openSUSE

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read  •  Source: SUSE advisory RHSA-2025:0739 (see also SUSE bugzilla) Related CVEs: CVE-2023-22084 Upstream summary: Unknown. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read  •  Source: SUSE advisory RHSA-2025:9329 (see also SUSE bugzilla) Related CVEs: CVE-2025-40908 Upstream summary: YAML-LibYAML prior to 0.903.0 for Perl uses 2-args open, allowing existing files to be modified Table of contents Symptom & Impact […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read  •  Source: SUSE advisory openSUSE-SU-2024:14581-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-12254 CVE-2024-4030 Upstream summary: Starting in Python 3.12.0, the asyncio._SelectorSocketTransport.writelines() method would not "pause" writing and signal to the Protocol to drain the buffer […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2024:2074-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-52890 Upstream summary: NTFS-3G before 75dcdc2 has a use-after-free in ntfs_uppercase_mbs in libntfs-3g/unistr.c. NOTE: discussion suggests that exploitation would be challenging. Table of contents […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.5 📖 ~4 min read  •  Source: SUSE advisory openSUSE-SU-2024:14392-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-34155 CVE-2024-34156 CVE-2024-34158 CVE-2024-24788 Upstream summary: Calling any of the Parse functions on Go source code which contains deeply nested literals can cause a […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read  •  Source: SUSE advisory openSUSE-SU-2025:14937-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-30204 CVE-2018-16873 CVE-2021-28235 CVE-2023-48795 CVE-2023-47108 CVE-2022-41723 CVE-2019-11254 CVE-2018-16874  +5 more Upstream summary: golang-jwt is a Go implementation of JSON Web Tokens. Starting in version […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.5 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2024:2168-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-38394 Upstream summary: ** DISPUTED ** Mismatches in interpreting USB authorization policy between GNOME Settings Daemon (GSD) through 46.0 and the Linux kernel's underlying […]

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.5 📖 ~4 min read  •  Source: SUSE advisory openSUSE-SU-2024:0350-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-45157 CVE-2023-22644 CVE-2024-39223 CVE-2024-47832 CVE-2024-9486 CVE-2024-9264 CVE-2024-10975 CVE-2024-45794  +12 more Upstream summary: A vulnerability has been identified in the way that Rancher stores vSphere's […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.5 📖 ~4 min read  •  Source: SUSE advisory openSUSE-SU-2024:14513-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-0793 CVE-2023-2727 CVE-2023-2728 CVE-2021-25743 CVE-2024-3177 CVE-2023-2431 Upstream summary: A flaw was found in kube-controller-manager. This issue occurs when the initial application of a HPA […]