🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2026:0876-1 (see also SUSE bugzilla) Related CVEs: CVE-2026-27138 CVE-2026-27137 Upstream summary: Certificate verification can panic when a certificate in the chain has an empty DNS name and another certificate in the […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2026-6321 Upstream summary: fast-uri decoded percent-encoded path separators and dot segments before applying dot-segment removal in its normalize() and equal() functions. Encoded path data was […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2025:03446-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-59681 CVE-2025-13473 CVE-2026-1207 CVE-2026-1285 CVE-2026-1287 CVE-2026-1312 CVE-2025-13372 CVE-2025-64460 +12 more Upstream summary: An issue was discovered in Django 4.2 before 4.2.25, 5.1 before 5.1.13, […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2026-39892 CVE-2026-34073 Upstream summary: cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. From 45.0.0 to before 46.0.7, if a […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2022:1274-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-1270 CVE-2007-4988 CVE-2020-12672 CVE-2025-32460 CVE-2025-27795 CVE-2025-27796 CVE-2006-3744 CVE-2008-1096 +12 more Upstream summary: In GraphicsMagick, a heap buffer overflow was found when parsing MIFF. Table of […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2026-35093 CVE-2022-1215 CVE-2026-35094 Upstream summary: A flaw was found in libinput. A local attacker who can place a specially crafted Lua bytecode file in certain […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2026-33190 CVE-2026-26017 CVE-2026-26018 CVE-2025-58063 CVE-2024-0874 CVE-2022-28948 Upstream summary: CoreDNS is a DNS server that chains plugins. In versions prior to 1.14.3, the tsig plugin can […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory SUSE-CU-2023:323-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-4883 CVE-2026-4367 CVE-2023-43788 CVE-2023-43789 CVE-2022-44617 CVE-2022-46285 Upstream summary: A flaw was found in libXpm. When processing files with .Z or .gz extensions, the library calls […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2025:14933-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-30472 CVE-2026-35091 Upstream summary: Corosync through 3.1.9, if encryption is disabled or the attacker knows the encryption key, has a stack-based buffer overflow in orf_token_endian_convert […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read • Source: SUSE advisory RHSA-2026:6188 (see also SUSE bugzilla) Related CVEs: CVE-2026-3889 CVE-2026-4371 CVE-2025-5986 CVE-2025-5262 CVE-2025-3875 CVE-2025-3877 CVE-2025-3909 CVE-2025-3932 +11 more Upstream summary: Spoofing issue in Thunderbird. This vulnerability was fixed in Thunderbird 149 and […]
