{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "critical"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for kitty",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for kitty fixes the following issues:\n\nChanges in kitty:\n\n- Update to 0.48.2:\n  * Wayland: Fix regression in previous release that broke drag and drop on\n    Plasma (#10284)\n  * diff kitten: Fix a rare crash when showing a large diff due to incorrect\n    locking when highlighting\n  * Allow the private DCS kitty-echo escape code to only echo numbers\n  * Linux: Fix an approx 1MB memory leak when reloading the config, introduced\n    in version 0.40.0 (#10290)\n  * Desktop file chooser integration: when the specified directory does not\n    exist, open file chooser at home directory (#10292)\n  * Add support for terminal visibility reports\n    - https://rockorager.dev/misc/visibility-reports/\n  * `tab_title_template`: Add a field that evaluates to the total memory used\n    by all child processes in the tab (#10293)\n    - https://sw.kovidgoyal.net/kitty/conf/#opt-kitty.tab_title_template\n\n- Update to 0.48.1:\n  * Wayland: fix a regression in the previous release that broke window sizing\n    for on Hyprland/Sway with fractional scales and an initial specified\n    size (#10268)\n  * Wayland: fix a regression in 0.47.3 that broke dragging on the Niri\n    compositor (#10271)\n  * Wayland: get initial window size in cells working in most cases on\n    Hyprland/Sway with fractional scaling by using the fractional scale of\n    the primary monitor\n  * Wayland: fix using remote control to resize OS windows on some tiling\n    compositors leading to broken rendering\n  * macOS: fix edge=none panel height shrinking when margin_top is non-zero\n    in the panel/quick-access-terminal kittens (#10278)\n\n- Update to 0.48.0:\n  * Implement vertical tabs by setting tab_bar_edge to left or right (#9855)\n    - https://sw.kovidgoyal.net/kitty/conf/#opt-kitty.tab_bar_edge\n  * Graphics protocol: Add a new transient usage hint that clients can send to\n    terminals to indicate an image is meant for only short duration use (#10092)\n    - https://sw.kovidgoyal.net/kitty/graphics-protocol/#image-usage-hints\n  * On first press in an unfocused OS Window/kitty window give it focus and\n    pass the mouse event through to the clicked element. This is a behavior\n    change but aligns with platform defaults on macOS. Linux has no platform\n    defaults here as far as I can tell, so it gets to follow along. (#10233)\n  * kitten @ get-text: Add support for `alternate` and `alternate_scrollback`\n    extents to fetch text from the alternate screen buffer (#10165)\n  * Wayland: Fix first OS window being a few cells too small when\n    `initial_window_width`/`initial_window_height` are set in cells and a\n    fractional display scale is in use (#10146)\n  * macOS: New option `macos_ns_window_layer` to more precisely control what\n    layer panel OS windows are placed on (#10116)\n    - https://sw.kovidgoyal.net/kitty/conf/#opt-kitty.macos_ns_window_layer\n  * macOS: New option `macos_use_physical_screen_frame` to allow panel OS\n    Windows to cover the macOS global dock bar (#10116)\n    - https://sw.kovidgoyal.net/kitty/conf/#opt-kitty.macos_use_physical_screen_frame\n  * kitty binary builds are now built on Ubuntu 22 upgraded from Ubuntu 18 for\n    improved performance from better compilers\n  * macOS: Fix incorrect horizontal alignment when using text sizing\n    protocol (#10179)\n  * `edit-in-kitty`: Return exit code from underlying editor process on\n    exit (#10198)\n  * Make erasing last command robust against commands with no output and\n    commands in the scrollback (#10201)\n  * Fix superfluous margin visible to the left and right of the tab bar when\n    `background_opacity` is less than one and the window width is not a\n    multiple of the cell width (#10212)\n    - https://sw.kovidgoyal.net/kitty/conf/#opt-kitty.background_opacity\n  * hints kitten: Add a new flag `kitty +kitten hints --prefix-free` to\n    generate hints without a shared prefix (#10210)\n    - https://sw.kovidgoyal.net/kitty/kittens/hints/#cmdoption-kitty-kitten-hints-prefix-free\n  * Wayland GNOME: Fix dragging a window title bar to the \"+\" button failing\n    to create a new tab when there is only a single tab (#10222)\n  * choose-files kitten: Add a `--mode=all` to select either an existing file\n    or directory (#10208)\n  * Add support for editing files in sublime text and zed at specified line\n    number (#10224)\n  * choose-file kitten: Use a full readline editor for the search box. Also\n    allow remapping the up/down/home/end keys to use for editing instead of\n    navigating the file list (#10225)\n  * Fix `remote_control_script` not working in a kitty instance run from\n    inside another kitty instance\n    - https://sw.kovidgoyal.net/kitty/actions/#action-remote_control_script\n  * quick-access-terminal kitten: Allow configuring the layer on which to\n    display the terminal (#10242)\n  * `cursor_trail_start_threshold` now optionally accepts two values to set\n    x (horizontal) and y (vertical) thresholds independently (#10246)\n    - https://sw.kovidgoyal.net/kitty/conf/#opt-kitty.cursor_trail_start_threshold\n  * scroll-window remote control command: Fix a regression that broke\n    scrolling by pages (#10253)\n  * Bypass libc malloc for history buffer to avoid libc pool policies causing\n    apparent memory leak (#10254)\n  * Cursor trail: Do not run the trail shader when the cursor is hidden,\n    saving resources (#10255)\n  * Graphics: Fix incorrect calculated cursor position when placing images\n    with X/Y cell offsets (#10256)\n  * macOS: Disable macOS one time code autofill popups (#10250)\n  * Add support for DECSTR soft screen reset escape code (#10263)\n  * macOS: Fix quick-access-terminal appearing on the wrong space\n    (the fullscreen app\u0027s space) when triggered from a different space on\n    macOS Tahoe (#8740)\n\n- Addressing bsc#1269601 -\u003e CVE-2026-46604\n  * https://github.com/kovidgoyal/kitty/commit/351ee9fcbd692abd3bfbf2cf4296f69522e3571a\n  * Adjusted kitty-0.47.4.tar.gz to point to:\n    golang.org/x/image v0.43.0 and refreshed vendor.tar.gz\n\n- Update to 0.47.4:\n  * Linux: Fix a regression in the previous release that broke rendering of\n    bitmap color fonts (#10145)\n  * Linux: Allow fake italics defined via a matrix in fontconfig settings to\n    work for fonts like Fira Code that do not ship with an italic face (#10120)\n\n- Update to 0.47.3:\n  * macOS: Show a key symbol on the active tab if the macOS Secure Input\n    feature is enabled\n  * Fix regression that broke unserialization of splits layout in previous\n    release (#10124)\n  * Fix `focus_follows_mouse switching` the active window when returning to a\n    desktop/space, even though the mouse did not move. Now the window under a\n    stationary cursor is left alone, while moving the mouse across windows\n    still switches focus as before.