openSUSE

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2025-68920 Upstream summary: C-Kermit (aka ckermit) through 10.0 Beta.12 (aka 416-beta12) before 244644d allows a remote Kermit system to overwrite files on the local system, […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2026-35444 CVE-2017-14442 CVE-2017-2887 CVE-2018-3977 CVE-2017-12122 CVE-2017-14440 CVE-2017-14441 CVE-2017-14448  +9 more Upstream summary: SDL_image is a library to load images of various formats as SDL surfaces. […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2026-35093 CVE-2022-1215 CVE-2026-35094 Upstream summary: A flaw was found in libinput. A local attacker who can place a specially crafted Lua bytecode file in certain […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2024-6866 CVE-2024-6839 CVE-2024-6844 Upstream summary: corydolphin/flask-cors version 4.01 contains a vulnerability where the request path matching is case-insensitive due to the use of the `try_match` […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2026-33711 CVE-2026-33897 CVE-2026-33898 CVE-2026-33945 CVE-2026-23953 CVE-2026-23954 CVE-2025-52890 CVE-2026-33542  +2 more Upstream summary: Incus is a system container and virtual machine manager. Incus provides an API […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory RHSA-2026:18028 (see also SUSE bugzilla) Related CVEs: CVE-2026-33416 CVE-2014-9495 CVE-2015-0973 CVE-2026-34757 CVE-2025-64505 CVE-2006-5793 CVE-2008-3964 CVE-2009-0040  +7 more Upstream summary: LIBPNG is a reference library for use in applications that read, create, and […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory RHSA-2026:14790 (see also SUSE bugzilla) Related CVEs: CVE-2026-33636 CVE-2026-25646 CVE-2025-66293 CVE-2011-2690 CVE-2011-2692 CVE-2026-22695 CVE-2026-22801 CVE-2025-64506  +8 more Upstream summary: LIBPNG is a reference library for use in applications that read, create, and […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2026-33721 CVE-2007-4542 CVE-2020-10872 CVE-2021-32062 Upstream summary: MapServer is a system for developing web-based GIS applications. Starting in version 4.2 and prior to version 8.6.1, a […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory RHSA-2026:13515 (see also SUSE bugzilla) Related CVEs: CVE-2026-33554 Upstream summary: ipmi-oem in FreeIPMI before 1.16.17 has exploitable buffer overflows on response messages. The Intelligent Platform Management Interface (IPMI) specification defines a set […]