🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory RHSA-2024:9158 (see also SUSE bugzilla) Related CVEs: CVE-2021-43612 CVE-2026-46433 Upstream summary: In lldpd before 1.0.13, when decoding SONMP packets in the sonmp_decode function, it's possible to trigger an out-of-bounds heap read via […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2025-62507 CVE-2025-46817 CVE-2025-46818 CVE-2025-46819 CVE-2025-49844 CVE-2016-8339 CVE-2018-11218 CVE-2026-23479 +12 more Upstream summary: Redis is an open source, in-memory database that persists on disk. In versions […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2026:1936-1 (see also SUSE bugzilla) Related CVEs: CVE-2026-7111 Upstream summary: Text::CSV_XS versions before 1.62 for Perl have a use-after-free when registered callbacks extend the Perl argument stack, which may enable type confusion […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2026-33598 CVE-2026-33254 CVE-2026-33593 CVE-2026-33594 CVE-2026-33595 CVE-2026-33597 CVE-2026-33599 CVE-2026-33602 +10 more Upstream summary: A cached crafted response can cause an out-of-bounds read if custom Lua code […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2026-45190 CVE-2026-45191 CVE-2026-40198 CVE-2026-40199 Upstream summary: Net::CIDR::Lite versions before 0.24 for Perl does not properly validate IP address and CIDR mask inputs, which may allow […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2026-39402 CVE-2022-47952 CVE-2015-1331 CVE-2015-1334 CVE-2015-1335 CVE-2016-8649 CVE-2017-5985 CVE-2018-6556 +1 more Upstream summary: lxc is a Linux container runtime. In the setuid helper lxc-user-nic, the delete […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2016-10132 CVE-2016-10141 CVE-2025-55780 CVE-2026-25556 CVE-2016-8729 CVE-2017-17858 CVE-2017-5627 CVE-2017-5628 +12 more Upstream summary: regexp.c in Artifex Software, Inc. MuJS allows attackers to cause a denial of […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read • Source: SUSE advisory RHSA-2026:4717 (see also SUSE bugzilla) Related CVEs: CVE-2026-23893 Upstream summary: openCryptoki is a PKCS#11 library and provides tooling for Linux and AIX. Versions 2.3.2 and above are vulnerable to symlink-following when […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2026:1191-1 (see also SUSE bugzilla) Related CVEs: CVE-2026-24401 CVE-2025-68276 CVE-2025-68468 CVE-2025-68471 CVE-2024-52615 CVE-2024-52616 CVE-2023-38469 CVE-2023-38471 Upstream summary: Avahi is a system which facilitates service discovery on a local network via the […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read • Source: SUSE advisory RHSA-2026:3338 (see also SUSE bugzilla) Related CVEs: CVE-2026-2781 CVE-2025-9187 CVE-2023-5388 Upstream summary: Integer overflow in the Libraries component in NSS. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird […]
