SUSE · Security update for libgpg-error
Affects SUSESource GCVE Database
Rated by Threat Radar
Data as of 26 Oct 2026, 16:19 UTC
What to do
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| SUSE Product Security Team SUSE | Affected
| Fixed in– |
AI-suggested
A security update has been released to fix this vulnerability. Users should apply the official update from SUSE Product Security Team to remediate the issue. Patch status is not explicitly confirmed in the provided data; check the vendor advisory for the latest remediation guidance.
Description
A security update for libgpg-error addresses an out-of-bounds read vulnerability in the _gpgrt_vfnameconcat function within stringutils.c when the GPGRT_FCONCAT_SYSCONF flag is used. This flaw could potentially lead to memory access issues. The severity is assessed as medium. No specific affected versions or CVSS score are provided. No known exploits in the wild have been reported.