\n    - https://sw.kovidgoyal.net/kitty/conf/#opt-kitty.focus_follows_mouse\n  * Sanitise responses to color control escape codes to avoid command\n    injection for shells that do not use the kitty keyboard protocol\n    (CVE-2026-54057 bsc#1268288)\n    - https://www.cve.org/CVERecord?id=CVE-2026-54057\n  * choose fonts kitten: Fix a rare timing based race causing kitten to crash\n    at startup (#10128)\n  * Wayland: Fix mouse input getting broken when starting a tab drag and\n    releasing the mouse button before the drag is actually registered (#10136)\n\n- Update to 0.47.2:\n  * Allow dragging to move scrollbar after clicking on track when\n    `scrollbar_jump_on_click` is enabled (#10085)\n  * macOS: Fix regression in 0.47.0 that broke passing `Cmd`+`C` on to\n    terminal applications when no text is selected (#10087)\n  * `kitten @ set-background-image`: Fix ``--layout=configured` changing\n    layout to centered instead (#10089)\n  * Splits layout: add an `equalize` action and an `equalize_on_close` option\n    to redistribute split space proportionally (#3489)\n  * Fix matching var/env on tabs not working as expected (#10095)\n  * When watching for changed config files do not recursively watch all sub\n    directories of the directory containing the config file (#10102)\n  * File transfer protocol: use `O_NOFOLLOW`` when opening regular files\n  * dnd kitten: Protect against drops from malicious sources\n\n- Update to 0.47.1:\n  * Fix a regression in the previous release that caused copy_or_noop to stop\n    working correctly (#10041)\n    - https://sw.kovidgoyal.net/kitty/actions/#action-copy_or_noop\n  * macOS: Fix a regression in the previous release that caused URLs to be\n    quoted when dropping into shells (#10054)\n  * Fix a regression in the previous release that broke automatic color scheme\n    changes when using a background image (#10058)\n  * Fix auto_reload_config not working when kitty.conf is a symlink (#10066)\n    - https://sw.kovidgoyal.net/kitty/conf/#opt-kitty.auto_reload_config\n  * Fix a regression in the previous release that broke dragging of URLs to\n    the shell prompt from programs that dont support MOVE drag operations\n  * Preserve user-set tab stops across window resizes instead of resetting to\n    8 column default\n  * Add support for the DECST8C escape sequence (CSI ? 5 W) to reset tab stops\n    to every 8 columns\n  * X11: Fix panel/quick-access-terminal windows not staying on top under KDE\n    after they are hidden once (#10082)\n\n- Update to 0.47.0:\n  * A new Drag and drop kitten to allow drag and drop of files from your shell\n    to any GUI program even across SSH (#9984)\n    - https://sw.kovidgoyal.net/kitty/kittens/dnd/\n  * A new option palette_generate to automatically generate the 256 color\n    palette from the first 16 colors (#9426)\n  * For builtin key mappings automatically fallback to matching the US-PC\n    layout key when the pressed key has no matches and is a non-English\n    character (#9671)\n  * Allow drag and drop of windows to re-arrange them, move them to another\n    tab/OS Window or detach them into a new OS Window. See\n    toggle_window_title_bars to temporarily show window title bars to drag\n    them around (#9626)\n  * Have scroll_line_up and scroll_line_down smooth scroll by default. Can be\n    restored to old behavior by re-mapping without the smooth argument (#9689)\n  * Draw a progress bar at the top of the window when a program reports\n    progress using the OSC 9;4 escape sequence, controlled by\n    progress_bar (#9777)\n  * Automatically reload configuration on changes, controlled by\n    auto_reload_config\n  * Allow specifying multiple background images for background_image that are\n    stored on GPU to allow fast image switching (#9836)\n  * Remote control: Expose session_name and last_focused_at in the output of\n    kitten @ ls for each window (#9732, #9799)\n    - https://sw.kovidgoyal.net/kitty/remote-control/\n  * Allow optionally dragging URLs with the mouse, see left (#9804)\n  * Change focus_follows_mouse to switch the active window only when the mouse\n    crosses into a different window, instead of on every mouse motion event.\n    Prevents accidental mouse bumps from undoing a keyboard-driven window\n    switch.\n  * Wayland: Use hold gestures to cancel momentum scrolling when fingers are\n    placed on the trackpad, for a more natural kinetic scrolling\n    experience (#9863)\n  * macOS: Switch to new Tahoe style application icon with different\n    background in light and dark modes\n  * Fix thickness of diagonal lines in box drawing characters not the same\n    as horizontal/vertical lines (#9719)\n  * Graphics protocol: Fix crash when handling invalid PNG image with direct\n    transmission (CVE-2026-33633 bsc#1275527)\n  * Graphics protocol: Fix crash when handling invalid offset values in\n    graphics compose commands (CVE-2026-33642 bsc#1275526)\n  * X11: Fix a regression in the previous release that caused an occasional\n    crash on input device removal (#9723)\n  * XWayland: Fix a regression where some wheel mice were not scrolling\n    properly (#9770)\n  * Command palette: Improve searching to use word level matching (#9727)\n  * hints kitten: A new option to set the background color of matched\n    text (#9745)\n  * The show_hyperlink_targets option now allows specifying a keyboard\n    modifier so that target URLs are only shown on hover when the modifier\n    is pressed (#9741)\n  * Fix a spurious mouse button release event being sent when dragging out of\n    an OS window causes focus loss\n  * Fix scrollbar hover/interaction not working when the scrollbar is drawn in\n    the window margin area (#9756)\n  * Fix completion for edit-in-kitty not including some common text file types\n  * Allow holding the Alt key and triple-clicking to select from the first\n    cell even if it is empty (#9758)\n  * Fix double click to rename tab being triggered too easily (#9774)\n  * Fix a crash when user tries to select while the client program is using\n    synchronised rendering and generating large amounts of output (#9778)\n  * macOS: Add Copy and Paste menu items to the Edit menu in the global\n    menu bar (#9780)\n  * Fix dragging of splits layout borders sometimes moving in the wrong\n    direction or having no effect (#9447)\n  * Fix triple-click line selection and double-click word selection not\n    extending wrapped lines beyond the edges of the viewport\n  * Password input in kittens: hide the cursor and display a blinking \ud83d\udd12 at\n    the end of typed characters to make it visually clear the user is\n    entering a password\n  * edit-in-kitty: Ignore environment variables as some editors execute code\n    present in env vars. Similarly ignore conf file specifications for\n    colors (CVE-2026-42851 bsc#1268285)\n  * Command palette ctrl+shift+f3: nicer grouping of aliases and combined\n    actions (#9819)\n  * hints kitten: Fix trailing punctuation not being removed from URLs (#9828)\n  * Fix copy/paste dropping spaces at soft-wrap boundaries when\n    strip_trailing_spaces is set (#9834)\n  * Allow setting negative values for inactive_text_alpha to control whether\n    to only fade inactive windows or unfocused windows (#9837)\n  * A new option macos_fullscreen_ignore_safe_area_insets to control whether\n    to ignore the notch space when using macos_traditional_fullscreen (#9841)\n  * Fix some responses from terminal sometimes leaking into shell after\n    kitten exit (#9839)\n  * Render block elements from the Unicode Symbols for Legacy Computing\n    Supplement block (U+1CC00\u2013U+1CEBF): separated block quadrants,\n    separated block sextants, one sixteenth blocks, and one quarter block\n    partial fills (#9849)\n  * Improve performance of using active process data when rendering the tab\n    bar by only scanning processes once per second (#9862)\n  * macOS: Fix occasional phantom cursors being drawn on screen (#9725)\n  * diff kitten: Keep the current (topmost) filename visible when scrolling,\n    controlled by a new option kitten-diff.sticky_header (#9891)\n  * Add an option to focus_follows_mouse to only switch focus on drops rather\n    than movement (#9896)\n  * Fix setting momentum_scroll to zero not fully disabling momentum\n    scrolling (#9904)\n  * macOS: Fix args passed via open --args being ignored when\n    macos-launch-services-cmdline is present (#9910)\n  * save_as_session: when the filename input by the