{
 "version": "https://jsonfeed.org/version/1.1",
 "title": "openSUSE Leap 16.1: all CVE events",
 "home_page_url": "https://patchwire.jonathanross.dev/products/suse--opensuse-leap-16-1/",
 "feed_url": "https://patchwire.jonathanross.dev/feeds/products/suse--opensuse-leap-16-1/all.json",
 "authors": [
  {
   "name": "Patchwire"
  }
 ],
 "language": "en",
 "items": [
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-104618/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-104618/",
   "title": "CVE-2026-104618 · SUSE Linux Enterprise Server 16.1 · disclosed",
   "content_text": "On request the `sdbootutil` script creates a world-readable debug log in /var/log/sdbootutil.log. The log file is created world-readable, however, which means that arbitrary low-privileged users in the system will be able to extract secrets from it.",
   "date_published": "2026-10-15T08:41:31Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-104617/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-104617/",
   "title": "CVE-2026-104617 · SUSE Linux Enterprise Server 16.1 · disclosed",
   "content_text": "There are two invocations of `qrencode` to display a QR code for scanning. These invocations leak the private data $pin / $key via /proc accessible for arbitrary low-privileged users in the system.",
   "date_published": "2026-10-15T08:33:09Z"
  }
 ]
}