Suse Opensuse vulnerabilities

• opensuse tumbleweed, suse opensuse leap 16.1, linux enterprise server 16.1 +1 more +3 more sdbootutil: world-readable debug log CVE-2026-104618 6.9 MediumOctober 15, 2026
• opensuse tumbleweed, suse opensuse leap 16.1, linux enterprise server 16.1 +1 more +3 more sdbootutil: qrencode invocation leaks PIN/recovery key in /proc/<pid>/cmdline CVE-2026-104617 Fix available 5.9 MediumOctober 15, 2026
• libxfont2, suse container suse/kiosk/tigervnc-x11vnc:1.14-63.8, container suse/kiosk/xorg:21.1-83.7 +77 more +79 more fs_read_glyphs() heap OOB read/write via encoding array index mismatch in libXfont2 CVE-2026-59679 Fix available 9.2 CriticalAugust 5, 2026
• libxfont, suse container suse/kiosk/tigervnc-x11vnc:1.14-63.8, container suse/kiosk/xorg:21.1-83.7 +77 more +79 more fs_read_glyphs() heap buffer overflow via cumulative glyph data overflow in libXfont2 CVE-2026-44950 Fix available 9.5 CriticalAugust 5, 2026
• suse opensuse tumbleweed LPE from suricata user to root due to chown in %post in suricata packaging CVE-2026-59674 Fix available 7.1 HighJuly 7, 2026
• suse opensuse, linux enterprise +1 more Path Traversal in Plugin Loading in libzypp CVE-2026-44933 Fix available 8.5 HighMay 20, 2026
• suse opensuse tumbleweed csync2 uses insecure temporary directories when compiled with C99 or later CVE-2026-41051 Fix available 5.1 MediumApril 22, 2026
• suse opensuse A Execution with Unnecessary Privileges vulnerability in lightdm-kde-greeter allows escalation... CVE-2025-62876 Fix available 5.3 MediumNovember 12, 2025
• opensmtpd, opensuse tumbleweed, suse opensuse tumbleweed +2 more Local DoS in OpenSMTPD via UNIX domain socket smtpd.sock CVE-2025-62875 Fix available 6.9 MediumNovember 4, 2025
• suse opensuse tumbleweed The logrotate configuration in the python-mailman of openSUSE allows the mailman user to sent SIGHUP to arbitrary proceess CVE-2025-53882 Fix available 4.8 MediumJuly 15, 2025
• suse opensuse tumbleweed daily-backup.sh script in cyrus-imapd allows escalation from cyrus to root CVE-2025-23394 Fix available 9.8 CriticalApril 29, 2025
• suse opensuse tumbleweed gerbera: Privilege escalation from user gerbera to root because of insecure %post script CVE-2025-23386 Fix available 7.8 HighMarch 10, 2025
• suse opensuse factory DoS attacks, information leaks etc. with crafted Git repositories in obs-scm-bridge CVE-2024-22038 Fix available 6.8 MediumNovember 28, 2024
• opensuse mirrorcache, tumbleweed, suse opensuse tumbleweed +2 more XSS vulnerability found in OpenSuse MirrorCache CVE-2024-49505 5.3 MediumNovember 13, 2024
• suse opensuse tumbleweed grub2 allows bypassing TPM-bound disk encryption on SL(E)M encrypted Images CVE-2024-49504 Fix available 7.0 HighNovember 6, 2024
• suse opensuse leap 15.5, opensuse leap 15.6, opensuse tumbleweed +13 more +15 more Crafted projects can overwrite special files in the .osc config directory CVE-2024-22034 Fix available 5.5 MediumAugust 19, 2024
• suse opensuse leap 15.5, opensuse leap 15.6, opensuse tumbleweed +2 more +4 more obs-service-download_url is vulnerable to argument injection CVE-2024-22033 Fix available 5.1 MediumJuly 12, 2024
• suse opensuse tumbleweed mlocate's %post script allows RUN_UPDATEDB_AS user to make arbitrary files world readable CVE-2023-32190 8.5 HighJune 15, 2024
• suse container suse/manager/5.0/x86 64/server:5.0.0-beta1.2.122, opensuse leap 15.5, opensuse tumbleweed +20 more +22 more tomcat packaging allows for escalation to root from tomcat user CVE-2024-22029 Fix available 7.8 HighFebruary 14, 2024
