CVE-2025-68156

highpriority · track · 0EPSS 0.004 · 35 %ileDEEURUUS

grimoire priorityP2 · Scheduled

Exploitable?

—

no known exploitation

Likely / severe?

0.42% (35th) EPSS

CVSS 7.5 · high

Is it mine?

15 products

Check your exposure

Who says so?

7 sources

cnnvd · enisa_euvd · fstec_bdu · osv

EPSS · scored 2026-10-22

Expr is an expression language and expression evaluation for Go. Prior to version 1.17.7, several builtin functions in Expr, including `flatten`, `min`, `max`, `mean`, and `median`, perform recursive traversal over user-provided data structures without enforcing a maximum recursion depth. If the evaluation environment contains deeply nested or cyclic data structures, these functions may recurse indefinitely until exceed the Go runtime stack limit. This results in a stack overflow panic, causing the host application to crash. While exploitability depends on whether an attacker can influence or inject cyclic or pathologically deep data into the evaluation environment, this behavior represents a denial-of-service (DoS) risk and affects overall library robustness. Instead of returning a recoverable evaluation error, the process may terminate unexpectedly. In affected versions, evaluation of expressions that invoke certain builtin functions on untrusted or insufficiently validated data structures can lead to a process-level crash due to stack exhaustion. This issue is most relevant in scenarios where Expr is used to evaluate expressions against externally supplied or dynamically constructed environments; cyclic references (directly or indirectly) can be introduced into arrays, maps, or structs; and there are no application-level safeguards preventing deeply nested input data. In typical use cases with controlled, acyclic data, the issue may not manifest. However, when present, the resulting panic can be used to reliably crash the application, constituting a denial of service. The issue has been fixed in the v1.17.7 versions of Expr. The patch introduces a maximum recursion depth limit for affected builtin functions. When this limit is exceeded, evaluation aborts gracefully and returns a descriptive error instead of panicking. Additionally, the maximum depth can be customized by users via `builtin.MaxDepth`, allowing applications with legitimate deep structures to raise the limit in a controlled manner. Users are strongly encouraged to upgrade to the patched release, which includes both the recursion guard and comprehensive test coverage to prevent regressions. For users who cannot immediately upgrade, some mitigations are recommended. Ensure that evaluation environments cannot contain cyclic references, validate or sanitize externally supplied data structures before passing them to Expr, and/or wrap expression evaluation with panic recovery to prevent a full process crash (as a last-resort defensive measure). These workarounds reduce risk but do not fully eliminate the issue without the patch.

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

A vendor fix is available.

