openSUSE-SU-2026:21706-1

See a problem?

Import Source

https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:21706-1.json

JSON Data

https://api.osv.dev/v1/vulns/openSUSE-SU-2026:21706-1

Published

2026-08-31T05:56:37Z

Modified

2026-09-02T18:23:08Z

Summary

Security update for libgpg-error

Details

This update for libgpg-error fixes the following issue:

Out-of-bounds read in _gpgrt_vfnameconcat of stringutils.c when the GPGRT_FCONCAT_SYSCONF flag is used (bsc#1263078).

References

https://bugzilla.suse.com/1263078

Affected packages

openSUSE:Leap 16.0 / libgpg-error

Package

Name: libgpg-error
Purl: pkg:rpm/opensuse/libgpg-error&distro=openSUSE%20Leap%2016.0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

1.58-160000.2.1

Ecosystem specific

{
    "binaries":  [
        {
            "libgpg-error-devel":  "1.58-160000.2.1",
            "libgpg-error0":  "1.58-160000.2.1"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:21706-1.json"