openSUSE 16 Security Update : kitty (openSUSE-SU-2026:21599-1)

high Nessus Plugin ID 338650

Synopsis

The remote openSUSE host is missing one or more security updates.

Description

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21599-1 advisory.

Changes in kitty:

- Update to 0.48.2:
* Wayland: Fix regression in previous release that broke drag and drop on Plasma (#10284)
* diff kitten: Fix a rare crash when showing a large diff due to incorrect locking when highlighting
* Allow the private DCS kitty-echo escape code to only echo numbers
* Linux: Fix an approx 1MB memory leak when reloading the config, introduced in version 0.40.0 (#10290)
* Desktop file chooser integration: when the specified directory does not exist, open file chooser at home directory (#10292)
* Add support for terminal visibility reports
- https://rockorager.dev/misc/visibility-reports/
* `tab_title_template`: Add a field that evaluates to the total memory used by all child processes in the tab (#10293)
- https://sw.kovidgoyal.net/kitty/conf/#opt-kitty.tab_title_template

- Update to 0.48.1:
* Wayland: fix a regression in the previous release that broke window sizing for on Hyprland/Sway with fractional scales and an initial specified size (#10268)
* Wayland: fix a regression in 0.47.3 that broke dragging on the Niri compositor (#10271)
* Wayland: get initial window size in cells working in most cases on Hyprland/Sway with fractional scaling by using the fractional scale of the primary monitor
* Wayland: fix using remote control to resize OS windows on some tiling compositors leading to broken rendering
* macOS: fix edge=none panel height shrinking when margin_top is non-zero in the panel/quick-access-terminal kittens (#10278)

- Update to 0.48.0:
* Implement vertical tabs by setting tab_bar_edge to left or right (#9855)
- https://sw.kovidgoyal.net/kitty/conf/#opt-kitty.tab_bar_edge
* Graphics protocol: Add a new transient usage hint that clients can send to terminals to indicate an image is meant for only short duration use (#10092)
- https://sw.kovidgoyal.net/kitty/graphics-protocol/#image-usage-hints
* On first press in an unfocused OS Window/kitty window give it focus and pass the mouse event through to the clicked element. This is a behavior change but aligns with platform defaults on macOS. Linux has no platform defaults here as far as I can tell, so it gets to follow along. (#10233)
* kitten @ get-text: Add support for `alternate` and `alternate_scrollback` extents to fetch text from the alternate screen buffer (#10165)
* Wayland: Fix first OS window being a few cells too small when `initial_window_width`/`initial_window_height` are set in cells and a fractional display scale is in use (#10146)
* macOS: New option `macos_ns_window_layer` to more precisely control what layer panel OS windows are placed on (#10116)
- https://sw.kovidgoyal.net/kitty/conf/#opt-kitty.macos_ns_window_layer
* macOS: New option `macos_use_physical_screen_frame` to allow panel OS Windows to cover the macOS global dock bar (#10116)
- https://sw.kovidgoyal.net/kitty/conf/#opt-kitty.macos_use_physical_screen_frame
* kitty binary builds are now built on Ubuntu 22 upgraded from Ubuntu 18 for improved performance from better compilers
* macOS: Fix incorrect horizontal alignment when using text sizing protocol (#10179)
* `edit-in-kitty`: Return exit code from underlying editor process on exit (#10198)
* Make erasing last command robust against commands with no output and commands in the scrollback (#10201)
* Fix superfluous margin visible to the left and right of the tab bar when `background_opacity` is less than one and the window width is not a multiple of the cell width (#10212)
- https://sw.kovidgoyal.net/kitty/conf/#opt-kitty.background_opacity
* hints kitten: Add a new flag `kitty +kitten hints --prefix-free` to generate hints without a shared prefix (#10210)
- https://sw.kovidgoyal.net/kitty/kittens/hints/#cmdoption-kitty-kitten-hints-prefix-free
* Wayland GNOME: Fix dragging a window title bar to the + button failing to create a new tab when there is only a single tab (#10222)
* choose-files kitten: Add a `--mode=all` to select either an existing file or directory (#10208)
* Add support for editing files in sublime text and zed at specified line number (#10224)
* choose-file kitten: Use a full readline editor for the search box. Also allow remapping the up/down/home/end keys to use for editing instead of navigating the file list (#10225)
* Fix `remote_control_script` not working in a kitty instance run from inside another kitty instance
- https://sw.kovidgoyal.net/kitty/actions/#action-remote_control_script
* quick-access-terminal kitten: Allow configuring the layer on which to display the terminal (#10242)
* `cursor_trail_start_threshold` now optionally accepts two values to set x (horizontal) and y (vertical) thresholds independently (#10246)
- https://sw.kovidgoyal.net/kitty/conf/#opt-kitty.cursor_trail_start_threshold
* scroll-window remote control command: Fix a regression that broke scrolling by pages (#10253)
* Bypass libc malloc for history buffer to avoid libc pool policies causing apparent memory leak (#10254)
* Cursor trail: Do not run the trail shader when the cursor is hidden, saving resources (#10255)
* Graphics: Fix incorrect calculated cursor position when placing images with X/Y cell offsets (#10256)
* macOS: Disable macOS one time code autofill popups (#10250)
* Add support for DECSTR soft screen reset escape code (#10263)
* macOS: Fix quick-access-terminal appearing on the wrong space (the fullscreen app's space) when triggered from a different space on macOS Tahoe (#8740)

- Addressing bsc#1269601 -> CVE-2026-46604
* https://github.com/kovidgoyal/kitty/commit/351ee9fcbd692abd3bfbf2cf4296f69522e3571a
* Adjusted kitty-0.47.4.tar.gz to point to:
golang.org/x/image v0.43.0 and refreshed vendor.tar.gz

- Update to 0.47.4:
* Linux: Fix a regression in the previous release that broke rendering of bitmap color fonts (#10145)
* Linux: Allow fake italics defined via a matrix in fontconfig settings to work for fonts like Fira Code that do not ship with an italic face (#10120)

- Update to 0.47.3:
* macOS: Show a key symbol on the active tab if the macOS Secure Input feature is enabled
* Fix regression that broke unserialization of splits layout in previous release (#10124)
* Fix `focus_follows_mouse switching` the active window when returning to a desktop/space, even though the mouse did not move. Now the window under a stationary cursor is left alone, while moving the mouse across windows still switches focus as before.
- https://sw.kovidgoyal.net/kitty/conf/#opt-kitty.focus_follows_mouse
* Sanitise responses to color control escape codes to avoid command injection for shells that do not use the kitty keyboard protocol (CVE-2026-54057 bsc#1268288)
- https://www.cve.org/CVERecord?id=CVE-2026-54057
* choose fonts kitten: Fix a rare timing based race causing kitten to crash at startup (#10128)
* Wayland: Fix mouse input getting broken when starting a tab drag and releasing the mouse button before the drag is actually registered (#10136)

- Update to 0.47.2:
* Allow dragging to move scrollbar after clicking on track when `scrollbar_jump_on_click` is enabled (#10085)
* macOS: Fix regression in 0.47.0 that broke passing `Cmd`+`C` on to terminal applications when no text is selected (#10087)
* `kitten @ set-background-image`: Fix ``--layout=configured` changing layout to centered instead (#10089)
* Splits layout: add an `equalize` action and an `equalize_on_close` option to redistribute split space proportionally (#3489)
* Fix matching var/env on tabs not working as expected (#10095)
* When watching for changed config files do not recursively watch all sub directories of the directory containing the config file (#10102)
* File transfer protocol: use `O_NOFOLLOW`` when opening regular files
* dnd kitten: Protect against drops from malicious sources

- Update to 0.47.1:
* Fix a regression in the previous release that caused copy_or_noop to stop working correctly (#10041)
- https://sw.kovidgoyal.net/kitty/actions/#action-copy_or_noop
* macOS: Fix a regression in the previous release that caused URLs to be quoted when dropping into shells (#10054)
* Fix a regression in the previous release that broke automatic color scheme changes when using a background image (#10058)
* Fix auto_reload_config not working when kitty.conf is a symlink (#10066)
- https://sw.kovidgoyal.net/kitty/conf/#opt-kitty.auto_reload_config
* Fix a regression in the previous release that broke dragging of URLs to the shell prompt from programs that dont support MOVE drag operations
* Preserve user-set tab stops across window resizes instead of resetting to 8 column default
* Add support for the DECST8C escape sequence (CSI ? 5 W) to reset tab stops to every 8 columns
* X11: Fix panel/quick-access-terminal windows not staying on top under KDE after they are hidden once (#10082)

- Update to 0.47.0:
* A new Drag and drop kitten to allow drag and drop of files from your shell to any GUI program even across SSH (#9984)
- https://sw.kovidgoyal.net/kitty/kittens/dnd/
* A new option palette_generate to automatically generate the 256 color palette from the first 16 colors (#9426)
* For builtin key mappings automatically fallback to matching the US-PC layout key when the pressed key has no matches and is a non-English character (#9671)
* Allow drag and drop of windows to re-arrange them, move them to another tab/OS Window or detach them into a new OS Window. See toggle_window_title_bars to temporarily show window title bars to drag them around (#9626)
* Have scroll_line_up and scroll_line_down smooth scroll by default. Can be restored to old behavior by re-mapping without the smooth argument (#9689)
* Draw a progress bar at the top of the window when a program reports progress using the OSC 9;4 escape sequence, controlled by progress_bar (#9777)
* Automatically reload configuration on changes, controlled by auto_reload_config
* Allow specifying multiple background images for background_image that are stored on GPU to allow fast image switching (#9836)
* Remote control: Expose session_name and last_focused_at in the output of kitten @ ls for each window (#9732, #9799)
- https://sw.kovidgoyal.net/kitty/remote-control/
* Allow optionally dragging URLs with the mouse, see left (#9804)
* Change focus_follows_mouse to switch the active window only when the mouse crosses into a different window, instead of on every mouse motion event.
Prevents accidental mouse bumps from undoing a keyboard-driven window switch.
* Wayland: Use hold gestures to cancel momentum scrolling when fingers are placed on the trackpad, for a more natural kinetic scrolling experience (#9863)
* macOS: Switch to new Tahoe style application icon with different background in light and dark modes
* Fix thickness of diagonal lines in box drawing characters not the same as horizontal/vertical lines (#9719)
* Graphics protocol: Fix crash when handling invalid PNG image with direct transmission (CVE-2026-33633 bsc#1275527)
* Graphics protocol: Fix crash when handling invalid offset values in graphics compose commands (CVE-2026-33642 bsc#1275526)
* X11: Fix a regression in the previous release that caused an occasional crash on input device removal (#9723)
* XWayland: Fix a regression where some wheel mice were not scrolling properly (#9770)
* Command palette: Improve searching to use word level matching (#9727)
* hints kitten: A new option to set the background color of matched text (#9745)
* The show_hyperlink_targets option now allows specifying a keyboard modifier so that target URLs are only shown on hover when the modifier is pressed (#9741)
* Fix a spurious mouse button release event being sent when dragging out of an OS window causes focus loss
* Fix scrollbar hover/interaction not working when the scrollbar is drawn in the window margin area (#9756)
* Fix completion for edit-in-kitty not including some common text file types
* Allow holding the Alt key and triple-clicking to select from the first cell even if it is empty (#9758)
* Fix double click to rename tab being triggered too easily (#9774)
* Fix a crash when user tries to select while the client program is using synchronised rendering and generating large amounts of output (#9778)
* macOS: Add Copy and Paste menu items to the Edit menu in the global menu bar (#9780)
* Fix dragging of splits layout borders sometimes moving in the wrong direction or having no effect (#9447)
* Fix triple-click line selection and double-click word selection not extending wrapped lines beyond the edges of the viewport
* Password input in kittens: hide the cursor and display a blinking at the end of typed characters to make it visually clear the user is entering a password
* edit-in-kitty: Ignore environment variables as some editors execute code present in env vars. Similarly ignore conf file specifications for colors (CVE-2026-42851 bsc#1268285)
* Command palette ctrl+shift+f3: nicer grouping of aliases and combined actions (#9819)
* hints kitten: Fix trailing punctuation not being removed from URLs (#9828)
* Fix copy/paste dropping spaces at soft-wrap boundaries when strip_trailing_spaces is set (#9834)
* Allow setting negative values for inactive_text_alpha to control whether to only fade inactive windows or unfocused windows (#9837)
* A new option macos_fullscreen_ignore_safe_area_insets to control whether to ignore the notch space when using macos_traditional_fullscreen (#9841)
* Fix some responses from terminal sometimes leaking into shell after kitten exit (#9839)
* Render block elements from the Unicode Symbols for Legacy Computing Supplement block (U+1CC00U+1CEBF): separated block quadrants, separated block sextants, one sixteenth blocks, and one quarter block partial fills (#9849)
* Improve performance of using active process data when rendering the tab bar by only scanning processes once per second (#9862)
* macOS: Fix occasional phantom cursors being drawn on screen (#9725)
* diff kitten: Keep the current (topmost) filename visible when scrolling, controlled by a new option kitten-diff.sticky_header (#9891)
* Add an option to focus_follows_mouse to only switch focus on drops rather than movement (#9896)
* Fix setting momentum_scroll to zero not fully disabling momentum scrolling (#9904)
* macOS: Fix args passed via open --args being ignored when macos-launch-services-cmdline is present (#9910)
* save_as_session: when the filename input by the user has no extension, automatically add the .kitty-session extension (#9919)
* Linux: Workaround bug in Nvidia drivers that caused color corruption when resuming after suspend (#9844)
* choose-files kitten: Output a trailing newline when writing to a tty in text format (#9982)
* ssh kitten: Sanitize user controlled data in error messages that might leak to shell (CVE-2026-42850 bsc#1268284)
* Linux: Respect the fontconfig matrix setting commonly used for fake slant with fonts that do not have italic variants (#9990)

- Update to 0.46.2:
* Watchers: Add an on_quit event to global watchers (#9675)
* Wayland: Fix a crash on some compositors when dragging a tab between OS Windows (#9677)
* Fix incorrect behavior when using the actions to move tab forward/backward with a tab_bar_filter active (#9672)
* Prevent stacking of multiple rename tab windows (#9691)
* choose files kitten: Fix a regression that caused incorrect highlight of matched letters
* macOS: When using `macos_traditional_fullscreen` do not render content under the notch (#9678)
- https://sw.kovidgoyal.net/kitty/conf/#opt-kitty.macos_traditional_fullscreen
* X11: Fix massive scroll when switching focus between kitty and another application (#9703)
* Markers: Fix marking not working for multicell characters (#9705)
* Fix a regression in 0.46 that broke drag select in unfocused windows (#9713)

- Update to 0.46.1:
* diff kitten: Highlight moved lines using a different background color (kitten-diff.mark_moved_lines) (#3241)
- https://sw.kovidgoyal.net/kitty/kittens/diff/#opt-kitten-diff.mark_moved_lines
* Fix a regression that broke kitten update-self (#9642)
* macOS: Clear bell alert badge on dock icon on mouse/keyboard activity (#9640)
* Fix a regression that broke accept anyway shortcut in the paste confirmation dialog (#9640)
* Fix kitty hanging on startup on Intel macs (#9643)
* X11: Fix a regression that caused some high res scroll devices to be treated as line based scroll devices (#9649)
* Wayland: Fix momentum scrolling not working on compositors that send a stop frame with no axis information (#9653)
* Linux: Fix regression that broke drag and drop from GTK applications (#9656)
* macOS: Fix using Fn key for start dictation not working (#9661)
* Don't use neighboring tab colors for tab bar margins in translucent windows (#9663)
* macOS: Fix OS window focus not restored when switching spaces (#9665)

