🟢 Low ⏱ 5–15 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2025-53901 Upstream summary: Wasmtime is a runtime for WebAssembly. Prior to versions 24.0.4, 33.0.2, and 34.0.2, a bug in Wasmtime's implementation of the WASIp1 set […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory SUSE-SA:2008:027 (see also SUSE bugzilla) Related CVEs: CVE-2008-2362 CVE-2024-31082 CVE-2022-2319 CVE-2022-2320 CVE-2008-2360 CVE-2018-14665 CVE-2020-14345 CVE-2020-14346 +12 more Upstream summary: Multiple integer overflows in the Render extension in the X server 1.4 in […]
🟡 Medium ⏱ 5–30 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.5 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2024:0300-1 Related CVEs: CVE-2024-38528 Upstream summary: nptd-rs is a tool for synchronizing your computer's clock, implementing the NTP and NTS protocols. There is a missing limit for accepted NTS-KE connections. This […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2025-30192 CVE-2024-25590 CVE-2024-25583 CVE-2023-22617 CVE-2018-16855 CVE-2023-26437 CVE-2022-37428 CVE-2009-4009 +12 more Upstream summary: An attacker spoofing answers to ECS enabled requests sent out by the Recursor […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2025-14946 CVE-2024-7383 CVE-2023-5871 CVE-2023-5215 CVE-2022-0485 CVE-2021-20286 Upstream summary: A flaw was found in libnbd. A malicious actor could exploit this by convincing libnbd to open […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2024:0643-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-24806 Upstream summary: libuv is a multi-platform support library with a focus on asynchronous I/O. The `uv_getaddrinfo` function in `src/unix/getaddrinfo.c` (and its windows counterpart […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2026:0858-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-69223 CVE-2025-69227 CVE-2025-69228 CVE-2025-69229 CVE-2024-30251 CVE-2025-69224 CVE-2025-69225 CVE-2025-69226 +4 more Upstream summary: AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Versions […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.5 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2024:0349-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-46478 CVE-2024-45508 Upstream summary: HTMLDOC v1.9.18 contains a buffer overflow in parse_pre function,ps-pdf.cxx:5681. Table of contents Symptom & Impact Environment & Reproduction Root Cause […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2026:1419-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-9615 Upstream summary: A flaw was found in NetworkManager. The NetworkManager package allows access to files that may belong to other users. NetworkManager allows […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2025:15167-1 (see also SUSE bugzilla) Related CVEs: CVE-2025-3155 Upstream summary: A flaw was found in Yelp. The Gnome user help application allows the help document to execute arbitrary scripts. This vulnerability […]
