openSUSE

openSUSE Leap 15.5 — libgsf — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on openSUSE Leap 15.5

openSUSE Leap 15.5 — libgsf — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.5 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2024:3770-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-36474 CVE-2024-42415 Upstream summary: An integer overflow vulnerability exists in the Compound Document Binary File format parser of the GNOME Project G Structured File […]

Read more
openSUSE Leap 15.5 — libjxl0_8 — vulnerability — patch and remediation guide — diagnosis and fix on openSUSE Leap 15.5

openSUSE Leap 15.5 — libjxl0_8 — vulnerability — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.5 📖 ~4 min read  •  Source: SUSE advisory openSUSE-SU-2023:0161-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-35790 Upstream summary: An issue was discovered in dec_patch_dictionary.cc in libjxl before 0.8.2. An integer underflow in patch decoding can lead to a denial […]

Read more
openSUSE Leap 15.5 — keepalived — vulnerability — patch and remediation guide — diagnosis and fix on openSUSE Leap 15.5

openSUSE Leap 15.5 — keepalived — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.5 📖 ~4 min read  •  Source: SUSE advisory RHSA-2025:0743 (see also SUSE bugzilla) Related CVEs: CVE-2024-41184 Upstream summary: ** DISPUTED ** In the vrrp_ipsets_handler handler (fglobal_parser.c) of keepalived through 2.3.1, an integer overflow can occur. NOTE: this CVE Record […]

Read more
openSUSE Leap 15.5 — squid — multiple vulnerabilities (13 CVEs) — patch and remediation guide — diagnosis and fix on openSUSE Leap 15.5

openSUSE Leap 15.5 — squid — multiple vulnerabilities (13 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.5 📖 ~4 min read  •  Source: SUSE advisory GHSA-72c2-c3wm-8qxc (see also SUSE bugzilla) Related CVEs: CVE-2024-25111 CVE-2024-25617 CVE-2023-50269 CVE-2023-49285 CVE-2023-49286 CVE-2023-46728 CVE-2023-46724 CVE-2023-46846  +5 more Upstream summary: Squid is a web proxy cache. Starting in version 3.5.27 and prior […]

Read more
openSUSE Tumbleweed — gifsicle — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on openSUSE Tumbleweed

openSUSE Tumbleweed — gifsicle — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory openSUSE-SU-2024:0146-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-46009 CVE-2023-36193 Upstream summary: gifsicle-1.94 was found to have a floating point exception (FPE) vulnerability via resize_stream at src/xform.c. Table of contents Symptom & Impact […]

Read more
openSUSE Tumbleweed — afterburn — multiple vulnerabilities (7 CVEs) — patch and remediation guide — diagnosis and fix on openSUSE Tumbleweed

openSUSE Tumbleweed — afterburn — multiple vulnerabilities (7 CVEs) — patch and remediation guide

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2021-27378 CVE-2024-12224 CVE-2021-32714 CVE-2020-35905 CVE-2020-36465 CVE-2021-32715 CVE-2021-38191 Upstream summary: An issue was discovered in the rand_core crate before 0.6.2 for Rust. Because read_u32_into and read_u64_into […]

Read more
openSUSE Leap 15.6 — libapr1 — vulnerability — patch and remediation guide — diagnosis and fix on openSUSE Leap 15.6

openSUSE Leap 15.6 — libapr1 — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read  •  Source: SUSE advisory openSUSE-SU-2024:14347-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-49582 Upstream summary: Lax permissions set by the Apache Portable Runtime library on Unix platforms would allow local users read access to named shared […]

Read more
openSUSE Leap 15.5 — dovecot23 — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on openSUSE Leap 15.5

openSUSE Leap 15.5 — dovecot23 — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.5 📖 ~4 min read  •  Source: SUSE advisory RHSA-2024:6529 (see also SUSE bugzilla) Related CVEs: CVE-2024-23185 CVE-2024-23184 Upstream summary: Very large headers can cause resource exhaustion when parsing message. The message-parser normally reads reasonably sized chunks of the message. […]

Read more
openSUSE Leap 15.5 — sevctl — vulnerability — patch and remediation guide — diagnosis and fix on openSUSE Leap 15.5

openSUSE Leap 15.5 — sevctl — vulnerability — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.5 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2024:0250-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-50711 Upstream summary: vmm-sys-util is a collection of modules that provides helpers and utilities used by multiple rust-vmm components. Starting in version 0.5.0 and […]

Read more
openSUSE Leap 15.5 — gnutls — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on openSUSE Leap 15.5

openSUSE Leap 15.5 — gnutls — multiple vulnerabilities (5 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.5 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2024:1271-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-28834 CVE-2024-28835 CVE-2024-0553 CVE-2024-0567 CVE-2023-5981 Upstream summary: A flaw was found in GnuTLS. The Minerva attack is a cryptographic vulnerability that exploits deterministic behavior […]

Read more
CHAT