Skip to content

Known vulnerabilities in openSUSE Tumbleweed

Is your version affected?

CVE Summary Score Published
CVE-2026-44950 fs_read_glyphs() in the libXfont2 font-server client (src/fc/fserve.c) copies each glyph's bitmap into a single buffer 9.0 Critical Sep 10, 2026
CVE-2026-59679 fs_read_glyphs() in the libXfont2 font-server client (src/fc/fserve.c) indexes the per-character encoding[] array… 9.0 Critical Sep 10, 2026
CVE-2025-23394 A UNIX Symbolic Link (Symlink) Following vulnerability in openSUSE Tumbleweed cyrus-imapd allows escalation from cyrus… 9.8 Critical May 26, 2025

Other SUSE products