🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2020:1087-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-15586 CVE-2020-14039 CVE-2020-16845 Upstream summary: Go before 1.13.13 and 1.14.x before 1.14.5 has a data race in some net/http servers, as demonstrated by the httputil.ReverseProxy […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2022:23018-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-20291 CVE-2021-3602 Upstream summary: A deadlock vulnerability was found in 'github.com/containers/storage' in versions before 1.28.1. When a container image is processed, each layer is unpacked […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2022:1277-1 (see also SUSE bugzilla) Related CVEs: CVE-2018-19566 CVE-2018-19568 CVE-2018-5805 CVE-2018-5806 CVE-2021-3624 CVE-2017-13735 CVE-2017-14608 CVE-2018-19655 +1 more Upstream summary: A heap buffer over-read in parse_tiff_ifd in dcraw through 9.28 could be used […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE security advisory Related CVEs: CVE-2019-12400 CVE-2021-40690 Upstream summary: In version 2.0.3 Apache Santuario XML Security for Java, a caching mechanism was introduced to speed up creating new XML documents using a static pool […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2024:14486-1 Related CVEs: CVE-2021-21367 Upstream summary: Switchboard Bluetooth Plug for elementary OS from version 2.3.0 and before version version 2.3.5 has an incorrect authorization vulnerability. When the Bluetooth plug is running (in […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2020:1652-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-8183 CVE-2018-3762 CVE-2020-8154 CVE-2020-8155 Upstream summary: A logic error in Nextcloud Server 19.0.0 caused a plaintext storage of the share password when it was given […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory SUSE-CU-2023:712-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-26291 CVE-2021-42550 Upstream summary: Apache Maven will follow repositories that are defined in a dependency's Project Object Model (pom) which may be surprising to some […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2021:1569-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-43618 Upstream summary: GNU Multiple Precision Arithmetic Library (GMP) through 6.2.1 has an mpz/inp_raw.c integer overflow and resultant buffer overflow via crafted input, leading to […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2022:0735-1 (see also SUSE bugzilla) Related CVEs: CVE-2021-45444 CVE-2018-0502 CVE-2018-1100 CVE-2018-13259 CVE-2019-20044 CVE-2018-1083 CVE-2018-1071 Upstream summary: In zsh before 5.8.1, an attacker can achieve code execution if they control a command output […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2023:3189-1 (see also SUSE bugzilla) Related CVEs: CVE-2020-25697 Upstream summary: A privilege escalation flaw was found in the Xorg-x11-server due to a lack of authentication for X11 clients. This flaw allows an […]
