🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory SUSE-RU-2026:1001-1 (see also SUSE bugzilla) Related CVEs: CVE-2026-31812 Upstream summary: Quinn is a pure-Rust, async-compatible implementation of the IETF QUIC transport protocol. Prior to 0.11.14, a remote, unauthenticated attacker can trigger a […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory GHSA-c8g6-qrwh-m3vp (see also SUSE bugzilla) Related CVEs: CVE-2025-54469 CVE-2025-59937 CVE-2025-64102 CVE-2025-64103 CVE-2025-23266 CVE-2025-59345 CVE-2025-59352 CVE-2025-54123 +12 more Upstream summary: A vulnerability was identified in NeuVector, where the enforcer used environment variables CLUSTER_RPC_PORT […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2025:14841-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-26597 Upstream summary: A buffer overflow flaw was found in X.Org and Xwayland. If XkbChangeTypesOfKey() is called with a 0 group, it will resize […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE security advisory Related CVEs: CVE-2026-28377 Upstream summary: A vulnerability in Grafana Tempo exposes the S3 SSE-C encryption key in plaintext through the /status/config endpoint, potentially allowing unauthorized users to obtain the key used […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2020:0162-1 (see also SUSE bugzilla) Related CVEs: CVE-2018-11243 CVE-2019-14296 CVE-2020-24119 CVE-2025-2849 CVE-2023-23457 CVE-2017-16869 CVE-2019-1010048 CVE-2019-20021 +1 more Upstream summary: PackLinuxElf64::unpack in p_lx_elf.cpp in UPX 3.95 allows remote attackers to cause a denial […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2026:0757-1 Related CVEs: CVE-2026-23989 Upstream summary: REVA is an interoperability platform. Prior to 2.42.3 and 2.40.3, a bug in the GRPC authorization middleware of the "Reva" component of OpenCloud allows a malicious […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2025-64512 Upstream summary: Pdfminer.six is a community maintained fork of the original PDFMiner, a tool for extracting information from PDF documents. Prior to version […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2026:0780-1 (see also SUSE bugzilla) Related CVEs: CVE-2026-1764 CVE-2026-1765 CVE-2026-1766 CVE-2026-1767 Upstream summary: Unknown. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2026:1961-1 (see also SUSE bugzilla) Related CVEs: CVE-2026-42561 CVE-2026-40347 Upstream summary: Python-Multipart is a streaming multipart parser for Python. Prior to 0.0.27, python-multipart has a denial of service vulnerability in multipart part […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2025:0754-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-1492 CVE-2024-11595 CVE-2024-11596 CVE-2024-0207 CVE-2024-0210 CVE-2024-0211 CVE-2024-2955 CVE-2026-0959 +12 more Upstream summary: Bundle Protocol and CBOR dissector crashes in Wireshark 4.4.0 to 4.4.3 and […]
