CVE-2026-104618

On request the sdbootutil script creates a world-readable debug log in /var/log/sdbootutil.log. The log file is created world-readable, however, which means that arbitrary low-privileged users in the system will be able to extract secrets from it...

CVE-2026-104618

The sdbootutil script creates a debug log at /var/log/sdbootutil.log with world-readable permissions. This misconfiguration allows arbitrary low-privileged users on the system to access and extract sensitive secrets from the log file. No specific remediation or exploit details are provided in the...

CVE-2026-104618 sdbootutil: world-readable debug log

On request the sdbootutil script creates a world-readable debug log in /var/log/sdbootutil.log. The log file is created world-readable, however, which means that arbitrary low-privileged users in the system will be able to extract secrets from it...

EUVD-2026-101945

On request the sdbootutil script creates a world-readable debug log in /var/log/sdbootutil.log. The log file is created world-readable, however, which means that arbitrary low-privileged users in the system will be able to extract secrets from it...

CVE-2026-104617 sdbootutil: qrencode invocation leaks PIN/recovery key in /proc/<pid>/cmdline

There are two invocations of qrencode to display a QR code for scanning. These invocations leak the private data $pin / $key via /proc accessible for arbitrary low-privileged users in the system...

CVE-2026-104617

The sdbootutil utility contains a vulnerability where two invocations of qrencode to display QR codes leak sensitive private data, specifically the $pin and $key . This information is exposed via /proc//cmdline , making it accessible to arbitrary low-privileged users on the system. The vulnerabil...

CVE-2026-104618: Incorrect Permission Assignment for Critical Resource

On request the sdbootutil script creates a world-readable debug log in /var/log/sdbootutil.log. The log file is created world-readable, however, which means that arbitrary low-privileged users in the system will be able to extract secrets from it...

openSUSE 16: sdbootutil / sdbootutil-bash-completion / etc (openSUSE-SU-2026:21933-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21933-1 advisory. Security issues fixed: - CVE-2026-41676: Deriver:derive and PkeyCtxRef:derive can overflow short buffers on OpenSSL 1.1.1 bsc1270192. -...

Security update for sdbootutil (important)

openSUSE security update: security update for sdbootutil ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21933-1 Rating: important References: bsc1234010 bsc1270192 bsc1270420 bsc1270471 bsc1270616 bsc1270670 bsc1270742 bsc1270863 bsc1270922...

OPENSUSE-SU-2026:21933-1 Security update for sdbootutil

This update for sdbootutil fixes the following issues: Security issues fixed: - CVE-2026-41676: Deriver:derive and PkeyCtxRef:derive can overflow short buffers on OpenSSL 1.1.1 bsc1270192. - CVE-2026-41677: out-of-bounds read in PEM password callback when returning an oversized length in...

sdbootutil-1+git20260713.d869cf8-1.1 on GA media (moderate)

sdbootutil-1+git20260713.d869cf8-1.1 on GA media Announcement ID: openSUSE-SU-2026:11262-1 Rating: moderate Cross-References: CVE-2026-41677 CVE-2026-41678 CVE-2026-41681 CVE-2026-41898 CVE-2026-42327 CVE-2026-44662 CVE-2026-45784 CVSS scores: CVE-2026-41677 SUSE : 3.7...

PT-2026-59007

These are all security issues fixed in the sdbootutil-1+git20260713.d869cf8-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11262-1 sdbootutil-1+git20260713.d869cf8-1.1 on GA media

These are all security issues fixed in the sdbootutil-1+git20260713.d869cf8-1.1 package on the GA media of openSUSE Tumbleweed...

sdbootutil-1+git20260706.f9f4faf-1.1 on GA media (moderate)

sdbootutil-1+git20260706.f9f4faf-1.1 on GA media Announcement ID: openSUSE-SU-2026:11194-1 Rating: moderate Cross-References: CVE-2026-41676 CVSS scores: CVE-2026-41676 SUSE : 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H CVE-2026-41676 SUSE : 8.3...

OPENSUSE-SU-2026:11194-1 sdbootutil-1+git20260706.f9f4faf-1.1 on GA media

These are all security issues fixed in the sdbootutil-1+git20260706.f9f4faf-1.1 package on the GA media of openSUSE Tumbleweed...

Security update for sdbootutil (important)

openSUSE security update: security update for sdbootutil ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20878-1 Rating: important References: bsc1243889 bsc1247952 bsc1252871 bsc1253652 bsc1254317 bsc1254534 bsc1254865 bsc1256775 bsc1257612...

OPENSUSE-SU-2026:20878-1 Security update for sdbootutil

This update for sdbootutil fixes the following issues Security issue: - CVE-2026-25701: use of fixed directory /tmp/pcrlock.d.back in sdbootutil-update-predictions.service bsc1258241. Non security issues: Update to version 1+git20260506.25d47bf: - TPM based system does not auto-unlock encryption...

sdbootutil-1+git20260303.90d816d-1.1 on GA media (moderate)

sdbootutil-1+git20260303.90d816d-1.1 on GA media Announcement ID: openSUSE-SU-2026:10287-1 Rating: moderate Cross-References: CVE-2026-25701 CVSS scores: CVE-2026-25701 SUSE : 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H CVE-2026-25701 SUSE : 7...

OPENSUSE-SU-2026:10287-1 sdbootutil-1+git20260303.90d816d-1.1 on GA media

These are all security issues fixed in the sdbootutil-1+git20260303.90d816d-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2026-25701

An Insecure Temporary File vulnerability in openSUSE sdbootutil allows local users to pre-create a directory to achieve various effects like: gain access to possible private information found in /var/lib/pcrlock.d manipulate the data backed up in /tmp/pcrlock.d.bak, therefore violating the...