🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2026:21587-1 (see also SUSE bugzilla) Related CVEs: CVE-2026-41066 Upstream summary: lxml is a library for processing XML and HTML in the Python language. Prior to 6.1.0, using either of the two parsers […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2026:21425-1 (see also SUSE bugzilla) Related CVEs: CVE-2026-39373 Upstream summary: JWCrypto implements JWK, JWS, and JWE specifications using python-cryptography. Prior to 1.5.7, an unauthenticated attacker can exhaust server memory by sending crafted […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2026:0930-1 (see also SUSE bugzilla) Related CVEs: CVE-2026-32746 CVE-2011-1526 CVE-2011-4862 Upstream summary: telnetd in GNU inetutils through 2.7 allows an out-of-bounds write in the LINEMODE SLC (Set Local Characters) suboption handler because […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2026-35397 CVE-2026-40110 CVE-2025-61669 CVE-2026-40934 Upstream summary: Jupyter Server is the backend for Jupyter web applications. In versions 2.17.0 and earlier, a path traversal vulnerability in […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2026-32611 CVE-2026-32633 CVE-2026-35587 CVE-2026-33641 CVE-2026-32596 CVE-2026-32608 CVE-2026-32609 CVE-2026-32610 +5 more Upstream summary: Glances is an open-source system cross-platform monitoring tool. The GHSA-x46r fix (commit 39161f0) […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2026-35444 CVE-2017-14442 CVE-2017-2887 CVE-2018-3977 CVE-2017-12122 CVE-2017-14440 CVE-2017-14441 CVE-2017-14448 +9 more Upstream summary: SDL_image is a library to load images of various formats as SDL surfaces. […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2026-42151 CVE-2026-42154 CVE-2026-40179 CVE-2019-10215 CVE-2021-29622 Upstream summary: Prometheus is an open-source monitoring system and time series database. Prior to versions 3.5.3 and 3.11.3, the client_secret […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2026-6843 CVE-2024-5742 CVE-2010-1160 CVE-2026-6842 CVE-2010-1161 Upstream summary: A flaw was found in nano. A local user could exploit a format string vulnerability in the `statusline()` […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2026:1135-1 Related CVEs: CVE-2026-33211 Upstream summary: Tekton Pipelines project provides k8s-style resources for declaring CI/CD-style pipelines. Starting in version 1.0.0 and prior to versions 1.0.1, 1.3.3, 1.6.1, 1.9.2, and 1.10.2, the Tekton […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2026-34610 Upstream summary: The leancrypto library is a cryptographic library that exclusively contains only PQC-resistant cryptographic algorithms. Prior to version 1.7.1, lc_x509_extract_name_segment() casts size_t vlen […]
