Suse linux enterprise server ltss extended security

This hub aggregates every CVE we track for Suse linux enterprise server ltss extended security, a product in the operating systems space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 15 most recently published vulnerabilities affecting Suse linux enterprise server ltss extended security.

• CVE-2026-34757LIBPNG has a yse-after-free in png_set_PLTE, png_set_tRNS and png_set_hIST leading to corrupted chunk data and potential heap information disclosure5.1Apr 9, 2026
• CVE-2026-0891Memory safety bugs fixed in Firefox ESR 140.7, Thunderbird ESR 140.7, Firefox 147 and Thunderbird 1478.1Jan 13, 2026
• CVE-2025-58060cups has Authentication bypass with AuthType Negotiate8.0Sep 11, 2025
• CVE-2025-50952openjpeg v 2.5.0 was discovered to contain a NULL pointer dereference via the component /openjp2/dwt.c.6.5Aug 7, 2025
• CVE-2025-50106Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D). Supported versions that are affected are Oracle Java SE: 8...8.1Jul 15, 2025
• CVE-2025-30749Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D). Supported versions that are affected are Oracle Java SE: 8...8.1Jul 15, 2025
• CVE-2025-53367DjVuLibre OOB-Write Vulnerability in MMRDecoder7.8Jul 3, 2025
• CVE-2025-38173crypto: marvell/cesa - Handle zero-length skcipher requests7.8Jul 3, 2025
• CVE-2025-4565Unbounded recursion in Python Protobuf5.3Jun 16, 2025
• CVE-2025-49125Apache Tomcat: Security constraint bypass for pre/post-resources7.5Jun 16, 2025
• CVE-2025-49709Memory corruption in canvas surfaces9.8Jun 11, 2025
• CVE-2025-4517Arbitrary writes via tarfile realpath overflow9.4Jun 3, 2025
• CVE-2025-3891Mod_auth_openidc: dos via empty post in mod_auth_openidc with oidcpreservepost enabled7.5Apr 29, 2025
• CVE-2025-3034Memory safety bugs fixed in Firefox 137 and Thunderbird 1378.1Apr 1, 2025
• CVE-2025-3032Leaking file descriptors from the fork server7.4Apr 1, 2025