user has no extension,\n    automatically add the .kitty-session extension (#9919)\n  * Linux: Workaround bug in Nvidia drivers that caused color corruption when\n    resuming after suspend (#9844)\n  * choose-files kitten: Output a trailing newline when writing to a tty in\n    text format (#9982)\n  * ssh kitten: Sanitize user controlled data in error messages that might\n    leak to shell (CVE-2026-42850 bsc#1268284)\n  * Linux: Respect the fontconfig matrix setting commonly used for fake slant\n    with fonts that do not have italic variants (#9990)\n\n- Update to 0.46.2:\n  * Watchers: Add an on_quit event to global watchers (#9675)\n  * Wayland: Fix a crash on some compositors when dragging a tab between OS\n    Windows (#9677)\n  * Fix incorrect behavior when using the actions to move tab forward/backward\n    with a tab_bar_filter active (#9672)\n  * Prevent stacking of multiple rename tab windows (#9691)\n  * choose files kitten: Fix a regression that caused incorrect highlight of\n    matched letters\n  * macOS: When using `macos_traditional_fullscreen` do not render content under\n    the notch (#9678)\n    - https://sw.kovidgoyal.net/kitty/conf/#opt-kitty.macos_traditional_fullscreen\n  * X11: Fix massive scroll when switching focus between kitty and another\n    application (#9703)\n  * Markers: Fix marking not working for multicell characters (#9705)\n  * Fix a regression in 0.46 that broke drag select in unfocused\n    windows (#9713)\n\n- Update to 0.46.1:\n  * diff kitten: Highlight moved lines using a different background color\n    (kitten-diff.mark_moved_lines) (#3241)\n    - https://sw.kovidgoyal.net/kitty/kittens/diff/#opt-kitten-diff.mark_moved_lines\n  * Fix a regression that broke kitten update-self (#9642)\n  * macOS: Clear bell alert badge on dock icon on mouse/keyboard\n    activity (#9640)\n  * Fix a regression that broke accept anyway shortcut in the paste\n    confirmation dialog (#9640)\n  * Fix kitty hanging on startup on Intel macs (#9643)\n  * X11: Fix a regression that caused some high res scroll devices to be\n    treated as line based scroll devices (#9649)\n  * Wayland: Fix momentum scrolling not working on compositors that send a\n    stop frame with no axis information (#9653)\n  * Linux: Fix regression that broke drag and drop from GTK\n    applications (#9656)\n  * macOS: Fix using Fn key for start dictation not working (#9661)\n  * Don\u0027t use neighboring tab colors for tab bar margins in translucent\n    windows (#9663)\n  * macOS: Fix OS window focus not restored when switching spaces (#9665)\n\n- Update to 0.46.0:\n  * Pixel scrolling for the kitty scrollback buffer controlled via\n    pixel_scroll (#9330)\n    - https://sw.kovidgoyal.net/kitty/conf/#opt-kitty.pixel_scroll\n  * Linux: momentum scrolling in the kitty scrollback buffer for touchpads\n    and touchscreens, see momentum_scroll\n    - https://sw.kovidgoyal.net/kitty/conf/#opt-kitty.momentum_scroll\n  * X11: support high resolution scroll events from touchpads, etc\n  * macOS: Implement support for Apple dictation to input text in kitty (#3732)\n  * Allow dragging tabs in the tab bar to re-order, move to another OS Window\n    or detach (#9296)\n  * Allow dragging window borders to resize kitty windows in all the different\n    layouts, controlled by window_drag_tolerance (#9447)\n    - https://sw.kovidgoyal.net/kitty/conf/#opt-kitty.window_drag_tolerance\n  * Allow showing configurable window titles for individual kitty windows via\n    a window title bar (#9450)\n    - https://sw.kovidgoyal.net/kitty/conf/#opt-kitty.window_title_bar\n  * A command palette to browse and trigger all mapped and unmapped\n    actions (#9545)\n  * choose-files kitten: Fix JXL image preview not working (#9323)\n  * Fix tab bar rendering glitches when using tab_bar_filter in some\n    circumstances (#9328)\n    - https://sw.kovidgoyal.net/kitty/conf/#opt-kitty.tab_bar_filter\n  * Add support for specifying colors in kitty.conf in OKLCH and LAB color\n    spaces (#9325)\n  * Fix a regression that broke using line numbers with the edit-in-kitty\n    command (#9346)\n  * Key maps: Allow specifying a timeout for multi key mappings and keyboard\n    modes (#9551)\n  * macOS: Fix changes to macos_titlebar_color while in full screen not being\n    applied after exiting fullscreen (#9350)\n    - https://sw.kovidgoyal.net/kitty/conf/#opt-kitty.macos_titlebar_color\n  * ncurses: Fix ncurses not using dim because it is missing from the sgr\n    property in terminfo even though it is present in the dim property.\n  * Fix a regression in the previous release that caused moving between\n    neighbors in the vertical and horizontal layouts to go in the opposite\n    direction (#9355)\n  * Fix goto_session not respecting the focus_tab session directive when\n    creating a session in an existing OS window (#9366)\n    - https://sw.kovidgoyal.net/kitty/actions/#action-goto_session\n  * Wayland: Fix a regression in the previous release that caused doubled key\n    repeats on compositors that implement compositor side key repeat\n    events (#9374)\n  * icat: Fix a regression in the previous release when rendering GIF\n    animations with frames that dispose onto background with non-zero delay\n    using the native engine (#9376)\n  * Wayland: Remove usage of the Wayland color management protocol to inform\n    compositors of the color space used by kitty (#9341)\n  * Linux: Fix a regression in 0.40 that caused horizontal alignment for emoji\n    to be incorrect in some cases (#9395)\n  * icat kitten: When catting multiple images display the images in input\n    order (#9413)\n  * kitten @: Fix relative paths for --password-file being resolved relative\n    to CWD instead of the kitty config directory\n  * kitten choose-files: Add a new binding of Alt+Enter to modify the name of\n    an existing file when choosing a save file name (#9387)\n  * kitten choose-files: Fix TAB completion in the choose save file name\n    prompt not working with respect to the current working directory (#9387)\n  * Fix line-at-once selection not extending wrapped lines into\n    scrollback (#9437)\n  * ssh kitten: Restore keyboard mode even if the ssh connection drops\n  * edit-in-kitty: Handle connection drop more gracefully (#9480)\n  * macOS: Fix changing window title with global menubar menu open causes\n    menu to get stuck (#9490)\n  * Fix focus_follows_mouse not working during a drag and drop (#9497)\n    - https://sw.kovidgoyal.net/kitty/conf/#opt-kitty.focus_follows_mouse\n  * goto_session: Add a --active-only option to select from only active\n    sessions (#9503)\n    - https://sw.kovidgoyal.net/kitty/actions/#action-goto_session\n  * Shell integration: Allow sending click events to shells using\n    y co-ordinates relative to prompts (#9500)\n  * A new action copy_selection_or_last_command_output (#9512)\n    - https://sw.kovidgoyal.net/kitty/actions/#action-copy_selection_or_last_command_output\n  * Wayland: Add support for the background blur extension (#9534)\n  * macOS: A new option macos_dock_badge_on_bell to show a badge on the kitty\n    dock icon when a bell occurs (#9529)\n    - https://sw.kovidgoyal.net/kitty/conf/#opt-kitty.macos_dock_badge_on_bell\n  * macOS: Workaround for yet another Tahoe bug causing rendering to\n    fail (#9520)\n  * URL detection: Allow trailing asterisks in URLs (#9543)\n  * Wayland: Add support for titlebar-only in hide_window_decorations to hide\n    the titlebar while keeping shadows for window resizing. (#9486)\n    - https://sw.kovidgoyal.net/kitty/conf/#opt-kitty.hide_window_decorations\n  * Text sizing protocol: Fix alignment/cropping issues when rendering text\n    with a fractional scale (#9471)\n  * macOS: Fix a crash when using macos_traditional_fullscreen with split\n    view (#9573)\n    - https://sw.kovidgoyal.net/kitty/conf/#opt-kitty.macos_traditional_fullscreen\n  * macOS: Fix flickering during OS Window resize (#9582)\n  * Cursor trail: Show a cursor trail when switching tabs (#9588)\n  * Make shift+left click extend the current selection instead of starting a\n    new selection when the mouse is not grabbed by the TUI application (#9608)\n  * Allow double clicking on a tab to rename it (#9609)\n  * remote_control_script resolve relative paths with respect to kitty\n    config directory (#9625)\n    - https://sw.kovidgoyal.net/kitty/actions/#action-remote_control_script\n  * Splits layout: Add new mappable actions to maximize a window in the\n    splits layout (#9629)\n\n- Update to 0.45.0:\n  * A new kitten to select files at the speed of thought with a keyboard first\n    interface and support for content previews of text files with syntax\n    highlighting, images, videos, e-books and more (#9263)\n    - https://sw.kovidgoyal.net/kitty/kittens/choose-files/\n  * Add support for the paste events protocol (#9183)\n    - https://rockorager.dev/misc/bracketed-paste-mime/\n  * icat kitten: Add support for animated PNG and animated WebP, netPBM images,\n    ICC color profiles and CCIP color space metadata to the builtin engine\n  * icat kitten: Add a new flag kitty +kitten icat --fit to control how images\n    are scaled to fit the screen (#9201)\n  * icat kitten: The kitty +kitten icat --scale-up flag now takes effect when\n    not using kitty +kitten icat --place as well\n  * Add a mappable action copy_last_command_output to copy the output of the\n    last command to the clipboard (#9185)\n  * ssh kitten: Fix a bug where automatic login was not working (#9187)\n  * Graphics: Fix overwrite composition mode for animation frames not being\n    honored\n  * Automatic color scheme switching: Fix title bar and scroll bar colors not\n    being updated (#9167)\n  * macOS: Fix cycle through OS windows only swapping between the two most\n    recent OS Windows. Also add a cycle through OS Windows backwards\n    action. (#9215)\n  * goto_session: allow specifying a directory to select a session file from\n    the directory (#9219)\n  * Have reloading config also reload the custom tab bar python modules (#9221)\n  * kitten @ ls: Also output the neighbors for every window (#9225)\n  * Have the kitty --start-as flag be respected when used with kitty\n    --single-instance (#9228)\n  * When expanding environment variables in listen_on allow the env directive\n    to take effect\n  * macOS: Fix closing an OS Window when another OS Window is minimized causing\n    the minimized window to be un-minimized (#8913)\n  * Do not rewrap the text in the alternate screen buffer. Avoids flicker\n    during live resize with no resize_debounce_time (#9142)\n  * Add a default mapping search_scrollback to open the scrollback in a pager\n    in search mode. If any text is currently selected it is automatically\n    searched for.\n  * Wayland: Fix spurious key repeat events when some user defined callback\n    takes a long time to execute (#9224)\n  * When moving windows to a new tab/OS Window fix overlay windows not being\n    grouped with their parent windows (#9266)\n  * Linux: Fix a bug causing colors to occasionally all go black when using\n    mesa \u003e= 25.3.0 with nouveau GPU driver (#9235)\n  * Fix tab_bar_min_tabs not respecting tab_bar_filter (#9278)\n  * macOS: Workaround for regression in Tahoe 26.2 that breaks\n  * kitty --detach (#9288)\n  * macOS: Workaround for yet another Tahoe regression causing macOS to start\n    an AutoFill helper process and not shut it down on application exit (#9299)\n\n- Update to 0.44.0:\n  * Allow kitty to read a specified set of environment variables from your\n    login shell at startup using the env directive in kitty.conf (#9042)\n  * A new option draw_window_borders_for_single_window to force kitty to always\n    draw a window border even when only a single window is present (#9112)\n    - https://sw.kovidgoyal.net/kitty/conf/#opt-kitty.draw_window_borders_for_single_window\n  * Fix a regression in 0.43.0 that caused a black flicker when closing a tab\n    in the presence of a background image (#9060)\n  * Further improvements to rounded corner rendering, especially at low\n    DPI (#9091)\n  * Splits layout: Fix a bug that could cause a corrupted layout in some\n    circumstances (#9059)\n  * Fix a regression in the previous release that broke goto_session -1\n  * Fix rendering broken on ancient GPU drivers that do not support rendering\n    to 16 bit textures (#9068)\n  * Fix tab bar sometimes showing incorrect tabs when it is filtered to show\n    only tabs from the current session (#9079)\n  * macOS: Workaround for bug in macOS Tahoe that caused OS Windows that are\n    fullscreen to crash kitty when returning from sleep on some machines (#8983)\n  * Graphics: Fix animated images sometimes not auto playing or auto playing\n    at the wrong start frame if the same image id is used for a subsequent image\n  * Fix a regression in 0.43.0 that caused high CPU usage when\n    disable_ligatures was set to cursor and the tab bar was visible (#9071)\n    - https://sw.kovidgoyal.net/kitty/conf/#opt-kitty.disable_ligatures\n  * macOS: Handle dropping of file promises into kitty in addition to file\n    paths (#9084)\n  * macOS: Fix indeterminate progress bar displayed on dock icon increasing\n    speed when indeterminate progress is set without being cleared first (#9114)\n  * macOS: Performance and power usage improvements of about 5-10% (#9131)\n  * macOS: Add an item to the global menu to Cycle through OS windows\n  * macOS: Quick access terminal: Fix a crash when changing font size (#9178)\n  * Wayland: Fix center-sized panels not working on smithay based\n    compositors (#9117)\n  * Wayland: Fix scrolling using some mouse wheels that produce \"VALUE120\"\n    based scroll events too fast on some compositors (#9128)\n  * Automatic color scheme switching: Fix title bar color not being\n    updated (#9167)\n  * Add support for Unicode 17\n  * Fix a regression in 0.43.0 that caused tab_bar_margin_width to be doubled\n    on the right edge of the tab bar (#9154)\n    - https://sw.kovidgoyal.net/kitty/conf/#opt-kitty.tab_bar_margin_width\n  * Session files: Add a new focus_tab command to specify which tab should be\n    active when a session is loaded. Accepts either a plain number\n    (0-based index) or a match expression for flexible tab selection,\n    allowing sessions to preserve the active tab state (Sessions)\n  * save_as_session: Add --base-dir option to specify a base directory for\n    saving session files with relative paths, useful when the current working\n    directory is not the desired location (Sessions)\n    - https://sw.kovidgoyal.net/kitty/actions/#action-save_as_session\n    - https://sw.kovidgoyal.net/kitty/sessions/\n  * Add state:focused_os_window match query to select all windows in the\n    currently focused OS window (Matching windows and tabs)\n    - https://sw.kovidgoyal.net/kitty/remote-control/#search-syntax\n  * Session saving now preserves visual tab order and active tab rather than\n    tab activation history as this is generally more important. In the future\n    may have it save tab history as well (#9163)\n\n- Update to 0.43.1:\n  * ssh kitten: Allow specifying a password and/or TOTP authentication secret\n    to automate interactive logins in scenarios where public key authentication\n    is not supported (#9020)\n  * macOS: Fix a bug where the color of a transparent titlebar was off when\n    running in the release build versus the build from source. Also fix using a\n    transparent titlebar causing the background opacity to be doubled.\n  * Fix a regression in the previous release that caused the incorrect tab to\n    be active when loading a session (#9025)\n  * macOS: Workaround for bug in macOS Tahoe that caused closed OS Windows to\n    remain as invisible rectangles that intercept mouse events (#8952)\n  * macOS: Fix a regression in the previous release that broke automatic\n    switching of dark/light mode when setting macos_titlebar_color to an\n    arbitrary color (#9034)\n  * goto_session: Add --sort-by=alphabetical to have the interactive session\n    picker list the sessions in a fixed order rather than by most recent (#9033)\n  * Fix a regression in the previous release that caused the cursor trail to\n    not be hidden properly (#9039)\n  * Session files: Fix a regression in the previous release that broke matching\n    on windows in the current tab (#9037)\n  * Fix a regression in the previous release that broke clearing screen lines\n    when in margin mode (#9049)\n\n- Update to 0.43.0:\n  * New support for creating and switching to Sessions easily, allowing users\n    to define and use sessions/projects efficiently (#8911)\n  * Add a configurable scrollbar for the kitty scrollback (#8945)\n  * A new protocol for multiple cursors in the terminal (#8927)\n  * macOS: Allow the window title bar to be semi-transparent when\n    background_opacity is less than one and macos_titlebar_color is set to\n    background (#8906)\n  * A new cursor_trail_color setting to independently control the color of\n    cursor trails (#8830)\n  * macOS: Add the default Cmd+L mapping from Terminal.app to erase the last\n    command and its output (#6040)\n  * Fix background_opacity being non-linear especially with light color themes.\n    Note that this might require you to adjust the value of this setting to get\n    back your current look. (#8869)\n  * Add support for blinking text. Text marked as blinking now blinks in exact\n    rhythm with the cursor. The blinking animation and max duration are\n    controlled by cursor_blink_interval and cursor_stop_blinking_after. (#8551)\n  * Allow using a custom python function to draw tab titles in the tab bar,\n    see tab_title_template\n  * Wayland: Fix incorrect window size calculation when transitioning from\n    full screen to non-full screen with client side decorations (#8826)\n  * macOS: Fix hiding quick access terminal window not restoring focus to\n    previously active application (#8840)\n  * macOS: Fix showing the quick access terminal on a space other than the\n    space it was last active on, after full screening some application causes\n    the quick access terminal to appear on the old space (#8740)\n  * macOS: When toggling open the quick access terminal move it to the\n    currently active monitor (the monitor with the mouse pointer on it) (#9003)\n  * macOS: Fix closing an OS Window when another OS Window is minimized causing\n    the minimized window to be un-minimized (#8913)\n  * Allow using backspace to move the cursor onto the previous line in cooked\n    mode. This is indicated by the bw property in kitty\u0027s terminfo (#8841)\n  * Watchers: A new event for global watchers corresponding to the tab bar\n    being changed (#8842)\n  * Fix a regression in 0.40.0 that broke handling of the VS16 variation\n    selector when it caused a character to flow to the next line (#8848)\n  * Fix rendering of underlines when using larger text sizes with the space\n    and en-space characters (#8950)\n  * Fix updating panel configuration on visibility toggle and via remote\n    control not working (#8984)\n  * Improve rendering of rounded rectangles (#9000)\n  * Wayland: Update bundled copy of libwayland to 1.24 from 1.23.1 because\n    the just released mesa 25.2.0 breaks with libwayland \u003c 1.24 (#8884)\n  * macOS: Pass the Cmd+C shortcut to the application running in the terminal\n    when no text is selected (#8946)\n  * macOS: Workaround for bug in macOS Tahoe that caused closed OS Windows to\n    remain as invisible rectangles that intercept mouse events (#8952)\n  * macOS: Workaround for bug in macOS Tahoe that caused OS Windows that are\n    fullscreen on a monitor that is disconnected while macOS is asleep to\n    crash kitty (#8983)\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-Leap-16.0-packagehub-500",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_21599-1.json"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1268284",
        "url": "https://bugzilla.suse.com/1268284"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1268285",
        "url": "https://bugzilla.suse.com/1268285"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1268288",
        "url": "https://bugzilla.suse.com/1268288"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1269601",
        "url": "https://bugzilla.suse.com/1269601"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1275526",
        "url": "https://bugzilla.suse.com/1275526"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1275527",
        "url": "https://bugzilla.suse.com/1275527"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-33633 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-33633/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-33642 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-33642/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-42850 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-42850/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-42851 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-42851/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-46604 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-46604/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-54057 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-54057/"
      }
    ],
    "title": "Security update for kitty",
    "tracking": {
      "current_release_date": "2026-09-17T17:41:59Z",
      "generator": {
        "date": "2026-08-18T15:54:56Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2026:21599-1",
      "initial_release_date": "2026-08-18T15:54:56Z",
      "revision_history": [
        {
          "date": "2026-08-18T15:54:56Z",
          "number": "1",
          "summary": "Current version"
        },
        {
          "date": "2026-08-18T15:54:56Z",
          "number": "2",
          "summary": "unknown changes"
        },
        {
          "date": "2026-09-16T20:45:24Z",
          "number": "3",
          "summary": "unknown changes"
        },
        {
          "date": "2026-09-16T21:46:37Z",
          "number": "4",
          "summary": "unknown changes"
        },
        {
          "date": "2026-09-17T17:41:59Z",
          "number": "5",
          "summary": "unknown changes"
        }
      ],
      "status": "final",
      "version": "5"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kitty-0:0.48.2-bp160.1.1.aarch64",
                "product": {
                  "name": "kitty-0:0.48.2-bp160.1.1.aarch64",
                  "product_id": "kitty-0:0.48.2-bp160.1.1.aarch64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:kitty_project:kitty:0.48.2:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/kitty@0.48.2-bp160.1.1?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kitty-shell-integration-0:0.48.2-bp160.1.1.aarch64",
                "product": {
                  "name": "kitty-shell-integration-0:0.48.2-bp160.1.1.aarch64",
                  "product_id": "kitty-shell-integration-0:0.48.2-bp160.1.1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/kitty-shell-integration@0.48.2-bp160.1.1?arch=aarch64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kitty-terminfo-0:0.48.2-bp160.1.1.noarch",
                "product": {
