🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2024:0211-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-22189 CVE-2026-35480 CVE-2023-49295 Upstream summary: quic-go is an implementation of the QUIC protocol in Go. Prior to version 0.42.0, an attacker can cause its peer […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2016:0536-1 (see also SUSE bugzilla) Related CVEs: CVE-2015-7512 CVE-2015-8104 CVE-2025-54518 CVE-2026-23558 CVE-2026-23554 CVE-2026-23555 CVE-2025-27466 CVE-2025-58143 +12 more Upstream summary: Buffer overflow in the pcnet_receive function in hw/net/pcnet.c in QEMU, when a guest […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2026-39324 Upstream summary: Rack::Session is a session management implementation for Rack. From 2.0.0 to before 2.1.2, Rack::Session::Cookie incorrectly handles decryption failures when configured with secrets:. […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory RHSA-2026:8457 (see also SUSE bugzilla) Related CVEs: CVE-2026-33984 CVE-2026-33986 CVE-2026-26955 CVE-2026-26965 CVE-2026-31806 CVE-2026-31883 CVE-2026-31885 CVE-2026-24491 +12 more Upstream summary: FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2018:3200-1 (see also SUSE bugzilla) Related CVEs: CVE-2018-10933 CVE-2025-5372 CVE-2019-14889 CVE-2026-0964 CVE-2026-0966 CVE-2025-8114 CVE-2025-4877 CVE-2025-4878 +12 more Upstream summary: A vulnerability was found in libssh's server-side state machine before versions 0.7.6 and […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE security advisory Related CVEs: CVE-2026-35580 CVE-2022-43705 CVE-2018-9127 CVE-2026-35582 CVE-2024-50382 CVE-2021-40529 CVE-2016-9132 CVE-2017-14737 +4 more Upstream summary: Emissary is a P2P based data-driven workflow engine. Prior to 8.39.0, GitHub Actions workflow files contained shell […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2026:1347-1 (see also SUSE bugzilla) Related CVEs: CVE-2026-34714 CVE-2026-34982 CVE-2023-4738 CVE-2023-4751 CVE-2023-2609 CVE-2022-3234 CVE-2022-0407 CVE-2022-0413 +12 more Upstream summary: Vim before 9.2.0272 allows code execution that happens immediately upon opening a crafted […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2024:14509-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-52308 CVE-2025-27144 CVE-2024-6104 Upstream summary: The GitHub CLI version 2.6.1 and earlier are vulnerable to remote code execution through a malicious codespace SSH server when […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2026-40560 Upstream summary: Starman versions before 0.4018 for Perl allows HTTP Request Smuggling via Improper Header Precedence. Starman incorrectly prioritizes "Content-Length" over "Transfer-Encoding: chunked" when […]
🟢 Low ⏱ 5–15 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2025-54314 Upstream summary: Thor before 1.4.0 can construct an unsafe shell command from library input. NOTE: this is disputed by the Supplier because "the method […]
