openSUSE-SU-2026:21866-1

See a problem?
Import Source
https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:21866-1.json
JSON Data
https://api.osv.dev/v1/vulns/openSUSE-SU-2026:21866-1
Upstream
Related
Published
2026-09-16T15:14:49Z
Modified
2026-09-17T18:23:14Z
Summary
Security update for chirp
Details

This update for chirp fixes the following issues:

Changes in chirp:

  • Update to version 20260911:

    • ftm300d: Experimental Yaesu FTM-300DR driver
    • Update Ukrainian localization
    • ar8200: Fix importing memories with AM mode
    • Unify Baofeng setting descriptions across drivers
    • Add Yaesu FT5D
    • uvb5: Fix Reverse setting
  • Update to version 20260904:

    • Fix RB28/RB628 tone and DTCS index mapping
    • Retevis RB28/RB628: Fix Busy Channel Lockout display
    • various bug fixes
  • Update to version 20260821:

    • Add Kenwood NX-800 driver
    • CVE-2026-78136: kenwood_itm: Fix DCS parsing (boo#1280123)
    • tmd710: various bug fixes
    • Add TK-3180E support
    • tk8180: various updates
    • Support Shift+F10 convention for context menu in memedit
    • Add Baofeng BF-T20, BF-T20FRS setting descriptions
    • Add QYT KT-8900 setting documentation
    • Add user-friendly Baofeng UV-5R setting descriptions
  • Update to version 20260626:

    • uvk5_egzumer: Fix battery_text and mic_bar never being saved
    • Fix open filter translated string
  • Update to version 20260619:

    • Add Baofeng BF-5RH as alias of UV-5RH
    • locale: Added Czech translation
    • generic_csv: Fix ImmutableValueError when exporting special memories
  • Update to version 20260612:

    • Add test image for Bajeton BJ7800
    • Update RT-920 test image for FM,AM & HF memories
    • Add new model Bajeton BJ7800 as a sub-class of RT-920
  • Update to version 20260605:

    • Update boot, zone, scan and alarm channels on channel deletion
    • Add GM-15Pro extended UHF range
  • Update to version 20260529:

    • Fix RT-900 non-BT, increase to 999 channels.
    • Fix escape character in log message for UV-5R Mini
  • Update to version 20260522:

    • tdh8: Fix loading out-of-range group code values
    • baofeng_uv17Pro: Fix uploading over BLE for supported models
    • Add BLE serial detection
    • mp31: Add support for Baofeng MP31
  • Update to version 20260515:

    • ha2: Fix defaulting empty memories to sane values
  • Update to version 20260508:

    • Don't complain about incompatible tones on import if no tone mode selected
    • ic2730: Add IC-2730E (European variant) support
    • ar8200: Add new driver for AOR AR8200
    • Updated Italian Translation
  • Update to version 20260501:

    • tdh8: Fix VFO A/B BCL setting not reading properly
    • tdh8: Add offset dir in VFO settings and fix VFO TX freq
    • h777v4: Fix detected models
  • Update to version 20260425:

    • Use common "no response" exception in drivers
    • vx150: Add driver for Vertex Standard VX-150
    • Update 935 and XS20 power handling
    • Fix 935/XS20 new channel creation
    • Fix exporting DV memories from RepeaterBook to CSV
    • TK7162: add initial support
    • tk8160: Fix upload clobbering memory
    • tk8160: Cleanup key definitions
  • Update to version 20260417:

    • Add Wouxun XS20 series channel memory support
    • Wouxun 935/8h series extra memory settings
    • TK-372G correct variants and names
    • Add BF-V12D support
    • Improve cache performance for RepeaterBook queries
    • Improve reliability of network source requests and bug reports
    • radtel_rt900: Fix flake8 E501 line too long in FHSS Code setting
    • radtel_rt900: Fix FHSS Code init crash on out-of-range image values
    • radtel_rt900: Expose FHSS Code per-channel setting
    • radtel_rt900: Expose LearnFHSS per-channel setting
  • Update to version 20260410:

    • Fix RB query for non-NA countries when translated
    • Update Turkish translation
    • Update Japanese translations
    • vx8: Fix 6.25kHz step channels being off frequency
  • Update to version 20260403:

    • Add common KenwoodToneModel and move a number of supported modeels to it
    • Add Baofeng UV-5RM Plus
  • Update to version 20260327:

    • Add Retevis C2 driver
    • Add Radioddity GS-10B
    • Updated Italian Translation
    • repeaterbook: Fix query parameters for RoW countries
    • Squash error about "unsure if rtone is valid"
  • Update to version 20260320:

    • Fix hiding Tone column on radios that support no tones
    • Add Radioddity DB40-G driver
    • Add support for Retevis HA2 model
    • ha1: Fix mem.duplex="off" setting
    • ha1: Fix dtmfsignalinglist
    • Add Radio Amateur Satellites query source, integrate it into the UI.
    • Move repeaterbook to cached/proxied service
    • Add Baofeng UV-28Plus
  • Update to version 20260313:

    • RT-910 non-BT increase channels to 960 for Fw V0.11
    • RT-880G follow-up fixes
    • Fixed the issue of incorrect values for dtmfcomm and zoneinfo.
  • Update to version 20260306:

    • repeaterbook: Edits to country list
    • ha1g: Fix offset bank issue
    • Fix disabled item color in dark mode
    • Support Radtel RT880G
  • Update to version 20260227:

    • add Retevis RT21H
    • d7: Avoid breaking settings load for individual failures
  • Update to version 20260220:

    • Add TD-M11 test .img files
    • Add new models TIDRADIO TD-M11 22 FRS and TD-M11 16 PMR
    • th9800: Fix newer variant with short ident block
    • Add Baofeng GM-21 and Radioddity GM-30 Pro
    • Fix bulk-editing memories where empties are included
    • Baofeng GM-15Pro as subclass of Radioddity GM-30
    • Update Japanese translation
  • Update to version 20260213:

    • Fix sorting confusing empty state of some rows
    • th9800: Fix crash while logging version mismatch
    • ft4: Fix clearing unknown memory regions
    • Update German translations
  • Update to version 20260206:

    • Add IARU R1 VHF/UHF bands to bandplan
    • kguv980p: Fix string comparison for power==None
    • Updated Italian, Spanish translations
  • Update to version 20260130:

    • uvk5: Improve read-only warning strategy
    • uvk5: Bless new found firmware versions 7.00.x
    • vx1: Fixes for compatibility
    • Update Italian Translation
    • Updated Spanish translation for "frequency out of range" message
  • Update to version 20260123:

    • Add Radioddity GM-30 Plus driver
    • btech: update default timeout for download/upload
    • f8hp-pro: Fix validate_memory for AM/aircraft
    • Account for start bits in baud calculation
  • Update to version 20260116:

    • Add support for Baofeng BF-F8HP PRO firmware v0.52
    • BTech UV-25X2_G2 lengthen timeout when downloading
    • ha1g - Add bank support
    • anytone779: support sql_mode when setting
  • Update to version 20260109:

    • uv5r: Avoid breaking if VFOn frequency is invalid
    • support additional fingerprint for Retevis RT86S
    • support Retevis RB626 settings
    • Updated Translations
    • Fixes for 8.33kHz frequency and channel handling
    • Add VX1R driver
  • Update to version 20260102:

    • uv17Pro: Add new model UV-5G Mini
    • uv17pro: Refactor to support multiple idents
    • ha1g: Airband Support
    • Fix exporting CSV from drivers with negative specials
  • Update to version 20251219:

    • Fix test_clone to distinguish clone in/out
    • uv-k1: Add memory programming
  • Update to version 20251212:

    • tmd710: Fix failure to identify
    • tk11: Fix download/upload progress bar is not updating
    • translation updates
  • Update to version 20251205:

    • Add driver for Quansheng TK11
    • Include Baofeng K63 and K6A in model mappings
    • Updated Spanish Translation
  • Update to version 20251128:

    • Fix mouseover error when setting is None
    • Fixes #12274 TD-H8 Gen 3, add missing MID to channel power settings
    • Update pt_BR translation
  • Update to version 20251121:

    • ha1g: Re-add scan/alarm/dtmf lists
    • ha1g: Check firmware compatibility during clone
    • retevis.py: add new ident fingerprint
    • dr135: Extend range to 174MHz
  • Update to version 20251106:

    • ha1g: Remove non-reentrant alarm/dtmf list code
  • ensure backwards compatibility for 15.6

  • Use pyproject macros to build and install.

  • Update to version 20251031:

    • Remove Vertex Standard radio drivers
    • ft8800: Add settings support
    • anytone778uv: Fix duplex and tmode decode logging
    • tk760g: Fix long-standing typo in base class name
    • tk760g: Add odd TK-260G lower-p variant support
    • Update Italian Translation
  • Update to version 20251024:

    • th9800.py: Add Retevis_MA1
    • Fix applying band defaults to immutable fields
    • Yaesu FT-1D, FT2D, FT3D fixes WiresX settings to handle all rooms in category
    • ft1d: multiple fixes
    • Added Retevis HA1G and HA1UV models
    • uvk5: Add new wild-found 1.02.x firmware blessing
    • Fix 8.33kHz step calculation
    • Update supported model list for Wouxun radios
  • Update to version 20251010:

    • Allow loading modules from additional states
    • tdh8: Remove forced NOAA channels at top of range
    • tdh8: Fix GMRS G3 detection
    • Fix export to CSV aborting on invalid memories
    • Fix writing CSVs with more than 1000 memories
  • Update to version 20251003:

    • uvk5: Fix step index list
    • bitwise: Add memory union support
  • Update to version 20250926:

    • Fix US Aviation Frequencies stock config mode
    • tdh8: Add support for TD-H8 Gen 3
    • tdh8: Fix VFO offset setting
  • Update to version 20250912:

    • Add Retevis RA86 mobile radio
    • at779UV: Fix setting empty memories
    • thd74: multiple fixes
    • Fix column sort order with numeric values
  • Update to version 20250905:

    • tk270: Fix for python3
    • bff8hppro: Fix high power level watts
    • ft8900: decouple from ft8800
    • ft8800: fix memory issues
    • Updated Italian and Spanish translations
    • Improved autocomplete for memory structure objects
  • Update to version 20250829:

    • Add Baofeng UV-5R Mini
    • Add Retevis RT86S
    • Enable has_offset for Icom IC-7100
  • Update to version 20250822:

    • Various models: Remove verbose debug logging and use trace instead
    • Add generic serial tracing for debug
    • Allow hexprint with variable line length
  • Update to version 20250815:

    • icv80: Fix duplex/tx-inhibit setting
    • add Baofeng BF-F8HP PRO firmware V0.44 support
References

Affected packages

openSUSE:Leap 16.0 / chirp

Package

Name
chirp
Purl
pkg:rpm/opensuse/chirp&distro=openSUSE%20Leap%2016.0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
20260911-bp160.1.1

Ecosystem specific

{
    "binaries":  [
        {
            "chirp":  "20260911-bp160.1.1"
        }
    ]
}

Database specific

source
"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:21866-1.json"