Fixedalloy-0:1.12.2-150700.15.15.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP7suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedalloy-0:1.12.2-150700.15.15.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15 SP7suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedalloy-0:1.12.2-150700.15.15.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15 SP7suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedalloy-0:1.12.2-150700.15.15.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP7suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgolang-github-QubitProducts-exporter_exporter-0:0.4.0-120002.3.3.1.aarch64 as component of SUSE Multi Linux Manager Tools SLE-12suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgolang-github-QubitProducts-exporter_exporter-0:0.4.0-120002.3.3.1.ppc64le as component of SUSE Multi Linux Manager Tools SLE-12suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgolang-github-QubitProducts-exporter_exporter-0:0.4.0-120002.3.3.1.s390x as component of SUSE Multi Linux Manager Tools SLE-12suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgolang-github-QubitProducts-exporter_exporter-0:0.4.0-120002.3.3.1.x86_64 as component of SUSE Multi Linux Manager Tools SLE-12suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgolang-github-boynux-squid_exporter-0:1.13.0-120002.3.3.1.aarch64 as component of SUSE Multi Linux Manager Tools SLE-12suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgolang-github-boynux-squid_exporter-0:1.13.0-120002.3.3.1.ppc64le as component of SUSE Multi Linux Manager Tools SLE-12suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgolang-github-boynux-squid_exporter-0:1.13.0-120002.3.3.1.s390x as component of SUSE Multi Linux Manager Tools SLE-12suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgolang-github-boynux-squid_exporter-0:1.13.0-120002.3.3.1.x86_64 as component of SUSE Multi Linux Manager Tools SLE-12suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgolang-github-lusitaniae-apache_exporter-0:1.0.10-120002.3.3.1.aarch64 as component of SUSE Multi Linux Manager Tools SLE-12suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgolang-github-lusitaniae-apache_exporter-0:1.0.10-120002.3.3.1.ppc64le as component of SUSE Multi Linux Manager Tools SLE-12suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgolang-github-lusitaniae-apache_exporter-0:1.0.10-120002.3.3.1.s390x as component of SUSE Multi Linux Manager Tools SLE-12suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgolang-github-lusitaniae-apache_exporter-0:1.0.10-120002.3.3.1.x86_64 as component of SUSE Multi Linux Manager Tools SLE-12suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgolang-github-prometheus-alertmanager-0:0.28.1-120002.4.6.1.aarch64 as component of SUSE Multi Linux Manager Tools SLE-12suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgolang-github-prometheus-alertmanager-0:0.28.1-120002.4.6.1.ppc64le as component of SUSE Multi Linux Manager Tools SLE-12suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgolang-github-prometheus-alertmanager-0:0.28.1-120002.4.6.1.s390x as component of SUSE Multi Linux Manager Tools SLE-12suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgolang-github-prometheus-alertmanager-0:0.28.1-120002.4.6.1.x86_64 as component of SUSE Multi Linux Manager Tools SLE-12suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgolang-github-prometheus-node_exporter-0:1.9.1-120002.3.3.1.aarch64 as component of SUSE Multi Linux Manager Tools SLE-12suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgolang-github-prometheus-node_exporter-0:1.9.1-120002.3.3.1.ppc64le as component of SUSE Multi Linux Manager Tools SLE-12suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgolang-github-prometheus-node_exporter-0:1.9.1-120002.3.3.1.s390x as component of SUSE Multi Linux Manager Tools SLE-12suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgolang-github-prometheus-node_exporter-0:1.9.1-120002.3.3.1.x86_64 as component of SUSE Multi Linux Manager Tools SLE-12suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgolang-github-prometheus-prometheus-0:3.5.0-120002.3.3.1.aarch64 as component of SUSE Multi Linux Manager Tools SLE-12suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgolang-github-prometheus-prometheus-0:3.5.0-120002.3.3.1.ppc64le as component of SUSE Multi Linux Manager Tools SLE-12suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgolang-github-prometheus-prometheus-0:3.5.0-120002.3.3.1.s390x as component of SUSE Multi Linux Manager Tools SLE-12suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgolang-github-prometheus-prometheus-0:3.5.0-120002.3.3.1.x86_64 as component of SUSE Multi Linux Manager Tools SLE-12suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgrafana-0:11.5.10-120002.4.9.1.aarch64 as component of SUSE Multi Linux Manager Tools SLE-12suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgrafana-0:11.5.10-120002.4.9.1.ppc64le as component of SUSE Multi Linux Manager Tools SLE-12suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgrafana-0:11.5.10-120002.4.9.1.s390x as component of SUSE Multi Linux Manager Tools SLE-12suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgrafana-0:11.5.10-120002.4.9.1.x86_64 as component of SUSE Multi Linux Manager Tools SLE-12suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedmgr-push-0:5.1.5-120002.3.6.1.noarch as component of SUSE Multi Linux Manager Tools SLE-12suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedmgrctl-0:5.1.24-120002.3.9.1.aarch64 as component of SUSE Multi Linux Manager Tools SLE-12suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedmgrctl-0:5.1.24-120002.3.9.1.ppc64le as component of SUSE Multi Linux Manager Tools SLE-12suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedmgrctl-0:5.1.24-120002.3.9.1.s390x as component of SUSE Multi Linux Manager Tools SLE-12suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedmgrctl-0:5.1.24-120002.3.9.1.x86_64 as component of SUSE Multi Linux Manager Tools SLE-12suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedmgrctl-bash-completion-0:5.1.24-120002.3.9.1.noarch as component of SUSE Multi Linux Manager Tools SLE-12suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedmgrctl-lang-0:5.1.24-120002.3.9.1.noarch as component of SUSE Multi Linux Manager Tools SLE-12suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedmgrctl-zsh-completion-0:5.1.24-120002.3.9.1.noarch as component of SUSE Multi Linux Manager Tools SLE-12suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedprometheus-blackbox_exporter-0:0.26.0-120002.3.3.1.aarch64 as component of SUSE Multi Linux Manager Tools SLE-12suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedprometheus-blackbox_exporter-0:0.26.0-120002.3.3.1.ppc64le as component of SUSE Multi Linux Manager Tools SLE-12suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedprometheus-blackbox_exporter-0:0.26.0-120002.3.3.1.s390x as component of SUSE Multi Linux Manager Tools SLE-12suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedprometheus-blackbox_exporter-0:0.26.0-120002.3.3.1.x86_64 as component of SUSE Multi Linux Manager Tools SLE-12suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython2-mgr-push-0:5.1.5-120002.3.6.1.noarch as component of SUSE Multi Linux Manager Tools SLE-12suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython2-rhnlib-0:5.1.4-120002.3.6.1.noarch as component of SUSE Multi Linux Manager Tools SLE-12suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython2-spacewalk-client-tools-0:5.1.8-120002.3.6.1.noarch