openSUSE Tumbleweed

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory openSUSE-SU-2024:0294-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-26964 CVE-2025-3416 Upstream summary: An issue was discovered in hyper v0.13.7. h2-0.2.4 Stream stacking occurs when the H2 component processes HTTP2 RST_STREAM frames. As a […]

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory openSUSE-SU-2025:14935-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-26794 CVE-2023-42117 CVE-2023-42116 CVE-2010-4344 CVE-2014-2957 CVE-2018-6789 CVE-2019-10149 CVE-2019-13917  +12 more Upstream summary: Exim 4.98 before 4.98.1, when SQLite hints and ETRN serialization are used, allows […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory openSUSE-SU-2025:14864-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-23386 Upstream summary: A Incorrect Default Permissions vulnerability in the openSUSE Tumbleweed package gerbera allows the service user gerbera to escalate to root.,This issue affects […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory openSUSE-SU-2021:1112-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-3630 CVE-2021-32490 CVE-2021-32491 CVE-2021-32492 CVE-2021-32493 CVE-2021-3500 CVE-2025-53367 CVE-2021-46310  +6 more Upstream summary: An out-of-bounds write vulnerability was found in DjVuLibre in DJVU::DjVuTXT::decode() in DjVuText.cpp via […]

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2025:03193-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-40929 Upstream summary: Cpanel::JSON::XS before version 4.40 for Perl has an integer buffer overflow causing a segfault when parsing crafted JSON, enabling denial-of-service attacks or […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2026:21553-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-15536 Upstream summary: A weakness has been identified in BYVoid OpenCC up to 1.1.9. This vulnerability affects the function opencc::MaxMatchSegmentation of the file src/MaxMatchSegmentation.cpp. This […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2025-13402 CVE-2025-13470 CVE-2023-29480 CVE-2021-33589 CVE-2023-29479 Upstream summary: Unknown. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution […]

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2022:1415-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-1949 CVE-2021-45341 CVE-2025-54141 CVE-2025-4435 CVE-2025-2487 CVE-2024-0775 CVE-2024-35817 CVE-2024-36921  +12 more Upstream summary: An access control bypass vulnerability found in 389-ds-base. That mishandling of the filter […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory RHSA-2026:0914 (see also SUSE bugzilla) Related CVEs: CVE-2025-14422 CVE-2025-14423 CVE-2025-14424 CVE-2025-14425 CVE-2025-15059 CVE-2025-10920 CVE-2025-10922 CVE-2025-10925  +12 more Upstream summary: GIMP PNM File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2026:21159-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-11687 Upstream summary: A flaw was found in the gi-docgen. This vulnerability allows arbitrary JavaScript execution in the context of the page – enabling DOM […]