SUSE Linux Enterprise Server for SAP Applications 15 SP7 vulnerabilities

3 known vulnerabilities in SUSE Linux Enterprise Server for SAP Applications 15 SP7 from SUSE. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.0 Critical severity

  Container suse/kiosk/tigervnc-x11vnc:1.14-63.8: Out-of-bounds Write

  CVE-2026-59679Sep 10, 2026SUSE

  fs_read_glyphs() in the libXfont2 font-server client (src/fc/fserve.c) indexes the per-character encoding[] array using num_chars from the FS_QueryXBitmaps16 reply, but that array was allocated with a size derived from num_extents in the separate FS_QueryXExte

• 9.0 Critical severity

  Container suse/kiosk/tigervnc-x11vnc:1.14-63.8: Heap-based Buffer Overflow

  CVE-2026-44950Sep 10, 2026SUSE

  fs_read_glyphs() in the libXfont2 font-server client (src/fc/fserve.c) copies each glyph's bitmap into a single buffer. Existing checks validates only that the source slice (position, length) lies within the source bitmap buffer. It does not check whether the

• 7.8 High severity

  Container suse/sle-micro-rancher/5.3:latest: Authentication Bypass by Primary Weakness

  CVE-2026-41054May 20, 2026SUSE

  In `src/havegecmd.c`, the `socket_handler` function performs a credential check on the abstract UNIX socket (`\0/sys/entropy/haveged`). However, while it detects if the connecting user is not root (`cred.uid != 0`) and prepares a negative acknowledgement (`ASC