Opensuse Tumbleweed vulnerabilities

• opensuse tumbleweed, suse opensuse leap 16.1, linux enterprise server 16.1 +1 more +3 more sdbootutil: world-readable debug log CVE-2026-104618 6.9 MediumOctober 15, 2026
• opensuse tumbleweed, suse opensuse leap 16.1, linux enterprise server 16.1 +1 more +3 more sdbootutil: qrencode invocation leaks PIN/recovery key in /proc/<pid>/cmdline CVE-2026-104617 Fix available 5.9 MediumOctober 15, 2026
• opensmtpd, opensuse tumbleweed, suse opensuse tumbleweed +2 more Local DoS in OpenSMTPD via UNIX domain socket smtpd.sock CVE-2025-62875 Fix available 6.9 MediumNovember 4, 2025
• opensuse tumbleweed SUSE-specific logrotate configuration allows escalation from mail user/group to root CVE-2025-53881 Fix available 6.9 MediumOctober 2, 2025
• opensuse tumbleweed traefik2-2.11.29-2.1 on GA media CVE-2025-46810 Fix available 8.5 HighSeptember 2, 2025
• opensuse mirrorcache, tumbleweed, suse opensuse tumbleweed +2 more XSS vulnerability found in OpenSuse MirrorCache CVE-2024-49505 5.3 MediumNovember 13, 2024
• opensuse tumbleweed Fixed temporary file path in aeon-checks allows fixing of disk encryption key CVE-2024-49506 7.3 HighNovember 13, 2024
• opensuse tumbleweed Incorrect Default Permissions vulnerability in the openSUSE Tumbleweed hawk2 package allows users... CVE-2023-32183 7.8 HighJuly 7, 2023
• opensuse tumbleweed keylime %post scriplet allows for privilege escalation from keylime user to root CVE-2022-31250 7.1 HighJuly 20, 2022
• opensuse tumbleweed, saltstack salt, suse linux enterprise server 15 sp 3 +2 more salt-api unauthenticated remote code execution CVE-2021-25315 Fix available 9.8 CriticalMarch 3, 2021
• opensuse leap 15.1, tumbleweed, suse linux enterprise server +6 more +8 more outdated entries in permissions profiles for /var/lib/pcp/tmp/* may cause security issues CVE-2020-8025 Fix available 6.1 MediumAugust 7, 2020
• opensuse leap, leap 15.1, leap 15.2 +3 more +5 more inn: non-root owned files CVE-2020-8026 Fix available 8.4 HighAugust 7, 2020
• opensuse leap, leap 15.1, tumbleweed +2 more +4 more kopano-python-services: Local privilege escalation from kopano to root in kopano-spamd subpackage CVE-2020-8014 7.7 HighJune 29, 2020
• proftpd, debian linux, fedoraproject fedora +2 more +4 more The mod_copy module in ProFTPD 1.3.5 allows remote attackers to read and write to arbitrary files... CVE-2015-3306 In KEVPublic exploitFix available EPSS 99.5% 10.0 HighMay 18, 2015