- Update to 0.46.0:
* Pixel scrolling for the kitty scrollback buffer controlled via pixel_scroll (#9330)
- https://sw.kovidgoyal.net/kitty/conf/#opt-kitty.pixel_scroll
* Linux: momentum scrolling in the kitty scrollback buffer for touchpads and touchscreens, see momentum_scroll
- https://sw.kovidgoyal.net/kitty/conf/#opt-kitty.momentum_scroll
* X11: support high resolution scroll events from touchpads, etc
* macOS: Implement support for Apple dictation to input text in kitty (#3732)
* Allow dragging tabs in the tab bar to re-order, move to another OS Window or detach (#9296)
* Allow dragging window borders to resize kitty windows in all the different layouts, controlled by window_drag_tolerance (#9447)
- https://sw.kovidgoyal.net/kitty/conf/#opt-kitty.window_drag_tolerance
* Allow showing configurable window titles for individual kitty windows via a window title bar (#9450)
- https://sw.kovidgoyal.net/kitty/conf/#opt-kitty.window_title_bar
* A command palette to browse and trigger all mapped and unmapped actions (#9545)
* choose-files kitten: Fix JXL image preview not working (#9323)
* Fix tab bar rendering glitches when using tab_bar_filter in some circumstances (#9328)
- https://sw.kovidgoyal.net/kitty/conf/#opt-kitty.tab_bar_filter
* Add support for specifying colors in kitty.conf in OKLCH and LAB color spaces (#9325)
* Fix a regression that broke using line numbers with the edit-in-kitty command (#9346)
* Key maps: Allow specifying a timeout for multi key mappings and keyboard modes (#9551)
* macOS: Fix changes to macos_titlebar_color while in full screen not being applied after exiting fullscreen (#9350)
- https://sw.kovidgoyal.net/kitty/conf/#opt-kitty.macos_titlebar_color
* ncurses: Fix ncurses not using dim because it is missing from the sgr property in terminfo even though it is present in the dim property.
* Fix a regression in the previous release that caused moving between neighbors in the vertical and horizontal layouts to go in the opposite direction (#9355)
* Fix goto_session not respecting the focus_tab session directive when creating a session in an existing OS window (#9366)
- https://sw.kovidgoyal.net/kitty/actions/#action-goto_session
* Wayland: Fix a regression in the previous release that caused doubled key repeats on compositors that implement compositor side key repeat events (#9374)
* icat: Fix a regression in the previous release when rendering GIF animations with frames that dispose onto background with non-zero delay using the native engine (#9376)
* Wayland: Remove usage of the Wayland color management protocol to inform compositors of the color space used by kitty (#9341)
* Linux: Fix a regression in 0.40 that caused horizontal alignment for emoji to be incorrect in some cases (#9395)
* icat kitten: When catting multiple images display the images in input order (#9413)
* kitten @: Fix relative paths for --password-file being resolved relative to CWD instead of the kitty config directory
* kitten choose-files: Add a new binding of Alt+Enter to modify the name of an existing file when choosing a save file name (#9387)
* kitten choose-files: Fix TAB completion in the choose save file name prompt not working with respect to the current working directory (#9387)
* Fix line-at-once selection not extending wrapped lines into scrollback (#9437)
* ssh kitten: Restore keyboard mode even if the ssh connection drops
* edit-in-kitty: Handle connection drop more gracefully (#9480)
* macOS: Fix changing window title with global menubar menu open causes menu to get stuck (#9490)
* Fix focus_follows_mouse not working during a drag and drop (#9497)
- https://sw.kovidgoyal.net/kitty/conf/#opt-kitty.focus_follows_mouse
* goto_session: Add a --active-only option to select from only active sessions (#9503)
- https://sw.kovidgoyal.net/kitty/actions/#action-goto_session
* Shell integration: Allow sending click events to shells using y co-ordinates relative to prompts (#9500)
* A new action copy_selection_or_last_command_output (#9512)
- https://sw.kovidgoyal.net/kitty/actions/#action-copy_selection_or_last_command_output
* Wayland: Add support for the background blur extension (#9534)
* macOS: A new option macos_dock_badge_on_bell to show a badge on the kitty dock icon when a bell occurs (#9529)
- https://sw.kovidgoyal.net/kitty/conf/#opt-kitty.macos_dock_badge_on_bell
* macOS: Workaround for yet another Tahoe bug causing rendering to fail (#9520)
* URL detection: Allow trailing asterisks in URLs (#9543)
* Wayland: Add support for titlebar-only in hide_window_decorations to hide the titlebar while keeping shadows for window resizing. (#9486)
- https://sw.kovidgoyal.net/kitty/conf/#opt-kitty.hide_window_decorations
* Text sizing protocol: Fix alignment/cropping issues when rendering text with a fractional scale (#9471)
* macOS: Fix a crash when using macos_traditional_fullscreen with split view (#9573)
- https://sw.kovidgoyal.net/kitty/conf/#opt-kitty.macos_traditional_fullscreen
* macOS: Fix flickering during OS Window resize (#9582)
* Cursor trail: Show a cursor trail when switching tabs (#9588)
* Make shift+left click extend the current selection instead of starting a new selection when the mouse is not grabbed by the TUI application (#9608)
* Allow double clicking on a tab to rename it (#9609)
* remote_control_script resolve relative paths with respect to kitty config directory (#9625)
- https://sw.kovidgoyal.net/kitty/actions/#action-remote_control_script
* Splits layout: Add new mappable actions to maximize a window in the splits layout (#9629)

