openSUSE Tumbleweed

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2026:0355-1 (see also SUSE bugzilla) Related CVEs: CVE-2026-1484 CVE-2026-1489 CVE-2025-13601 CVE-2025-6052 CVE-2024-52533 CVE-2019-12450 CVE-2025-7039 CVE-2025-3360  +11 more Upstream summary: A flaw was found in the GLib Base64 encoding routine when processing very […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory RHSA-2026:7080 (see also SUSE bugzilla) Related CVEs: CVE-2026-21710 CVE-2026-21712 CVE-2026-21713 CVE-2026-21714 CVE-2026-21716 CVE-2026-21717 CVE-2025-59464 CVE-2026-21715 Upstream summary: A flaw in Node.js HTTP request handling causes an uncaught `TypeError` when a request is […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2026:1639-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-14813 CVE-2026-3505 CVE-2026-5598 CVE-2024-30172 CVE-2023-33201 CVE-2015-7940 CVE-2016-1000338 CVE-2019-17359  +12 more Upstream summary: : Use of a Broken or Risky Cryptographic Algorithm vulnerability in Legion of […]

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2026-41176 CVE-2026-41179 CVE-2026-39828 CVE-2026-39829 CVE-2026-39830 CVE-2026-39833 CVE-2026-46595 CVE-2026-46598  +12 more Upstream summary: Rclone is a command-line program to sync files and directories to and from […]

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory openSUSE-SU-2021:1577-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-44228 CVE-2019-17571 CVE-2021-45105 CVE-2021-45046 CVE-2026-34477 CVE-2026-34479 CVE-2026-34480 CVE-2026-34481  +4 more Upstream summary: Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI […]

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory RHSA-2026:1472 (see also SUSE bugzilla) Related CVEs: CVE-2025-15467 CVE-2006-3738 CVE-2026-28388 CVE-2026-31789 CVE-2025-11187 CVE-2025-15468 CVE-2025-9230 CVE-2024-12797  +12 more Upstream summary: Issue summary: Parsing CMS AuthEnvelopedData or EnvelopedData message with maliciously crafted AEAD parameters […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2026:0849-1 (see also SUSE bugzilla) Related CVEs: CVE-2026-27205 CVE-2025-47278 Upstream summary: Flask is a web server gateway interface (WSGI) web application framework. In versions 3.1.2 and below, when the session object is […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2021-34337 CVE-2025-53882 Upstream summary: An issue was discovered in Mailman Core before 3.3.5. An attacker with access to the REST API could use timing attacks […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory openSUSE-SU-2025:14937-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-30153 CVE-2026-32285 Upstream summary: kin-openapi is a Go project for handling OpenAPI files. Prior to 0.131.0, when validating a request with a multipart/form-data schema, if […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2026:21382-1 (see also SUSE bugzilla) Related CVEs: CVE-2026-40192 CVE-2026-25990 CVE-2025-48379 Upstream summary: Pillow is a Python imaging library. Versions 10.3.0 through 12.1.1 did not limit the amount of GZIP-compressed data read when […]