🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.5 📖 ~4 min read • Source: SUSE advisory SUSE-SR:2009:002 (see also SUSE bugzilla) Related CVEs: CVE-2008-2383 Upstream summary: CRLF injection vulnerability in xterm allows user-assisted attackers to execute arbitrary commands via LF (aka \n) characters surrounding a command name […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2023:4439-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-38252 CVE-2023-38253 CVE-2022-38223 CVE-2006-6772 CVE-2010-2074 CVE-2012-4929 CVE-2016-9434 CVE-2016-9435 +12 more Upstream summary: An out-of-bounds read flaw was found in w3m, in the Strnew_size function in […]
🟢 Low ⏱ 5–15 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.5 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2023:3385-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-33546 Upstream summary: ** DISPUTED ** Janino 3.1.9 and earlier are subject to denial of service (DOS) attacks when using the expression evaluator.guess parameter […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2022:0068-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-0699 Upstream summary: A double-free condition exists in contrib/shpsort.c of shapelib 1.5.0 and older releases. This issue may allow an attacker to cause a denial […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2023-36811 CVE-2016-10099 CVE-2016-10100 CVE-2017-15914 Upstream summary: borgbackup is an opensource, deduplicating archiver with compression and authenticated encryption. A flaw in the cryptographic authentication scheme in […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.5 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2023:0157-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-32784 Upstream summary: In KeePass 2.x before 2.54, it is possible to recover the cleartext master password from a memory dump, even when a […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.5 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2023:0222-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-31486 Upstream summary: HTTP::Tiny before 0.083, a Perl core module since 5.13.9 and available standalone on CPAN, has an insecure default TLS configuration where […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2021-45005 CVE-2022-30974 Upstream summary: Artifex MuJS v1.1.3 was discovered to contain a heap buffer overflow which is caused by conflicting JumpList of nested try/finally statements. […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.5 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2023:0232-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-39214 Upstream summary: mitmproxy is an interactive, SSL/TLS-capable intercepting proxy. In mitmproxy 7.0.2 and below, a malicious client or server is able to perform […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2022:3561-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-2469 Upstream summary: GNU SASL libgsasl server-side read-out-of-bounds with malicious authenticated GSS-API client Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis […]