- Update to 0.45.0:
* A new kitten to select files at the speed of thought with a keyboard first interface and support for content previews of text files with syntax highlighting, images, videos, e-books and more (#9263)
- https://sw.kovidgoyal.net/kitty/kittens/choose-files/
* Add support for the paste events protocol (#9183)
- https://rockorager.dev/misc/bracketed-paste-mime/
* icat kitten: Add support for animated PNG and animated WebP, netPBM images, ICC color profiles and CCIP color space metadata to the builtin engine
* icat kitten: Add a new flag kitty +kitten icat --fit to control how images are scaled to fit the screen (#9201)
* icat kitten: The kitty +kitten icat --scale-up flag now takes effect when not using kitty +kitten icat --place as well
* Add a mappable action copy_last_command_output to copy the output of the last command to the clipboard (#9185)
* ssh kitten: Fix a bug where automatic login was not working (#9187)
* Graphics: Fix overwrite composition mode for animation frames not being honored
* Automatic color scheme switching: Fix title bar and scroll bar colors not being updated (#9167)
* macOS: Fix cycle through OS windows only swapping between the two most recent OS Windows. Also add a cycle through OS Windows backwards action. (#9215)
* goto_session: allow specifying a directory to select a session file from the directory (#9219)
* Have reloading config also reload the custom tab bar python modules (#9221)
* kitten @ ls: Also output the neighbors for every window (#9225)
* Have the kitty --start-as flag be respected when used with kitty
--single-instance (#9228)
* When expanding environment variables in listen_on allow the env directive to take effect
* macOS: Fix closing an OS Window when another OS Window is minimized causing the minimized window to be un-minimized (#8913)
* Do not rewrap the text in the alternate screen buffer. Avoids flicker during live resize with no resize_debounce_time (#9142)
* Add a default mapping search_scrollback to open the scrollback in a pager in search mode. If any text is currently selected it is automatically searched for.
* Wayland: Fix spurious key repeat events when some user defined callback takes a long time to execute (#9224)
* When moving windows to a new tab/OS Window fix overlay windows not being grouped with their parent windows (#9266)
* Linux: Fix a bug causing colors to occasionally all go black when using mesa >= 25.3.0 with nouveau GPU driver (#9235)
* Fix tab_bar_min_tabs not respecting tab_bar_filter (#9278)
* macOS: Workaround for regression in Tahoe 26.2 that breaks
* kitty --detach (#9288)
* ma ...

Please note that the description has been truncated due to length. Please refer to vendor advisory for the full description.

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Solution

Update the affected kitty, kitty-shell-integration and / or kitty-terminfo packages.

Plugin Details

Severity: High

ID: 338650

File Name: openSUSE-2026-21599-1.nasl

Version: 1.1

Type: Local

Agent: unix

Family: SuSE Local Security Checks

Published: 8/21/2026

Updated: 8/21/2026

Supported Sensors: Continuous Assessment, Frictionless Assessment Agent, Frictionless Assessment AWS, Frictionless Assessment Azure, Nessus Agent, Tenable Cloud Security, Tenable Self-Hosted Container Security, Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 6.9

Percentile: 96.93

CVSS v2

Risk Factor: Critical

Base Score: 10

Temporal Score: 7.8

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

CVSS Score Source: CVE-2026-42850

CVSS v3

Risk Factor: Critical

Base Score: 9.8

Temporal Score: 8.8

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Temporal Vector: CVSS:3.0/E:P/RL:O/RC:C

CVSS Score Source: CVE-2026-33642

CVSS v4

Risk Factor: High

Base Score: 7.4

Threat Score: 6.5

Threat Vector: CVSS:4.0/E:P

Vector: CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N

Vulnerability Information

CPE: cpe:/o:novell:opensuse:16.0, p-cpe:/a:novell:opensuse:kitty-shell-integration, p-cpe:/a:novell:opensuse:kitty-terminfo, p-cpe:/a:novell:opensuse:kitty

Required KB Items: Host/local_checks_enabled, Host/cpu, Host/SuSE/release, Host/SuSE/rpm-list

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 8/18/2026

Vulnerability Publication Date: 5/19/2026

Reference Information

CVE: CVE-2026-33633, CVE-2026-33642, CVE-2026-42850, CVE-2026-42851, CVE-2026-46604, CVE-2026-54057

IAVB: 2026-B-0143-S, 2026-B-0230

Detections

Analytics