Detections
Analytics

openSUSE 16 Security Update : chirp (openSUSE-SU-2026:21866-1)

high Nessus Plugin ID 347920

Synopsis

The remote openSUSE host is missing a security update.

Description

The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2026:21866-1 advisory.

 Changes in chirp:

 - Update to version 20260911:
 * ftm300d: Experimental Yaesu FTM-300DR driver
 * Update Ukrainian localization
 * ar8200: Fix importing memories with AM mode
 * Unify Baofeng setting descriptions across drivers
 * Add Yaesu FT5D
 * uvb5: Fix Reverse setting

 - Update to version 20260904:
 * Fix RB28/RB628 tone and DTCS index mapping
 * Retevis RB28/RB628: Fix Busy Channel Lockout display
 * various bug fixes

 - Update to version 20260821:
 * Add Kenwood NX-800 driver
 * CVE-2026-78136: kenwood_itm: Fix DCS parsing (boo#1280123)
 * tmd710: various bug fixes
 * Add TK-3180E support
 * tk8180: various updates
 * Support Shift+F10 convention for context menu in memedit
 * Add Baofeng BF-T20, BF-T20FRS setting descriptions
 * Add QYT KT-8900 setting documentation
 * Add user-friendly Baofeng UV-5R setting descriptions

 - Update to version 20260626:
 * uvk5_egzumer: Fix battery_text and mic_bar never being saved
 * Fix open filter translated string

 - Update to version 20260619:
 * Add Baofeng BF-5RH as alias of UV-5RH
 * locale: Added Czech translation
 * generic_csv: Fix ImmutableValueError when exporting special memories

 - Update to version 20260612:
 * Add test image for Bajeton BJ7800
 * Update RT-920 test image for FM,AM & HF memories
 * Add new model Bajeton BJ7800 as a sub-class of RT-920

 - Update to version 20260605:
 * Update boot, zone, scan and alarm channels on channel deletion
 * Add GM-15Pro extended UHF range

 - Update to version 20260529:
 * Fix RT-900 non-BT, increase to 999 channels.
 * Fix escape character in log message for UV-5R Mini

 - Update to version 20260522:
 * tdh8: Fix loading out-of-range group code values
 * baofeng_uv17Pro: Fix uploading over BLE for supported models
 * Add BLE serial detection
 * mp31: Add support for Baofeng MP31

 - Update to version 20260515:
 * ha2: Fix defaulting empty memories to sane values

 - Update to version 20260508:
 * Don't complain about incompatible tones on import if no tone mode selected
 * ic2730: Add IC-2730E (European variant) support
 * ar8200: Add new driver for AOR AR8200
 * Updated Italian Translation

 - Update to version 20260501:
 * tdh8: Fix VFO A/B BCL setting not reading properly
 * tdh8: Add offset dir in VFO settings and fix VFO TX freq
 * h777v4: Fix detected models

 - Update to version 20260425:
 * Use common no response exception in drivers
 * vx150: Add driver for Vertex Standard VX-150
 * Update 935 and XS20 power handling
 * Fix 935/XS20 new channel creation
 * Fix exporting DV memories from RepeaterBook to CSV
 * TK7162: add initial support
 * tk8160: Fix upload clobbering memory
 * tk8160: Cleanup key definitions

 - Update to version 20260417:
 * Add Wouxun XS20 series channel memory support
 * Wouxun 935/8h series extra memory settings
 * TK-372G correct variants and names
 * Add BF-V12D support
 * Improve cache performance for RepeaterBook queries
 * Improve reliability of network source requests and bug reports
 * radtel_rt900: Fix flake8 E501 line too long in FHSS Code setting
 * radtel_rt900: Fix FHSS Code init crash on out-of-range image values
 * radtel_rt900: Expose FHSS Code per-channel setting
 * radtel_rt900: Expose LearnFHSS per-channel setting

 - Update to version 20260410:
 * Fix RB query for non-NA countries when translated
 * Update Turkish translation
 * Update Japanese translations
 * vx8: Fix 6.25kHz step channels being off frequency

