openSUSE

openSUSE Leap 15.5 — shim — multiple vulnerabilities (7 CVEs) — patch and remediation guide — diagnosis and fix on openSUSE Leap 15.5

openSUSE Leap 15.5 — shim — multiple vulnerabilities (7 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.5 📖 ~4 min read  •  Source: SUSE advisory SUSE-IU-2023:219-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-28737 CVE-2023-40547 CVE-2023-40546 CVE-2023-40548 CVE-2023-40549 CVE-2023-40550 CVE-2023-40551 Upstream summary: There's a possible overflow in handle_image() when shim tries to load and execute crafted EFI […]

Read more
openSUSE Leap 15.5 — wireshark — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on openSUSE Leap 15.5

openSUSE Leap 15.5 — wireshark — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.5 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2024:1347-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-24476 CVE-2024-0208 CVE-2024-0209 CVE-2023-2859 CVE-2024-8250 CVE-2024-4853 CVE-2024-4854 CVE-2024-4855  +12 more Upstream summary: ** DISPUTED ** A buffer overflow in Wireshark before 4.2.0 allows a […]

Read more
openSUSE Leap 15.5 — pgadmin4 — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on openSUSE Leap 15.5

openSUSE Leap 15.5 — pgadmin4 — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.5 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2024:1340-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-2044 CVE-2024-4216 Upstream summary: pgAdmin <= 8.3 is affected by a path-traversal vulnerability while deserializing users' sessions in the session handling code. If the […]

Read more
openSUSE Leap 15.5 — vim — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on openSUSE Leap 15.5

openSUSE Leap 15.5 — vim — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.5 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2024:0783-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-4750 CVE-2024-22667 CVE-2023-4733 CVE-2023-4738 CVE-2023-4752 CVE-2023-4781 CVE-2023-5535 CVE-2023-2609  +12 more Upstream summary: Use After Free in GitHub repository vim/vim prior to 9.0.1857. Table of […]

Read more
openSUSE Leap 15.5 — xorg-x11-server — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on openSUSE Leap 15.5

openSUSE Leap 15.5 — xorg-x11-server — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.5 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2024:1199-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-31082 CVE-2023-5380 Upstream summary: A heap-based buffer over-read vulnerability was found in the X.org server's ProcAppleDRICreatePixmap() function. This issue occurs when byte-swapped length values […]

Read more
openSUSE Leap 15.5 — uuidd — vulnerability — patch and remediation guide — diagnosis and fix on openSUSE Leap 15.5

openSUSE Leap 15.5 — uuidd — vulnerability — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.5 📖 ~4 min read  •  Source: SUSE advisory openSUSE-SU-2024:14523-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-28085 Upstream summary: wall in util-linux through 2.40, often installed with setgid tty permissions, allows escape sequences to be sent to other users' terminals […]

Read more
openSUSE Leap 15.5 — expat — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on openSUSE Leap 15.5

openSUSE Leap 15.5 — expat — multiple vulnerabilities (5 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.5 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2024:1129-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-28757 CVE-2024-45490 CVE-2024-45491 CVE-2024-45492 CVE-2023-52425 Upstream summary: libexpat through 2.6.1 allows an XML Entity Expansion attack when there is isolated use of external parsers […]

Read more
openSUSE Leap 15.5 — nghttp2 — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on openSUSE Leap 15.5

openSUSE Leap 15.5 — nghttp2 — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.5 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2024:1156-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-28182 CVE-2023-35945 Upstream summary: nghttp2 is an implementation of the Hypertext Transfer Protocol version 2 in C. The nghttp2 library prior to version 1.61.0 […]

Read more
openSUSE Leap 15.5 — hdf5-gnu-hpc — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on openSUSE Leap 15.5

openSUSE Leap 15.5 — hdf5-gnu-hpc — multiple vulnerabilities (5 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.5 📖 ~4 min read  •  Source: SUSE advisory openSUSE-SU-2018:1051-1 (see also SUSE bugzilla) Related CVEs: CVE-2016-4332 CVE-2021-37501 CVE-2018-11202 CVE-2019-8396 CVE-2020-10812 Upstream summary: The library's failure to check if certain message types support a particular flag, the HDF5 1.8.16 library […]

Read more
openSUSE Leap 15.5 — squid — multiple vulnerabilities (13 CVEs) — patch and remediation guide — diagnosis and fix on openSUSE Leap 15.5

openSUSE Leap 15.5 — squid — multiple vulnerabilities (13 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.5 📖 ~4 min read  •  Source: SUSE advisory GHSA-72c2-c3wm-8qxc (see also SUSE bugzilla) Related CVEs: CVE-2024-25111 CVE-2024-25617 CVE-2023-50269 CVE-2023-49285 CVE-2023-49286 CVE-2023-46728 CVE-2023-46724 CVE-2023-46846  +5 more Upstream summary: Squid is a web proxy cache. Starting in version 3.5.27 and prior […]

Read more
CHAT