🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read • Source: SUSE advisory RHSA-2025:23309 (see also SUSE bugzilla) Related CVEs: CVE-2025-1220 CVE-2025-1217 CVE-2025-1736 CVE-2025-14178 CVE-2025-1735 CVE-2025-6491 CVE-2024-11235 CVE-2025-1219 +9 more Upstream summary: In PHP versions:8.1.* before 8.1.33, 8.2.* before 8.2.29, 8.3.* before 8.3.23, 8.4.* […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2026:0757-1 (see also SUSE bugzilla) Related CVEs: CVE-2026-24122 CVE-2026-26958 CVE-2026-24137 CVE-2026-23991 CVE-2026-23992 CVE-2026-22772 CVE-2026-22703 CVE-2024-29902 +1 more Upstream summary: Cosign provides code signing and transparency for containers and binaries. In versions […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read • Source: SUSE advisory RHSA-2025:14177 (see also SUSE bugzilla) Related CVEs: CVE-2025-48976 Upstream summary: Allocation of resources for multipart headers with insufficient limits enabled a DoS vulnerability in Apache Commons FileUpload. This issue affects Apache […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2025:02369-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-23016 Upstream summary: FastCGI fcgi2 (aka fcgi) 2.x through 2.4.4 has an integer overflow (and resultant heap-based buffer overflow) via crafted nameLen or valueLen […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read • Source: SUSE advisory RHSA-2026:10950 (see also SUSE bugzilla) Related CVEs: CVE-2026-4224 CVE-2026-1299 CVE-2026-0672 CVE-2026-3644 CVE-2026-4519 CVE-2025-15366 CVE-2026-0865 CVE-2025-15367 +12 more Upstream summary: When an Expat parser with a registered ElementDeclHandler parses an inline document […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read • Source: SUSE advisory RHSA-2026:18028 (see also SUSE bugzilla) Related CVEs: CVE-2026-33416 CVE-2026-33636 CVE-2025-66293 CVE-2026-22695 CVE-2026-22801 CVE-2025-64506 CVE-2025-64720 CVE-2025-65018 +2 more Upstream summary: LIBPNG is a reference library for use in applications that read, create, […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2026:0876-1 (see also SUSE bugzilla) Related CVEs: CVE-2026-27138 CVE-2026-27137 Upstream summary: Certificate verification can panic when a certificate in the chain has an empty DNS name and another certificate in the […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2025:03446-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-59681 CVE-2025-13473 CVE-2026-1207 CVE-2026-1285 CVE-2026-1287 CVE-2026-1312 CVE-2025-13372 CVE-2025-64460 +12 more Upstream summary: An issue was discovered in Django 4.2 before 4.2.25, 5.1 before 5.1.13, […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read • Source: SUSE advisory RHSA-2026:6188 (see also SUSE bugzilla) Related CVEs: CVE-2026-3889 CVE-2026-4371 CVE-2025-5986 CVE-2025-5262 CVE-2025-3875 CVE-2025-3877 CVE-2025-3909 CVE-2025-3932 +11 more Upstream summary: Spoofing issue in Thunderbird. This vulnerability was fixed in Thunderbird 149 and […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read • Source: SUSE advisory RHSA-2025:19512 (see also SUSE bugzilla) Related CVEs: CVE-2025-61919 CVE-2025-27610 CVE-2025-61780 CVE-2025-27111 CVE-2025-25184 Upstream summary: Rack is a modular Ruby web server interface. Prior to versions 2.2.20, 3.1.18, and 3.2.3, `Rack::Request#POST` reads […]
