openSUSE Tumbleweed

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory openSUSE-SU-2022:10235-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-36428 CVE-2019-17533 CVE-2019-20017 CVE-2019-20052 Upstream summary: matio (aka MAT File I/O Library) 1.5.18 through 1.5.21 has a heap-based buffer overflow in ReadInt32DataDouble (called from ReadInt32Data […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory openSUSE-SU-2022:0046-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-29050 Upstream summary: SphinxSearch in Sphinx Technologies Sphinx through 3.1.1 allows directory traversal (in conjunction with CVE-2019-14511) because the mysql client can be used for […]

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory openSUSE-SU-2020:0557-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-20787 CVE-2020-12066 CVE-2014-9351 Upstream summary: Teeworlds before 0.7.4 has an integer overflow when computing a tilemap size. Table of contents Symptom & Impact Environment & […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory openSUSE-SU-2025:14898-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-5253 Upstream summary: NetHack before version 3.6.0 allowed malicious use of escaping of characters in the configuration file (usually .nethackrc) which could be exploited. This […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2018-10528 CVE-2018-10529 CVE-2017-14265 CVE-2017-6886 CVE-2017-6887 CVE-2017-6890 CVE-2020-15503 CVE-2017-14348  +4 more Upstream summary: An issue was discovered in LibRaw 0.18.9. There is a stack-based buffer overflow […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory openSUSE-SU-2025:14715-1 (see also SUSE bugzilla) Related CVEs: CVE-2017-14461 CVE-2019-11500 CVE-2019-3814 CVE-2020-10957 CVE-2020-12100 CVE-2020-12673 CVE-2020-12674 CVE-2020-24386  +12 more Upstream summary: A specially crafted email delivered over SMTP and passed on to Dovecot by […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory openSUSE-SU-2020:0778-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-13614 Upstream summary: An issue was discovered in ssl.c in Axel before 2.17.8. The TLS implementation lacks hostname verification. Table of contents Symptom & Impact […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2020-10870 Upstream summary: Zim through 0.72.1 creates temporary directories with predictable names. A malicious user could predict and create Zim's temporary directories and prevent other […]

🟢 Low   ⏱ 5–15 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory openSUSE-SU-2019:2131-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-11324 Upstream summary: The urllib3 library before 1.24.2 for Python mishandles certain cases where the desired set of CA certificates is different from the OS […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory openSUSE-SU-2019:2280-1 (see also SUSE bugzilla) Related CVEs: CVE-2019-9893 Upstream summary: libseccomp before 2.4.0 did not correctly generate 64-bit syscall argument comparisons using the arithmetic operators (LT, GT, LE, GE), which might able […]