🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2026:1421-1 (see also SUSE bugzilla) Related CVEs: CVE-2026-31899 Upstream summary: CairoSVG is an SVG converter based on Cairo, a 2D graphics library. Prior to Kozea/CairoSVG has exponential denial of service via recursive […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2026-34872 CVE-2026-34873 CVE-2026-34875 CVE-2026-34877 CVE-2023-45199 CVE-2026-25835 CVE-2026-34876 CVE-2024-49195 +3 more Upstream summary: An issue was discovered in Mbed TLS 3.5.x and 3.6.x through 3.6.5 and […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2026-44597 CVE-2026-44603 CVE-2026-44601 CVE-2026-44602 CVE-2022-33903 CVE-2014-0160 CVE-2020-10593 CVE-2021-34548 +12 more Upstream summary: Tor before 0.4.9.7 has an out-of-bounds read when an END, a TRUNCATE, or […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2022:10126-1 (see also SUSE bugzilla) Related CVEs: CVE-2018-25032 CVE-2026-27171 Upstream summary: zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches. Table of contents […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2026:0855-1 (see also SUSE bugzilla) Related CVEs: CVE-2026-27727 CVE-2019-5427 CVE-2018-20433 Upstream summary: mchange-commons-java, a library that provides Java utilities, includes code that mirrors early implementations of JNDI functionality, including support for remote […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2026:21587-1 (see also SUSE bugzilla) Related CVEs: CVE-2026-41066 Upstream summary: lxml is a library for processing XML and HTML in the Python language. Prior to 6.1.0, using either of the two parsers […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2026:21425-1 (see also SUSE bugzilla) Related CVEs: CVE-2026-39373 Upstream summary: JWCrypto implements JWK, JWS, and JWE specifications using python-cryptography. Prior to 1.5.7, an unauthenticated attacker can exhaust server memory by sending crafted […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2026:0930-1 (see also SUSE bugzilla) Related CVEs: CVE-2026-32746 CVE-2011-1526 CVE-2011-4862 Upstream summary: telnetd in GNU inetutils through 2.7 allows an out-of-bounds write in the LINEMODE SLC (Set Local Characters) suboption handler because […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2026-35397 CVE-2026-40110 CVE-2025-61669 CVE-2026-40934 Upstream summary: Jupyter Server is the backend for Jupyter web applications. In versions 2.17.0 and earlier, a path traversal vulnerability in […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2026-32611 CVE-2026-32633 CVE-2026-35587 CVE-2026-33641 CVE-2026-32596 CVE-2026-32608 CVE-2026-32609 CVE-2026-32610 +5 more Upstream summary: Glances is an open-source system cross-platform monitoring tool. The GHSA-x46r fix (commit 39161f0) […]
