🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2025:14811-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-25126 CVE-2024-26141 CVE-2024-26146 Upstream summary: Rack is a modular Ruby web server interface. Carefully crafted content type headers can cause Rack's media type parser to […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2025:02037-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-38526 Upstream summary: pdoc provides API Documentation for Python Projects. Documentation generated with `pdoc –math` linked to JavaScript files from polyfill[.]io. The polyfill[.]io CDN […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2025:0074-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-21626 CVE-2025-24965 Upstream summary: runc is a CLI tool for spawning and running containers on Linux according to the OCI specification. In runc 1.1.11 […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read • Source: SUSE advisory ESSA-2025:2834 (see also SUSE bugzilla) Related CVEs: CVE-2025-27363 Upstream summary: An out of bounds write exists in FreeType versions 2.13.0 and below (newer versions of FreeType are not vulnerable) when attempting […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2024:0370-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-47533 CVE-2018-1000225 CVE-2018-10931 CVE-2022-0860 CVE-2021-45082 CVE-2018-1000226 CVE-2017-1000469 Upstream summary: Cobbler, a Linux installation server that allows for rapid setup of network installation environments, has an […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2024-22033 Upstream summary: The OBS service obs-service-download_url was vulnerable to a command injection vulnerability. The attacker could provide a configuration to the service that […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read • Source: SUSE advisory RHSA-2025:10631 (see also SUSE bugzilla) Related CVEs: CVE-2025-5024 Upstream summary: A flaw was found in gnome-remote-desktop. Once gnome-remote-desktop listens for RDP connections, an unauthenticated attacker can exhaust system resources and repeatedly […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2024:2481-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-21503 Upstream summary: Versions of the package black before 24.3.0 are vulnerable to Regular Expression Denial of Service (ReDoS) via the lines_with_leading_tabs_expanded function in the […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2023-0996 CVE-2024-41311 CVE-2025-68431 CVE-2023-29659 CVE-2023-49460 CVE-2023-49463 CVE-2023-49462 CVE-2023-49464 +2 more Upstream summary: There is a vulnerability in the strided image data parsing code in the […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE advisory openSUSE-SU-2024:14557-1 (see also SUSE bugzilla) Related CVEs: CVE-2024-24815 Upstream summary: CKEditor4 is an open source what-you-see-is-what-you-get HTML editor. A cross-site scripting vulnerability has been discovered in the core HTML parsing module in […]
