🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2025-6140 Upstream summary: A vulnerability, which was classified as problematic, was found in spdlog up to 1.15.1. This affects the function scoped_padder in the […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2026:1137-1 (see also SUSE bugzilla) Related CVEs: CVE-2026-32776 CVE-2026-32777 CVE-2025-59375 CVE-2024-8176 CVE-2026-32778 CVE-2026-25210 CVE-2026-24515 CVE-2024-45490 +2 more Upstream summary: libexpat before 2.7.5 allows a NULL pointer dereference with empty external parameter […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read • Source: SUSE advisory RHSA-2026:1831 (see also SUSE bugzilla) Related CVEs: CVE-2025-11234 CVE-2024-4467 CVE-2024-7409 CVE-2025-14876 CVE-2026-0665 CVE-2025-12464 CVE-2024-8354 CVE-2024-4693 +1 more Upstream summary: A flaw was found in QEMU. If the QIOChannelWebsock object is freed […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2026-39324 CVE-2026-33026 CVE-2026-33030 CVE-2026-33032 CVE-2026-33634 CVE-2026-33990 CVE-2026-34041 CVE-2026-30836 +12 more Upstream summary: Rack::Session is a session management implementation for Rack. From 2.0.0 to before […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read • Source: SUSE advisory RHSA-2026:11371 (see also SUSE bugzilla) Related CVEs: CVE-2026-1519 CVE-2025-40778 CVE-2025-40780 CVE-2025-8677 CVE-2024-11187 CVE-2024-12705 CVE-2024-0760 CVE-2024-1737 +2 more Upstream summary: If a BIND resolver is performing DNSSEC validation and encounters a maliciously […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2024:3210-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-7256 CVE-2024-8006 CVE-2025-11961 Upstream summary: In affected libpcap versions during the setup of a remote packet capture the internal function sock_initaddress() calls getaddrinfo() and […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read • Source: SUSE advisory RHSA-2026:10739 (see also SUSE bugzilla) Related CVEs: CVE-2026-34352 Upstream summary: In TigerVNC before 1.16.2, Image.cxx in x0vncserver allows other users to observe or manipulate the screen contents, or cause an application […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read • Source: SUSE advisory RHSA-2026:12176 (see also SUSE bugzilla) Related CVEs: CVE-2026-32597 Upstream summary: PyJWT is a JSON Web Token implementation in Python. Prior to 2.12.0, PyJWT does not validate the crit (Critical) Header Parameter […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2026:1421-1 (see also SUSE bugzilla) Related CVEs: CVE-2026-31899 Upstream summary: CairoSVG is an SVG converter based on Cairo, a 2D graphics library. Prior to Kozea/CairoSVG has exponential denial of service via […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2024:0328-1 Related CVEs: CVE-2024-42008 CVE-2024-42009 CVE-2026-35537 CVE-2025-68460 CVE-2025-68461 CVE-2026-25916 CVE-2026-26079 CVE-2024-42010 Upstream summary: A Cross-Site Scripting vulnerability in rcmail_action_mail_get->run() in Roundcube through 1.5.7 and 1.6.x through 1.6.7 allows a remote attacker […]