as component of SUSE Multi Linux Manager Tools SLE-12suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython2-uyuni-common-libs-0:5.1.5-120002.3.3.1.aarch64 as component of SUSE Multi Linux Manager Tools SLE-12suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython2-uyuni-common-libs-0:5.1.5-120002.3.3.1.ppc64le as component of SUSE Multi Linux Manager Tools SLE-12suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython2-uyuni-common-libs-0:5.1.5-120002.3.3.1.s390x as component of SUSE Multi Linux Manager Tools SLE-12suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython2-uyuni-common-libs-0:5.1.5-120002.3.3.1.x86_64 as component of SUSE Multi Linux Manager Tools SLE-12suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedspacecmd-0:5.1.12-120002.3.6.1.noarch as component of SUSE Multi Linux Manager Tools SLE-12suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedspacewalk-client-tools-0:5.1.8-120002.3.6.1.noarch as component of SUSE Multi Linux Manager Tools SLE-12suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedsupportutils-plugin-susemanager-client-0:5.1.5-120002.3.6.1.noarch as component of SUSE Multi Linux Manager Tools SLE-12suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixeddracut-saltboot-0:1.1.0-150002.3.6.1.noarch as component of SUSE Multi Linux Manager Tools SLE-15suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixeddracut-saltboot-0:1.1.0-150002.3.6.1.noarch as component of SUSE Multi Linux Manager Tools SLE-Micro-5suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedfirewalld-prometheus-config-0:0.1-150002.3.3.1.aarch64 as component of SUSE Multi Linux Manager Tools SLE-15suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedfirewalld-prometheus-config-0:0.1-150002.3.3.1.ppc64le as component of SUSE Multi Linux Manager Tools SLE-15suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedfirewalld-prometheus-config-0:0.1-150002.3.3.1.s390x as component of SUSE Multi Linux Manager Tools SLE-15suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedfirewalld-prometheus-config-0:0.1-150002.3.3.1.x86_64 as component of SUSE Multi Linux Manager Tools SLE-15suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgolang-github-QubitProducts-exporter_exporter-0:0.4.0-150002.3.3.1.aarch64 as component of SUSE Multi Linux Manager Tools SLE-15suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgolang-github-QubitProducts-exporter_exporter-0:0.4.0-150002.3.3.1.aarch64 as component of SUSE Multi Linux Manager Tools SLE-Micro-5suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgolang-github-QubitProducts-exporter_exporter-0:0.4.0-150002.3.3.1.ppc64le as component of SUSE Multi Linux Manager Tools SLE-15suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgolang-github-QubitProducts-exporter_exporter-0:0.4.0-150002.3.3.1.ppc64le as component of SUSE Multi Linux Manager Tools SLE-Micro-5suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgolang-github-QubitProducts-exporter_exporter-0:0.4.0-150002.3.3.1.s390x as component of SUSE Multi Linux Manager Tools SLE-15suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgolang-github-QubitProducts-exporter_exporter-0:0.4.0-150002.3.3.1.s390x as component of SUSE Multi Linux Manager Tools SLE-Micro-5suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgolang-github-QubitProducts-exporter_exporter-0:0.4.0-150002.3.3.1.x86_64 as component of SUSE Multi Linux Manager Tools SLE-15suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgolang-github-QubitProducts-exporter_exporter-0:0.4.0-150002.3.3.1.x86_64 as component of SUSE Multi Linux Manager Tools SLE-Micro-5suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgolang-github-boynux-squid_exporter-0:1.13.0-150002.3.3.1.aarch64 as component of SUSE Multi Linux Manager Tools SLE-15suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgolang-github-boynux-squid_exporter-0:1.13.0-150002.3.3.1.ppc64le as component of SUSE Multi Linux Manager Tools SLE-15suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgolang-github-boynux-squid_exporter-0:1.13.0-150002.3.3.1.s390x as component of SUSE Multi Linux Manager Tools SLE-15suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgolang-github-boynux-squid_exporter-0:1.13.0-150002.3.3.1.x86_64 as component of SUSE Multi Linux Manager Tools SLE-15suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgolang-github-lusitaniae-apache_exporter-0:1.0.10-150002.3.3.1.aarch64 as component of SUSE Multi Linux Manager Tools SLE-15suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgolang-github-lusitaniae-apache_exporter-0:1.0.10-150002.3.3.1.ppc64le as component of SUSE Multi Linux Manager Tools SLE-15suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgolang-github-lusitaniae-apache_exporter-0:1.0.10-150002.3.3.1.s390x as component of SUSE Multi Linux Manager Tools SLE-15suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgolang-github-lusitaniae-apache_exporter-0:1.0.10-150002.3.3.1.x86_64 as component of SUSE Multi Linux Manager Tools SLE-15suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgolang-github-prometheus-alertmanager-0:0.28.1-150002.4.6.1.aarch64 as component of SUSE Multi Linux Manager Tools SLE-15suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgolang-github-prometheus-alertmanager-0:0.28.1-150002.4.6.1.ppc64le as component of SUSE Multi Linux Manager Tools SLE-15suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgolang-github-prometheus-alertmanager-0:0.28.1-150002.4.6.1.s390x as component of SUSE Multi Linux Manager Tools SLE-15suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgolang-github-prometheus-alertmanager-0:0.28.1-150002.4.6.1.x86_64 as component of SUSE Multi Linux Manager Tools SLE-15suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgolang-github-prometheus-node_exporter-0:1.9.1-150002.3.3.1.aarch64 as component of SUSE Multi Linux Manager Tools SLE-15suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgolang-github-prometheus-node_exporter-0:1.9.1-150002.3.3.1.aarch64 as component of SUSE Multi Linux Manager Tools SLE-Micro-5suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgolang-github-prometheus-node_exporter-0:1.9.1-150002.3.3.1.ppc64le as component of SUSE Multi Linux Manager Tools SLE-15suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgolang-github-prometheus-node_exporter-0:1.9.1-150002.3.3.1.ppc64le as component of SUSE Multi Linux Manager Tools SLE-Micro-5suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgolang-github-prometheus-node_exporter-0:1.9.1-150002.3.3.1.s390x as component of SUSE Multi Linux Manager Tools SLE-15suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgolang-github-prometheus-node_exporter-0:1.9.1-150002.3.3.1.s390x as component of SUSE Multi Linux Manager Tools SLE-Micro-5suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgolang-github-prometheus-node_exporter-0:1.9.1-150002.3.3.1.x86_64 as component of SUSE Multi Linux Manager Tools SLE-15suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgolang-github-prometheus-node_exporter-0:1.9.1-150002.3.3.1.x86_64 as component of SUSE Multi Linux Manager Tools SLE-Micro-5suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgolang-github-prometheus-prometheus-0:3.5.0-150002.3.3.1.aarch64 as component of SUSE Multi Linux Manager Tools SLE-15suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgolang-github-prometheus-prometheus-0:3.5.0-150002.3.3.1.ppc64le as component of SUSE Multi Linux Manager Tools