🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2025:0310-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-3772 Upstream summary: Regular expression denial of service in Pydanic < 2.4.0, < 1.10.13 allows remote attackers to cause denial of service via a […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2024:14446-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-41110 CVE-2024-1753 CVE-2024-23651 CVE-2024-23653 CVE-2024-24786 CVE-2024-3727 CVE-2025-54388 CVE-2025-0495 +4 more Upstream summary: Moby is an open-source project created by Docker for software containerization. A […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2026:0254-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-68161 Upstream summary: The Socket Appender in Apache Log4j Core versions 2.0-beta9 through 2.25.2 does not perform TLS hostname verification of the peer certificate, […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read • Source: SUSE advisory RHSA-2025:10848 (see also SUSE bugzilla) Related CVEs: CVE-2024-6174 CVE-2024-11584 Upstream summary: When a non-x86 platform is detected, cloud-init grants root access to a hardcoded url with a local IP address. To […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2024:0211-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-22189 CVE-2023-49295 Upstream summary: quic-go is an implementation of the QUIC protocol in Go. Prior to version 0.42.0, an attacker can cause its peer […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2025:3942-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-28885 CVE-2024-31074 CVE-2024-33617 Upstream summary: Observable discrepancy in some Intel(R) QAT Engine for OpenSSL software before version v1.6.1 may allow information disclosure via network […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2025:14756-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-12133 CVE-2025-13151 Upstream summary: A flaw in libtasn1 causes inefficient handling of specific certificate data. When processing a large number of elements in a […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2024:2576-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-43090 CVE-2024-36472 Upstream summary: A vulnerability was found in GNOME Shell. GNOME Shell's lock screen allows an unauthenticated local user to view windows of […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2025:01569-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-43961 CVE-2025-43962 CVE-2025-43964 CVE-2025-43963 Upstream summary: In LibRaw before 0.21.4, metadata/tiff.cpp has an out-of-bounds read in the Fujifilm 0xf00c tag parser. Table of contents […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2025:01743-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-30193 Upstream summary: In some circumstances, when DNSdist is configured to allow an unlimited number of queries on a single, incoming TCP connection from […]
