Skip to contentSuse Opensuse Tumbleweed vulnerabilities
- libxfont2, suse container suse/kiosk/tigervnc-x11vnc:1.14-63.8, container suse/kiosk/xorg:21.1-83.7 +77 more +79 morefs_read_glyphs() heap OOB read/write via encoding array index mismatch in libXfont2CVE-2026-59679Fix available9.2 Critical
- libxfont, suse container suse/kiosk/tigervnc-x11vnc:1.14-63.8, container suse/kiosk/xorg:21.1-83.7 +77 more +79 morefs_read_glyphs() heap buffer overflow via cumulative glyph data overflow in libXfont2CVE-2026-44950Fix available9.5 Critical
- suse opensuse tumbleweedLPE from suricata user to root due to chown in %post in suricata packagingCVE-2026-59674Fix available7.1 High
- suse opensuse tumbleweedcsync2 uses insecure temporary directories when compiled with C99 or laterCVE-2026-41051Fix available5.1 Medium
- opensmtpd, opensuse tumbleweed, suse opensuse tumbleweed +2 moreLocal DoS in OpenSMTPD via UNIX domain socket smtpd.sockCVE-2025-62875Fix available6.9 Medium
- suse opensuse tumbleweedThe logrotate configuration in the python-mailman of openSUSE allows the mailman user to sent SIGHUP to arbitrary proceessCVE-2025-53882Fix available4.8 Medium
- suse opensuse tumbleweeddaily-backup.sh script in cyrus-imapd allows escalation from cyrus to rootCVE-2025-23394Fix available9.8 Critical
- suse opensuse tumbleweedgerbera: Privilege escalation from user gerbera to root because of insecure %post scriptCVE-2025-23386Fix available7.8 High
- suse opensuse tumbleweedgrub2 allows bypassing TPM-bound disk encryption on SL(E)M encrypted ImagesCVE-2024-49504Fix available7.0 High
- suse opensuse leap 15.5, opensuse leap 15.6, opensuse tumbleweed +13 more +15 moreCrafted projects can overwrite special files in the .osc config directoryCVE-2024-22034Fix available5.5 Medium
- suse opensuse leap 15.5, opensuse leap 15.6, opensuse tumbleweed +2 more +4 moreobs-service-download_url is vulnerable to argument injectionCVE-2024-22033Fix available5.1 Medium
- suse opensuse tumbleweedmlocate's %post script allows RUN_UPDATEDB_AS user to make arbitrary files world readableCVE-2023-321908.5 High
- suse container suse/manager/5.0/x86 64/server:5.0.0-beta1.2.122, opensuse leap 15.5, opensuse tumbleweed +20 more +22 moretomcat packaging allows for escalation to root from tomcat userCVE-2024-22029Fix available7.8 High
- opensuse leap 15.1, tumbleweed, suse linux enterprise server +6 more +8 moreoutdated entries in permissions profiles for /var/lib/pcp/tmp/* may cause security issuesCVE-2020-8025Fix available6.1 Medium
- opensuse leap, leap 15.1, leap 15.2 +3 more +5 moreinn: non-root owned filesCVE-2020-8026Fix available8.4 High
- opensuse leap, leap 15.1, tumbleweed +2 more +4 morekopano-python-services: Local privilege escalation from kopano to root in kopano-spamd subpackageCVE-2020-80147.7 High