openSUSE Tumbleweed

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2026-41257 CVE-2026-43894 CVE-2025-49014 CVE-2026-32316 CVE-2026-33947 CVE-2026-33948 CVE-2026-39956 CVE-2026-39979  +12 more Upstream summary: jq is a command-line JSON processor. In 1.8.1 and earlier, the jq bytecode […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2026:1751-1 (see also SUSE bugzilla) Related CVEs: CVE-2026-2332 CVE-2026-5795 CVE-2025-5115 CVE-2024-13009 CVE-2024-22201 CVE-2023-36478 CVE-2022-2048 CVE-2020-27223  +12 more Upstream summary: In Eclipse Jetty, the HTTP/1.1 parser is vulnerable to request smuggling when chunk […]

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory openSUSE-SU-2020:2090-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-15180 CVE-2026-32710 CVE-2021-46661 CVE-2021-46663 CVE-2022-24048 CVE-2022-24050 CVE-2022-24051 CVE-2022-24052  +12 more Upstream summary: A flaw was found in the mysql-wsrep component of mariadb. Lack of input […]

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory openSUSE-SU-2022:0091-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-44790 CVE-2021-42013 CVE-2010-0425 CVE-2026-23918 CVE-2026-24072 CVE-2026-29169 CVE-2026-33006 CVE-2026-33523  +12 more Upstream summary: A carefully crafted request body can cause a buffer overflow in the mod_lua […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2026:20077-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-62518 CVE-2025-54368 Upstream summary: astral-tokio-tar is a tar archive reading/writing library for async Rust. Versions of astral-tokio-tar prior to 0.5.6 contain a boundary parsing vulnerability […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2025-66270 CVE-2020-26164 Upstream summary: The KDE Connect protocol 8 before 2025-11-28 does not correlate device IDs across two packets. This affects KDE Connect before 25.12 […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2025-61659 Upstream summary: bash-git-prompt 2.6.1 through 2.7.1 insecurely uses the /tmp/git-index-private$$ file, which has a predictable name. Table of contents Symptom & Impact Environment & […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2025-62876 Upstream summary: A Execution with Unnecessary Privileges vulnerability in lightdm-kde-greeter allows escalation from the service user to root.This issue affects lightdm-kde-greeter. before 6.0.4. Table […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2025-70067 CVE-2025-2756 CVE-2025-2750 CVE-2025-2751 CVE-2025-2757 CVE-2025-5167 CVE-2025-3158 CVE-2025-3548  +1 more Upstream summary: Buffer Overflow vulnerability exists in Assimp versions up to 6.0.2 in the FBX […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory openSUSE-SU-2025:0094-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-22869 CVE-2025-21613 CVE-2025-21614 CVE-2025-47914 Upstream summary: SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete […]