The hamlib update to version 4.7.2 fixes several issues, notably a stack out-of-bounds write and uninitialized memory vulnerability identified as CVE-2026-54634 in the rigctld component. Additional fixes include a stack/heap overflow primitive in read_string_generic, an authentication bypass in rigctld, and weak password handling vulnerabilities. These fixes address memory safety and authentication weaknesses that could potentially be exploited. The update also includes various functional and stability improvements across supported radio models and backends.

The vulnerabilities fixed in hamlib 4.7.2 could allow an attacker to cause memory corruption (stack out-of-bounds write, stack/heap overflow) and bypass authentication mechanisms with weak password handling in the rigctld service. This could lead to unauthorized control or denial of service conditions on affected systems running vulnerable versions of hamlib.

Upgrade to hamlib version 4.7.2 or later, which includes official fixes for CVE-2026-54634 and related vulnerabilities. Applying this update will remediate the memory corruption and authentication bypass issues. No additional mitigation steps are indicated beyond applying the vendor-provided update.