Opensuse vulnerabilities

Products

• Leap 1,898
• Opensuse 1,456
• Backports Sle 326
• Backports 97
• Evergreen 44
• Factory 32
• Open Build Service 22
• Libsolv 14
• Open Build Service 13
• Leap 15.1 13
• Tumbleweed 12
• Leap 15.1 8
• Libzypp 7
• Leap 15.2 6
• Supportutils 6
• Leap 15.4 4
• Leap 15.2 3
• Openbuildservice 3
• Openldap2 3
• Tumbleweed 3
• Zypper 3
• Cryptctl 2
• Cscreen 2
• Libeconf 2
• Munge 2
• Backports Sle-15-sp3 2
• Factory 2
• Leap 15.3 2
• Osc 2
• Pcp 2
• Rmt-server 2
• Suse Linux Enterprise Server 2
• Texlive-filesystem 2
• Wicked 2

Newest

• opensuse tumbleweed, suse opensuse leap 16.1, linux enterprise server 16.1 +1 more +3 more sdbootutil: world-readable debug log CVE-2026-104618 6.9 MediumOctober 15, 2026
• opensuse tumbleweed, suse opensuse leap 16.1, linux enterprise server 16.1 +1 more +3 more sdbootutil: qrencode invocation leaks PIN/recovery key in /proc/<pid>/cmdline CVE-2026-104617 Fix available 5.9 MediumOctober 15, 2026
• opensuse buildservice obs-service-tar_scm: command injection via mercurial handler CVE-2026-56004 Fix available 10.0 CriticalJuly 2, 2026
• opensuse libzypp libzypp path traversal via "keyhint" in repomd.xml CVE-2026-44941 Fix available 8.4 HighJune 8, 2026
• microsoft libsolv, red hat enterprise linux 10, enterprise linux 7 +6 more +8 more Libsolv: stack-based buffer overflow in libsolv eddsa pgp signature verification allows denial of service CVE-2026-48863 Fix available 7.5 HighMay 29, 2026
• opensuse libzypp Handcrafted repo metadata may cause arbitrary local files to be overwritten by libzypp CVE-2026-25707 Fix available 8.8 HighMay 29, 2026
• opensuse libsolv, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +36 more +38 more Libsolv: heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page data CVE-2026-48864 Fix available 7.8 HighMay 26, 2026
• opensuse libsolv, red hat enterprise linux 10, enterprise linux 10.0 extended update support +11 more +13 more Libsolv: heap buffer overflow in libsolv repo_add_solv via negative maxsize from crafted .solv file CVE-2026-9149 Fix available 6.5 MediumMay 20, 2026
• opensuse libsolv, red hat enterprise linux 10, enterprise linux 10.0 extended update support +11 more +13 more Libsolv: stack-based buffer overflow in libsolv's debian metadata parser when handling sha384/sha512 checksums CVE-2026-9150 Fix available 6.5 MediumMay 20, 2026
• amazon linux, linux kernel, arista cloudvision agni +142 more +144 more crypto: algif_aead - Revert to operating out-of-place CVE-2026-31431 In KEVPublic exploitFix available EPSS 98.1% 7.8 HighApril 22, 2026
• opensuse sdbootutil An Insecure Temporary File vulnerability in openSUSE sdbootutil allows local users to pre-create... CVE-2026-25701 Fix available 7.0 HighFebruary 25, 2026
• dun munge, debian linux, red hat ai inference server 3.3 +16 more +18 more MUNGE has a buffer overflow in message unpacking allows key leakage and credential forgery CVE-2026-25506 Fix available 7.7 HighFebruary 10, 2026
• opensmtpd, opensuse tumbleweed, suse opensuse tumbleweed +2 more Local DoS in OpenSMTPD via UNIX domain socket smtpd.sock CVE-2025-62875 Fix available 6.9 MediumNovember 4, 2025
• opensuse tumbleweed SUSE-specific logrotate configuration allows escalation from mail user/group to root CVE-2025-53881 Fix available 6.9 MediumOctober 2, 2025
• opensuse tumbleweed traefik2-2.11.29-2.1 on GA media CVE-2025-46810 Fix available 8.5 HighSeptember 2, 2025
• sudo, canonical ubuntu linux, debian linux +5 more +7 more Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a... CVE-2025-32463 In KEVPublic exploitFix available EPSS 55.5% 9.3 CriticalJune 30, 2025
• opensuse mirrorcache, tumbleweed, suse opensuse tumbleweed +2 more XSS vulnerability found in OpenSuse MirrorCache CVE-2024-49505 5.3 MediumNovember 13, 2024
• opensuse tumbleweed Fixed temporary file path in aeon-checks allows fixing of disk encryption key CVE-2024-49506 7.3 HighNovember 13, 2024
• opensuse leap, suse linux enterprise high performance computing, opensuse leap 15.5 +3 more +5 more A Improper Link Resolution Before File Access ('Link Following') vulnerability in SUSE SUSE Linux... CVE-2023-32182 Fix available 5.9 MediumAugust 23, 2023
• opensuse opensuse-welcome, welcome +1 more A Insecure Storage of Sensitive Information vulnerability in openSUSE opensuse-welcome allows... CVE-2023-32184 Fix available 7.8 HighAugust 14, 2023
• opensuse tumbleweed Incorrect Default Permissions vulnerability in the openSUSE Tumbleweed hawk2 package allows users... CVE-2023-32183 7.8 HighJuly 7, 2023
• opensuse libeconf Stack buffer overflow in "read_file" function CVE-2023-22652 Fix available 3.3 LowJune 1, 2023
• opensuse libeconf Stack buffer overflow in "econf_writeFile" function CVE-2023-32181 Fix available 3.3 LowJune 1, 2023
