{"id":"openSUSE-SU-2026:21866-1","summary":"Security update for chirp","details":"This update for chirp fixes the following issues:\n\nChanges in chirp:\n\n- Update to version 20260911:\n  * ftm300d: Experimental Yaesu FTM-300DR driver\n  * Update Ukrainian localization\n  * ar8200: Fix importing memories with AM mode\n  * Unify Baofeng setting descriptions across drivers\n  * Add Yaesu FT5D\n  * uvb5: Fix Reverse setting\n\n- Update to version 20260904:\n  * Fix RB28/RB628 tone and DTCS index mapping\n  * Retevis RB28/RB628: Fix Busy Channel Lockout display\n  * various bug fixes\n\n- Update to version 20260821:\n  * Add Kenwood NX-800 driver\n  * CVE-2026-78136: kenwood_itm: Fix DCS parsing (boo#1280123)\n  * tmd710: various bug fixes\n  * Add TK-3180E support\n  * tk8180: various updates\n  * Support Shift+F10 convention for context menu in memedit\n  * Add Baofeng BF-T20, BF-T20FRS setting descriptions\n  * Add QYT KT-8900 setting documentation\n  * Add user-friendly Baofeng UV-5R setting descriptions\n\n- Update to version 20260626:\n  * uvk5_egzumer: Fix battery_text and mic_bar never being saved\n  * Fix open filter translated string\n\n- Update to version 20260619:\n  * Add Baofeng BF-5RH as alias of UV-5RH\n  * locale: Added Czech translation\n  * generic_csv: Fix ImmutableValueError when exporting special memories\n\n- Update to version 20260612:\n  * Add test image for Bajeton BJ7800\n  * Update RT-920 test image for FM,AM & HF memories\n  * Add new model Bajeton BJ7800 as a sub-class of  RT-920\n\n- Update to version 20260605:\n  * Update boot, zone, scan and alarm channels on channel deletion\n  * Add GM-15Pro extended UHF range\n\n- Update to version 20260529:\n  * Fix RT-900 non-BT, increase to 999 channels.\n  * Fix escape character in log message for UV-5R Mini\n\n- Update to version 20260522:\n  * tdh8: Fix loading out-of-range group code values\n  * baofeng_uv17Pro: Fix uploading over BLE for supported models\n  * Add BLE serial detection\n  * mp31: Add support for Baofeng MP31\n\n- Update to version 20260515:\n  * ha2: Fix defaulting empty memories to sane values\n\n- Update to version 20260508:\n  * Don't complain about incompatible tones on import if no tone mode selected\n  * ic2730: Add IC-2730E (European variant) support\n  * ar8200: Add new driver for AOR AR8200\n  * Updated Italian Translation\n\n- Update to version 20260501:\n  * tdh8: Fix VFO A/B BCL setting not reading properly\n  * tdh8: Add offset dir in VFO settings and fix VFO TX freq\n  * h777v4: Fix detected models\n\n- Update to version 20260425:\n  * Use common \"no response\" exception in drivers\n  * vx150: Add driver for Vertex Standard VX-150\n  * Update 935 and XS20 power handling\n  * Fix 935/XS20 new channel creation\n  * Fix exporting DV memories from RepeaterBook to CSV\n  * TK7162: add initial support\n  * tk8160: Fix upload clobbering memory\n  * tk8160: Cleanup key definitions\n\n- Update to version 20260417:\n  * Add Wouxun XS20 series channel memory support\n  * Wouxun 935/8h series extra memory settings\n  * TK-372G correct variants and names\n  * Add BF-V12D support\n  * Improve cache performance for RepeaterBook queries\n  * Improve reliability of network source requests and bug reports\n  * radtel_rt900: Fix flake8 E501 line too long in FHSS Code setting\n  * radtel_rt900: Fix FHSS Code init crash on out-of-range image values\n  * radtel_rt900: Expose FHSS Code per-channel setting\n  * radtel_rt900: Expose LearnFHSS per-channel setting\n\n- Update to version 20260410:\n  * Fix RB query for non-NA countries when translated\n  * Update Turkish translation\n  * Update Japanese translations\n  * vx8: Fix 6.25kHz step channels being off frequency\n\n- Update to version 20260403:\n  * Add common KenwoodToneModel and move a number of supported\n    modeels to it\n  * Add Baofeng UV-5RM Plus\n\n- Update to version 20260327:\n  * Add Retevis C2 driver\n  * Add Radioddity GS-10B\n  * Updated Italian Translation\n  * repeaterbook: Fix query parameters for RoW countries\n  * Squash error about \"unsure if rtone is valid\"\n\n- Update to version 20260320:\n  * Fix hiding Tone column on radios that support no tones\n  * Add Radioddity DB40-G driver\n  * Add support for Retevis HA2 model\n  * ha1: Fix mem.duplex=\"off\" setting\n  * ha1: Fix dtmfsignalinglist\n  * Add Radio Amateur Satellites query source, integrate it into\n    the UI.\n  * Move repeaterbook to cached/proxied service\n  * Add Baofeng UV-28Plus\n\n- Update to version 20260313:\n  * RT-910 non-BT increase channels to 960 for Fw V0.11\n  * RT-880G follow-up fixes\n  * Fixed the issue of incorrect values for dtmfcomm and zoneinfo.\n\n- Update to version 20260306:\n  * repeaterbook: Edits to country list\n  * ha1g: Fix offset bank issue\n  * Fix disabled item color in dark mode\n  * Support Radtel RT880G\n\n- Update to version 20260227:\n  * add Retevis RT21H\n  * d7: Avoid breaking settings load for individual failures\n\n- Update to version 20260220:\n  * Add TD-M11 test .img files\n  * Add new models TIDRADIO TD-M11 22 FRS and TD-M11 16 PMR\n  * th9800: Fix newer variant with short ident block\n  * Add Baofeng GM-21 and Radioddity GM-30 Pro\n  * Fix bulk-editing memories where empties are included\n  * Baofeng GM-15Pro as subclass of Radioddity GM-30\n  * Update Japanese translation\n\n- Update to version 20260213:\n  * Fix sorting confusing empty state of some rows\n  * th9800: Fix crash while logging version mismatch\n  * ft4: Fix clearing unknown memory regions\n  * Update German translations\n\n- Update to version 20260206:\n  * Add IARU R1 VHF/UHF bands to bandplan\n  * kguv980p: Fix string comparison for power==None\n  * Updated Italian, Spanish translations\n\n- Update to version 20260130:\n  * uvk5: Improve read-only warning strategy\n  * uvk5: Bless new found firmware versions 7.00.x\n  * vx1: Fixes for compatibility\n  * Update Italian Translation\n  * Updated Spanish translation for \"frequency out of range\" message\n\n- Update to version 20260123:\n  * Add Radioddity GM-30 Plus driver\n  * btech: update default timeout for download/upload\n  * f8hp-pro: Fix validate_memory for AM/aircraft\n  * Account for start bits in baud calculation\n\n- Update to version 20260116:\n  * Add support for Baofeng BF-F8HP PRO firmware v0.52\n  * BTech UV-25X2_G2 lengthen timeout when downloading\n  * ha1g - Add bank support\n  * anytone779: support sql_mode when setting\n\n- Update to version 20260109:\n  * uv5r: Avoid breaking if VFOn frequency is invalid\n  * support additional fingerprint for Retevis RT86S\n  * support Retevis RB626 settings\n  * Updated Translations\n  * Fixes for 8.33kHz frequency and channel handling\n  * Add VX1R driver\n\n- Update to version 20260102:\n  * uv17Pro: Add new model UV-5G Mini\n  * uv17pro: Refactor to support multiple idents\n  * ha1g: Airband Support\n  * Fix exporting CSV from drivers with negative specials\n\n- Update to version 20251219:\n  * Fix test_clone to distinguish clone in/out\n  * uv-k1: Add memory programming\n\n- Update to version 20251212:\n  * tmd710: Fix failure to identify\n  * tk11: Fix download/upload progress