openSUSE Tumbleweed

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory openSUSE-SU-2022:10202-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-34055 CVE-2022-41751 CVE-2021-3496 CVE-2008-4575 CVE-2008-4641 CVE-2018-6612 CVE-2016-3822 CVE-2018-16554  +1 more Upstream summary: jhead 3.06 is vulnerable to Buffer Overflow via exif.c in function Put16u. Table […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory openSUSE-SU-2022:10147-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-41550 CVE-2016-10324 CVE-2016-10325 CVE-2016-10326 CVE-2017-7853 Upstream summary: GNU oSIP v5.3.0 was discovered to contain an integer overflow via the component osip_body_parse_header. Table of contents Symptom […]

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory openSUSE-SU-2021:1187-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-20314 Upstream summary: Stack buffer overflow in libspf2 versions below 1.2.11 when processing certain SPF macros can lead to Denial of service and potentially code […]

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory openSUSE-SU-2025:15113-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-21831 Upstream summary: A code injection vulnerability exists in the Active Storage >= v5.2.0 that could allow an attacker to execute code via image_processing arguments. […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2022:4620-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-41860 CVE-2022-41861 CVE-2019-17185 CVE-2022-41859 CVE-2008-4474 CVE-2012-3547 CVE-2014-2015 CVE-2015-4680  +11 more Upstream summary: In freeradius, when an EAP-SIM supplicant sends an unknown SIM option, the server […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory openSUSE-SU-2025:14697-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-29181 CVE-2022-24836 CVE-2022-24839 Upstream summary: Nokogiri is an open source XML and HTML library for Ruby. Nokogiri prior to version 1.13.6 does not type-check all […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory openSUSE-SU-2021:1071-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-3567 Upstream summary: A flaw was found in Caribou due to a regression of CVE-2020-25712 fix. An attacker could use this flaw to bypass screen-locking […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE security advisory Related CVEs: CVE-2021-40444 Upstream summary: Unknown. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification […]

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory openSUSE-SU-2022:10257-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-46393 CVE-2022-35409 CVE-2021-45450 CVE-2018-0487 CVE-2018-0488 CVE-2021-24119 CVE-2017-14032 CVE-2017-2784  +1 more Upstream summary: An issue was discovered in Mbed TLS before 2.28.2 and 3.x before 3.3.0. […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2022:2200-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-27404 CVE-2022-27406 Upstream summary: FreeType commit 1e2eb65048f75c64b68708efed6ce904c31f3b2f was discovered to contain a heap buffer overflow via the function sfnt_init_face. Table of contents Symptom & Impact […]