🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.5 📖 ~4 min read • Source: SUSE advisory RHSA-2025:0308 (see also SUSE bugzilla) Related CVEs: CVE-2024-56201 Upstream summary: Jinja is an extensible templating engine. In versions on the 3.x branch prior to 3.1.5, a bug in the Jinja compiler […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2025-68616 Upstream summary: WeasyPrint helps web developers to create PDF documents. Prior to version 68.0, a server-side request forgery (SSRF) protection bypass exists in […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2024:2106-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-35241 CVE-2024-35242 CVE-2025-67746 Upstream summary: Composer is a dependency manager for PHP. On the 2.x branch prior to versions 2.2.24 and 2.7.7, the `status`, […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2025:1356-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-32433 CVE-2025-48041 CVE-2025-48038 CVE-2025-48039 CVE-2025-48040 CVE-2025-4748 CVE-2025-26618 Upstream summary: Erlang/OTP is a set of libraries for the Erlang programming language. Prior to versions OTP-27.3.3, […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.5 📖 ~4 min read • Source: SUSE advisory RHSA-2024:9180 (see also SUSE bugzilla) Related CVEs: CVE-2024-24814 Upstream summary: mod_auth_openidc is an OpenID Certified(tm) authentication and authorization module for the Apache 2.x HTTP server that implements the OpenID Connect Relying […]
🟢 Low ⏱ 5–15 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2025:4501-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-47466 Upstream summary: TagLib before 2.0 allows a segmentation violation and application crash during tag writing via a crafted WAV file in which an […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2024:14450-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-48936 CVE-2024-42511 Upstream summary: SchedMD Slurm before 24.05.4 has Incorrect Authorization. A mistake in authentication handling in stepmgr could permit an attacker to execute […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.5 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2024:0221-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-39705 Upstream summary: NLTK through 3.8.1 allows remote code execution if untrusted packages have pickled Python code, and the integrated data package download functionality […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2025:0113-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-2592 CVE-2025-3015 CVE-2024-45679 CVE-2024-40724 CVE-2022-45748 CVE-2024-48426 CVE-2025-2152 CVE-2025-3159 +10 more Upstream summary: A vulnerability, which was classified as critical, has been found in Open Asset […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2024:14354-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-43806 CVE-2025-58160 Upstream summary: Rustix is a set of safe Rust bindings to POSIX-ish APIs. When using `rustix::fs::Dir` using the `linux_raw` backend, it's possible […]