SLE-15suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgolang-github-prometheus-prometheus-0:3.5.0-150002.3.3.1.s390x as component of SUSE Multi Linux Manager Tools SLE-15suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgolang-github-prometheus-prometheus-0:3.5.0-150002.3.3.1.x86_64 as component of SUSE Multi Linux Manager Tools SLE-15suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgrafana-0:11.5.10-150002.4.9.1.aarch64 as component of SUSE Multi Linux Manager Tools SLE-15suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgrafana-0:11.5.10-150002.4.9.1.ppc64le as component of SUSE Multi Linux Manager Tools SLE-15suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgrafana-0:11.5.10-150002.4.9.1.s390x as component of SUSE Multi Linux Manager Tools SLE-15suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgrafana-0:11.5.10-150002.4.9.1.x86_64 as component of SUSE Multi Linux Manager Tools SLE-15suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedmgr-push-0:5.1.5-150002.3.6.2.noarch as component of SUSE Multi Linux Manager Tools SLE-15suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedmgrctl-0:5.1.24-150002.3.9.1.aarch64 as component of SUSE Multi Linux Manager Tools SLE-15suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedmgrctl-0:5.1.24-150002.3.9.1.aarch64 as component of SUSE Multi Linux Manager Tools SLE-Micro-5suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedmgrctl-0:5.1.24-150002.3.9.1.ppc64le as component of SUSE Multi Linux Manager Tools SLE-15suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedmgrctl-0:5.1.24-150002.3.9.1.ppc64le as component of SUSE Multi Linux Manager Tools SLE-Micro-5suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedmgrctl-0:5.1.24-150002.3.9.1.s390x as component of SUSE Multi Linux Manager Tools SLE-15suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedmgrctl-0:5.1.24-150002.3.9.1.s390x as component of SUSE Multi Linux Manager Tools SLE-Micro-5suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedmgrctl-0:5.1.24-150002.3.9.1.x86_64 as component of SUSE Multi Linux Manager Tools SLE-15suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedmgrctl-0:5.1.24-150002.3.9.1.x86_64 as component of SUSE Multi Linux Manager Tools SLE-Micro-5suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedmgrctl-bash-completion-0:5.1.24-150002.3.9.1.noarch as component of SUSE Multi Linux Manager Tools SLE-15suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedmgrctl-bash-completion-0:5.1.24-150002.3.9.1.noarch as component of SUSE Multi Linux Manager Tools SLE-Micro-5suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedmgrctl-lang-0:5.1.24-150002.3.9.1.noarch as component of SUSE Multi Linux Manager Tools SLE-15suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedmgrctl-lang-0:5.1.24-150002.3.9.1.noarch as component of SUSE Multi Linux Manager Tools SLE-Micro-5suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedmgrctl-zsh-completion-0:5.1.24-150002.3.9.1.noarch as component of SUSE Multi Linux Manager Tools SLE-15suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedmgrctl-zsh-completion-0:5.1.24-150002.3.9.1.noarch as component of SUSE Multi Linux Manager Tools SLE-Micro-5suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedprometheus-blackbox_exporter-0:0.26.0-150002.3.3.1.aarch64 as component of SUSE Multi Linux Manager Tools SLE-15suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedprometheus-blackbox_exporter-0:0.26.0-150002.3.3.1.aarch64 as component of SUSE Multi Linux Manager Tools SLE-Micro-5suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedprometheus-blackbox_exporter-0:0.26.0-150002.3.3.1.ppc64le as component of SUSE Multi Linux Manager Tools SLE-15suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedprometheus-blackbox_exporter-0:0.26.0-150002.3.3.1.ppc64le as component of SUSE Multi Linux Manager Tools SLE-Micro-5suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedprometheus-blackbox_exporter-0:0.26.0-150002.3.3.1.s390x as component of SUSE Multi Linux Manager Tools SLE-15suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedprometheus-blackbox_exporter-0:0.26.0-150002.3.3.1.s390x as component of SUSE Multi Linux Manager Tools SLE-Micro-5suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedprometheus-blackbox_exporter-0:0.26.0-150002.3.3.1.x86_64 as component of SUSE Multi Linux Manager Tools SLE-15suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedprometheus-blackbox_exporter-0:0.26.0-150002.3.3.1.x86_64 as component of SUSE Multi Linux Manager Tools SLE-Micro-5suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython3-mgr-push-0:5.1.5-150002.3.6.2.noarch as component of SUSE Multi Linux Manager Tools SLE-15suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython3-rhnlib-0:5.1.4-150002.3.6.1.noarch as component of SUSE Multi Linux Manager Tools SLE-15suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython3-spacewalk-client-tools-0:5.1.8-150002.3.6.1.noarch as component of SUSE Multi Linux Manager Tools SLE-15suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython3-uyuni-common-libs-0:5.1.5-150002.3.3.1.aarch64 as component of SUSE Multi Linux Manager Tools SLE-15suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython3-uyuni-common-libs-0:5.1.5-150002.3.3.1.ppc64le as component of SUSE Multi Linux Manager Tools SLE-15suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython3-uyuni-common-libs-0:5.1.5-150002.3.3.1.s390x as component of SUSE Multi Linux Manager Tools SLE-15suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedpython3-uyuni-common-libs-0:5.1.5-150002.3.3.1.x86_64 as component of SUSE Multi Linux Manager Tools SLE-15suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedspacecmd-0:5.1.12-150002.3.6.1.noarch as component of SUSE Multi Linux Manager Tools SLE-15suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedspacewalk-client-tools-0:5.1.8-150002.3.6.1.noarch as component of SUSE Multi Linux Manager Tools SLE-15suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedsupportutils-plugin-susemanager-client-0:5.1.5-150002.3.6.1.noarch as component of SUSE Multi Linux Manager Tools SLE-15suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixeddracut-saltboot-0:1.1.0-150000.1.65.1.noarch as component of SUSE Manager Client Tools 15suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixeddracut-saltboot-0:1.1.0-150000.1.65.1.noarch as component of SUSE Manager Client Tools for SLE Micro 5suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixeddracut-saltboot-0:1.1.0-150000.1.65.1.noarch as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedfirewalld-prometheus-config-0:0.1-150000.3.67.1.aarch64 as component of SUSE Manager Client Tools 15suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedfirewalld-prometheus-config-0:0.1-150000.3.67.1.ppc64le as component of SUSE Manager Client Tools 15suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedfirewalld-prometheus-config-0:0.1-150000.3.67.1.s390x as component of SUSE Manager Client Tools 15suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedfirewalld-prometheus-config-0:0.1-150000.3.67.1.x86_64 as component of SUSE Manager Client Tools 15suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgolang-github-QubitProducts-exporter_exporter-0:0.4.0-150000.1.21.1.aarch64 as component of SUSE Manager Client Tools 15suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgolang-github-QubitProducts-exporter_exporter-0:0.4.0-150000.1.21.1.aarch64 as component of SUSE Manager Client Tools for SLE Micro 5suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgolang-github-QubitProducts-exporter_exporter-0:0.4.0-150000.1.21.1.aarch64 as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgolang-github-QubitProducts-exporter_exporter-0:0.4.0-150000.1.21.1.ppc64le as component of SUSE Manager Client Tools 15suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgolang-github-QubitProducts-exporter_exporter-0:0.4.0-150000.1.21.1.ppc64le as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgolang-github-QubitProducts-exporter_exporter-0:0.4.0-150000.1.21.1.s390x as component of SUSE Manager Client Tools 15suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgolang-github-QubitProducts-exporter_exporter-0:0.4.0-150000.1.21.1.s390x as component of SUSE Manager Client Tools for SLE Micro 5suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgolang-github-QubitProducts-exporter_exporter-0:0.4.0-150000.1.21.1.s390x as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgolang-github-QubitProducts-exporter_exporter-0:0.4.0-150000.1.21.1.x86_64 as component of SUSE Manager Client Tools 15suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgolang-github-QubitProducts-exporter_exporter-0:0.4.0-150000.1.21.1.x86_64 as component of SUSE Manager Client Tools for SLE Micro 5suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgolang-github-QubitProducts-exporter_exporter-0:0.4.0-150000.1.21.1.x86_64 as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgolang-github-boynux-squid_exporter-0:1.13.0-150000.1.12.1.aarch64 as component of SUSE Manager Client Tools 15suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgolang-github-boynux-squid_exporter-0:1.13.0-150000.1.12.1.aarch64 as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgolang-github-boynux-squid_exporter-0:1.13.0-150000.1.12.1.ppc64le as component of SUSE Manager Client Tools 15suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgolang-github-boynux-squid_exporter-0:1.13.0-150000.1.12.1.ppc64le as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgolang-github-boynux-squid_exporter-0:1.13.0-150000.1.12.1.s390x as component of SUSE Manager Client Tools 15suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgolang-github-boynux-squid_exporter-0:1.13.0-150000.1.12.1.s390x as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgolang-github-boynux-squid_exporter-0:1.13.0-150000.1.12.1.x86_64 as component of SUSE Manager Client Tools 15suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgolang-github-boynux-squid_exporter-0:1.13.0-150000.1.12.1.x86_64 as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgolang-github-lusitaniae-apache_exporter-0:1.0.10-150000.1.26.1.aarch64 as component of SUSE Manager Client Tools 15suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgolang-github-lusitaniae-apache_exporter-0:1.0.10-150000.1.26.1.aarch64 as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgolang-github-lusitaniae-apache_exporter-0:1.0.10-150000.1.26.1.ppc64le as component of SUSE Manager Client Tools 15suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgolang-github-lusitaniae-apache_exporter-0:1.0.10-150000.1.26.1.ppc64le as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgolang-github-lusitaniae-apache_exporter-0:1.0.10-150000.1.26.1.s390x as component of SUSE Manager Client Tools 15suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgolang-github-lusitaniae-apache_exporter-0:1.0.10-150000.1.26.1.s390x as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgolang-github-lusitaniae-apache_exporter-0:1.0.10-150000.1.26.1.x86_64 as component of SUSE Manager Client Tools 15suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgolang-github-lusitaniae-apache_exporter-0:1.0.10-150000.1.26.1.x86_64 as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgolang-github-prometheus-prometheus-0:3.5.0-150000.3.67.1.aarch64 as component of SUSE Manager Client Tools 15suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgolang-github-prometheus-prometheus-0:3.5.0-150000.3.67.1.ppc64le as component of SUSE Manager Client Tools 15suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgolang-github-prometheus-prometheus-0:3.5.0-150000.3.67.1.s390x as component of SUSE Manager Client Tools 15suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgolang-github-prometheus-prometheus-0:3.5.0-150000.3.67.1.x86_64 as component of SUSE Manager Client Tools 15suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgolang-github-prometheus-promu-0:0.17.0-150000.3.30.1.aarch64 as component of SUSE Linux Enterprise Module for Package Hub 15 SP7suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgolang-github-prometheus-promu-0:0.17.0-150000.3.30.1.aarch64 as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgolang-github-prometheus-promu-0:0.17.0-150000.3.30.1.ppc64le as component of SUSE Linux Enterprise Module for Package Hub 15 SP7suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgolang-github-prometheus-promu-0:0.17.0-150000.3.30.1.ppc64le as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgolang-github-prometheus-promu-0:0.17.0-150000.3.30.1.s390x as component of SUSE Linux Enterprise Module for Package Hub 15 SP7suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgolang-github-prometheus-promu-0:0.17.0-150000.3.30.1.s390x as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgolang-github-prometheus-promu-0:0.17.0-150000.3.30.1.x86_64 as component of SUSE Linux Enterprise Module for Package Hub 15 SP7suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgolang-github-prometheus-promu-0:0.17.0-150000.3.30.1.x86_64 as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgrafana-0:11.6.11-150000.1.90.1.aarch64 as component of SUSE Manager Client Tools 15suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgrafana-0:11.6.11-150000.1.90.1.ppc64le as component of SUSE Manager Client Tools 15suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgrafana-0:11.6.11-150000.1.90.1.s390x as component of SUSE Manager Client Tools 15suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgrafana-0:11.6.11-150000.1.90.1.x86_64 as component of SUSE Manager Client Tools 15suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedmgrctl-0:0.1.38-150000.1.30.1.aarch64 as component of SUSE Manager Client Tools 15suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedmgrctl-0:0.1.38-150000.1.30.1.aarch64 as component of SUSE Manager Client Tools for SLE Micro 5suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedmgrctl-0:0.1.38-150000.1.30.1.ppc64le as component of SUSE Manager Client Tools 15suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedmgrctl-0:0.1.38-150000.1.30.1.s390x as component of SUSE Manager Client Tools 15suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedmgrctl-0:0.1.38-150000.1.30.1.s390x as component of SUSE Manager Client Tools for SLE Micro 5suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedmgrctl-0:0.1.38-150000.1.30.1.x86_64 as component of SUSE Manager Client Tools 15suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedmgrctl-0:0.1.38-150000.1.30.1.x86_64 as component of SUSE Manager Client Tools for SLE Micro 5suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedmgrctl-bash-completion-0:0.1.38-150000.1.30.1.noarch as component of SUSE Manager Client Tools 15suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedmgrctl-bash-completion-0:0.1.38-150000.1.30.1.noarch as component of SUSE Manager Client Tools for SLE Micro 5suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedmgrctl-lang-0:0.1.38-150000.1.30.1.noarch as component of SUSE Manager