openSUSE-SU-2025:20117-1

Security update for trivy

view advisory published 2025-11-27

Security update for trivy

describes (16)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2025-11065US	—	0.40% (33rd)	—	2026-01-26
A flaw was found in github.com/go-viper/mapstructure/v2, in the field processing component using mapstructure.WeakDecode. This vulnerability allows information disclosure through d…
CVE-2025-58058US	—	0.43% (37th)	—	2025-08-28
xz is a pure golang package for reading and writing xz-compressed files. Prior to version 0.5.14, it is possible to put data in front of an LZMA-encoded byte stream without detecti…
CVE-2025-53547US	high8.6	0.46% (39th)	Exploit	2025-07-08
Helm is a package manager for Charts for Kubernetes. Prior to 3.18.4, a specially crafted Chart.yaml file along with a specially linked Chart.lock file can lead to local code execu…
CVE-2025-47291US	high7.5	0.29% (20th)	—	2025-05-21
containerd is an open-source container runtime. A bug was found in the containerd's CRI implementation where containerd, starting in version 2.0.1 and prior to version 2.0.5, doesn…
CVE-2025-46569US	—OT elevated	0.53% (44th)	—	2025-05-01
Open Policy Agent (OPA) is an open source, general-purpose policy engine. Prior to version 1.4.0, when run as a server, OPA exposes an HTTP Data API for reading and writing documen…
CVE-2025-22872US	—	0.55% (45th)	—	2025-04-16
The tokenizer incorrectly interprets tags with unquoted attribute values that end with a solidus character (/) as self-closing. When directly using Tokenizer, this can result in su…
CVE-2025-30204US	—	0.75% (54th)	—	2025-03-21
golang-jwt is a Go implementation of JSON Web Tokens. Starting in version 3.2.0 and prior to versions 5.2.2 and 4.5.2, the function parse.ParseUnverified splits (via a call to stri…
CVE-2025-22869US	—	0.94% (61st)	—	2025-02-26
SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or not at all, causing pending…
CVE-2025-22868US	—	0.87% (58th)	—	2025-02-26
An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing.
CVE-2025-27144US	—	0.40% (33rd)	—	2025-02-24
Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS)…
CVE-2025-21614US	—	0.72% (53rd)	—	2025-01-06
go-git is a highly extensible git implementation library written in pure Go. A denial of service (DoS) vulnerability was discovered in go-git versions prior to v5.13. This vulnerab…
CVE-2025-21613US	—	1.28% (70th)	—	2025-01-06
go-git is a highly extensible git implementation library written in pure Go. An argument injection vulnerability was discovered in go-git versions prior to v5.13. Successful exploi…
CVE-2024-45338US	—	0.87% (58th)	—	2024-12-18
An attacker can craft an input to the Parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing. This could cause a denia…
CVE-2024-45337US	—	3.18% (88th)	Exploit	2024-12-12
Applications and libraries which misuse connection.serverAuthenticate (via callback field ServerConfig.PublicKeyCallback) may be susceptible to an authorization bypass. The documen…
CVE-2024-51744US	—	0.54% (45th)	—	2024-11-04
golang-jwt is a Go implementation of JSON Web Tokens. Unclear documentation of the error behavior in `ParseWithClaims` can lead to situation where users are potentially not checkin…
CVE-2024-3817US	—	1.33% (71st)	—	2024-04-17
HashiCorp’s go-getter library is vulnerable to argument injection when executing Git to discover remote branches. This vulnerability does not affect the go-getter/v2 branch and p…

references

External citations — patches, advisories, analysis.

remediations (64)

Fixedtrivy-0.66.0-bp160.1.1.aarch64 as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtrivy-0.66.0-bp160.1.1.aarch64 as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtrivy-0.66.0-bp160.1.1.aarch64 as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtrivy-0.66.0-bp160.1.1.aarch64 as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtrivy-0.66.0-bp160.1.1.aarch64 as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtrivy-0.66.0-bp160.1.1.aarch64 as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtrivy-0.66.0-bp160.1.1.aarch64 as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtrivy-0.66.0-bp160.1.1.aarch64 as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtrivy-0.66.0-bp160.1.1.aarch64 as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtrivy-0.66.0-bp160.1.1.aarch64 as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtrivy-0.66.0-bp160.1.1.aarch64 as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtrivy-0.66.0-bp160.1.1.aarch64 as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtrivy-0.66.0-bp160.1.1.aarch64 as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtrivy-0.66.0-bp160.1.1.aarch64 as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtrivy-0.66.0-bp160.1.1.aarch64 as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtrivy-0.66.0-bp160.1.1.aarch64 as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtrivy-0.66.0-bp160.1.1.ppc64le as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtrivy-0.66.0-bp160.1.1.ppc64le as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtrivy-0.66.0-bp160.1.1.ppc64le as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtrivy-0.66.0-bp160.1.1.ppc64le as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtrivy-0.66.0-bp160.1.1.ppc64le as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtrivy-0.66.0-bp160.1.1.ppc64le as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtrivy-0.66.0-bp160.1.1.ppc64le as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtrivy-0.66.0-bp160.1.1.ppc64le as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtrivy-0.66.0-bp160.1.1.ppc64le as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtrivy-0.66.0-bp160.1.1.ppc64le as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtrivy-0.66.0-bp160.1.1.ppc64le as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtrivy-0.66.0-bp160.1.1.ppc64le as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtrivy-0.66.0-bp160.1.1.ppc64le as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtrivy-0.66.0-bp160.1.1.ppc64le as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtrivy-0.66.0-bp160.1.1.ppc64le as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtrivy-0.66.0-bp160.1.1.ppc64le as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtrivy-0.66.0-bp160.1.1.s390x as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtrivy-0.66.0-bp160.1.1.s390x as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtrivy-0.66.0-bp160.1.1.s390x as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtrivy-0.66.0-bp160.1.1.s390x as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtrivy-0.66.0-bp160.1.1.s390x as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtrivy-0.66.0-bp160.1.1.s390x as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtrivy-0.66.0-bp160.1.1.s390x as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtrivy-0.66.0-bp160.1.1.s390x as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtrivy-0.66.0-bp160.1.1.s390x as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtrivy-0.66.0-bp160.1.1.s390x as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtrivy-0.66.0-bp160.1.1.s390x as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtrivy-0.66.0-bp160.1.1.s390x as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtrivy-0.66.0-bp160.1.1.s390x as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtrivy-0.66.0-bp160.1.1.s390x as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtrivy-0.66.0-bp160.1.1.s390x as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtrivy-0.66.0-bp160.1.1.s390x as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtrivy-0.66.0-bp160.1.1.x86_64 as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtrivy-0.66.0-bp160.1.1.x86_64 as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtrivy-0.66.0-bp160.1.1.x86_64 as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtrivy-0.66.0-bp160.1.1.x86_64 as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtrivy-0.66.0-bp160.1.1.x86_64 as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtrivy-0.66.0-bp160.1.1.x86_64 as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtrivy-0.66.0-bp160.1.1.x86_64 as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtrivy-0.66.0-bp160.1.1.x86_64 as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtrivy-0.66.0-bp160.1.1.x86_64 as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtrivy-0.66.0-bp160.1.1.x86_64 as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtrivy-0.66.0-bp160.1.1.x86_64 as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtrivy-0.66.0-bp160.1.1.x86_64 as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtrivy-0.66.0-bp160.1.1.x86_64 as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtrivy-0.66.0-bp160.1.1.x86_64 as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtrivy-0.66.0-bp160.1.1.x86_64 as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedtrivy-0.66.0-bp160.1.1.x86_64 as component of openSUSE Leap 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan