Security update for kitty
This update for kitty fixes the following issues: Changes in kitty: - Update to 0.48.2: * Wayland: Fix regression in previous release that broke drag and drop on Plasma (#10284) * diff kitten: Fix a rare crash when showing a large diff due to incorrect locking when highlighting * Allow the private DCS kitty-echo escape code to only echo numbers * Linux: Fix an approx 1MB memory leak when reloading the config, introduced in version 0.40.0 (#10290) * Desktop file chooser integration: when the specified directory does not exist, open file chooser at home directory (#10292) * Add support for terminal visibility reports - https://rockorager.dev/misc/visibility-reports/ * `tab_title_template`: Add a field that evaluates to the total memory used by all child processes in the tab (#10293) - https://sw.kovidgoyal.net/kitty/conf/#opt-kitty.tab_title_template - Update to 0.48.1: * Wayland: fix a regression in the previous release that broke window sizing for on Hyprland/Sway with fractional scales and an initial specified size (#10268) * Wayland: fix a regression in 0.47.3 that broke dragging on the Niri compositor (#10271) * Wayland: get initial window size in cells working in most cases on Hyprland/Sway with fractional scaling by using the fractional scale of the primary monitor * Wayland: fix using remote control to resize OS windows on some tiling compositors leading to broken rendering * macOS: fix edge=none panel height shrinking when margin_top is non-zero in the panel/quick-access-terminal kittens (#10278) - Update to 0.48.0: * Implement vertical tabs by setting tab_bar_edge to left or right (#9855) - https://sw.kovidgoyal.net/kitty/conf/#opt-kitty.tab_bar_edge * Graphics protocol: Add a new transient usage hint that clients can send to terminals to indicate an image is meant for only short duration use (#10092) - https://sw.kovidgoyal.net/kitty/graphics-protocol/#image-usage-hints * On first press in an unfocused OS Window/kitty window give it focus and pass the mouse event through to the clicked element. This is a behavior change but aligns with platform defaults on macOS. Linux has no platform defaults here as far as I can tell, so it gets to follow along. (#10233) * kitten @ get-text: Add support for `alternate` and `alternate_scrollback` extents to fetch text from the alternate screen buffer (#10165) * Wayland: Fix first OS window being a few cells too small when `initial_window_width`/`initial_window_height` are set in cells and a fractional display scale is in use (#10146) * macOS: New option `macos_ns_window_layer` to more precisely control what layer panel OS windows are placed on (#10116) - https://sw.kovidgoyal.net/kitty/conf/#opt-kitty.macos_ns_window_layer * macOS: New option `macos_use_physical_screen_frame` to allow panel OS Windows to cover the macOS global dock bar (#10116) - https://sw.kovidgoyal.net/kitty/conf/#opt-kitty.macos_use_physical_screen_frame * kitty binary builds are now built on Ubuntu 22 upgraded from Ubuntu 18 for improved performance from better compilers * macOS: Fix incorrect horizontal alignment when using text sizing protocol (#10179) * `edit-in-kitty`: Return exit code from underlying editor process on exit (#10198) * Make erasing last command robust against commands with no output and commands in the scrollback (#10201) * Fix superfluous margin visible to the left and right of the tab bar when `background_opacity` is less than one and the window width is not a multiple of the cell width (#10212) - https://sw.kovidgoyal.net/kitty/conf/#opt-kitty.background_opacity * hints kitten: Add a new flag `kitty +kitten hints --prefix-free` to generate hints without a shared prefix (#10210) - https://sw.kovidgoyal.net/kitty/kittens/hints/#cmdoption-kitty-kitten-hints-prefix-free * Wayland GNOME: Fix dragging a window title bar to the "+" button failing to create a new tab when there is only a single tab (#10222) * choose-files kitten: Add a `--mode=all` to select either an existing file or directory (#10208) * Add support for editing files in sublime text and zed at specified line number (#10224) * choose-file kitten: Use a full readline editor for the search box. Also allow remapping the up/down/home/end keys to use for editing instead of navigating the file list (#10225) * Fix `remote_control_script` not working in a kitty instance run from inside another kitty instance - https://sw.kovidgoyal.net/kitty/actions/#action-remote_control_script * quick-access-terminal kitten: Allow configuring the layer on which to display the terminal (#10242) * `cursor_trail_start_threshold` now optionally accepts two values to set x (horizontal) and y (vertical) thresholds independently (#10246) - https://sw.kovidgoyal.net/kitty/conf/#opt-kitty.cursor
Security update for kitty
Description
This update for kitty fixes the following issues: Changes in kitty: - Update to 0.48.2: * Wayland: Fix regression in previous release that broke drag and drop on Plasma (#10284) * diff kitten: Fix a rare crash when showing a large diff due to incorrect locking when highlighting * Allow the private DCS kitty-echo escape code to only echo numbers * Linux: Fix an approx 1MB memory leak when reloading the config, introduced in version 0.40.0 (#10290) * Desktop file chooser integration: when the specified directory does not exist, open file chooser at home directory (#10292) * Add support for terminal visibility reports - https://rockorager.dev/misc/visibility-reports/ * `tab_title_template`: Add a field that evaluates to the total memory used by all child processes in the tab (#10293) - https://sw.kovidgoyal.net/kitty/conf/#opt-kitty.tab_title_template - Update to 0.48.1: * Wayland: fix a regression in the previous release that broke window sizing for on Hyprland/Sway with fractional scales and an initial specified size (#10268) * Wayland: fix a regression in 0.47.3 that broke dragging on the Niri compositor (#10271) * Wayland: get initial window size in cells working in most cases on Hyprland/Sway with fractional scaling by using the fractional scale of the primary monitor * Wayland: fix using remote control to resize OS windows on some tiling compositors leading to broken rendering * macOS: fix edge=none panel height shrinking when margin_top is non-zero in the panel/quick-access-terminal kittens (#10278) - Update to 0.48.0: * Implement vertical tabs by setting tab_bar_edge to left or right (#9855) - https://sw.kovidgoyal.net/kitty/conf/#opt-kitty.tab_bar_edge * Graphics protocol: Add a new transient usage hint that clients can send to terminals to indicate an image is meant for only short duration use (#10092) - https://sw.kovidgoyal.net/kitty/graphics-protocol/#image-usage-hints * On first press in an unfocused OS Window/kitty window give it focus and pass the mouse event through to the clicked element. This is a behavior change but aligns with platform defaults on macOS. Linux has no platform defaults here as far as I can tell, so it gets to follow along. (#10233) * kitten @ get-text: Add support for `alternate` and `alternate_scrollback` extents to fetch text from the alternate screen buffer (#10165) * Wayland: Fix first OS window being a few cells too small when `initial_window_width`/`initial_window_height` are set in cells and a fractional display scale is in use (#10146) * macOS: New option `macos_ns_window_layer` to more precisely control what layer panel OS windows are placed on (#10116) - https://sw.kovidgoyal.net/kitty/conf/#opt-kitty.macos_ns_window_layer * macOS: New option `macos_use_physical_screen_frame` to allow panel OS Windows to cover the macOS global dock bar (#10116) - https://sw.kovidgoyal.net/kitty/conf/#opt-kitty.macos_use_physical_screen_frame * kitty binary builds are now built on Ubuntu 22 upgraded from Ubuntu 18 for improved performance from better compilers * macOS: Fix incorrect horizontal alignment when using text sizing protocol (#10179) * `edit-in-kitty`: Return exit code from underlying editor process on exit (#10198) * Make erasing last command robust against commands with no output and commands in the scrollback (#10201) * Fix superfluous margin visible to the left and right of the tab bar when `background_opacity` is less than one and the window width is not a multiple of the cell width (#10212) - https://sw.kovidgoyal.net/kitty/conf/#opt-kitty.background_opacity * hints kitten: Add a new flag `kitty +kitten hints --prefix-free` to generate hints without a shared prefix (#10210) - https://sw.kovidgoyal.net/kitty/kittens/hints/#cmdoption-kitty-kitten-hints-prefix-free * Wayland GNOME: Fix dragging a window title bar to the "+" button failing to create a new tab when there is only a single tab (#10222) * choose-files kitten: Add a `--mode=all` to select either an existing file or directory (#10208) * Add support for editing files in sublime text and zed at specified line number (#10224) * choose-file kitten: Use a full readline editor for the search box. Also allow remapping the up/down/home/end keys to use for editing instead of navigating the file list (#10225) * Fix `remote_control_script` not working in a kitty instance run from inside another kitty instance - https://sw.kovidgoyal.net/kitty/actions/#action-remote_control_script * quick-access-terminal kitten: Allow configuring the layer on which to display the terminal (#10242) * `cursor_trail_start_threshold` now optionally accepts two values to set x (horizontal) and y (vertical) thresholds independently (#10246) - https://sw.kovidgoyal.net/kitty/conf/#opt-kitty.cursor
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_security_advisory
- Csaf Version
- 2.0
- Publisher
- SUSE Product Security Team
- Advisory Id
- openSUSE-SU-2026:21599-1
- Cve Count
- 6
- Additional Cves
- ["CVE-2026-33642","CVE-2026-42850","CVE-2026-42851","CVE-2026-46604","CVE-2026-54057"]
Threat ID: 6aab496155bf5e2cf5990b02
Added to database: 09/17/2026, 01:58:57 UTC
Last updated: 09/17/2026, 01:58:57 UTC
Views: 1
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.