 - Update to version 20260403:
 * Add common KenwoodToneModel and move a number of supported modeels to it
 * Add Baofeng UV-5RM Plus

 - Update to version 20260327:
 * Add Retevis C2 driver
 * Add Radioddity GS-10B
 * Updated Italian Translation
 * repeaterbook: Fix query parameters for RoW countries
 * Squash error about unsure if rtone is valid

 - Update to version 20260320:
 * Fix hiding Tone column on radios that support no tones
 * Add Radioddity DB40-G driver
 * Add support for Retevis HA2 model
 * ha1: Fix mem.duplex=off setting
 * ha1: Fix dtmfsignalinglist
 * Add Radio Amateur Satellites query source, integrate it into the UI.
 * Move repeaterbook to cached/proxied service
 * Add Baofeng UV-28Plus

 - Update to version 20260313:
 * RT-910 non-BT increase channels to 960 for Fw V0.11
 * RT-880G follow-up fixes
 * Fixed the issue of incorrect values for dtmfcomm and zoneinfo.

 - Update to version 20260306:
 * repeaterbook: Edits to country list
 * ha1g: Fix offset bank issue
 * Fix disabled item color in dark mode
 * Support Radtel RT880G

 - Update to version 20260227:
 * add Retevis RT21H
 * d7: Avoid breaking settings load for individual failures

 - Update to version 20260220:
 * Add TD-M11 test .img files
 * Add new models TIDRADIO TD-M11 22 FRS and TD-M11 16 PMR
 * th9800: Fix newer variant with short ident block
 * Add Baofeng GM-21 and Radioddity GM-30 Pro
 * Fix bulk-editing memories where empties are included
 * Baofeng GM-15Pro as subclass of Radioddity GM-30
 * Update Japanese translation

 - Update to version 20260213:
 * Fix sorting confusing empty state of some rows
 * th9800: Fix crash while logging version mismatch
 * ft4: Fix clearing unknown memory regions
 * Update German translations

 - Update to version 20260206:
 * Add IARU R1 VHF/UHF bands to bandplan
 * kguv980p: Fix string comparison for power==None
 * Updated Italian, Spanish translations

 - Update to version 20260130:
 * uvk5: Improve read-only warning strategy
 * uvk5: Bless new found firmware versions 7.00.x
 * vx1: Fixes for compatibility
 * Update Italian Translation
 * Updated Spanish translation for frequency out of range message

 - Update to version 20260123:
 * Add Radioddity GM-30 Plus driver
 * btech: update default timeout for download/upload
 * f8hp-pro: Fix validate_memory for AM/aircraft
 * Account for start bits in baud calculation

 - Update to version 20260116:
 * Add support for Baofeng BF-F8HP PRO firmware v0.52
 * BTech UV-25X2_G2 lengthen timeout when downloading
 * ha1g - Add bank support
 * anytone779: support sql_mode when setting

 - Update to version 20260109:
 * uv5r: Avoid breaking if VFOn frequency is invalid
 * support additional fingerprint for Retevis RT86S
 * support Retevis RB626 settings
 * Updated Translations
 * Fixes for 8.33kHz frequency and channel handling
 * Add VX1R driver

 - Update to version 20260102:
 * uv17Pro: Add new model UV-5G Mini
 * uv17pro: Refactor to support multiple idents
 * ha1g: Airband Support
 * Fix exporting CSV from drivers with negative specials

 - Update to version 20251219:
 * Fix test_clone to distinguish clone in/out
 * uv-k1: Add memory programming

 - Update to version 20251212:
 * tmd710: Fix failure to identify
 * tk11: Fix download/upload progress bar is not updating
 * translation updates

 - Update to version 20251205:
 * Add driver for Quansheng TK11
 * Include Baofeng K63 and K6A in model mappings
 * Updated Spanish Translation

 - Update to version 20251128:
 * Fix mouseover error when setting is None
 * Fixes #12274 TD-H8 Gen 3, add missing MID to channel power settings
 * Update pt_BR translation

 - Update to version 20251121:
 * ha1g: Re-add scan/alarm/dtmf lists
 * ha1g: Check firmware compatibility during clone
 * retevis.py: add new ident fingerprint
 * dr135: Extend range to 174MHz

 - Update to version 20251106:
 * ha1g: Remove non-reentrant alarm/dtmf list code

 - ensure backwards compatibility for 15.6

 - Use pyproject macros to build and install.

