Suse Linux Enterprise Server 15 Sp5-ltss (Suse) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2026-09-10. Vendor: Suse.

CVEs of Suse Linux Enterprise Server 15 Sp5-ltss

• CVE-2026-44950 - CVSS 9.5 (critical), 2026-09-10: fs_read_glyphs() in the libXfont2 font-server client (src/fc/fserve.c) copies each glyph's bitmap into a single buffer. Existing checks validates only that…
• CVE-2026-59679 - CVSS 9.2 (critical), 2026-09-10: fs_read_glyphs() in the libXfont2 font-server client (src/fc/fserve.c) indexes the per-character encoding[] array using num_chars from the FS_QueryXBitmaps16…
• CVE-2026-41054 - CVSS 7.8 (high), 2026-05-20: In `src/havegecmd.c`, the `socket_handler` function performs a credential check on the abstract UNIX socket (`\0/sys/entropy/haveged`). However, while it…