• opensuse supportutils, suse linux enterprise server 12, linux enterprise server 15 +1 more +3 more supportconfig does not remove passwords in /etc/iscsi/iscsid.conf and /etc/target/lio_setup.sh CVE-2022-45154 Fix available 4.4 MediumFebruary 15, 2023
• opensuse paste paste: XSS on the image upload function CVE-2022-21948 4.3 MediumFebruary 7, 2023
• opensuse libzypp-plugin-appdata, leap 15.4, suse linux enterprise server for sap 15-sp3 +2 more libzypp-plugin-appdata: potential arbitrary code execution via shell injection due to `os.system` calls CVE-2023-22643 Fix available 6.3 MediumJanuary 17, 2023
• opensuse travel-support-program, travel support program +1 more travel-support-program vulnerable to data exfiltration via Ransack query injection CVE-2022-46163 7.5 HighJanuary 10, 2023
• opensuse leap 15.3, leap 15.4, rmt-server +3 more +5 more rmt-server-pubcloud allows to escalate from user _rmt to root CVE-2022-31254 Fix available 7.8 HighJanuary 3, 2023
• opensuse leap, leap 15.4, suse linux enterprise module for sap applications +3 more +5 more saphanabootstrap-formula: Escalation to root for arbitrary users in hana/ha_cluster.sls CVE-2022-45153 Fix available 7.0 HighJanuary 2, 2023
• opensuse factory, openldap2 +1 more openldap2: /usr/lib/openldap/start allows ldap user/group to recursively chown arbitrary directory trees to itself CVE-2022-31253 7.1 HighNovember 9, 2022
• opensuse factory, suse opensuse factory +1 more sendmail: mail to root privilege escalation via sm-client.pre script CVE-2022-31256 Fix available 7.7 HighOctober 26, 2022
• opensuse leap, leap micro, leap 15.3 +4 more +6 more permissions: chkstat does not check for group-writable parent directories or target files in safeOpen() CVE-2022-31252 Fix available 4.4 MediumSeptember 19, 2022
• opensuse factory, suse opensuse factory +1 more slurm: %post for slurm-testsuite operates as root in user owned directory CVE-2022-31251 Fix available 6.5 MediumSeptember 7, 2022
• opensuse canna, backports sle-15-sp3, backports sle-15-sp4 +2 more canna: unsafe handling of /tmp/.iroha_unix directory CVE-2022-21950 Fix available 5.3 MediumAugust 16, 2022
• opensuse tumbleweed keylime %post scriplet allows for privilege escalation from keylime user to root CVE-2022-31250 Fix available 7.1 HighJuly 20, 2022
• opensuse open build service Multiple XXE vulnerabilities in OBS CVE-2022-21949 Fix available 8.8 HighMay 3, 2022
• opensuse cscreen, factory +1 more suddoers configuration for cscreen not restrictive enough CVE-2022-21946 Fix available 5.3 MediumMarch 16, 2022
• opensuse cscreen, factory +1 more cscreen: usage of fixed path /tmp/cscreen.debug CVE-2022-21945 Fix available 5.1 MediumMarch 16, 2022
• opensuse build service, open build service +1 more login-proxy sends password to attacker-provided domain CVE-2021-36777 8.1 HighMarch 9, 2022
• opensuse libsolv Two heap-overflow vulnerabilities exist in openSUSE/libsolv libsolv through 13 Dec 2020 in the... CVE-2021-44568 Fix available 6.5 MediumFebruary 21, 2022
• cobbler project cobbler, fedoraproject fedora, opensuse backports +2 more +4 more Command Injection in Cobbler CVE-2021-45082 Fix available 7.8 HighFebruary 18, 2022
• opensuse factory, factory watchman, backports sle-15-sp3 +2 more watchman: chown in [email protected] unit allows symlink attack CVE-2022-21944 Fix available 7.8 HighJanuary 17, 2022
• opensuse factory parsec: dangerous 777 permissions for /run/parsec CVE-2021-36781 Fix available 5.9 MediumJanuary 14, 2022
• uriparser project uriparser, debian linux, fedoraproject extra packages for enterprise linux +4 more +6 more An issue was discovered in uriparser before 0.9.6. It performs invalid free operations in... CVE-2021-46141 Fix available 5.5 MediumJanuary 6, 2022
• uriparser project uriparser, debian linux, fedoraproject extra packages for enterprise linux +4 more +6 more An issue was discovered in uriparser before 0.9.6. It performs invalid free operations in... CVE-2021-46142 Fix available 5.5 MediumJanuary 6, 2022
• vim, vim vim/vim, apple mac os x +6 more +8 more Out-of-bounds Read in vim/vim CVE-2021-4166 Fix available 7.1 HighDecember 25, 2021
• ruby-lang cgi, ruby, debian linux +6 more +8 more Cookie Prefix Spoofing in CGI::Cookie.parse CVE-2021-41819 Fix available 7.5 HighDecember 23, 2021
• ruby-lang date, ruby, debian linux +6 more +8 more Regular expression denial of service vulnerability (ReDoS) in date CVE-2021-41817 Fix available 7.5 HighNovember 16, 2021
• opensuse libsolv Buffer overflow vulnerability in function prune_to_recommended in src/policy.c in libsolv before... CVE-2021-33938 Fix available 7.5 HighSeptember 2, 2021
• opensuse libsolv Buffer overflow vulnerability in function pool_installable_whatprovides in src/repo.h in libsolv... CVE-2021-33930 Fix available 7.5 HighSeptember 2, 2021
• Show olderLoading…