Opensuse Tumbleweed
Approved changes feed: RSS · Atom
cpe:2.3:a:suse:opensuse_tumbleweed:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Suse (ec535637-432e-5a38-96dd-4ec1e0138f73) |
|---|---|
| Product | Opensuse Tumbleweed (a08402e7-7017-5deb-96e1-e12f35ca4a83) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-44950 |
vulnerable | 2026-09-16 04:33:45.621447 |
fs_read_glyphs() heap buffer overflow via cumulative glyph data overflow in libXfont2
CRITICAL (9)
fs_read_glyphs() in the libXfont2 font-server client (src/fc/fserve.c) copies each glyph's bitmap into a single buffer. Existing checks validates only that the source slice (position, length) lies within the source bitmap buffer. It does not check whether the running destination cursor has exceeded the allocation.
A malicious font server can send overlapping source offsets -- for example 1000 glyphs each referencing {position:0, length:64} with nbytes=64. Each individual source range passes the existing validation, but the cumulative writes total 64000 bytes into a 64-byte destination buffer. This is a heap buffer overflow with attacker-controlled content.
Published: 2026-09-10T08:19:55.462Z
Updated: 2026-09-10T18:26:50.408Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-59679 |
vulnerable | 2026-09-16 04:32:47.209168 |
fs_read_glyphs() heap OOB read/write via encoding array index mismatch in libXfont2
CRITICAL (9)
fs_read_glyphs() in the libXfont2 font-server client (src/fc/fserve.c) indexes the per-character encoding[] array using num_chars from the FS_QueryXBitmaps16 reply, but that array was allocated with a size derived from num_extents in the separate FS_QueryXExtents16 reply. The two CARD32 fields are never cross-checked.
A malicious or compromised font server can send a small num_extents (e.g. 1) in the extents reply, then a large num_chars (e.g. 100000) in the bitmaps reply. This causes attacker-controlled out-of-bounds heap read and writes.
Published: 2026-09-10T08:15:24.892Z
Updated: 2026-09-10T12:45:33.969Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-59674 |
vulnerable | 2026-07-29 01:03:17.519524 |
LPE from suricata user to root due to chown in %post in suricata packaging
A UNIX Symbolic Link (Symlink) Following vulnerability in openSUSE Tumbleweed suricata package allows the suricata user to escalate to root.
This issue affects openSUSE Tumbleweed: from ? before 8.0.5-2.1; openSUSE Tumbleweed: from ? before 8.0.5-2.1.
Published: 2026-07-14T07:32:35.363Z
Updated: 2026-07-15T04:00:53.092Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-41051 |
vulnerable | 2026-06-08 08:03:14.609026 |
csync2 uses insecure temporary directories when compiled with C99 or later
MEDIUM (5)
csync2 uses insecure temporary directories when compiled with C99 or later, allowing for TOCTOU style attacks on the temporary directories.
Published: 2026-05-13T08:37:38.405Z
Updated: 2026-05-13T19:24:11.916Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-62875 |
vulnerable | 2026-06-08 07:39:16.948037 |
Local DoS in OpenSMTPD via UNIX domain socket smtpd.sock
An Improper Check for Unusual or Exceptional Conditions vulnerability in OpenSMTPD allows local users to crash OpenSMTPD.
This issue affects openSUSE Tumbleweed: from ? before 7.8.0p0-1.1.
Published: 2025-11-20T16:02:11.542Z
Updated: 2025-11-21T16:28:18.612Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-53882 |
vulnerable | 2026-06-08 07:31:15.898075 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-23394 |
vulnerable | 2026-06-08 07:10:55.669139 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-23386 |
vulnerable | 2026-06-08 07:10:55.662665 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-49505 |
vulnerable | 2026-06-08 06:50:14.145441 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-49504 |
vulnerable | 2026-06-08 06:50:14.144935 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-22034 |
vulnerable | 2026-06-08 06:29:33.408169 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-22033 |
vulnerable | 2026-06-08 06:29:33.399625 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-22029 |
vulnerable | 2026-06-08 06:29:33.390013 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-32190 |
vulnerable | 2026-06-08 06:04:45.118261 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.