openSUSE

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory openSUSE-SU-2022:0104-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-14409 CVE-2020-14410 CVE-2017-2888 CVE-2022-4743 CVE-2019-13626 Upstream summary: SDL (Simple DirectMedia Layer) through 2.0.12 has an Integer Overflow (and resultant SDL_memcpy heap corruption) in SDL_BlitCopy in […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory SUSE-CU-2023:1102-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-4899 CVE-2019-11922 Upstream summary: A vulnerability was found in zstd v1.4.10, where an attacker can supply empty string as an argument to the command line […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2021-45103 CVE-2021-45104 CVE-2022-26110 Upstream summary: An issue was discovered in HTCondor 9.0.x before 9.0.10 and 9.1.x before 9.5.1. An attacker can access files stored in […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2022-34299 CVE-2022-32200 Upstream summary: There is a heap-based buffer over-read in libdwarf 0.4.0. This issue is related to dwarf_global_formref_b. Table of contents Symptom & Impact […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2022:4306-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-42920 Upstream summary: Apache Commons BCEL has a number of APIs that would normally only allow changing specific class characteristics. However, due to an out-of-bounds […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2023:1690-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-4065 Upstream summary: A vulnerability was found in cbeust testng 7.5.0/7.6.0/7.6.1/7.7.0. It has been declared as critical. Affected by this vulnerability is the function testngXmlExistsInJar […]

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory openSUSE-SU-2020:1208-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-17367 CVE-2020-17368 CVE-2022-31214 CVE-2017-5180 CVE-2017-5207 CVE-2016-7545 CVE-2017-5206 CVE-2019-12589 Upstream summary: Firejail through 0.9.62 does not honor the — end-of-options indicator after the –output option, which […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2023:4367-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-46751 CVE-2022-37865 CVE-2022-37866 Upstream summary: Improper Restriction of XML External Entity Reference, XML Injection (aka Blind XPath Injection) vulnerability in Apache Software Foundation Apache Ivy.This […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2022-21688 CVE-2022-21690 CVE-2022-21691 CVE-2022-21692 CVE-2022-21693 CVE-2022-21694 CVE-2022-21695 CVE-2022-21696  +3 more Upstream summary: OnionShare is an open source tool that lets you securely and anonymously share […]

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2008-0599 CVE-2022-37454 CVE-2021-21708 CVE-2021-21702 CVE-2005-3390 CVE-2005-3392 CVE-2018-1000888 CVE-2022-31628  +12 more Upstream summary: The init_request_info function in sapi/cgi/cgi_main.c in PHP before 5.2.6 does not properly consider […]