openSUSE

openSUSE Leap 15.5 — apache-sshd — vulnerability — patch and remediation guide — diagnosis and fix on openSUSE Leap 15.5

openSUSE Leap 15.5 — apache-sshd — vulnerability — patch and remediation guide

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.5 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2024:0224-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-45047 Upstream summary: Class org.apache.sshd.server.keyprovider.SimpleGeneratorHostKeyProvider in Apache MINA SSHD <= 2.9.1 uses Java deserialization to load a serialized java.security.PrivateKey. The class is one of […]

Read more
openSUSE Leap 15.5 — libuev3 — vulnerability — patch and remediation guide — diagnosis and fix on openSUSE Leap 15.5

openSUSE Leap 15.5 — libuev3 — vulnerability — patch and remediation guide

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.5 📖 ~4 min read  •  Source: SUSE advisory openSUSE-SU-2024:0023-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-48620 Upstream summary: uev (aka libuev) before 2.4.1 has a buffer overflow in epoll_wait if maxevents is a large number. Table of contents Symptom […]

Read more
openSUSE Leap 15.5 — runc — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on openSUSE Leap 15.5

openSUSE Leap 15.5 — runc — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.5 📖 ~4 min read  •  Source: SUSE advisory openSUSE-SU-2022:10081-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-1996 CVE-2024-21626 CVE-2024-45310 Upstream summary: Authorization Bypass Through User-Controlled Key in GitHub repository emicklei/go-restful prior to v3.8.0. Table of contents Symptom & Impact Environment […]

Read more
openSUSE Leap 15.5 — qbittorrent — vulnerability — patch and remediation guide — diagnosis and fix on openSUSE Leap 15.5

openSUSE Leap 15.5 — qbittorrent — vulnerability — patch and remediation guide

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.5 📖 ~4 min read  •  Source: SUSE advisory openSUSE-SU-2023:0391-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-30801 Upstream summary: All versions of the qBittorrent client through 4.5.5 use default credentials when the web user interface is enabled. The administrator is […]

Read more
openSUSE Leap 15.5 — libpq5 — multiple vulnerabilities (12 CVEs) — patch and remediation guide — diagnosis and fix on openSUSE Leap 15.5

openSUSE Leap 15.5 — libpq5 — multiple vulnerabilities (12 CVEs) — patch and remediation guide

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.5 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2023:3807-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-5869 CVE-2024-10979 CVE-2024-7348 CVE-2024-0985 CVE-2023-5868 CVE-2024-10976 CVE-2024-10978 CVE-2024-4317  +4 more Upstream summary: A flaw was found in PostgreSQL that allows authenticated database users to […]

Read more
openSUSE Leap 15.5 — sox — multiple vulnerabilities (10 CVEs) — patch and remediation guide — diagnosis and fix on openSUSE Leap 15.5

openSUSE Leap 15.5 — sox — multiple vulnerabilities (10 CVEs) — patch and remediation guide

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.5 📖 ~4 min read  •  Source: SUSE advisory openSUSE-SU-2023:0328-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-40426 CVE-2023-34318 CVE-2023-34432 CVE-2019-13590 CVE-2021-3643 CVE-2022-31650 CVE-2022-31651 CVE-2023-32627  +2 more Upstream summary: A heap-based buffer overflow vulnerability exists in the sphere.c start_read() functionality of […]

Read more
openSUSE Leap 15.5 — rxvt-unicode — vulnerability — patch and remediation guide — diagnosis and fix on openSUSE Leap 15.5

openSUSE Leap 15.5 — rxvt-unicode — vulnerability — patch and remediation guide

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.5 📖 ~4 min read  •  Source: SUSE advisory openSUSE-SU-2023:0306-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-4170 Upstream summary: The rxvt-unicode package is vulnerable to a remote code execution, in the Perl background extension, when an attacker can control the […]

Read more
openSUSE Leap 15.5 — exim — multiple vulnerabilities (8 CVEs) — patch and remediation guide — diagnosis and fix on openSUSE Leap 15.5

openSUSE Leap 15.5 — exim — multiple vulnerabilities (8 CVEs) — patch and remediation guide

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.5 📖 ~4 min read  •  Source: SUSE advisory openSUSE-SU-2023:0293-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-42115 CVE-2022-3559 CVE-2023-42117 CVE-2023-42116 CVE-2024-39929 CVE-2023-51766 CVE-2023-42119 CVE-2023-42114 Upstream summary: Exim AUTH Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to […]

Read more
openSUSE Leap 15.5 — python3-CairoSVG — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on openSUSE Leap 15.5

openSUSE Leap 15.5 — python3-CairoSVG — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.5 📖 ~4 min read  •  Source: SUSE advisory openSUSE-SU-2023:0260-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-27586 CVE-2021-21236 Upstream summary: CairoSVG is an SVG converter based on Cairo, a 2D graphics library. Prior to version 2.7.0, Cairo can send requests […]

Read more
openSUSE Leap 15.5 — renderdoc — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on openSUSE Leap 15.5

openSUSE Leap 15.5 — renderdoc — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.5 📖 ~4 min read  •  Source: SUSE advisory openSUSE-SU-2023:0253-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-33863 CVE-2023-33864 CVE-2023-33865 Upstream summary: SerialiseValue in RenderDoc before 1.27 allows an Integer Overflow with a resultant Buffer Overflow. 0xffffffff is sign-extended to 0xffffffffffffffff […]

Read more
CHAT