Alerts This Week
Warning Icon 1 560
Alerts This Week
Warning Icon 1 560

openSUSE: alloy Important Parsing Memory Issues CVE-2025-47911 2026:20044-1

opensuse
Calendar Grey January 17, 2026
Dist Opensuse Esm H88
This update addresses important vulnerabilities in openSUSE for alloy application, including memory issues and parsing vulnerabilities.
An update that solves 3 vulnerabilities and has 3 bug fixes can now be installed.

Description

This update for alloy fixes the following issues:

Upgrade to version 1.12.1.

Security issues fixed:

- CVE-2025-47911: golang.org/x/net/html: quadratic complexity algorithms used when parsing untrusted HTML documents

(bsc#1251509).

- CVE-2025-58190: golang.org/x/net/html: excessive memory consumption by `html.ParseFragment` when processing specially

crafted input (bsc#1251716).

- CVE-2025-47913: golang.org/x/crypto: early client process termination when receiving an unexpected message type in

response to a key listing or signing request (bsc#1253609).

Other updates and bugfixes:

- Version 1.12.1:

* Bugfixes

- update to Beyla 2.7.10.

- Version 1.12.0:

* Breaking changes

- `prometheus.exporter.blackbox`, `prometheus.exporter.snmp` and `prometheus.exporter.statsd` now use the component

ID instead of the hostname as their instance label in their exported metrics.

* Features

- (Experimental) Add an `otelcol.receiver.cloudflare` component to receive logs...

Read the Full Advisory

Patch

Package List

- openSUSE Leap 16.0:

alloy-1.12.1-160000.1.1

References

* bsc#1251509

* bsc#1251716

* bsc#1253609

References:

* https://www.suse.com/security/cve/CVE-2025-47911.html

* https://www.suse.com/security/cve/CVE-2025-47913.html

* https://www.suse.com/security/cve/CVE-2025-58190.html

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: openSUSE-SU-2026:20044-1
Rating: important
Affected Products: openSUSE Leap 16.0 -------------------------------------------------------------

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here