openSUSE Tumbleweed

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2026-27851 CVE-2026-42006 CVE-2025-59032 CVE-2026-24031 CVE-2026-27856 CVE-2026-27858 CVE-2026-33603 CVE-2026-40016  +8 more Upstream summary: When safe filter is used with variable expansion, all following pipelines on the […]

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2022-45299 CVE-2026-44216 CVE-2026-34941 CVE-2026-34943 CVE-2026-34988 CVE-2026-35186 CVE-2026-34945 Upstream summary: An issue in the IpFile argument of rust-lang webbrowser-rs v0.8.2 allows attackers to access arbitrary files […]

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory openSUSE-SU-2024:0371-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-49369 CVE-2025-48057 CVE-2020-14004 CVE-2021-32739 CVE-2021-32743 CVE-2026-24413 CVE-2025-61907 CVE-2025-61908  +5 more Upstream summary: Icinga is a monitoring system which checks the availability of network resources, notifies […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2026-3219 CVE-2026-1703 Upstream summary: pip handles concatenated tar and ZIP files as ZIP files regardless of filename or whether a file is both a tar […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory RHSA-2026:12265 (see also SUSE bugzilla) Related CVEs: CVE-2026-4775 CVE-2025-9900 CVE-2025-8176 CVE-2019-17546 CVE-2022-34266 CVE-2022-48281 CVE-2022-3970 CVE-2022-2519  +12 more Upstream summary: A flaw was found in the libtiff library. A remote attacker could exploit […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2026-2100 CVE-2020-29361 Upstream summary: A flaw was found in p11-kit. A remote attacker could exploit this vulnerability by calling the C_DeriveKey function on a remote […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory openSUSE-SU-2025:15011-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-3839 CVE-2023-26081 CVE-2022-29536 CVE-2021-45085 CVE-2021-45088 CVE-2018-11396 Upstream summary: A flaw was found in Epiphany, a tool that allows websites to open external URL handler applications […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory RHSA-2026:7080 (see also SUSE bugzilla) Related CVEs: CVE-2026-27135 CVE-2019-18802 CVE-2024-28182 CVE-2023-35945 CVE-2018-1000168 CVE-2016-1544 Upstream summary: nghttp2 is an implementation of the Hypertext Transfer Protocol version 2 in C. Prior to version 1.68.1, […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2026:1571-1 (see also SUSE bugzilla) Related CVEs: CVE-2026-40706 CVE-2022-40284 CVE-2021-33285 CVE-2021-33289 CVE-2021-35269 CVE-2021-39255 CVE-2021-39258 CVE-2021-39262  +4 more Upstream summary: In NTFS-3G 2022.10.3 before 2026.2.25, a heap buffer overflow exists in ntfs_build_permissions_posix() in […]

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2025-49825 CVE-2023-45133 CVE-2025-59530 CVE-2026-34165 CVE-2026-21895 CVE-2024-53259 CVE-2024-35255 CVE-2024-27303 Upstream summary: Teleport provides connectivity, authentication, access controls and audit for infrastructure. Community Edition versions before and […]