openSUSE Tumbleweed

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory openSUSE-SU-2024:14523-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-28085 CVE-2017-2616 CVE-2026-27456 CVE-2026-3184 CVE-2025-14104 CVE-2022-0563 CVE-2021-3995 CVE-2021-3996  +1 more Upstream summary: wall in util-linux through 2.40, often installed with setgid tty permissions, allows escape […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2026-41602 CVE-2026-4427 CVE-2026-34986 CVE-2025-68156 CVE-2024-36129 CVE-2024-8975 CVE-2026-25934 CVE-2026-26958  +3 more Upstream summary: Integer Overflow or Wraparound vulnerability in Apache Thrift TFramedTransport Go language implementation This […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2026-8368 Upstream summary: LWP::UserAgent versions before 6.83 for Perl leak Authorization and Proxy-Authorization headers on cross-origin redirects. On a 3xx response, the redirect handler strips […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2025:03052-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-20053 CVE-2025-20109 CVE-2025-22839 CVE-2025-22840 CVE-2025-22889 CVE-2025-26403 CVE-2025-32086 CVE-2024-21820  +12 more Upstream summary: Improper buffer restrictions for some Intel(R) Xeon(R) Processor firmware with SGX enabled may […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2026-6321 Upstream summary: fast-uri decoded percent-encoded path separators and dot segments before applying dot-segment removal in its normalize() and equal() functions. Encoded path data was […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2026-39892 CVE-2026-34073 Upstream summary: cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. From 45.0.0 to before 46.0.7, if a […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2022:1274-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-1270 CVE-2007-4988 CVE-2020-12672 CVE-2025-32460 CVE-2025-27795 CVE-2025-27796 CVE-2006-3744 CVE-2008-1096  +12 more Upstream summary: In GraphicsMagick, a heap buffer overflow was found when parsing MIFF. Table of […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2026-35093 CVE-2022-1215 CVE-2026-35094 Upstream summary: A flaw was found in libinput. A local attacker who can place a specially crafted Lua bytecode file in certain […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2023:323-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-4883 CVE-2026-4367 CVE-2023-43788 CVE-2023-43789 CVE-2022-44617 CVE-2022-46285 Upstream summary: A flaw was found in libXpm. When processing files with .Z or .gz extensions, the library calls […]