Suse Opensuse vulnerabilities

CVE-2026-44933 [HIGH] CWE-35 CVE-2026-44933: `PluginScript` attempts to `chroot` the plugin to the `repoManagerRoot`, this root is frequently `/` `PluginScript` attempts to `chroot` the plugin to the `repoManagerRoot`, this root is frequently `/` (the system root) in standard configurations or when using `--root`. If the chroot target is `/`, it is a no-op, allowing the traversed path to execute host binaries (like `/bin/bash`) with root privileges.

CVE-2010-0230 [HIGH] CWE-264 CVE-2010-0230: SUSE Linux Enterprise 10 SP3 (SLE10-SP3) and openSUSE 11.2 configures postfix to listen on all netwo SUSE Linux Enterprise 10 SP3 (SLE10-SP3) and openSUSE 11.2 configures postfix to listen on all network interfaces, which might allow remote attackers to bypass intended access restrictions.

CVE-2025-62876 [MEDIUM] CWE-250 CVE-2025-62876: A Execution with Unnecessary Privileges vulnerability in lightdm-kde-greeter allows escalation from A Execution with Unnecessary Privileges vulnerability in lightdm-kde-greeter allows escalation from the service user to root.This issue affects lightdm-kde-greeter. before 6.0.4.

CVE-2007-2654 [MEDIUM] CWE-362 CVE-2007-2654: xfs_fsr in xfsdump creates a .fsr temporary directory with insecure permissions, which allows local xfs_fsr in xfsdump creates a .fsr temporary directory with insecure permissions, which allows local users to read or overwrite arbitrary files on xfs filesystems.

CVE-2008-3067 [LOW] CWE-255 CVE-2008-3067: sudo in SUSE openSUSE 10.3 does not clear the stdin buffer when password entry times out, which migh sudo in SUSE openSUSE 10.3 does not clear the stdin buffer when password entry times out, which might allow local users to obtain a password by reading stdin from the parent process after a sudo child process exits.