 - Update to version 20251031:
 * Remove Vertex Standard radio drivers
 * ft8800: Add settings support
 * anytone778uv: Fix duplex and tmode decode logging
 * tk760g: Fix long-standing typo in base class name
 * tk760g: Add odd TK-260G lower-p variant support
 * Update Italian Translation

 - Update to version 20251024:
 * th9800.py: Add Retevis_MA1
 * Fix applying band defaults to immutable fields
 * Yaesu FT-1D, FT2D, FT3D fixes WiresX settings to handle all rooms in category
 * ft1d: multiple fixes
 * Added Retevis HA1G and HA1UV models
 * uvk5: Add new wild-found 1.02.x firmware blessing
 * Fix 8.33kHz step calculation
 * Update supported model list for Wouxun radios

 - Update to version 20251010:
 * Allow loading modules from additional states
 * tdh8: Remove forced NOAA channels at top of range
 * tdh8: Fix GMRS G3 detection
 * Fix export to CSV aborting on invalid memories
 * Fix writing CSVs with more than 1000 memories

 - Update to version 20251003:
 * uvk5: Fix step index list
 * bitwise: Add memory union support

 - Update to version 20250926:
 * Fix US Aviation Frequencies stock config mode
 * tdh8: Add support for TD-H8 Gen 3
 * tdh8: Fix VFO offset setting

 - Update to version 20250912:
 * Add Retevis RA86 mobile radio
 * at779UV: Fix setting empty memories
 * thd74: multiple fixes
 * Fix column sort order with numeric values

 - Update to version 20250905:
 * tk270: Fix for python3
 * bff8hppro: Fix high power level watts
 * ft8900: decouple from ft8800
 * ft8800: fix memory issues
 * Updated Italian and Spanish translations
 * Improved autocomplete for memory structure objects

 - Update to version 20250829:
 * Add Baofeng UV-5R Mini
 * Add Retevis RT86S
 * Enable has_offset for Icom IC-7100

 - Update to version 20250822:
 * Various models: Remove verbose debug logging and use trace instead
 * Add generic serial tracing for debug
 * Allow hexprint with variable line length

 - Update to version 20250815:
 * icv80: Fix duplex/tx-inhibit setting
 * add Baofeng BF-F8HP PRO firmware V0.44 support

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Solution

Update the affected chirp package.

See Also

https://bugzilla.suse.com/1280123

https://www.suse.com/security/cve/CVE-2026-78136

Plugin Details

Severity: High

ID: 347920

File Name: openSUSE-2026-21866-1.nasl

Version: 1.1

Type: Local

Agent: unix

Published: 9/18/2026

Updated: 9/18/2026

Supported Sensors: Frictionless Assessment AWS, Frictionless Assessment Azure, Frictionless Assessment Agent, Nessus Agent, Continuous Assessment, Tenable Cloud Security, Tenable Self-Hosted Container Security, Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 6.9

Percentile: 96.61

CVSS v2

Risk Factor: High

Base Score: 7.2

Temporal Score: 5.3

Vector: CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSS Score Source: CVE-2026-78136

CVSS v3

Risk Factor: High

Base Score: 7.8

Temporal Score: 6.8

Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

CPE: cpe:/o:novell:opensuse:16.0, p-cpe:/a:novell:opensuse:chirp

Required KB Items: Host/local_checks_enabled, Host/cpu, Host/SuSE/release, Host/SuSE/rpm-list

Exploit Ease: No known exploits are available

Patch Publication Date: 9/16/2026

Vulnerability Publication Date: 8/23/2026

Reference Information

CVE: CVE-2026-78136