bar is not updating\n  * translation updates\n\n- Update to version 20251205:\n  * Add driver for Quansheng TK11\n  * Include Baofeng K63 and K6A in model mappings\n  * Updated Spanish Translation\n\n- Update to version 20251128:\n  * Fix mouseover error when setting is None\n  * Fixes #12274 TD-H8 Gen 3, add missing MID to channel power\n    settings\n  * Update pt_BR translation\n\n- Update to version 20251121:\n  * ha1g: Re-add scan/alarm/dtmf lists\n  * ha1g: Check firmware compatibility during clone\n  * retevis.py: add new ident fingerprint\n  * dr135: Extend range to 174MHz\n\n- Update to version 20251106:\n  * ha1g: Remove non-reentrant alarm/dtmf list code\n\n- ensure backwards compatibility for 15.6\n\n- Use pyproject macros to build and install.\n\n- Update to version 20251031:\n  * Remove Vertex Standard radio drivers\n  * ft8800: Add settings support\n  * anytone778uv: Fix duplex and tmode decode logging\n  * tk760g: Fix long-standing typo in base class name\n  * tk760g: Add odd TK-260G lower-p variant support\n  * Update Italian Translation\n\n- Update to version 20251024:\n  * th9800.py: Add Retevis_MA1\n  * Fix applying band defaults to immutable fields\n  * Yaesu FT-1D, FT2D, FT3D fixes WiresX settings to handle all\n    rooms in category\n  * ft1d: multiple fixes\n  * Added Retevis HA1G and HA1UV models\n  * uvk5: Add new wild-found 1.02.x firmware blessing\n  * Fix 8.33kHz step calculation\n  * Update supported model list for Wouxun radios\n\n- Update to version 20251010:\n  * Allow loading modules from additional states\n  * tdh8: Remove forced NOAA channels at top of range\n  * tdh8: Fix GMRS G3 detection\n  * Fix export to CSV aborting on invalid memories\n  * Fix writing CSVs with more than 1000 memories\n\n- Update to version 20251003:\n  * uvk5: Fix step index list\n  * bitwise: Add memory union support\n\n- Update to version 20250926:\n  * Fix US Aviation Frequencies stock config mode\n  * tdh8: Add support for TD-H8 Gen 3\n  * tdh8: Fix VFO offset setting\n\n- Update to version 20250912:\n  * Add Retevis RA86 mobile radio\n  * at779UV: Fix setting empty memories\n  * thd74: multiple fixes\n  * Fix column sort order with numeric values\n\n- Update to version 20250905:\n  * tk270: Fix for python3\n  * bff8hppro: Fix high power level watts\n  * ft8900: decouple from ft8800\n  * ft8800: fix memory issues\n  * Updated Italian and Spanish translations\n  * Improved autocomplete for memory structure objects\n\n- Update to version 20250829:\n  * Add Baofeng UV-5R Mini\n  * Add Retevis RT86S\n  * Enable has_offset for Icom IC-7100\n\n- Update to version 20250822:\n  * Various models: Remove verbose debug logging and use trace\n    instead\n  * Add generic serial tracing for debug\n  * Allow hexprint with variable line length\n\n- Update to version 20250815:\n  * icv80: Fix duplex/tx-inhibit setting\n  * add Baofeng BF-F8HP PRO firmware V0.44 support\n","modified":"2026-09-17T18:23:14.651196935Z","published":"2026-09-16T15:14:49Z","related":["CVE-2026-78136"],"upstream":["CVE-2026-78136"],"references":[{"type":"ADVISORY"},{"type":"REPORT","url":"https://bugzilla.suse.com/1280123"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-78136"}],"affected":[{"package":{"name":"chirp","ecosystem":"openSUSE:Leap 16.0","purl":"pkg:rpm/opensuse/chirp&distro=openSUSE%20Leap%2016.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20260911-bp160.1.1"}]}],"ecosystem_specific":{"binaries":[{"chirp":"20260911-bp160.1.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:21866-1.json"}}],"schema_version":"1.9.0"}