GCVE - cpe:2.3:a:suse:opensuse_leap

Approved changes feed: RSS · Atom

cpe:2.3:a:suse:opensuse_leap_16.1:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Suse (`ec535637-432e-5a38-96dd-4ec1e0138f73`)
Product	Opensuse Leap 16.1 (`cdcd1db3-ee91-5f83-884b-54e7f8fb41e5`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2026-104617`	vulnerable	2026-11-03 10:16:19.381941	sdbootutil: qrencode invocation leaks PIN/recovery key in /proc/<pid>/cmdline MEDIUM (5.1) There are two invocations of `qrencode` to display a QR code for scanning. These invocations leak the private data $pin / $key via /proc accessible for arbitrary low-privileged users in the system. Published: 2026-10-15T08:33:09.363Z Updated: 2026-10-15T14:03:20.369Z Open on db.gcve.eu Reference links https://bugzilla.suse.com/show_bug.cgi?id=CVE-2026-104617 https://www.suse.com/security/cve/CVE-2026-104617.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-104618`	vulnerable	2026-11-03 10:16:19.076017	sdbootutil: world-readable debug log MEDIUM (6.2) On request the `sdbootutil` script creates a world-readable debug log in /var/log/sdbootutil.log. The log file is created world-readable, however, which means that arbitrary low-privileged users in the system will be able to extract secrets from it. Published: 2026-10-15T08:41:31.842Z Updated: 2026-10-15T13:58:23.634Z Open on db.gcve.eu Reference links https://bugzilla.suse.com/show_bug.cgi?id=CVE-2026-104618 https://www.suse.com/security/cve/CVE-2026-104618.html	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open this panel to browse, search, copy or download the JSON record.