openSUSE Leap 15.6

openSUSE Leap 15.6 — git — multiple vulnerabilities (13 CVEs) — patch and remediation guide — diagnosis and fix on openSUSE Leap 15.6

openSUSE Leap 15.6 — git — multiple vulnerabilities (13 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read  •  Source: SUSE advisory RHSA-2025:11462 (see also SUSE bugzilla) Related CVEs: CVE-2025-27614 CVE-2025-48384 CVE-2025-48385 CVE-2024-24577 CVE-2024-32002 CVE-2024-32004 CVE-2024-32465 CVE-2025-27613  +5 more Upstream summary: Gitk is a Tcl/Tk based Git history browser. Starting with 2.41.0, a […]

Read more
openSUSE Leap 15.6 — libQt5Gui5 — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on openSUSE Leap 15.6

openSUSE Leap 15.6 — libQt5Gui5 — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read  •  Source: SUSE advisory RHSA-2024:4647 (see also SUSE bugzilla) Related CVEs: CVE-2024-39936 CVE-2025-30348 CVE-2025-5455 CVE-2023-45935 Upstream summary: An issue was discovered in HTTP2 in Qt before 5.15.18, 6.x before 6.2.13, 6.3.x through 6.5.x before 6.5.7, […]

Read more
openSUSE Leap 15.6 — libxml2 — multiple vulnerabilities (19 CVEs) — patch and remediation guide — diagnosis and fix on openSUSE Leap 15.6

openSUSE Leap 15.6 — libxml2 — multiple vulnerabilities (19 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read  •  Source: SUSE advisory RHSA-2025:12447 (see also SUSE bugzilla) Related CVEs: CVE-2025-7425 CVE-2025-49794 CVE-2025-49795 CVE-2025-49796 CVE-2025-6021 CVE-2024-56171 CVE-2022-49043 CVE-2026-0990  +11 more Upstream summary: A flaw was found in libxslt where the attribute type, atype, flags […]

Read more
openSUSE Leap 15.6 — python311-filelock — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on openSUSE Leap 15.6

openSUSE Leap 15.6 — python311-filelock — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2026:0082-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-68146 CVE-2026-22701 Upstream summary: filelock is a platform-independent file lock for Python. In versions prior to 3.20.1, a Time-of-Check-Time-of-Use (TOCTOU) race condition allows local […]

Read more
openSUSE Leap 15.6 — gegl — vulnerability — patch and remediation guide — diagnosis and fix on openSUSE Leap 15.6

openSUSE Leap 15.6 — gegl — vulnerability — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read  •  Source: SUSE advisory RHSA-2025:21968 (see also SUSE bugzilla) Related CVEs: CVE-2025-10921 Upstream summary: GIMP HDR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on […]

Read more
openSUSE Leap 15.6 — assertj-core — vulnerability — patch and remediation guide — diagnosis and fix on openSUSE Leap 15.6

openSUSE Leap 15.6 — assertj-core — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2026:0344-1 (see also SUSE bugzilla) Related CVEs: CVE-2026-24400 Upstream summary: AssertJ provides Fluent testing assertions for Java and the Java Virtual Machine (JVM). Starting in version 1.4.0 and prior to version […]

Read more
openSUSE Leap 15.6 — curl — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on openSUSE Leap 15.6

openSUSE Leap 15.6 — curl — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2026:0879-1 (see also SUSE bugzilla) Related CVEs: CVE-2026-1965 CVE-2025-9086 CVE-2024-6197 CVE-2026-3783 CVE-2026-3784 CVE-2026-3805 CVE-2025-14017 CVE-2025-14524  +12 more Upstream summary: libcurl can in some circumstances reuse the wrong connection when asked to […]

Read more
openSUSE Leap 15.6 — npm20 — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on openSUSE Leap 15.6

openSUSE Leap 15.6 — npm20 — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read  •  Source: SUSE advisory RHSA-2026:1842 (see also SUSE bugzilla) Related CVEs: CVE-2025-55130 CVE-2025-55131 CVE-2025-59465 CVE-2025-23166 CVE-2025-23083 CVE-2025-59466 CVE-2026-21637 CVE-2026-22036  +12 more Upstream summary: A flaw in Node.js's Permissions model allows attackers to bypass `–allow-fs-read` and […]

Read more
openSUSE Leap 15.6 — libpq5 — multiple vulnerabilities (18 CVEs) — patch and remediation guide — diagnosis and fix on openSUSE Leap 15.6

openSUSE Leap 15.6 — libpq5 — multiple vulnerabilities (18 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read  •  Source: SUSE advisory RHSA-2026:3730 (see also SUSE bugzilla) Related CVEs: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 CVE-2026-2007 CVE-2025-12818 CVE-2025-8714 CVE-2025-8715 CVE-2025-1094  +10 more Upstream summary: Missing validation of type of input in PostgreSQL intarray extension selectivity estimator […]

Read more
openSUSE Leap 15.6 — terraform-provider-tls — vulnerability — patch and remediation guide — diagnosis and fix on openSUSE Leap 15.6

openSUSE Leap 15.6 — terraform-provider-tls — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2026:0757-1 (see also SUSE bugzilla) Related CVEs: CVE-2026-25934 Upstream summary: go-git is a highly extensible git implementation library written in pure Go. Prior to 5.16.5, a vulnerability was discovered in go-git […]

Read more
CHAT