                  "name": "kitty-terminfo-0:0.48.2-bp160.1.1.noarch",
                  "product_id": "kitty-terminfo-0:0.48.2-bp160.1.1.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/kitty-terminfo@0.48.2-bp160.1.1?arch=noarch"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kitty-0:0.48.2-bp160.1.1.ppc64le",
                "product": {
                  "name": "kitty-0:0.48.2-bp160.1.1.ppc64le",
                  "product_id": "kitty-0:0.48.2-bp160.1.1.ppc64le",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:kitty_project:kitty:0.48.2:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/kitty@0.48.2-bp160.1.1?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kitty-shell-integration-0:0.48.2-bp160.1.1.ppc64le",
                "product": {
                  "name": "kitty-shell-integration-0:0.48.2-bp160.1.1.ppc64le",
                  "product_id": "kitty-shell-integration-0:0.48.2-bp160.1.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/kitty-shell-integration@0.48.2-bp160.1.1?arch=ppc64le"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kitty-0:0.48.2-bp160.1.1.s390x",
                "product": {
                  "name": "kitty-0:0.48.2-bp160.1.1.s390x",
                  "product_id": "kitty-0:0.48.2-bp160.1.1.s390x",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:kitty_project:kitty:0.48.2:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/kitty@0.48.2-bp160.1.1?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kitty-shell-integration-0:0.48.2-bp160.1.1.s390x",
                "product": {
                  "name": "kitty-shell-integration-0:0.48.2-bp160.1.1.s390x",
                  "product_id": "kitty-shell-integration-0:0.48.2-bp160.1.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/kitty-shell-integration@0.48.2-bp160.1.1?arch=s390x"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kitty-0:0.48.2-bp160.1.1.x86_64",
                "product": {
                  "name": "kitty-0:0.48.2-bp160.1.1.x86_64",
                  "product_id": "kitty-0:0.48.2-bp160.1.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:kitty_project:kitty:0.48.2:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/kitty@0.48.2-bp160.1.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kitty-shell-integration-0:0.48.2-bp160.1.1.x86_64",
                "product": {
                  "name": "kitty-shell-integration-0:0.48.2-bp160.1.1.x86_64",
                  "product_id": "kitty-shell-integration-0:0.48.2-bp160.1.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/kitty-shell-integration@0.48.2-bp160.1.1?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "openSUSE Leap 16.0",
                "product": {
                  "name": "openSUSE Leap 16.0",
                  "product_id": "openSUSE Leap 16.0"
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kitty-0:0.48.2-bp160.1.1.aarch64 as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:kitty-0:0.48.2-bp160.1.1.aarch64"
        },
        "product_reference": "kitty-0:0.48.2-bp160.1.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kitty-0:0.48.2-bp160.1.1.ppc64le as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:kitty-0:0.48.2-bp160.1.1.ppc64le"
        },
        "product_reference": "kitty-0:0.48.2-bp160.1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kitty-0:0.48.2-bp160.1.1.s390x as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:kitty-0:0.48.2-bp160.1.1.s390x"
        },
        "product_reference": "kitty-0:0.48.2-bp160.1.1.s390x",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kitty-0:0.48.2-bp160.1.1.x86_64 as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:kitty-0:0.48.2-bp160.1.1.x86_64"
        },
        "product_reference": "kitty-0:0.48.2-bp160.1.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kitty-shell-integration-0:0.48.2-bp160.1.1.aarch64 as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:kitty-shell-integration-0:0.48.2-bp160.1.1.aarch64"
        },
        "product_reference": "kitty-shell-integration-0:0.48.2-bp160.1.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kitty-shell-integration-0:0.48.2-bp160.1.1.ppc64le as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:kitty-shell-integration-0:0.48.2-bp160.1.1.ppc64le"
        },
        "product_reference": "kitty-shell-integration-0:0.48.2-bp160.1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kitty-shell-integration-0:0.48.2-bp160.1.1.s390x as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:kitty-shell-integration-0:0.48.2-bp160.1.1.s390x"
        },
        "product_reference": "kitty-shell-integration-0:0.48.2-bp160.1.1.s390x",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kitty-shell-integration-0:0.48.2-bp160.1.1.x86_64 as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:kitty-shell-integration-0:0.48.2-bp160.1.1.x86_64"
        },
        "product_reference": "kitty-shell-integration-0:0.48.2-bp160.1.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kitty-terminfo-0:0.48.2-bp160.1.1.noarch as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:kitty-terminfo-0:0.48.2-bp160.1.1.noarch"
        },
        "product_reference": "kitty-terminfo-0:0.48.2-bp160.1.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-33633",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-33633"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Kitty is a cross-platform GPU based terminal. Versions 0.46.2 and below contain a heap buffer overflow in load_image_data() that allows any process which can write to the terminal\u0027s stdin to crash kitty immediately. The vulnerability is triggered by a single APC graphics protocol command with a PNG format declaration (f=100) whose payload exceeds twice the initial buffer capacity. The overflow is attacker-controlled in both length and content, causing DoS and potentially escalation to RCE itself. This issue has been fixed in version 0.47.0.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:kitty-0:0.48.2-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:kitty-0:0.48.2-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:kitty-0:0.48.2-bp160.1.1.s390x",
          "openSUSE Leap 16.0:kitty-0:0.48.2-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:kitty-shell-integration-0:0.48.2-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:kitty-shell-integration-0:0.48.2-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:kitty-shell-integration-0:0.48.2-bp160.1.1.s390x",
          "openSUSE Leap 16.0:kitty-shell-integration-0:0.48.2-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:kitty-terminfo-0:0.48.2-bp160.1.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-33633",
          "url": "https://www.suse.com/security/cve/CVE-2026-33633"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1275527 for CVE-2026-33633",
          "url": "https://bugzilla.suse.com/1275527"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:kitty-0:0.48.2-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:kitty-0:0.48.2-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:kitty-0:0.48.2-bp160.1.1.s390x",
            "openSUSE Leap 16.0:kitty-0:0.48.2-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:kitty-shell-integration-0:0.48.2-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:kitty-shell-integration-0:0.48.2-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:kitty-shell-integration-0:0.48.2-bp160.1.1.s390x",
            "openSUSE Leap 16.0:kitty-shell-integration-0:0.48.2-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:kitty-terminfo-0:0.48.2-bp160.1.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:kitty-0:0.48.2-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:kitty-0:0.48.2-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:kitty-0:0.48.2-bp160.1.1.s390x",