Client Tools 15suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedmgrctl-lang-0:0.1.38-150000.1.30.1.noarch as component of SUSE Manager Client Tools for SLE Micro 5suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedmgrctl-zsh-completion-0:0.1.38-150000.1.30.1.noarch as component of SUSE Manager Client Tools 15suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedmgrctl-zsh-completion-0:0.1.38-150000.1.30.1.noarch as component of SUSE Manager Client Tools for SLE Micro 5suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedprometheus-blackbox_exporter-0:0.26.0-150000.1.30.2.aarch64 as component of SUSE Manager Client Tools 15suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedprometheus-blackbox_exporter-0:0.26.0-150000.1.30.2.aarch64 as component of SUSE Manager Client Tools for SLE Micro 5suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedprometheus-blackbox_exporter-0:0.26.0-150000.1.30.2.aarch64 as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedprometheus-blackbox_exporter-0:0.26.0-150000.1.30.2.ppc64le as component of SUSE Manager Client Tools 15suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedprometheus-blackbox_exporter-0:0.26.0-150000.1.30.2.ppc64le as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedprometheus-blackbox_exporter-0:0.26.0-150000.1.30.2.s390x as component of SUSE Manager Client Tools 15suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedprometheus-blackbox_exporter-0:0.26.0-150000.1.30.2.s390x as component of SUSE Manager Client Tools for SLE Micro 5suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedprometheus-blackbox_exporter-0:0.26.0-150000.1.30.2.s390x as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedprometheus-blackbox_exporter-0:0.26.0-150000.1.30.2.x86_64 as component of SUSE Manager Client Tools 15suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedprometheus-blackbox_exporter-0:0.26.0-150000.1.30.2.x86_64 as component of SUSE Manager Client Tools for SLE Micro 5suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedprometheus-blackbox_exporter-0:0.26.0-150000.1.30.2.x86_64 as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedspacecmd-0:5.0.15-150000.3.142.1.noarch as component of SUSE Manager Client Tools 15suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedspacecmd-0:5.0.15-150000.3.142.1.noarch as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgrafana-0:11.6.11-150200.3.83.1.aarch64 as component of SUSE Linux Enterprise Module for Package Hub 15 SP7suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgrafana-0:11.6.11-150200.3.83.1.aarch64 as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgrafana-0:11.6.11-150200.3.83.1.ppc64le as component of SUSE Linux Enterprise Module for Package Hub 15 SP7suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgrafana-0:11.6.11-150200.3.83.1.ppc64le as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgrafana-0:11.6.11-150200.3.83.1.s390x as component of SUSE Linux Enterprise Module for Package Hub 15 SP7suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgrafana-0:11.6.11-150200.3.83.1.s390x as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgrafana-0:11.6.11-150200.3.83.1.x86_64 as component of SUSE Linux Enterprise Module for Package Hub 15 SP7suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgrafana-0:11.6.11-150200.3.83.1.x86_64 as component of openSUSE Leap 15.6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedalloy-0:1.12.2-160000.1.1.aarch64 as component of SUSE Linux Enterprise Server 16.0suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedalloy-0:1.12.2-160000.1.1.aarch64 as component of SUSE Linux Enterprise Server for SAP applications 16.0suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedalloy-0:1.12.2-160000.1.1.ppc64le as component of SUSE Linux Enterprise Server 16.0suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedalloy-0:1.12.2-160000.1.1.ppc64le as component of SUSE Linux Enterprise Server for SAP applications 16.0suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedalloy-0:1.12.2-160000.1.1.s390x as component of SUSE Linux Enterprise Server 16.0suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedalloy-0:1.12.2-160000.1.1.s390x as component of SUSE Linux Enterprise Server for SAP applications 16.0suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedalloy-0:1.12.2-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server 16.0suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedalloy-0:1.12.2-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server for SAP applications 16.0suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedcoredns-0:1.14.0-1.1.aarch64 as component of openSUSE Tumbleweedsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedcoredns-0:1.14.0-1.1.ppc64le as component of openSUSE Tumbleweedsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedcoredns-0:1.14.0-1.1.s390x as component of openSUSE Tumbleweedsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedcoredns-0:1.14.0-1.1.x86_64 as component of openSUSE Tumbleweedsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedcoredns-extras-0:1.14.0-1.1.aarch64 as component of openSUSE Tumbleweedsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedcoredns-extras-0:1.14.0-1.1.ppc64le as component of openSUSE Tumbleweedsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedcoredns-extras-0:1.14.0-1.1.s390x as component of openSUSE Tumbleweedsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedcoredns-extras-0:1.14.0-1.1.x86_64 as component of openSUSE Tumbleweedsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgrafana-0:11.6.7-2.1.aarch64 as component of openSUSE Tumbleweedsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgrafana-0:11.6.7-2.1.ppc64le as component of openSUSE Tumbleweedsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgrafana-0:11.6.7-2.1.s390x as component of openSUSE Tumbleweedsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedgrafana-0:11.6.7-2.1.x86_64 as component of openSUSE Tumbleweedsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedalloy-0:1.12.2-2.1.aarch64 as component of openSUSE Tumbleweedsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedalloy-0:1.12.2-2.1.ppc64le as component of openSUSE Tumbleweedsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedalloy-0:1.12.2-2.1.s390x as component of openSUSE Tumbleweedsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedalloy-0:1.12.2-2.1.x86_64 as component of openSUSE Tumbleweedsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedcoredns-0:1.14.0-bp160.1.1.aarch64 as component of openSUSE Leap 16.0suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedcoredns-0:1.14.0-bp160.1.1.ppc64le as component of openSUSE Leap 16.0suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedcoredns-0:1.14.0-bp160.1.1.x86_64 as component of openSUSE Leap 16.0suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedcoredns-extras-0:1.14.0-bp160.1.1.noarch as component of openSUSE Leap 16.0suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedalloy-0:1.12.2-160000.1.1.aarch64 as component of openSUSE Leap 16.0suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedalloy-0:1.12.2-160000.1.1.ppc64le as component of openSUSE Leap 16.0suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedalloy-0:1.12.2-160000.1.1.s390x as component of openSUSE Leap 16.0suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedalloy-0:1.12.2-160000.1.1.x86_64 as component of openSUSE Leap 16.0suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

