openSUSE Tumbleweed

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE security advisory Related CVEs: CVE-2025-53000 CVE-2026-39377 CVE-2026-39378 Upstream summary: The nbconvert tool, jupyter nbconvert, converts Jupyter notebooks to various other formats via Jinja templates. Versions of nbconvert up to and including 7.16.6 on […]

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2025:0118-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-12084 CVE-2026-29518 CVE-2026-43618 CVE-2026-41035 CVE-2024-12087 CVE-2022-29154 CVE-2020-14387 CVE-2026-43617  +12 more Upstream summary: A heap-based buffer overflow flaw was found in the rsync daemon. This issue […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2026:20923-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-26623 CVE-2023-44398 CVE-2021-29457 CVE-2025-54080 CVE-2025-55304 CVE-2026-25884 CVE-2026-27631 CVE-2024-39695  +12 more Upstream summary: Exiv2 is a C++ library and a command-line utility to read, write, delete […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2026-42224 Upstream summary: ipl/web is a set of common web components for php projects. Prior to version 0.13.1, the vulnerability allows an attacker to inject […]

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory SUSE-SA:2008:046 (see also SUSE bugzilla) Related CVEs: CVE-2008-1949 CVE-2026-33845 CVE-2026-33846 CVE-2026-42009 CVE-2026-42010 CVE-2026-1584 CVE-2025-32988 CVE-2024-12133  +12 more Upstream summary: The _gnutls_recv_client_kx_message function in lib/gnutls_kx.c in libgnutls in gnutls-serv in GnuTLS before 2.2.4 […]

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory RHSA-2026:2224 (see also SUSE bugzilla) Related CVEs: CVE-2026-1709 CVE-2025-13609 CVE-2023-38201 CVE-2023-38200 CVE-2026-6420 CVE-2025-1057 CVE-2023-3674 Upstream summary: A flaw was found in Keylime. The Keylime registrar, since version 7.12.0, does not enforce client-side […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2026:1658-1 (see also SUSE bugzilla) Related CVEs: CVE-2026-40253 CVE-2026-23893 CVE-2026-22791 CVE-2024-0914 Upstream summary: openCryptoki is a PKCS#11 library and provides tooling for Linux and AIX. In versions 3.26.0 and below, the BER/DER […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2025-68616 Upstream summary: WeasyPrint helps web developers to create PDF documents. Prior to version 68.0, a server-side request forgery (SSRF) protection bypass exists in WeasyPrint's […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2026-33816 Upstream summary: Memory-safety vulnerability in github.com/jackc/pgx/v5. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2026-45205 CVE-2022-33980 CVE-2024-29131 CVE-2024-29133 Upstream summary: Uncontrolled Recursion vulnerability in Apache Commons. When processing an untrusted configuration file, Commons Configuration will throw a StackOverflowError for […]