Thank you. The remaining vulnerability is now being tracked as Bug 882600 in their Bugzilla: https://bugzilla.opensuse.org/show_bug.cgi?id=882600 I will send patches for suse_base and pkg_vulnerabilities file when they release a fixed version of glibc.