openSUSE Leap 15.6

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read  •  Source: SUSE advisory openSUSE-SU-2025:0090-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-57966 Upstream summary: libarchiveplugin.cpp in KDE ark before 24.12.0 can extract to an absolute path from an archive. Table of contents Symptom & Impact […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read  •  Source: SUSE advisory openSUSE-SU-2025:14836-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-0633 Upstream summary: Heap-based Buffer Overflow vulnerability in iniparser_dumpsection_ini() in iniparser allows attacker to read out of bound memory Table of contents Symptom & […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read  •  Source: SUSE advisory openSUSE-SU-2024:14499-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-8775 Upstream summary: A flaw was found in Ansible, where sensitive information stored in Ansible Vault files can be exposed in plaintext during the […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read  •  Source: SUSE advisory openSUSE-SU-2025:14841-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-26597 Upstream summary: A buffer overflow flaw was found in X.Org and Xwayland. If XkbChangeTypesOfKey() is called with a 0 group, it will resize […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read  •  Source: SUSE advisory openSUSE-SU-2022:1064-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-41495 Upstream summary: Null Pointer Dereference vulnerability exists in numpy.sort in NumPy &lt and 1.19 in the PyArray_DescrNew function due to missing return-value validation, […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2025:0366-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-31879 CVE-2024-10524 CVE-2024-38428 Upstream summary: GNU Wget through 1.21.1 does not omit the Authorization header upon a redirect to a different origin, a related […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read  •  Source: SUSE advisory openSUSE-SU-2025:14735-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-22866 CVE-2024-45336 CVE-2024-45341 CVE-2024-24788 Upstream summary: Due to the usage of a variable time instruction in the assembly implementation of an internal function, a […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read  •  Source: SUSE advisory openSUSE-SU-2024:14450-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-48936 CVE-2024-42511 Upstream summary: SchedMD Slurm before 24.05.4 has Incorrect Authorization. A mistake in authentication handling in stepmgr could permit an attacker to execute […]