cvss

Technical severity, 0–10. One row per scoring source.

7.5

010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–high · 6.9–7.5

v3.17.5highAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hsecondary · FSTEC (BDU) RU

v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hsecondary · ENISA EU

v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hsecondary · security-advisories@github.comexploitability 3.9 · impact 3.6

v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hsecondary · OSV

v3.16.9mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:Usecondary · CVSS-BT (t0sche)

v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hsecondary · SUSE Product Security

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Exploitation: none · Automatable: yes · Technical Impact: partialcoordinatorcisa_ssvcUS

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-770USCWE-770USCWE-770US

affected products (15)

Products and version ranges known to be affected.

Amazon Linux 2all versionscert_bundDEcpe:/o:amazon:linux_2:-
Debian Linuxall versionscert_bundDEcpe:/o:debian:debian_linux:-
Oracle Linuxall versionscert_bundDEcpe:/o:oracle:linux:-
RESF Rocky Linuxall versionscert_bundDEcpe:/o:resf:rocky_linux:-
Red Hat Enterprise Linuxall versionscert_bundDEcpe:/o:redhat:enterprise_linux:-
Red Hat Enterprise Linux 10all versionscert_bundDEcpe:/o:redhat:enterprise_linux:10
Red Hat OpenShift Custom Metrics Autoscaler Operatorall versionscert_bundDEcpe:/a:redhat:openshift:custom_metrics_autoscaler_operator
SUSE Linuxall versionscert_bundDEcpe:/o:suse:suse_linux:-
SUSE openSUSEall versionscert_bundDEcpe:/o:suse:opensuse:-
Ubuntu Linuxall versionscert_bundDEcpe:/o:canonical:ubuntu_linux:-
expr-lang expr≤ < 1.17.7enisa_euvdEU
The Go Project expr-lang/expr≤ 1.17.7fstec_bduRU
ООО «Ред Софт» РЕД ОС≤ 8.0fstec_bduRU
expr-lang expr< 1.17.7nvdUScpe:2.3:a:expr-lang:expr:*:*:*:*:*:*:*:*
Go github.com/expr-lang/expr< 1.17.7osvUSpkg:golang/github.com/expr-lang/expr

advisories (15)

Vendor and ecosystem advisories describing this.

