openSUSE Tumbleweed

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2025-65409 CVE-2021-46019 Upstream summary: A divide-by-zero in the encryption/decryption routines of GNU Recutils v1.9 allows attackers to cause a Denial of Service (DoS) via inputting […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2025:0561-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-0650 CVE-2023-3966 CVE-2023-5366 CVE-2023-3152 CVE-2022-4338 CVE-2020-27827 CVE-2026-34956 CVE-2023-3153  +2 more Upstream summary: A flaw was found in the Open Virtual Network (OVN). Specially crafted UDP […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory RHSA-2025:13935 (see also SUSE bugzilla) Related CVEs: CVE-2025-4674 CVE-2025-47906 CVE-2025-0913 CVE-2025-4673 CVE-2025-22871 Upstream summary: The go command may execute unexpected commands when operating in untrusted VCS repositories. This occurs when possibly dangerous […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory RHSA-2026:6621 (see also SUSE bugzilla) Related CVEs: CVE-2026-30892 CVE-2025-24965 CVE-2024-21626 CVE-2022-27650 Upstream summary: crun is an open source OCI Container Runtime fully written in C. In versions 1.19 through 1.26, the `crun […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2026:1861-1 (see also SUSE bugzilla) Related CVEs: CVE-2026-33811 CVE-2026-39820 CVE-2026-39836 CVE-2026-42499 CVE-2026-27140 CVE-2026-27143 CVE-2026-32280 CVE-2026-39817  +12 more Upstream summary: When using LookupCNAME with the cgo DNS resolver, a very long CNAME response […]

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2015:0100-1 (see also SUSE bugzilla) Related CVEs: CVE-2014-9390 CVE-2019-1353 CVE-2025-27614 CVE-2025-46334 CVE-2025-48384 CVE-2025-48385 CVE-2024-32002 CVE-2024-32004  +12 more Upstream summary: Git before 1.8.5.6, 1.9.x before 1.9.5, 2.0.x before 2.0.5, 2.1.x before 2.1.4, and […]

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory openSUSE-SU-2021:1273-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-3781 CVE-2025-27832 CVE-2025-27833 CVE-2025-27834 CVE-2025-27835 CVE-2025-27836 CVE-2024-46951 CVE-2024-46952  +12 more Upstream summary: A trivial sandbox (enabled with the `-dSAFER` option) escape flaw was found in […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE security advisory Related CVEs: CVE-2023-6378 CVE-2023-6481 CVE-2024-12798 CVE-2026-1225 CVE-2025-11226 CVE-2024-12801 Upstream summary: A serialization vulnerability in logback receiver component part of logback version 1.4.11 allows an attacker to mount a Denial-Of-Service attack by […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2026-34531 Upstream summary: Flask-HTTPAuth provides Basic, Digest and Token HTTP authentication for Flask routes. Prior to version 4.8.1, in a situation where the client makes […]