OPENSUSE-SU-2026:21615-1
Vulnerability from csaf_opensuse - Published: 2026-08-20 16:20 - Updated: 2026-09-19 15:44Summary
Security update for weechat
Severity
Important
Notes
Title of the patch: Security update for weechat
Description of the patch: This update for weechat fixes the following issues:
Changes in weechat:
- Update to 4.10.0:
Added
* core: add command /theme (#1338)
* core: add built-in "light" theme, applied automatically on first
start on light-background terminals (#1338)
* core: add themable flag on configuration options (#1338)
* core: add options weechat.look.theme and
weechat.look.theme_backup (#1338)
* api: add function theme_register (#1338)
* fset: add filter t:themable (#1338)
* relay/api: add resource GET /api/scripts
* relay: add option relay.network.unix_socket_permissions (#2317)
* script: add info "script_languages"
Changed
* core: improve speed of /upgrade with a lot of buffers and lines
(#2338, #2339, #2341)
* core: improve speed of display of long words in chat area (#2336)
* core: add condition on connected relay api clients in default
value of option weechat.look.hotlist_add_conditions
* core: add /mute in default command for key Alt+= (toggle filters)
* api: change type of parameter "pos_option_name" to "const char **"
in function config_search_with_string
* relay/api: add field "last_read_line_id" in GET /api/buffers
Fixed
* core: fix infinite loop when option weechat.look.read_marker_string
is set to a string with a width of zero (#2337)
* core: fix option weechat.look.color_real_white not applied when
color is "white" on 16+ colors terminals (#1742)
* core: fix buffer overflow in connection to SOCKS5 proxy (#2325)
* api: fix infinite loop in function string_replace when the search
string is empty
* api: do not free dynamic string on error in function string_dyn_concat
* irc: fix tag in message with list of names when joining a channel
* fset: remove error displayed in core buffer when clicking with the
mouse below the last option displayed
* guile, lua, perl, python, ruby, tcl: fix conversion of dates in
the API functions
* irc: fix conversion of dates in received messages
Security
* core: fix buffer overflow in display of time in chat area with a
custom time format (#2342)
* core: fix integer overflow in size calculation when evaluating
"${hide:...}" and "${base_encode:...}" (#2335)
* core: fix possible buffer overflow in command /color alias (#2330)
* core: fix possible buffer overflow in list of commands displayed
by /help (#2330)
* irc: fix heap use-after-free when a batched message causes a
disconnection from the server (GHSA-rfmh-3r7f-jpx5)
* irc: fix stack buffer overflow when splitting a JOIN message
with a large list of channels and keys (GHSA-q2xg-9ggx-77mr)
* irc: limit size of data received from the server to prevent
memory exhaustion
* irc: fix out-of-bounds read on incoming DCC command with a
quoted filename ending the message (#2322)
* logger: fix path traversal in log file name when a buffer local
variable contains the char used internally to protect directory
separators (#2340)
* relay: fix use-after-free and double free on remote buffer
(GHSA-hx59-4hq9-6vmw)
* relay: fix authentication bypass with the "plain" password hash
algorithm (GHSA-68ff-gq39-pqjm)
* relay: limit size of decompressed websocket frame with
permessage-deflate to prevent memory exhaustion
(GHSA-v2v4-45wm-5cr3, CVE-2026-53524)
* relay: limit size of received websocket frame and HTTP body to
prevent memory exhaustion
* relay: limit size of partial message received while reading an
HTTP request to prevent memory exhaustion
* relay: fix timing attack on password authentication
(GHSA-vhv8-g2r9-cwcc, CVE-2026-53525)
* relay: fix out-of-bounds read in dump of data (#2324)
* relay/api: fix memory leak in resources "handshake", "input" and
"completion" (GHSA-wmpc-m6g9-fwj8)
* relay: fix read of uncompressed websocket frame (#2331)
* api, relay: fix timing attack on TOTP validation
(GHSA-vhv8-g2r9-cwcc, CVE-2026-53525)
* xfer: replace directory separator in remote nick by underscore
in download filename to prevent writing the file outside the
download directory (#2321)
* xfer: fix out-of-bounds read when receiving empty line in DCC
