{"id":"openSUSE-SU-2026:21155-1","summary":"Security update for hamlib","details":"This update for hamlib fixes the following issues:\n\nChanges in hamlib:\n\n- Update to 4.7.2:\n  * Fix IC-7600/IC-7610 clock commands\n  * Icom: Add CWR to modes eligible for DSP filtering\n  * Kenwood: New model Hamgeek uSGX\n  * Various fixes for Skywatcher, DX-SR8, FT-710, FTX-1, IC-705, X6100\n  * rigctld: Fix send_raw stack out-of-bounds write and\n    uninitialized memory CVE-2026-54634 (boo#1268628)\n  * rigctld: Fix stack/heap overflow primitive in\n    read_string_generic + auth bypass in rigctld + weak password\n    handling (boo#1268629)\n\n- Update to 4.7.1:\n  * Various compiler and portability fixes\n  * Fix rig port timeout\n  * Fix various FTX-1 meter, level and CTCSS table\n  * Add power off capability to Flrig backend\n  * Add SWR to supported 'get levels' for K3/K4\n  * Add get_split_vfo to TS-850 backend\n  * New simplecat backend\n  * Fix and generalize clock handling for Icom radios\n  * Fix Yaesu attenuator levels and LVL_KEYSPD reinitialization\n  * Add new rig model Harris PRC-138\n  * Various FT-710 fixes, eespecially handling SH format and RX bandwidth\n  * Ensure FT-710 simulator rejects RF command\n  * Fix low power calculation for K3/K3S\n  * Fix FTX-1 SH bandwidth command in set/get_mode\n\n- Update to 4.7.0:\n  * Revamp Kenwood voice memory handler - Fixes TS-890S & TS-990S\n  * libusb is now detected using the pkg-config facility.\n  * Functions rig_get_conf, rot_get_conf, amp_get_conf deprecated\n    use *_get_conf2() instead\n  * rig_set_trn and rig_get_trn deprecated.\n  * Many fixes for SWIG binding generation and improved Python\n    support and testing\n  * Fix AGC for IC-R75, fix AGC for all Icom rigs\n  * New Drake R8 backend\n  * New AF6SA WRC rotator backend\n  * New Yaesu FTX-1 model support (alpha)\n  * Update QRPLabs QMX backend for max serial rate of 230400 bps\n  * Updates to Icom IC-F8101\n  * New rig model Icom ID-52A/W Plus\n  * Fix memory leaks in rigctld and rigctltcp\n  * Fix Skywatcher backend for firmware that doesn't echo commands\n  * Additional Yaesu FTX-1 capabilities\n  * Add extended commands for the IC-7300MK2--\n  * Revert updating FLRig model name\n  * Add manual pages for rigctltcp, rigtestlibusb, rigtestmcast,\n    and rigtestmcastrx\n  * Pause building rigfreqwalk as the code does not align with the\n    required commandline parameters\n  * Developer visible changes, code moves and refactoring\n\n- Update to 4.6.5:\n  * Update Kenwood CW buffer max message size, fix one byte buffer\n    overrun\n  * Fix segmentation Faults\n","modified":"2026-06-30T18:24:46.164065509Z","published":"2026-06-23T16:20:31Z","related":["CVE-2026-54634"],"upstream":["CVE-2026-54634"],"references":[{"type":"ADVISORY"},{"type":"REPORT","url":"https://bugzilla.suse.com/1268628"},{"type":"REPORT","url":"https://bugzilla.suse.com/1268629"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-54634"}],"affected":[{"package":{"name":"hamlib","ecosystem":"openSUSE:Leap 16.0","purl":"pkg:rpm/opensuse/hamlib&distro=openSUSE%20Leap%2016.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.7.2-bp160.1.1"}]}],"ecosystem_specific":{"binaries":[{"hamlib":"4.7.2-bp160.1.1","hamlib-devel":"4.7.2-bp160.1.1","libhamlib++4":"4.7.2-bp160.1.1","libhamlib4":"4.7.2-bp160.1.1","lua-Hamliblua":"4.7.2-bp160.1.1","perl-Hamlib":"4.7.2-bp160.1.1","python3-Hamlib":"4.7.2-bp160.1.1","tcl-Hamlib":"4.7.2-bp160.1.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:21155-1.json"}}],"schema_version":"1.7.5"}