            "openSUSE Leap 16.0:kitty-0:0.48.2-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:kitty-shell-integration-0:0.48.2-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:kitty-shell-integration-0:0.48.2-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:kitty-shell-integration-0:0.48.2-bp160.1.1.s390x",
            "openSUSE Leap 16.0:kitty-shell-integration-0:0.48.2-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:kitty-terminfo-0:0.48.2-bp160.1.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-08-18T15:54:56Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-33633"
    },
    {
      "cve": "CVE-2026-33642",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-33642"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Kitty is a cross-platform GPU based terminal. In versions 0.46.2 and below, the handle_compose_command() function in kitty/graphics.c performs bounds validation on composition offsets using unsigned 32-bit arithmetic that is subject to integer wrapping, potentially leading to Heap Buffer Over-Read/Write. An attacker who can write escape sequences to a kitty terminal (e.g., via a malicious file, SSH login banner, or piped content) can supply crafted x_offset/y_offset values that pass the bounds check after wrapping but cause massive out-of-bounds heap memory access in compose_rectangles(). No user interaction is required. No non-default configuration is required. The attacker only needs the ability to produce output in a kitty terminal window. This issue has been fixed in version 0.47.0.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:kitty-0:0.48.2-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:kitty-0:0.48.2-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:kitty-0:0.48.2-bp160.1.1.s390x",
          "openSUSE Leap 16.0:kitty-0:0.48.2-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:kitty-shell-integration-0:0.48.2-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:kitty-shell-integration-0:0.48.2-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:kitty-shell-integration-0:0.48.2-bp160.1.1.s390x",
          "openSUSE Leap 16.0:kitty-shell-integration-0:0.48.2-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:kitty-terminfo-0:0.48.2-bp160.1.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-33642",
          "url": "https://www.suse.com/security/cve/CVE-2026-33642"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1275526 for CVE-2026-33642",
          "url": "https://bugzilla.suse.com/1275526"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:kitty-0:0.48.2-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:kitty-0:0.48.2-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:kitty-0:0.48.2-bp160.1.1.s390x",
            "openSUSE Leap 16.0:kitty-0:0.48.2-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:kitty-shell-integration-0:0.48.2-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:kitty-shell-integration-0:0.48.2-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:kitty-shell-integration-0:0.48.2-bp160.1.1.s390x",
            "openSUSE Leap 16.0:kitty-shell-integration-0:0.48.2-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:kitty-terminfo-0:0.48.2-bp160.1.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:kitty-0:0.48.2-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:kitty-0:0.48.2-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:kitty-0:0.48.2-bp160.1.1.s390x",
            "openSUSE Leap 16.0:kitty-0:0.48.2-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:kitty-shell-integration-0:0.48.2-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:kitty-shell-integration-0:0.48.2-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:kitty-shell-integration-0:0.48.2-bp160.1.1.s390x",
            "openSUSE Leap 16.0:kitty-shell-integration-0:0.48.2-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:kitty-terminfo-0:0.48.2-bp160.1.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-08-18T15:54:56Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-33642"
    },
    {
      "cve": "CVE-2026-42850",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-42850"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Kitty is a cross-platform GPU based terminal. In versions prior to 0.47.0, it is possible to inject commands within the subshell through kitty error. A special escape code will make kitty return an error, this error is not escaped and will be correctly echoed back to the terminal with CRLF, as such it will be run by the shell in use. To exploit this bug, the victim must use a netcat or a similar program to connect to the attacker, or else listening for someone to connect. Once this condition is set, an attacker could pwn the computer of the victim using a special kitty\u0027s escape code that will run a command in the shell in use. Version 04.7.0 fixes the issue.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:kitty-0:0.48.2-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:kitty-0:0.48.2-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:kitty-0:0.48.2-bp160.1.1.s390x",
          "openSUSE Leap 16.0:kitty-0:0.48.2-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:kitty-shell-integration-0:0.48.2-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:kitty-shell-integration-0:0.48.2-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:kitty-shell-integration-0:0.48.2-bp160.1.1.s390x",
          "openSUSE Leap 16.0:kitty-shell-integration-0:0.48.2-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:kitty-terminfo-0:0.48.2-bp160.1.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-42850",
          "url": "https://www.suse.com/security/cve/CVE-2026-42850"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1268284 for CVE-2026-42850",
          "url": "https://bugzilla.suse.com/1268284"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:kitty-0:0.48.2-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:kitty-0:0.48.2-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:kitty-0:0.48.2-bp160.1.1.s390x",
            "openSUSE Leap 16.0:kitty-0:0.48.2-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:kitty-shell-integration-0:0.48.2-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:kitty-shell-integration-0:0.48.2-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:kitty-shell-integration-0:0.48.2-bp160.1.1.s390x",
            "openSUSE Leap 16.0:kitty-shell-integration-0:0.48.2-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:kitty-terminfo-0:0.48.2-bp160.1.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:kitty-0:0.48.2-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:kitty-0:0.48.2-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:kitty-0:0.48.2-bp160.1.1.s390x",
            "openSUSE Leap 16.0:kitty-0:0.48.2-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:kitty-shell-integration-0:0.48.2-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:kitty-shell-integration-0:0.48.2-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:kitty-shell-integration-0:0.48.2-bp160.1.1.s390x",
            "openSUSE Leap 16.0:kitty-shell-integration-0:0.48.2-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:kitty-terminfo-0:0.48.2-bp160.1.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-08-18T15:54:56Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-42850"
    },
    {
