openSUSE Tumbleweed

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory RHSA-2026:2706 (see also SUSE bugzilla) Related CVEs: CVE-2025-61732 CVE-2025-61731 CVE-2025-68119 CVE-2025-61727 CVE-2025-47912 CVE-2025-58188 CVE-2024-45340 CVE-2025-22865  +12 more Upstream summary: A discrepancy between how Go and C/C++ comments were parsed allowed for code […]

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory RHSA-2026:2224 (see also SUSE bugzilla) Related CVEs: CVE-2026-1709 CVE-2025-13609 CVE-2023-38201 CVE-2023-38200 CVE-2026-6420 CVE-2025-1057 CVE-2023-3674 Upstream summary: A flaw was found in Keylime. The Keylime registrar, since version 7.12.0, does not enforce client-side […]

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE security advisory Related CVEs: CVE-2025-65834 Upstream summary: Meltytech Shotcut 25.10.31 is vulnerable to Buffer Overflow. A memory access violation occurs when processing MLT project files with manipulated width and height parameters. By setting […]

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2025-50343 Upstream summary: An issue was discovered in matio 1.5.28. A heap-based memory corruption can occur in Mat_VarCreateStruct() when the nfields value does not match […]

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2026-22262 CVE-2026-22264 CVE-2026-31931 CVE-2026-31932 CVE-2026-31933 CVE-2026-31934 CVE-2026-31935 CVE-2026-31937  +12 more Upstream summary: Suricata is a network IDS, IPS and NSM engine. While saving a dataset […]

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2026-22797 Upstream summary: An issue was discovered in OpenStack keystonemiddleware 10.5 through 10.7 before 10.7.2, 10.8 and 10.9 before 10.9.1, and 10.10 through 10.12 before […]

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2025-69194 CVE-2025-69195 Upstream summary: A security issue was discovered in GNU Wget2 when handling Metalink documents. The application fails to properly validate file paths provided […]

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory RHSA-2026:0770 (see also SUSE bugzilla) Related CVEs: CVE-2025-67268 CVE-2025-67269 Upstream summary: gpsd before commit dc966aa contains a heap-based out-of-bounds write vulnerability in the drivers/driver_nmea2000.c file. The hnd_129540 function, which handles NMEA2000 PGN […]

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2025-68398 CVE-2026-21889 CVE-2025-32021 CVE-2026-27457 CVE-2025-61587 CVE-2024-39303 CVE-2022-24710 CVE-2020-6802  +1 more Upstream summary: Weblate is a web based localization tool. In versions prior to 5.15.1, it […]

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2026:20090-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-66570 CVE-2026-33745 CVE-2026-21428 CVE-2026-28435 CVE-2026-32627 CVE-2025-46728 CVE-2026-34441 CVE-2026-22776  +3 more Upstream summary: cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. Prior to 0.27.0, […]