openSUSE Tumbleweed

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2026-0847 CVE-2026-33230 CVE-2025-14009 Upstream summary: A vulnerability in NLTK versions up to and including 3.9.2 allows arbitrary file read via path traversal in multiple CorpusReader […]

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2025-68398 CVE-2026-21889 CVE-2025-32021 CVE-2026-27457 CVE-2025-61587 CVE-2024-39303 CVE-2022-24710 CVE-2020-6802  +1 more Upstream summary: Weblate is a web based localization tool. In versions prior to 5.15.1, it […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory RHSA-2026:2918 (see also SUSE bugzilla) Related CVEs: CVE-2026-25506 CVE-2019-3691 Upstream summary: MUNGE is an authentication service for creating and validating user credentials. From 0.5 to 0.5.17, local attacker can exploit a buffer […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory RHSA-2025:23063 (see also SUSE bugzilla) Related CVEs: CVE-2025-61594 CVE-2025-58767 Upstream summary: URI is a module providing classes to handle Uniform Resource Identifiers. In versions 0.12.4 and earlier (bundled in Ruby 3.2 series) […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory RHSA-2025:19927 (see also SUSE bugzilla) Related CVEs: CVE-2025-31133 CVE-2025-52565 CVE-2025-52881 CVE-2023-27561 CVE-2019-19921 CVE-2021-30465 CVE-2023-25809 CVE-2023-28642  +5 more Upstream summary: runc is a CLI tool for spawning and running containers according to the […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory RHSA-2026:14790 (see also SUSE bugzilla) Related CVEs: CVE-2026-33636 CVE-2026-25646 CVE-2025-66293 CVE-2011-2690 CVE-2011-2692 CVE-2026-22695 CVE-2026-22801 CVE-2025-64506  +8 more Upstream summary: LIBPNG is a reference library for use in applications that read, create, and […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2026-41142 CVE-2026-42216 CVE-2026-40244 CVE-2026-40250 CVE-2026-34545 CVE-2026-34588 CVE-2026-34589 CVE-2026-27622  +12 more Upstream summary: OpenEXR provides the specification and reference implementation of the EXR file format, an […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2025:02974-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-46836 Upstream summary: net-tools is a collection of programs that form the base set of the NET-3 networking distribution for the Linux operating system. Inn […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2026:1436-1 (see also SUSE bugzilla) Related CVEs: CVE-2026-33936 Upstream summary: The `ecdsa` PyPI package is a pure Python implementation of ECC (Elliptic Curve Cryptography) with support for ECDSA (Elliptic Curve Digital Signature […]

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory BLOG-XZ (see also SUSE bugzilla) Related CVEs: CVE-2024-3094 CVE-2026-34743 CVE-2025-31115 CVE-2022-1271 Upstream summary: Malicious code was discovered in the upstream tarballs of xz, starting with version 5.6.0. Through a series of complex […]