openSUSE Leap 15.5

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.5 📖 ~4 min read  •  Source: SUSE advisory openSUSE-SU-2023:0306-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-4170 Upstream summary: The rxvt-unicode package is vulnerable to a remote code execution, in the Perl background extension, when an attacker can control the […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.5 📖 ~4 min read  •  Source: SUSE advisory openSUSE-SU-2024:14442-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-29025 CVE-2023-44487 CVE-2022-41881 CVE-2022-41915 CVE-2024-47535 CVE-2023-34462 CVE-2022-24823 Upstream summary: Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.5 📖 ~4 min read  •  Source: SUSE advisory openSUSE-SU-2024:14347-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-49582 Upstream summary: Lax permissions set by the Apache Portable Runtime library on Unix platforms would allow local users read access to named shared […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.5 📖 ~4 min read  •  Source: SUSE advisory openSUSE-SU-2024:14572-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-5388 Upstream summary: NSS was susceptible to a timing side-channel attack when performing RSA decryption. This attack could potentially allow an attacker to recover […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.5 📖 ~4 min read  •  Source: SUSE advisory openSUSE-SU-2024:0008-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-51713 Upstream summary: make_ftp_cmd in main.c in ProFTPD before 1.3.8a has a one-byte out-of-bounds read, and daemon crash, because of mishandling of quote/backslash semantics. […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.5 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2023:2843-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-33201 CVE-2024-30171 Upstream summary: Bouncy Castle For Java before 1.74 is affected by an LDAP injection vulnerability. The vulnerability only affects applications that use […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.5 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2023:1835-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-2953 Upstream summary: A vulnerability was found in openldap. This security flaw causes a null pointer dereference in ber_memalloc_x() function. Table of contents Symptom […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.5 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2024:1340-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-2044 CVE-2024-4216 Upstream summary: pgAdmin <= 8.3 is affected by a path-traversal vulnerability while deserializing users' sessions in the session handling code. If the […]

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.5 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2023:1963-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-29402 CVE-2023-29404 CVE-2023-29405 CVE-2023-29409 CVE-2023-29403 Upstream summary: The go command may generate unexpected code at build time when using cgo. This may result in […]