openSUSE Leap 15.5

🟢 Low   ⏱ 5–15 min  Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.5 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2023:3520-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-46310 CVE-2021-46312 Upstream summary: An issue was discovered IW44Image.cpp in djvulibre 3.5.28 in allows attackers to cause a denial of service via divide by […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.5 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2024:3426-1 (see also SUSE bugzilla) Related CVEs: CVE-2017-15865 CVE-2022-37032 Upstream summary: bgpd in FRRouting (FRR) before 2.0.2 and 3.x before 3.0.2, as used in Cumulus Linux before 3.4.3 and other products, […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.5 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2024:3873-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-43809 Upstream summary: `Bundler` is a package for managing application dependencies in Ruby. In `bundler` versions before 2.2.33, when working with untrusted and apparently […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.5 📖 ~4 min read  •  Source: SUSE advisory openSUSE-SU-2024:0119-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-40468 CVE-2012-3505 CVE-2017-11747 CVE-2023-40533 CVE-2023-49606 Upstream summary: Potential leak of left-over heap data if custom error page templates containing special non-standard variables are used. […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.5 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2023:4227-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-34058 CVE-2023-34059 CVE-2023-20900 CVE-2023-20867 Upstream summary: VMware Tools contains a SAML token signature bypass vulnerability. A malicious actor that has been granted Guest Operation […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.5 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2024:0742-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-51765 Upstream summary: sendmail through 8.17.2 allows SMTP smuggling in certain configurations. Remote attackers can use a published exploitation technique to inject e-mail messages […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.5 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2024:0806-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-22573 Upstream summary: The vulnerability is that IDToken verifier does not verify if token is properly signed. Signature verification makes sure that the token's […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.5 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2023:2967-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-45930 CVE-2023-32573 Upstream summary: Qt SVG in Qt 5.0.0 through 5.15.2 and 6.0.0 through 6.2.1 has an out-of-bounds write in QtPrivate::QCommonArrayOps<QPainterPath::Element>::growAppend (called from QPainterPath::addPath […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.5 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2024:0573-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-33953 CVE-2023-4785 CVE-2023-32732 Upstream summary: gRPC contains a vulnerability that allows hpack table accounting errors could lead to unwanted disconnects between clients and servers […]

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.5 📖 ~4 min read  •  Source: SUSE advisory openSUSE-SU-2024:0023-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-48620 Upstream summary: uev (aka libuev) before 2.4.1 has a buffer overflow in epoll_wait if maxevents is a large number. Table of contents Symptom […]