• opensuse leap, suse linux enterprise high performance computing, opensuse leap 15.5 +3 more +5 more A Improper Link Resolution Before File Access ('Link Following') vulnerability in SUSE SUSE Linux... CVE-2023-32182 Fix available 5.9 MediumAugust 23, 2023
• suse opensuse factory obs-service-go_modules: arbitrary directory delete CVE-2022-45155 Fix available 5.5 MediumMarch 15, 2023
• opensuse factory, suse opensuse factory +1 more sendmail: mail to root privilege escalation via sm-client.pre script CVE-2022-31256 Fix available 7.7 HighOctober 26, 2022
• opensuse factory, suse opensuse factory +1 more slurm: %post for slurm-testsuite operates as root in user owned directory CVE-2022-31251 6.5 MediumSeptember 7, 2022
• gnu grub2, suse opensuse factory, linux enterprise server 15 sp4 +2 more grub2-once uses fixed file name in /var/tmp CVE-2021-46705 Fix available 5.1 MediumMarch 16, 2022
• opensuse factory, suse linux enterprise server, opensuse factory +2 more +4 more clone-master-clean-up: dangerous file system operations CVE-2021-32000 Fix available 3.2 LowJuly 28, 2021
• opensuse leap 15.1, tumbleweed, suse linux enterprise server +6 more +8 more outdated entries in permissions profiles for /var/lib/pcp/tmp/* may cause security issues CVE-2020-8025 Fix available 6.1 MediumAugust 7, 2020
• opensuse leap, leap 15.1, leap 15.2 +3 more +5 more inn: non-root owned files CVE-2020-8026 Fix available 8.4 HighAugust 7, 2020
• opensuse leap, leap 15.1, tumbleweed +2 more +4 more kopano-python-services: Local privilege escalation from kopano to root in kopano-spamd subpackage CVE-2020-8014 7.7 HighJune 29, 2020
• opensuse factory, leap 15.1, leap 15.2 +2 more +4 more Problematic permissions in hylafax+ packaging allow escalation from uucp to other users CVE-2020-8024 Fix available 5.3 MediumJune 29, 2020
• opensuse factory, leap 15.1, osc +4 more +6 more osc: stores downloaded (supposed) RPM in network-controlled filesystem paths CVE-2019-3681 Fix available 7.5 HighJune 3, 2020
• open shortest path first (ospf) protocol, quagga, suse opensuse +2 more +4 more Open Shortest Path First (OSPF) protocol implementations may improperly determine LSA recency in affected Quagga and downstream implementations (SUSE, openSUSE, and Red Hat packages) CVE-2017-3224 8.2 HighJuly 24, 2018
• micro focus opensuse Code injection in openSUSE when running some source services used in the open build service 2.1... CVE-2011-0469 9.8 CriticalAugust 17, 2017
• linux kernel, fedoraproject fedora, redhat enterprise linux +7 more +9 more The rds_inc_info_copy function in net/rds/recv.c in the Linux kernel through 4.6.3 does not... CVE-2016-5244 Fix available 7.5 HighJune 16, 2016
• fedoraproject fedora, opensuse, suse opensuse osc +2 more osc before 0.151.0 allows remote attackers to execute arbitrary commands via shell metacharacters... CVE-2015-0778 Fix available 7.5 HighMarch 12, 2015
• suse opensuse, linux +1 more SUSE Linux Enterprise 10 SP3 (SLE10-SP3) and openSUSE 11.2 configures postfix to listen on all... CVE-2010-0230 7.5 HighJanuary 22, 2010
• suse opensuse sudo in SUSE openSUSE 10.3 does not clear the stdin buffer when password entry times out, which... CVE-2008-3067 Fix available 2.1 LowJuly 7, 2008
• xfsdump, suse opensuse, linux +4 more +6 more xfs_fsr in xfsdump creates a .fsr temporary directory with insecure permissions, which allows... CVE-2007-2654 Fix available 4.4 MediumMay 14, 2007