SUSE · Security update for libgpg-error
Affects SUSESource GCVE Database
0
Severity
MediumRated by Threat Radar
Data as of 29 Sep 2026, 21:23 UTC
What to do
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| SUSE Product Security Team SUSE | Affected
| Fixed in– |
AI-suggested
A security update has been issued by the SUSE Product Security Team to fix this vulnerability.
Description
A security update for libgpg-error addresses an out-of-bounds read vulnerability in the _gpgrt_vfnameconcat function within stringutils.c when the GPGRT_FCONCAT_SYSCONF flag is used. This issue could potentially lead to memory safety problems. The vulnerability is rated medium severity. No specific affected versions or patch details are provided in the available data.
References
- suse.com/support/security/rating/ (opens in a new tab)
- ftp.suse.com/pub/projects/security/csaf/suse-su-2026_23583-1.json (opens in a new tab)
- suse.com/support/update/announcement/2026/suse-su-202623583-1/ (opens in a new tab)
- lists.suse.com/pipermail/sle-security-updates/2026-September/029097.html (opens in a new tab)
- bugzilla.suse.com/1263078 (opens in a new tab)
Community reviews
Loading reviews…