openSUSE Tumbleweed

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2024-28960 CVE-2015-5291 CVE-2025-27809 CVE-2025-27810 CVE-2024-45157 CVE-2024-23170 CVE-2014-8627 CVE-2014-8628  +1 more Upstream summary: An issue was discovered in Mbed TLS 2.18.0 through 2.28.x before 2.28.8 and […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory openSUSE-SU-2025:15006-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-29786 CVE-2024-45296 CVE-2025-26791 Upstream summary: Expr is an expression language and expression evaluation for Go. Prior to version 1.17.0, if the Expr expression parser is […]

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2026-32640 Upstream summary: SimpleEval is a library for adding evaluatable expressions into python projects. Prior to 1.0.5, objects (including modules) can leak dangerous modules through […]

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2022-2274 CVE-2016-0777 CVE-2026-35385 CVE-2024-6387 CVE-2021-28041 CVE-2021-41617 CVE-2023-38408 CVE-2008-1483  +12 more Upstream summary: The OpenSSL 3.0.4 release introduced a serious bug in the RSA implementation for […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory RHSA-2025:7147 Related CVEs: CVE-2025-24898 Upstream summary: rust-openssl is a set of OpenSSL bindings for the Rust programming language. In affected versions `ssl::select_next_proto` can return a slice pointing into the `server` argument's buffer […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2026-30923 CVE-2025-27110 CVE-2024-1019 CVE-2023-38285 CVE-2021-42717 CVE-2026-42268 CVE-2023-28882 CVE-2020-15598 Upstream summary: ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS […]

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2026-5663 CVE-2025-9732 CVE-2024-47796 CVE-2024-52333 CVE-2024-27628 CVE-2024-28130 CVE-2022-2121 CVE-2022-43272  +7 more Upstream summary: A security flaw has been discovered in OFFIS DCMTK up to 3.7.0. This […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE security advisory Related CVEs: CVE-2025-64441 Upstream summary: Unknown. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2025:1019-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-24049 Upstream summary: Unknown. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution […]