5.1
Medium
CVE-2026-41051 csync2 uses insecure temporary directories when compiled with C99 or later, allowing for TOCTOU style attacks on the…
Description
csync2 uses insecure temporary directories when compiled with C99 or later, allowing for TOCTOU style attacks on the temporary directories.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| openSUSE Tumbleweed 2.0 | earliest → < 2.0+git.1600444747.83b3644-3.1 | 2.0+git.1600444747.83b3644-3.1 |
References
- bugzilla.suse.com bugzilla.suse.com
Timeline
- Published
- Last modified
Other CVEs of openSUSE Tumbleweed
The 13 CVEs of openSUSE Tumbleweed →
CVE-2026-44950
fs_read_glyphs() in the libXfont2 font-server client (src/fc/fserve.c) copies each glyph's bitmap into a single buffer
9.0
Critical
CVE-2026-59679
fs_read_glyphs() in the libXfont2 font-server client (src/fc/fserve.c) indexes the per-character encoding[] array…
9.0
Critical
CVE-2026-59674
A UNIX Symbolic Link (Symlink) Following vulnerability in openSUSE Tumbleweed suricata package allows the suricata…
7.1
High
CVE-2025-62875
An Improper Check for Unusual or Exceptional Conditions vulnerability in OpenSMTPD allows local users to crash OpenSMTPD
6.9
Medium