Hello Grype users,
Since Friday, May 16, 2025 the site where SUSE Linux publish their vulnerability data has been consistently timing out, and now redirects to an error page.
Here’s a link to test if that’s still true: SLES 15 OVAL XML (note that the link will start a large file download when it starts working again.)
Here’s what you need to know:
- Grype is not getting new SUSE vulnerability data because the site we download that data from is down.
- Matching for distros besides SUSE Linux is working normally.
- Matching for SUSE Linux distros has no new data since 16 May 2025. Vulnerabilities and patches disclosed before that date are behaving normally.
We will post updates here when we know more, or when the situation is resolved.
Thanks for using Grype!