openSUSE

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2026:1571-1 (see also SUSE bugzilla) Related CVEs: CVE-2026-40706 CVE-2022-40284 CVE-2021-33285 CVE-2021-33289 CVE-2021-35269 CVE-2021-39255 CVE-2021-39258 CVE-2021-39262  +4 more Upstream summary: In NTFS-3G 2022.10.3 before 2026.2.25, a heap buffer overflow exists in ntfs_build_permissions_posix() in […]

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2025-49825 CVE-2023-45133 CVE-2025-59530 CVE-2026-34165 CVE-2026-21895 CVE-2024-53259 CVE-2024-35255 CVE-2024-27303 Upstream summary: Teleport provides connectivity, authentication, access controls and audit for infrastructure. Community Edition versions before and […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2026-34080 Upstream summary: xdg-dbus-proxy is a filtering proxy for D-Bus connections. Prior to 0.1.7, a policy parser vulnerability allows bypassing eavesdrop restrictions. The proxy checks […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2026-44432 CVE-2025-66471 CVE-2025-50182 Upstream summary: urllib3 is an HTTP client library for Python. From 2.6.0 to before 2.7.0, urllib3 could decompress the whole response instead […]

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2023-46850 CVE-2022-0547 CVE-2017-7521 CVE-2017-7522 CVE-2025-2704 CVE-2024-5594 CVE-2024-28882 CVE-2023-46849  +9 more Upstream summary: Use after free in OpenVPN version 2.6.0 to 2.6.6 may lead to undefined […]

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory RHSA-2026:6470 (see also SUSE bugzilla) Related CVEs: CVE-2026-4177 CVE-2026-5089 CVE-2025-11683 Upstream summary: YAML::Syck versions through 1.36 for Perl has several potential security vulnerabilities including a high-severity heap buffer overflow in the YAML […]