Vulnérabilités de SUSE openSUSE Tumbleweed
Votre version est-elle touchée ?
Liste des CVE
| CVE | Résumé | Score | Publiée |
|---|---|---|---|
| CVE-2026-44950 | fs_read_glyphs() in the libXfont2 font-server client (src/fc/fserve.c) copies each glyph's bitmap into a single buffer | 9.0 Critique | 10 sept. 2026 |
| CVE-2026-59679 | fs_read_glyphs() in the libXfont2 font-server client (src/fc/fserve.c) indexes the per-character encoding[] array… | 9.0 Critique | 10 sept. 2026 |
| CVE-2026-59674 | A UNIX Symbolic Link (Symlink) Following vulnerability in openSUSE Tumbleweed suricata package allows the suricata… | 7.1 Élevée | 14 juil. 2026 |
| CVE-2026-41051 | csync2 uses insecure temporary directories when compiled with C99 or later, allowing for TOCTOU style attacks on the… | 5.1 Moyenne | 13 mai 2026 |
| CVE-2025-62875 | An Improper Check for Unusual or Exceptional Conditions vulnerability in OpenSMTPD allows local users to crash OpenSMTPD | 6.9 Moyenne | 20 nov. 2025 |
| CVE-2025-53882 | A Reliance on Untrusted Inputs in a Security Decision vulnerability in the logrotate configuration for openSUSE mailman3… | 4.4 Moyenne | 23 juil. 2025 |
| CVE-2025-23394 | A UNIX Symbolic Link (Symlink) Following vulnerability in openSUSE Tumbleweed cyrus-imapd allows escalation from cyrus… | 9.8 Critique | 26 mai 2025 |
| CVE-2025-23386 | A Incorrect Default Permissions vulnerability in the openSUSE Tumbleweed package gerbera allows the service user gerbera… | 7.8 Élevée | 10 avr. 2025 |
| CVE-2024-49504 | grub2 allowed attackers with access to the grub shell to access files on the encrypted disks | 7.0 Élevée | 13 nov. 2024 |
| CVE-2024-22034 | Attackers could put the special files in .osc into the actual package sources (e.g | 5.5 Moyenne | 16 oct. 2024 |
| CVE-2024-22033 | The OBS service obs-service-download_url was vulnerable to a command injection vulnerability | 6.3 Moyenne | 16 oct. 2024 |
| CVE-2024-22029 | Insecure permissions in the packaging of tomcat allow local users that win a race during package installation to… | 7.8 Élevée | 16 oct. 2024 |
| CVE-2023-32190 | mlocate's %post script allows RUN_UPDATEDB_AS user to make arbitrary files world readable by abusing insecure file… | 8.5 Élevée | 16 oct. 2024 |
Autres produits SUSE
Rancher 86
neuvector 14
SUSE Linux Enterprise Server 15 13
SUSE Linux Enterprise Server 12 12
SUSE Linux Enterprise Server for SAP 15 8
libzypp 7
SUSE Linux Enterprise Server 15-LTSS 7
SUSE Manager Server Module 4.3 7
SUSE Linux Enterprise Server for SAP Applications 15 SP6 6
supportutils 5
SUSE Linux Enterprise Server for SAP Applications 15 SP5 5
openSUSE Factory 5