openSUSE Tumbleweed

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2026:0476-1 (see also SUSE bugzilla) Related CVEs: CVE-2026-21226 Upstream summary: Unknown. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution […]

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2018-1000005 CVE-2018-1000301 CVE-2026-1965 CVE-2025-9086 CVE-2024-6197 CVE-2023-38545 CVE-2023-38039 CVE-2023-23914  +12 more Upstream summary: libcurl 7.49.0 to and including 7.57.0 contains an out bounds read in code […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory openSUSE-SU-2025:15003-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-56406 CVE-2023-47039 CVE-2025-40909 CVE-2023-47038 CVE-2005-3962 CVE-2007-5116 CVE-2010-2761 CVE-2010-4410  +10 more Upstream summary: A heap buffer overflow vulnerability was discovered in Perl. Release branches 5.34, 5.36, […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2025-56005 Upstream summary: An undocumented and unsafe feature in the PLY (Python Lex-Yacc) library 3.11 allows Remote Code Execution (RCE) via the `picklefile` parameter in […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory openSUSE-SU-2025:14836-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-0633 Upstream summary: Heap-based Buffer Overflow vulnerability in iniparser_dumpsection_ini() in iniparser allows attacker to read out of bound memory Table of contents Symptom & Impact […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2026-42450 Upstream summary: Unknown. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2026-9256 CVE-2026-42945 CVE-2026-27651 CVE-2026-27654 CVE-2026-27784 CVE-2026-32647 CVE-2024-24989 CVE-2022-41741  +12 more Upstream summary: NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_rewrite_module module. […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2025-52891 CVE-2025-47947 CVE-2025-48866 CVE-2022-48279 CVE-2025-54571 CVE-2009-5031 CVE-2012-4528 CVE-2013-1915  +2 more Upstream summary: ModSecurity is an open source, cross platform web application firewall (WAF) engine for […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory SUSE-RU-2026:1001-1 (see also SUSE bugzilla) Related CVEs: CVE-2026-31812 Upstream summary: Quinn is a pure-Rust, async-compatible implementation of the IETF QUIC transport protocol. Prior to 0.11.14, a remote, unauthenticated attacker can trigger a […]

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory GHSA-c8g6-qrwh-m3vp (see also SUSE bugzilla) Related CVEs: CVE-2025-54469 CVE-2025-59937 CVE-2025-64102 CVE-2025-64103 CVE-2025-23266 CVE-2025-59345 CVE-2025-59352 CVE-2025-54123  +12 more Upstream summary: A vulnerability was identified in NeuVector, where the enforcer used environment variables CLUSTER_RPC_PORT […]