🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2025:03193-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-40929 CVE-2025-40928 Upstream summary: Cpanel::JSON::XS before version 4.40 for Perl has an integer buffer overflow causing a segfault when parsing crafted JSON, enabling denial-of-service […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2025:0090-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-57966 Upstream summary: libarchiveplugin.cpp in KDE ark before 24.12.0 can extract to an absolute path from an archive. Table of contents Symptom & Impact […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2025:02353-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-5278 Upstream summary: A flaw was found in GNU Coreutils. The sort utility's begfield() function is vulnerable to a heap buffer under-read. The program […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2026:0648-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-12474 Upstream summary: A specially-crafted file can cause libjxl's decoder to read pixel data from uninitialized (but allocated) memory. This can be done by […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2024:14611-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-40896 Upstream summary: In libxml2 2.11 before 2.11.9, 2.12 before 2.12.9, and 2.13 before 2.13.3, the SAX parser can produce events for external entities […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read • Source: SUSE advisory RHSA-2025:12346 (see also SUSE bugzilla) Related CVEs: CVE-2025-49091 Upstream summary: KDE Konsole before 25.04.2 allows remote code execution in a certain scenario. It supports loading URLs from the scheme handlers such […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2025:4187-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-23266 CVE-2024-0135 CVE-2024-0136 CVE-2025-23359 CVE-2025-23267 CVE-2024-0137 CVE-2024-0134 Upstream summary: NVIDIA Container Toolkit for all platforms contains a vulnerability in some hooks used to initialize […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2025:02762-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-4949 Upstream summary: In Eclipse JGit versions 7.2.0.202503040940-r and older, the ManifestParser class used by the repo command and the AmazonS3 class used to […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2024:14516-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-52949 Upstream summary: iptraf-ng 1.2.1 has a stack-based buffer overflow. In src/ifaces.c, the strcpy function consistently fails to control the size, and it is […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2024:14417-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-47874 CVE-2025-54121 Upstream summary: Starlette is an Asynchronous Server Gateway Interface (ASGI) framework/toolkit. Prior to version 0.40.0, Starlette treats `multipart/form-data` parts without a `filename` […]
