Approved changes feed: RSS · Atom

cpe:2.3:a:suse:opensuse_leap_15.5:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSuse (ec535637-432e-5a38-96dd-4ec1e0138f73)
ProductOpensuse Leap 15.5 (d9b878bc-6441-5d7e-a37c-2ff6b91a7c7a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-22034 vulnerable 2026-06-08 06:29:33.407896 Crafted projects can overwrite special files in the .osc config directory
MEDIUM (5.5)
Attackers could put the special files in .osc into the actual package sources (e.g. _apiurl). This allows the attacker to change the configuration of osc for the victim
Published: 2024-10-16T13:46:08.416Z
Updated: 2024-10-31T13:34:34.435Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-22033 vulnerable 2026-06-08 06:29:33.398436 obs-service-download_url is vulnerable to argument injection
MEDIUM (6.3)
The OBS service obs-service-download_url was vulnerable to a command injection vulnerability. The attacker could provide a configuration to the service that allowed to execute command in later steps
Published: 2024-10-16T13:42:46.559Z
Updated: 2024-10-16T14:07:57.318Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-22029 vulnerable 2026-06-08 06:29:33.389106 tomcat packaging allows for escalation to root from tomcat user
HIGH (7.8)
Insecure permissions in the packaging of tomcat allow local users that win a race during package installation to escalate to root
Published: 2024-10-16T13:20:47.698Z
Updated: 2025-08-26T20:18:11.916Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-32182 vulnerable 2026-06-08 06:04:45.102126 Details available
MEDIUM (5.9)
A Improper Link Resolution Before File Access ('Link Following') vulnerability in SUSE SUSE Linux Enterprise Desktop 15 SP5 postfix, SUSE SUSE Linux Enterprise High Performance Computing 15 SP5 postfix, SUSE openSUSE Leap 15.5 postfix.This issue affects SUSE Linux Enterprise Desktop 15 SP5: before 3.7.3-150500.3.5.1; SUSE Linux Enterprise High Performance Computing 15 SP5: before 3.7.3-150500.3.5.1; openSUSE Leap 15.5 : before 3.7.3-150500.3.5.1.
Published: 2023-09-19T15:07:02.966Z
Updated: 2024-09-24T18:55:21.587Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.