openSUSE Tumbleweed

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2025-55197 CVE-2026-41168 CVE-2026-41312 CVE-2026-40260 CVE-2026-33699 CVE-2026-33123 CVE-2026-31826 CVE-2026-28351  +5 more Upstream summary: pypdf is a free and open-source pure-python PDF library. Prior to version 6.0.0, […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2025:03062-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-23277 CVE-2025-23278 CVE-2025-23279 CVE-2025-23283 CVE-2024-0150 CVE-2024-0091 CVE-2025-23286 Upstream summary: NVIDIA Display Driver for Linux and Windows contains a vulnerability in the kernel mode driver, where […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory RHSA-2025:10848 (see also SUSE bugzilla) Related CVEs: CVE-2024-6174 CVE-2020-8631 CVE-2020-8632 CVE-2024-11584 CVE-2021-3429 CVE-2023-1786 CVE-2022-2084 CVE-2019-0816 Upstream summary: When a non-x86 platform is detected, cloud-init grants root access to a hardcoded url with […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2025:3919-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-7783 CVE-2021-41134 CVE-2025-54798 Upstream summary: Use of Insufficiently Random Values vulnerability in form-data allows HTTP Parameter Pollution (HPP). This vulnerability is associated with program files […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory RHSA-2025:11802 (see also SUSE bugzilla) Related CVEs: CVE-2025-6965 CVE-2025-70873 CVE-2025-7709 Upstream summary: There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory RHSA-2025:12447 (see also SUSE bugzilla) Related CVEs: CVE-2025-7425 CVE-2025-49794 CVE-2025-49795 CVE-2025-49796 CVE-2025-6021 CVE-2024-56171 CVE-2024-40896 CVE-2024-25062  +12 more Upstream summary: A flaw was found in libxslt where the attribute type, atype, flags are […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2025:02369-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-23016 CVE-2011-2766 Upstream summary: FastCGI fcgi2 (aka fcgi) 2.x through 2.4.4 has an integer overflow (and resultant heap-based buffer overflow) via crafted nameLen or valueLen […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory RHSA-2025:13935 (see also SUSE bugzilla) Related CVEs: CVE-2025-4674 CVE-2025-47906 CVE-2025-0913 CVE-2025-4673 CVE-2025-22871 Upstream summary: The go command may execute unexpected commands when operating in untrusted VCS repositories. This occurs when possibly dangerous […]