🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2026:0439-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-58181 Upstream summary: SSH servers parsing GSSAPI authentication requests do not validate the number of mechanisms specified in the request, allowing an attacker to cause […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read • Source: SUSE advisory SUSE-SU-202410:15282-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-5569 Upstream summary: A Denial of Service (DoS) vulnerability exists in the jaraco/zipp library, affecting all versions prior to 3.19.1. The vulnerability is triggered […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2024:0244-1 (see also SUSE bugzilla) Related CVEs: CVE-2023-30549 CVE-2022-23538 CVE-2022-39237 CVE-2025-65105 CVE-2023-38496 CVE-2025-8556 CVE-2024-45310 Upstream summary: Apptainer is an open source container platform for Linux. There is an ext4 use-after-free flaw that […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2024:0769-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-1597 CVE-2025-49146 CVE-2022-31197 CVE-2022-41946 CVE-2022-26520 Upstream summary: pgjdbc, the PostgreSQL JDBC Driver, allows attacker to inject SQL if using PreferQueryMode=SIMPLE. Note this is not the […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.5 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2024:1872-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-34062 Upstream summary: tqdm is an open source progress bar for Python and CLI. Any optional non-boolean CLI arguments (e.g. `–delim`, `–buf-size`, `–manpath`) are […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2025:14996-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-0406 CVE-2025-11579 Upstream summary: A flaw was discovered in the mholt/archiver package. This flaw allows an attacker to create a specially crafted tar file, which, […]
🟢 Low ⏱ 5–15 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2025:0429-1 Related CVEs: CVE-2025-24369 Upstream summary: Anubis is a tool that allows administrators to protect bots against AI scrapers through bot-checking heuristics and a proof-of-work challenge to discourage scraping from multiple IP […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read • Source: SUSE advisory RHSA-2025:9517 (see also SUSE bugzilla) Related CVEs: CVE-2011-10007 Upstream summary: File::Find::Rule through 0.34 for Perl is vulnerable to Arbitrary Code Execution when `grep()` encounters a crafted filename. A file handle is […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.5 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2024:0282-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-45230 CVE-2022-28346 CVE-2024-41989 CVE-2024-41990 CVE-2024-41991 CVE-2024-42005 CVE-2024-38875 CVE-2024-39330 +9 more Upstream summary: An issue was discovered in Django 5.1 before 5.1.1, 5.0 before 5.0.9, […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory RHSA-2025:1915 (see also SUSE bugzilla) Related CVEs: CVE-2025-1244 CVE-2024-53920 CVE-2023-27985 CVE-2023-27986 CVE-2022-48337 CVE-2022-48338 CVE-2022-48339 CVE-2022-45939 +9 more Upstream summary: A command injection flaw was found in the text editor Emacs. It could […]
