🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2021-26825 CVE-2021-26826 Upstream summary: An integer overflow issue exists in Godot Engine up to v3.2 that can be triggered when loading specially crafted.TGA image files. […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory SUSE-RU-2020:2072-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-5390 CVE-2021-21238 CVE-2021-21239 Upstream summary: PySAML2 before 5.0.0 does not check that the signature in a SAML document is enveloped and thus signature wrapping is […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2022:10159-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-2652 Upstream summary: Depending on the way the format strings in the card label are crafted it's possible to leak kernel stack memory. There is […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2021:0480-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-27918 CVE-2021-33196 CVE-2021-33198 CVE-2021-31525 CVE-2021-33195 CVE-2021-33197 CVE-2021-34558 CVE-2021-36221 Upstream summary: encoding/xml in Go before 1.15.9 and 1.16.x before 1.16.1 has an infinite loop if a […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2022:0803-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-27783 CVE-2021-28957 Upstream summary: A XSS vulnerability was discovered in python-lxml's clean module. The module's parser didn't properly imitate browsers, which caused different behaviors between […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2020:0286-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-8597 CVE-2022-4603 CVE-2014-3158 CVE-2015-3310 Upstream summary: eap.c in pppd in ppp 2.4.2 through 2.4.8 has an rhostname buffer overflow in the eap_request and eap_response functions. […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2022:10017-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-2061 Upstream summary: Heap-based Buffer Overflow in GitHub repository hpjansson/chafa prior to 1.12.0. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2025:14858-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-24439 Upstream summary: All versions of package gitpython are vulnerable to Remote Code Execution (RCE) due to improper user input validation, which makes it possible […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2022:10095-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-15690 CVE-2020-15692 CVE-2020-15694 CVE-2021-29495 CVE-2021-41259 CVE-2021-21372 CVE-2021-21374 CVE-2020-15693 +1 more Upstream summary: In Nim before 1.2.6, the standard library asyncftpclient lacks a check for whether […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2021:1359-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-30474 CVE-2021-30475 Upstream summary: aom_dsp/grain_table.c in libaom in AOMedia before 2021-03-30 has a use-after-free. Table of contents Symptom & Impact Environment & Reproduction Root Cause […]
