

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.