Tumbleweed
Approved changes feed: RSS · Atom
cpe:2.3:a:opensuse:tumbleweed:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Opensuse (3380e48e-e718-5685-8ad0-092ef58910e5) |
|---|---|
| Product | Tumbleweed (45b7be0d-b369-5231-8b6c-a16ec713e2e9) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:docker/opensuse/tumbleweed |
purl2cpe | 2026-06-01 10:15:36.593237 |
pkg:github/gregkh/tumbleweed |
purl2cpe | 2026-06-01 10:15:36.593240 |
pkg:rpm/opensuse/opensuse-release |
purl2cpe | 2026-06-01 10:15:36.593243 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-62875 |
vulnerable | 2026-06-08 07:39:16.950671 |
Local DoS in OpenSMTPD via UNIX domain socket smtpd.sock
An Improper Check for Unusual or Exceptional Conditions vulnerability in OpenSMTPD allows local users to crash OpenSMTPD.
This issue affects openSUSE Tumbleweed: from ? before 7.8.0p0-1.1.
Published: 2025-11-20T16:02:11.542Z
Updated: 2025-11-21T16:28:18.612Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-53881 |
vulnerable | 2026-06-08 07:31:15.896631 |
SUSE-specific logrotate configuration allows escalation from mail user/group to root
A UNIX Symbolic Link (Symlink) Following vulnerability in logrotate config in the exim package allowed privilege escalation from mail user/group to root.This issue affects Tumbleweed: from ? before 4.98.2-lp156.248.1.
Published: 2025-10-02T13:51:56.848Z
Updated: 2025-10-02T17:38:57.426Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-46810 |
vulnerable | 2026-06-08 07:27:08.913200 |
Details available
A UNIX Symbolic Link (Symlink) Following vulnerability in the packaging of openSUSE Tumbleweed traefik2 allows the traefik user to escalate to root. This issue affects Tumbleweed: from ? before 2.11.29.
Published: 2025-09-02T11:34:32.138Z
Updated: 2026-02-26T17:49:54.935Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-49506 |
vulnerable | 2026-06-08 06:50:14.148564 |
Fixed temporary file path in aeon-checks allows fixing of disk encryption key
Insecure creation of temporary files allows local users on systems with non-default configurations to cause denial of service or set the encryption key for a filesystem
Published: 2024-11-13T14:15:09.354Z
Updated: 2024-11-21T16:14:24.983Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-49505 |
vulnerable | 2026-06-08 06:50:14.147077 |
XSS vulnerability found in OpenSuse MirrorCache
A Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in openSUSE Tumbleweed MirrorCache allows the execution of arbitrary JS via reflected XSS in the REGEX and P parameters.
This issue affects MirrorCache before 1.083.
Published: 2024-11-13T14:21:00.317Z
Updated: 2024-11-13T18:38:11.311Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-32183 |
not_vulnerable | 2026-06-08 06:04:45.105455 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-31250 |
vulnerable | 2026-06-08 05:43:40.580158 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-25315 |
vulnerable | 2026-06-08 05:30:40.641687 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-8026 |
vulnerable | 2026-06-08 05:27:14.742337 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.