🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2026:1936-1 (see also SUSE bugzilla) Related CVEs: CVE-2026-7111 Upstream summary: Text::CSV_XS versions before 1.62 for Perl have a use-after-free when registered callbacks extend the Perl argument stack, which may enable type confusion […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2026-33598 CVE-2026-33254 CVE-2026-33593 CVE-2026-33594 CVE-2026-33595 CVE-2026-33597 CVE-2026-33599 CVE-2026-33602 +10 more Upstream summary: A cached crafted response can cause an out-of-bounds read if custom Lua code […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2026-45190 CVE-2026-45191 CVE-2026-40198 CVE-2026-40199 Upstream summary: Net::CIDR::Lite versions before 0.24 for Perl does not properly validate IP address and CIDR mask inputs, which may allow […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2026-39402 CVE-2022-47952 CVE-2015-1331 CVE-2015-1334 CVE-2015-1335 CVE-2016-8649 CVE-2017-5985 CVE-2018-6556 +1 more Upstream summary: lxc is a Linux container runtime. In the setuid helper lxc-user-nic, the delete […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2016-10132 CVE-2016-10141 CVE-2025-55780 CVE-2026-25556 CVE-2016-8729 CVE-2017-17858 CVE-2017-5627 CVE-2017-5628 +12 more Upstream summary: regexp.c in Artifex Software, Inc. MuJS allows attackers to cause a denial of […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2026:1421-1 (see also SUSE bugzilla) Related CVEs: CVE-2026-31899 Upstream summary: CairoSVG is an SVG converter based on Cairo, a 2D graphics library. Prior to Kozea/CairoSVG has exponential denial of service via recursive […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2026-34872 CVE-2026-34873 CVE-2026-34875 CVE-2026-34877 CVE-2023-45199 CVE-2026-25835 CVE-2026-34876 CVE-2024-49195 +3 more Upstream summary: An issue was discovered in Mbed TLS 3.5.x and 3.6.x through 3.6.5 and […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2026-44597 CVE-2026-44603 CVE-2026-44601 CVE-2026-44602 CVE-2022-33903 CVE-2014-0160 CVE-2020-10593 CVE-2021-34548 +12 more Upstream summary: Tor before 0.4.9.7 has an out-of-bounds read when an END, a TRUNCATE, or […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2022:10126-1 (see also SUSE bugzilla) Related CVEs: CVE-2018-25032 CVE-2026-27171 Upstream summary: zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches. Table of contents […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2026:0855-1 (see also SUSE bugzilla) Related CVEs: CVE-2026-27727 CVE-2019-5427 CVE-2018-20433 Upstream summary: mchange-commons-java, a library that provides Java utilities, includes code that mirrors early implementations of JNDI functionality, including support for remote […]