SUSE-SU-2026:0327-1Security update for alloy2026-01-28csaf · suse_csafDE
Security update for alloy
SUSE-SU-2026:0628-1Security update 5.1.2 for Multi-Linux Manager Client Tools2026-02-25csaf · suse_csafDE
Security update 5.1.2 for Multi-Linux Manager Client Tools
SUSE-SU-2026:0630-1Security update 5.1.2 for Multi-Linux Manager Client Tools2026-02-25csaf · suse_csafDE
Security update 5.1.2 for Multi-Linux Manager Client Tools
SUSE-SU-2026:1013-1Security update 5.0.7 for Multi-Linux Manager Client Tools2026-03-25csaf · suse_csafDE
Security update 5.0.7 for Multi-Linux Manager Client Tools
SUSE-SU-2026:1037-1Security update for grafana2026-03-25csaf · suse_csafDE
Security update for grafana
SUSE-SU-2026:20214-1Security update for alloy2026-01-30csaf · suse_csafDE
Security update for alloy
WID-SEC-W-2025-2886Red Hat Enterprise Linux (git-lfs, opentelemetry-collector): Mehrere SchwachstellenDeutsch2025-12-18csaf · cert_bundDE
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um Dateien zu manipulieren und einen Denial-of-Service-Zustand zu verursachen.
WID-SEC-W-2026-1618Splunk Splunk Enterprise: Mehrere SchwachstellenDeutsch2026-05-20csaf · cert_bundDE
Ein Angreifer kann mehrere Schwachstellen in Splunk Splunk Enterprise ausnutzen, um Sicherheitsvorkehrungen zu umgehen, Daten zu manipulieren, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand zu verursachen.
openSUSE-SU-2026:10021-1coredns-1.14.0-1.1 on GA media2026-01-09csaf · suse_csafDE
coredns-1.14.0-1.1 on GA media
openSUSE-SU-2026:10067-1grafana-11.6.7-2.1 on GA media2026-01-19csaf · suse_csafDE
grafana-11.6.7-2.1 on GA media
openSUSE-SU-2026:10073-1alloy-1.12.2-2.1 on GA media2026-01-21csaf · suse_csafDE
alloy-1.12.2-2.1 on GA media
openSUSE-SU-2026:20099-1Security update for coredns2026-01-24csaf · suse_csafDE
Security update for coredns
openSUSE-SU-2026:20140-1Security update for alloy2026-01-30csaf · suse_csafDE
Security update for alloy
GHSA-cfpf-hrx2-8rv6Expr has Denial of Service via Unbounded Recursion in Builtin Functions2025-12-16ghsa · osvUS
Several builtin functions in Expr, including `flatten`, `min`, `max`, `mean`, and `median`, perform recursive traversal over user-provided data structures without enforcing a maximum recursion depth. If the evaluation environment contains **deeply nested** or **cyclic** data structures, these functions may recurse indefinitely until exceed the Go runtime stack limit. This results in a **stack overflow panic**, causing the host application to crash. While exploitability depends on whether an attacker can influence or inject cyclic or pathologically deep data into the evaluation environment, this behavior represents a denial-of-service (DoS) risk and affects overall library robustness. Instead of returning a recoverable evaluation error, the process may terminate unexpectedly. ### Impact In affected versions, evaluation of expressions that invoke certain builtin functions on untrusted or insufficiently validated data structures can lead to a **process-level crash** due to stack exhaustion. This issue is most relevant in scenarios where: * Expr is used to evaluate expressions against externally supplied or dynamically constructed environments. * Cyclic references (directly or indirectly) can be introduced into arrays, maps, or structs. * There are no application-level safeguards preventing deeply nested input data. In typical use cases with controlled, acyclic data, the issue may not manifest. However, when present, the resulting panic can be used to reliably crash the application, constituting a denial of service. ### Patches The issue has been fixed in the v1.17.7 versions of Expr. The patch introduces a **maximum recursion depth limit** for affected builtin functions. When this limit is exceeded, evaluation aborts gracefully and returns a descriptive error instead of panicking. Additionally, the maximum depth can be customized by users via `builtin.MaxDepth`, allowing applications with legitimate deep structures to raise the limit in a controlled manner. Users are strongly encouraged to upgrade to the patched release, which includes both the recursion guard and comprehensive test coverage to prevent regressions. ### Workarounds For users who cannot immediately upgrade, the following mitigations are recommended: * Ensure that evaluation environments cannot contain cyclic references. * Validate or sanitize externally supplied data structures before passing them to Expr. * Wrap expression evaluation with panic recovery to prevent a full process crash (as a last-resort defensive measure). These workarounds reduce risk but do not fully eliminate the issue without the patch.
GO-2025-4245Expr has Denial of Service via Unbounded Recursion in Builtin Functions in github.com/expr-lang/expr2025-12-22vendor · osvUS
Expr has Denial of Service via Unbounded Recursion in Builtin Functions in github.com/expr-lang/expr

also known as (6)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd fstec_bdu osv cert_bund nvd suse_csaf NVD CVE.org MITRE

published 2025-12-16modified 2026-06-17

references (8)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan