🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read • Source: SUSE advisory RHSA-2026:1086 (see also SUSE bugzilla) Related CVEs: CVE-2025-66418 CVE-2025-66471 CVE-2026-21441 CVE-2025-50181 CVE-2024-37891 Upstream summary: urllib3 is a user-friendly HTTP client library for Python. Starting in version 1.24 and prior to 2.6.0, […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2026-35444 CVE-2017-14442 CVE-2017-2887 CVE-2018-3977 CVE-2017-12122 CVE-2017-14440 CVE-2017-14441 CVE-2017-14448 +9 more Upstream summary: SDL_image is a library to load images of various formats as SDL surfaces. […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2026-42151 CVE-2026-42154 CVE-2026-40179 CVE-2019-10215 CVE-2021-29622 Upstream summary: Prometheus is an open-source monitoring system and time series database. Prior to versions 3.5.3 and 3.11.3, the client_secret […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2026:1353-1 (see also SUSE bugzilla) Related CVEs: CVE-2026-33870 CVE-2025-55163 CVE-2025-58056 CVE-2025-24970 CVE-2024-29025 CVE-2026-33871 CVE-2025-67735 CVE-2025-59419 +3 more Upstream summary: Netty is an asynchronous, event-driven network application framework. In versions prior to […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2026-6843 CVE-2024-5742 CVE-2010-1160 CVE-2026-6842 CVE-2010-1161 Upstream summary: A flaw was found in nano. A local user could exploit a format string vulnerability in the `statusline()` […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2026:1192-1 (see also SUSE bugzilla) Related CVEs: CVE-2026-27459 CVE-2026-27448 Upstream summary: pyOpenSSL is a Python wrapper around the OpenSSL library. Starting in version 22.0.0 and prior to version 26.0.0, if a […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2026:21425-1 (see also SUSE bugzilla) Related CVEs: CVE-2026-39373 CVE-2022-3102 CVE-2023-6681 CVE-2024-28102 Upstream summary: JWCrypto implements JWK, JWS, and JWE specifications using python-cryptography. Prior to 1.5.7, an unauthenticated attacker can exhaust server […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read • Source: SUSE advisory SUSE-CU-2023:2514-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-3128 CVE-2024-9264 CVE-2026-21720 CVE-2026-21721 CVE-2025-6023 CVE-2025-64751 CVE-2024-45339 CVE-2026-21722 +10 more Upstream summary: Grafana is validating Azure AD accounts based on the email claim. On […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2026:1135-1 Related CVEs: CVE-2026-33211 Upstream summary: Tekton Pipelines project provides k8s-style resources for declaring CI/CD-style pipelines. Starting in version 1.0.0 and prior to versions 1.0.1, 1.3.3, 1.6.1, 1.9.2, and 1.10.2, the Tekton […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2026-34610 Upstream summary: The leancrypto library is a cryptographic library that exclusively contains only PQC-resistant cryptographic algorithms. Prior to version 1.7.1, lc_x509_extract_name_segment() casts size_t vlen […]
