openSUSE Tumbleweed

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory openSUSE-SU-2024:0351-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-21272 Upstream summary: Unknown. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory openSUSE-SU-2024:14417-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-47874 Upstream summary: Starlette is an Asynchronous Server Gateway Interface (ASGI) framework/toolkit. Prior to version 0.40.0, Starlette treats `multipart/form-data` parts without a `filename` as text […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory openSUSE-SU-2024:14389-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-47191 CVE-2013-7322 Upstream summary: pam_oath.so in oath-toolkit 2.6.7 through 2.6.11 before 2.6.12 allows root privilege escalation because, in the context of PAM code running as […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory openSUSE-SU-2024:14371-1 Related CVEs: CVE-2022-45688 Upstream summary: A stack overflow in the XML.toJSONObject component of hutool-json v5.8.10 allows attackers to cause a Denial of Service (DoS) via crafted JSON or XML data. Table […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory openSUSE-SU-2024:14348-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-7348 Upstream summary: Time-of-check Time-of-use (TOCTOU) race condition in pg_dump in PostgreSQL allows an object creator to execute arbitrary SQL functions as the user running […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory openSUSE-SU-2024:14340-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-6232 CVE-2024-6923 CVE-2023-6597 CVE-2020-10735 CVE-2024-8088 CVE-2024-5642 CVE-2024-4030 CVE-2024-0397  +2 more Upstream summary: There is a MEDIUM severity vulnerability affecting CPython. Regular expressions that allowed excessive […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory RHSA-2024:6309 (see also SUSE bugzilla) Related CVEs: CVE-2024-6345 Upstream summary: A vulnerability in the package_index module of pypa/setuptools versions up to 69.1.1 allows for remote code execution via its download functions. These […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2024:2151-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-37535 Upstream summary: GNOME VTE before 0.76.3 allows an attacker to cause a denial of service (memory consumption) via a window resize escape sequence, a […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory ESSA-2024:0627 (see also SUSE bugzilla) Related CVEs: CVE-2023-31315 CVE-2021-26345 CVE-2022-23820 CVE-2023-20526 CVE-2023-47210 CVE-2023-20592 CVE-2021-26339 CVE-2021-26348  +6 more Upstream summary: Improper validation in a model specific register (MSR) could allow a malicious program […]