SUSE
SUSE Security Releases - October 2026
suse-2026-10 Oct 1, 2026 Source: Vendor
SUSE security advisories for October 2026, compiled from CVE.org records.
Source of record
The credited names below are quoted verbatim from the vendor's own advisory:
https://www.cve.org/CVERecord?id=CVE-2023-32198
Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.
Credited
2 lines
Showing 1–2 of 2
CVE-2026-104617
BR2026-0000-032390
SUSE Linux Enterprise Server 16.1, SUSE Linux Enterprise Server for NVIDIA 16.1, openSUSE Leap 16.1
unclaimed
There are two invocations of `qrencode` to display a QR code for scanning. These invocations leak the private data $pin / $key via /proc accessible for arbitrary low-privileged users in the system.
Credited as Matthias Gerstner of SUSE
CVE-2026-104618
BR2026-0000-032391
SUSE Linux Enterprise Server 16.1, SUSE Linux Enterprise Server for NVIDIA 16.1, openSUSE Leap 16.1
unclaimed
On request the `sdbootutil` script creates a world-readable debug log in /var/log/sdbootutil.log. The log file is created world-readable, however, which means that arbitrary low-privileged users in...
Credited as Matthias Gerstner of SUSE