Opensuse Tumbleweed
Approved changes feed: RSS · Atom
cpe:2.3:a:suse:opensuse_tumbleweed:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Suse (ec535637-432e-5a38-96dd-4ec1e0138f73) |
|---|---|
| Product | Opensuse Tumbleweed (a08402e7-7017-5deb-96e1-e12f35ca4a83) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-59674 |
vulnerable | 2026-07-29 01:03:17.519524 |
LPE from suricata user to root due to chown in %post in suricata packaging
A UNIX Symbolic Link (Symlink) Following vulnerability in openSUSE Tumbleweed suricata package allows the suricata user to escalate to root.
This issue affects openSUSE Tumbleweed: from ? before 8.0.5-2.1; openSUSE Tumbleweed: from ? before 8.0.5-2.1.
Published: 2026-07-14T07:32:35.363Z
Updated: 2026-07-15T04:00:53.092Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-41051 |
vulnerable | 2026-06-08 08:03:14.609026 |
csync2 uses insecure temporary directories when compiled with C99 or later
MEDIUM (5)
csync2 uses insecure temporary directories when compiled with C99 or later, allowing for TOCTOU style attacks on the temporary directories.
Published: 2026-05-13T08:37:38.405Z
Updated: 2026-05-13T19:24:11.916Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-62875 |
vulnerable | 2026-06-08 07:39:16.948037 |
Local DoS in OpenSMTPD via UNIX domain socket smtpd.sock
An Improper Check for Unusual or Exceptional Conditions vulnerability in OpenSMTPD allows local users to crash OpenSMTPD.
This issue affects openSUSE Tumbleweed: from ? before 7.8.0p0-1.1.
Published: 2025-11-20T16:02:11.542Z
Updated: 2025-11-21T16:28:18.612Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-53882 |
vulnerable | 2026-06-08 07:31:15.898075 |
The logrotate configuration in the python-mailman of openSUSE allows the mailman user to sent SIGHUP to arbitrary proceess
MEDIUM (4.4)
A Reliance on Untrusted Inputs in a Security Decision vulnerability in the logrotate configuration for openSUSE mailman3 package allows the mailman user to sent SIGHUP to arbitrary processes. This issue affects openSUSE Tumbleweed: from ? before 3.3.10-2.1.
Published: 2025-07-23T09:31:18.547Z
Updated: 2026-02-26T17:50:17.345Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-23394 |
vulnerable | 2026-06-08 07:10:55.669139 |
daily-backup.sh script in cyrus-imapd allows escalation from cyrus to root
A UNIX Symbolic Link (Symlink) Following vulnerability in openSUSE Tumbleweed cyrus-imapd allows escalation from cyrus to root.This issue affects openSUSE Tumbleweed cyrus-imapd before 3.8.4-2.1.
Published: 2025-05-26T15:34:32.562Z
Updated: 2025-05-27T14:05:20.489Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-23386 |
vulnerable | 2026-06-08 07:10:55.662665 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-49505 |
vulnerable | 2026-06-08 06:50:14.145441 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-49504 |
vulnerable | 2026-06-08 06:50:14.144935 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-22034 |
vulnerable | 2026-06-08 06:29:33.408169 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-22033 |
vulnerable | 2026-06-08 06:29:33.399625 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-22029 |
vulnerable | 2026-06-08 06:29:33.390013 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-32190 |
vulnerable | 2026-06-08 06:04:45.118261 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.