      "cve": "CVE-2026-42851",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-42851"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Kitty is a cross-platform GPU based terminal. In versions prior to 0.47.0, a program able to write bytes to a kitty terminal - a remote SSH peer, a downloaded file viewed with `cat`, a log line, an email body rendered in `less`, an issue body in a TUI, etc. - can cause kitty to execute attacker-supplied Python inside the running kitty process, with the user\u0027s full privileges. There is no approval prompt, no remote-control permission requirement, no shell-integration interaction, no clipboard touch, and no editor interaction. Version 0.47.0 fixes the issue.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:kitty-0:0.48.2-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:kitty-0:0.48.2-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:kitty-0:0.48.2-bp160.1.1.s390x",
          "openSUSE Leap 16.0:kitty-0:0.48.2-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:kitty-shell-integration-0:0.48.2-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:kitty-shell-integration-0:0.48.2-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:kitty-shell-integration-0:0.48.2-bp160.1.1.s390x",
          "openSUSE Leap 16.0:kitty-shell-integration-0:0.48.2-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:kitty-terminfo-0:0.48.2-bp160.1.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-42851",
          "url": "https://www.suse.com/security/cve/CVE-2026-42851"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1268285 for CVE-2026-42851",
          "url": "https://bugzilla.suse.com/1268285"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:kitty-0:0.48.2-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:kitty-0:0.48.2-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:kitty-0:0.48.2-bp160.1.1.s390x",
            "openSUSE Leap 16.0:kitty-0:0.48.2-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:kitty-shell-integration-0:0.48.2-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:kitty-shell-integration-0:0.48.2-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:kitty-shell-integration-0:0.48.2-bp160.1.1.s390x",
            "openSUSE Leap 16.0:kitty-shell-integration-0:0.48.2-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:kitty-terminfo-0:0.48.2-bp160.1.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-08-18T15:54:56Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-42851"
    },
    {
      "cve": "CVE-2026-46604",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-46604"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The TIFF decoder can panic when decoding an invalid image with an out-of-bounds strip offset.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:kitty-0:0.48.2-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:kitty-0:0.48.2-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:kitty-0:0.48.2-bp160.1.1.s390x",
          "openSUSE Leap 16.0:kitty-0:0.48.2-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:kitty-shell-integration-0:0.48.2-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:kitty-shell-integration-0:0.48.2-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:kitty-shell-integration-0:0.48.2-bp160.1.1.s390x",
          "openSUSE Leap 16.0:kitty-shell-integration-0:0.48.2-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:kitty-terminfo-0:0.48.2-bp160.1.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-46604",
          "url": "https://www.suse.com/security/cve/CVE-2026-46604"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1269599 for CVE-2026-46604",
          "url": "https://bugzilla.suse.com/1269599"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:kitty-0:0.48.2-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:kitty-0:0.48.2-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:kitty-0:0.48.2-bp160.1.1.s390x",
            "openSUSE Leap 16.0:kitty-0:0.48.2-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:kitty-shell-integration-0:0.48.2-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:kitty-shell-integration-0:0.48.2-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:kitty-shell-integration-0:0.48.2-bp160.1.1.s390x",
            "openSUSE Leap 16.0:kitty-shell-integration-0:0.48.2-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:kitty-terminfo-0:0.48.2-bp160.1.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:kitty-0:0.48.2-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:kitty-0:0.48.2-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:kitty-0:0.48.2-bp160.1.1.s390x",
            "openSUSE Leap 16.0:kitty-0:0.48.2-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:kitty-shell-integration-0:0.48.2-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:kitty-shell-integration-0:0.48.2-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:kitty-shell-integration-0:0.48.2-bp160.1.1.s390x",
            "openSUSE Leap 16.0:kitty-shell-integration-0:0.48.2-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:kitty-terminfo-0:0.48.2-bp160.1.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-08-18T15:54:56Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-46604"
    },
    {
      "cve": "CVE-2026-54057",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-54057"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Kitty is a cross-platform GPU based terminal. In versions prior to 0.47.3, kitty\u0027s OSC 21 (color-control) query reply reflects attacker-controlled bytes, including newlines, into the shell\u0027s input without sanitization. Version 0.47.3 fixes the issue.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:kitty-0:0.48.2-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:kitty-0:0.48.2-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:kitty-0:0.48.2-bp160.1.1.s390x",
          "openSUSE Leap 16.0:kitty-0:0.48.2-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:kitty-shell-integration-0:0.48.2-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:kitty-shell-integration-0:0.48.2-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:kitty-shell-integration-0:0.48.2-bp160.1.1.s390x",
          "openSUSE Leap 16.0:kitty-shell-integration-0:0.48.2-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:kitty-terminfo-0:0.48.2-bp160.1.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-54057",
          "url": "https://www.suse.com/security/cve/CVE-2026-54057"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1268288 for CVE-2026-54057",
          "url": "https://bugzilla.suse.com/1268288"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:kitty-0:0.48.2-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:kitty-0:0.48.2-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:kitty-0:0.48.2-bp160.1.1.s390x",
            "openSUSE Leap 16.0:kitty-0:0.48.2-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:kitty-shell-integration-0:0.48.2-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:kitty-shell-integration-0:0.48.2-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:kitty-shell-integration-0:0.48.2-bp160.1.1.s390x",
            "openSUSE Leap 16.0:kitty-shell-integration-0:0.48.2-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:kitty-terminfo-0:0.48.2-bp160.1.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:kitty-0:0.48.2-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:kitty-0:0.48.2-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:kitty-0:0.48.2-bp160.1.1.s390x",
            "openSUSE Leap 16.0:kitty-0:0.48.2-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:kitty-shell-integration-0:0.48.2-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:kitty-shell-integration-0:0.48.2-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:kitty-shell-integration-0:0.48.2-bp160.1.1.s390x",
            "openSUSE Leap 16.0:kitty-shell-integration-0:0.48.2-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:kitty-terminfo-0:0.48.2-bp160.1.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-08-18T15:54:56Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-54057"
    }
  ]
}