CVE catalog

CVE-2025-1974

rke2-1.31-1.31.7+rke2r1-1.1 on GA media

[CVE catalog]

Severity
Critical · CVSS 9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Published
Updated
Source
[NVD] · [CVE record]
EPSS
99.40% · Oct 25, 2026

These are all security issues fixed in the rke2-1.36-1.36.4+rke2r1-1.1 package on the GA media of openSUSE Tumbleweed.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Opensuserke2-1.36tumbleweed1.36.4+rke2r1-1.1fixed
Opensuserke2-1.35tumbleweed1.35.4+rke2r1-1.1fixed
Opensuserke2-1.34tumbleweed1.34.3+rke2r1-1.1fixed
Opensuserke2-1.33tumbleweed1.33.5+rke2r1-1.1fixed
Opensuserke2-1.32tumbleweed1.32.4+rke2r1-1.1fixed
Opensuserke2tumbleweed1.32.3+rke2r1-1.1fixed
Opensuserke2-1.30tumbleweed1.30.11+rke2r1-1.1fixed
Opensuserke2-1.29tumbleweed1.29.15+rke2r1-1.1fixed
Opensuserke2-1.31tumbleweed1.31.7+rke2r1-1.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Opensuserke2-1.36rpmtumbleweed1.36.4+rke2r1-1.1Not reportedOPENSUSE-SU-2026:11842-1Not reported
Opensuserke2-1.35rpmtumbleweed1.35.4+rke2r1-1.1Not reportedOPENSUSE-SU-2026:10799-1Not reported
Opensuserke2-1.34rpmtumbleweed1.34.3+rke2r1-1.1Not reportedOPENSUSE-SU-2026:10050-1Not reported
Opensuserke2-1.33rpmtumbleweed1.33.5+rke2r1-1.1Not reportedOPENSUSE-SU-2025:15569-1Not reported
Opensuserke2-1.32rpmtumbleweed1.32.4+rke2r1-1.1Not reportedOPENSUSE-SU-2025:15083-1Not reported
Opensuserke2rpmtumbleweed1.32.3+rke2r1-1.1Not reportedOPENSUSE-SU-2025:14941-1Not reported
Opensuserke2-1.30rpmtumbleweed1.30.11+rke2r1-1.1Not reportedOPENSUSE-SU-2025:14943-1Not reported
Opensuserke2-1.29rpmtumbleweed1.29.15+rke2r1-1.1Not reportedOPENSUSE-SU-2025:14942-1Not reported
Opensuserke2-1.31rpmtumbleweed1.31.7+rke2r1-1.1Not reportedOPENSUSE-SU-2025:14944-1Not reported

OpenFactory catalog packages

[openSUSE Tumbleweed]

  • [rke2]Fixed

    Source package: [rke2]

    Details (1)

    • 1.36.3+rke2r1-2.1 · x86_64 · tumbleweed

      Fixed · Fixed: 1.32.3+rke2r1-1.1

      pypi · rke2 · opensuse · tumbleweed

  • [rke2-1.33]Fixed

    Source package: [rke2-1.33]

    Details (1)

    • 1.33.13+rke2r2-1.1 · x86_64 · tumbleweed

      Fixed · Fixed: 1.33.5+rke2r1-1.1

      pypi · rke2-1.33 · opensuse · tumbleweed

  • [rke2-1.34]Fixed

    Source package: [rke2-1.34]

    Details (1)

    • 1.34.10+rke2r1-1.1 · x86_64 · tumbleweed

      Fixed · Fixed: 1.34.3+rke2r1-1.1

      pypi · rke2-1.34 · opensuse · tumbleweed

  • [rke2-1.35]Fixed

    Source package: [rke2-1.35]

    Details (1)

    • 1.35.7+rke2r1-1.1 · x86_64 · tumbleweed

      Fixed · Fixed: 1.35.4+rke2r1-1.1

      pypi · rke2-1.35 · opensuse · tumbleweed

Observed:

References

[FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]