SUSE-SU-2026:20089-1

Security update for alloy

view advisory published 2026-01-15

Security update for alloy

describes (3)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2025-58190US	medium5.3	0.55% (46th)	—	2026-02-05
The html.Parse function in golang.org/x/net/html has an infinite parsing loop when processing certain inputs, which can lead to denial of service (DoS) if an attacker provides spec…
CVE-2025-47911US	medium5.3	0.57% (47th)	—	2026-02-05
The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to denial of service (DoS) if an attacker provides…
CVE-2025-47913US	—	0.67% (52nd)	—	2025-11-13
SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process.

references

External citations — patches, advisories, analysis.

SUSE Bug 1251509self
SUSE Bug 1251716self
SUSE Bug 1253609self
URL of this CSAF noticeself
E-Mail link for SUSE-SU-2026:20089-1self
SUSE CVE CVE-2025-47911 pageself
SUSE CVE CVE-2025-47913 pageself
SUSE CVE CVE-2025-58190 pageself

remediations (24)

Fixedalloy-0:1.12.1-160000.1.1.aarch64 as component of SUSE Linux Enterprise Server 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedalloy-0:1.12.1-160000.1.1.aarch64 as component of SUSE Linux Enterprise Server 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedalloy-0:1.12.1-160000.1.1.aarch64 as component of SUSE Linux Enterprise Server 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedalloy-0:1.12.1-160000.1.1.aarch64 as component of SUSE Linux Enterprise Server for SAP applications 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedalloy-0:1.12.1-160000.1.1.aarch64 as component of SUSE Linux Enterprise Server for SAP applications 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedalloy-0:1.12.1-160000.1.1.aarch64 as component of SUSE Linux Enterprise Server for SAP applications 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedalloy-0:1.12.1-160000.1.1.ppc64le as component of SUSE Linux Enterprise Server 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedalloy-0:1.12.1-160000.1.1.ppc64le as component of SUSE Linux Enterprise Server 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedalloy-0:1.12.1-160000.1.1.ppc64le as component of SUSE Linux Enterprise Server 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedalloy-0:1.12.1-160000.1.1.ppc64le as component of SUSE Linux Enterprise Server for SAP applications 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedalloy-0:1.12.1-160000.1.1.ppc64le as component of SUSE Linux Enterprise Server for SAP applications 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedalloy-0:1.12.1-160000.1.1.ppc64le as component of SUSE Linux Enterprise Server for SAP applications 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedalloy-0:1.12.1-160000.1.1.s390x as component of SUSE Linux Enterprise Server 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedalloy-0:1.12.1-160000.1.1.s390x as component of SUSE Linux Enterprise Server 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedalloy-0:1.12.1-160000.1.1.s390x as component of SUSE Linux Enterprise Server 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedalloy-0:1.12.1-160000.1.1.s390x as component of SUSE Linux Enterprise Server for SAP applications 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedalloy-0:1.12.1-160000.1.1.s390x as component of SUSE Linux Enterprise Server for SAP applications 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedalloy-0:1.12.1-160000.1.1.s390x as component of SUSE Linux Enterprise Server for SAP applications 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedalloy-0:1.12.1-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedalloy-0:1.12.1-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedalloy-0:1.12.1-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedalloy-0:1.12.1-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server for SAP applications 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedalloy-0:1.12.1-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server for SAP applications 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedalloy-0:1.12.1-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server for SAP applications 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan