5.1
Medium
CVE-2026-104617 There are two invocations of `qrencode` to display a QR code for scanning
Description
There are two invocations of `qrencode` to display a QR code for scanning. These invocations leak the private data $pin / $key via /proc accessible for arbitrary low-privileged users in the system.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| SUSE Linux Enterprise Server 16.1 | Versions not published | |
| SUSE Linux Enterprise Server for NVIDIA 16.1 | Versions not published | |
| openSUSE Leap 16.1 | Versions not published | |
| Tumbleweed | Versions not published |
References
- bugzilla.suse.com bugzilla.suse.com
- www.suse.com www.suse.com
Timeline
- Published
- Last modified