openSUSE Tumbleweed

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2024:2029-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-5206 Upstream summary: A sensitive data leakage vulnerability was identified in scikit-learn's TfidfVectorizer, specifically in versions up to and including 1.4.1.post1, which was fixed in […]

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2025:03603-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-10230 CVE-2022-44640 CVE-2021-44142 CVE-2007-2446 CVE-2009-1886 CVE-2020-1472 CVE-2023-4154 CVE-2023-34966  +12 more Upstream summary: A flaw was found in Samba, in the front-end WINS hook handling: NetBIOS […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2024:1675-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-33600 CVE-2024-33599 CVE-2024-2961 CVE-2023-6246 CVE-2020-1751 CVE-2023-4911 CVE-2023-4527 CVE-2023-25139  +12 more Upstream summary: nscd: Null pointer crashes after notfound response If the Name Service Cache Daemon's […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory openSUSE-SU-2025:14631-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-11614 CVE-2020-10725 CVE-2020-14374 CVE-2020-14375 CVE-2020-14376 CVE-2020-14378 CVE-2022-0669 CVE-2018-1059  +2 more Upstream summary: An out-of-bounds read vulnerability was found in DPDK's Vhost library checksum offload feature. […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE security advisory Related CVEs: CVE-2024-2430 Upstream summary: The Website Content in Page or Post WordPress plugin before 2024.04.09 does not validate and escape some of its shortcode attributes before outputting them back in […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2026:20879-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-53861 Upstream summary: pyjwt is a JSON Web Token implementation in Python. An incorrect string comparison is run for `iss` checking, resulting in `"acb"` being […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2025:03025-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-7962 Upstream summary: In Jakarta Mail 2.0.2 it is possible to preform a SMTP Injection by utilizing the r and n UTF-8 characters to separate […]

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory openSUSE-SU-2024:14446-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-41110 CVE-2025-22874 CVE-2025-47907 Upstream summary: Moby is an open-source project created by Docker for software containerization. A security vulnerability has been detected in certain versions […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory SUSE-SA:2007:008 (see also SUSE bugzilla) Related CVEs: CVE-2006-5867 CVE-2025-61962 CVE-2021-39272 CVE-2006-0321 CVE-2006-5974 CVE-2007-4565 CVE-2009-2666 CVE-2010-1167  +3 more Upstream summary: fetchmail before 6.3.6-rc4 does not properly enforce TLS and may transmit cleartext passwords […]

🟢 Low   ⏱ 5–15 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory openSUSE-SU-2024:14372-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-47197 Upstream summary: Exposure of Sensitive Information to an Unauthorized Actor, Insecure Storage of Sensitive Information vulnerability in Maven Archetype Plugin. This issue affects Maven […]