chat (#2323)
* xfer: fix out-of-bounds write in xfer file transfer resume (#2326)
- Update to 4.9.5:
* core: fix buffer overflow in display of time in chat area with a
custom time format (#2342)
* irc: fix heap use-after-free when a batched message causes a
disconnection from the server (GHSA-rfmh-3r7f-jpx5)
* irc: fix stack buffer overflow when splitting a JOIN message with
a large list of channels and keys (GHSA-q2xg-9ggx-77mr)
* relay: fix use-after-free and double free on remote buffer
(GHSA-hx59-4hq9-6vmw)
* relay: increase max size for decompressed websocket frame
- Update to 4.9.4:
Changed
* core: improve speed of display of long words in chat area (#2336)
Fixed
* core: fix infinite loop when option weechat.look.read_marker_string
is set to a string with a width of zero (#2337)
* core: fix integer overflow in size calculation when evaluating
"${hide:...}" and "${base_encode:...}" (#2335)
* logger: fix path traversal in log file name when a buffer local
variable contains the char used internally to protect directory
separators (#2340)
* relay: fix authentication bypass with the "plain" password hash
algorithm (GHSA-68ff-gq39-pqjm)
- Update to 4.9.3:
* core: fix buffer overflow in connection to SOCKS5 proxy (#2325)
* core: fix possible buffer overflow in command /color alias (#2330)
* core: fix possible buffer overflow in list of commands displayed
by /help (#2330)
* api: do not free dynamic string on error in function string_dyn_concat
* relay/api: fix memory leak in resources "handshake", "input" and
"completion" (GHSA-wmpc-m6g9-fwj8)
* relay: fix read of uncompressed websocket frame (#2331)
* xfer: fix out-of-bounds write in xfer file transfer resume (#2326)
- Update to 4.9.2:
* api: fix infinite loop in function string_replace when the search
string is empty
* irc: limit size of data received from the server to prevent
memory exhaustion
* irc: fix out-of-bounds read on incoming DCC command with a quoted
filename ending the message (#2322)
* relay: limit size of received websocket frame and HTTP body to
prevent memory exhaustion
* relay: limit size of partial message received while reading an
HTTP request to prevent memory exhaustion
* relay: fix out-of-bounds read in dump of data (#2324)
* xfer: replace directory separator in remote nick by underscore in
download filename to prevent writing the file outside the download
directory (#2321)
* xfer: fix out-of-bounds read when receiving empty line in DCC
chat (#2323)
- Update to 4.9.1:
* core: fix option weechat.look.color_real_white not applied when
color is "white" on 16+ colors terminals (#1742)
* irc: fix tag in message with list of names when joining a channel
* relay: limit size of decompressed websocket frame with
permessage-deflate to prevent memory exhaustion (GHSA-v2v4-45wm-5cr3)
* relay: fix timing attack on password authentication (GHSA-vhv8-g2r9-cwcc)
* api, relay: fix timing attack on TOTP validation (GHSA-vhv8-g2r9-cwcc)
- Update to 4.9.0:
Added
* typing: add option typing.look.item_text (#2305)
Fixed
* core: fix crash with /eval when the current buffer is closed in a
command
* core: fix buffer size in function util_parse_time, causing buffer
overflow error in unit tests
* irc: fix display of CTCP query sent multiple times to the same
user when capability echo-message is enabled (#2309)
* irc: fix unit of server option anti_flood from seconds to
milliseconds in output of /server listfull
* irc: fix creation of irc.msgbuffer option without a server name
* irc: ignore self join if the channel is already joined (#2291)
* relay/api: fix memory leaks in resources "ping" and "sync"
* relay/api: fix memory leak in receive of message from remote WeeChat
- Update to 4.8.2:
* irc: ignore self join if the channel is already joined (#2291)
* relay/api: fix memory leaks in resources "ping" and "sync"
* relay/api: fix memory leak in receive of message from remote WeeChat
- Update to 4.8.1:
* core: fix buffer size in function util_parse_time, causing buffer
overflow error in unit tests
* irc: fix creation of irc.msgbuffer option without a server name
- Update to 4.8.0:
Removed
* irc: remove temporary servers and option irc.look.temporary_servers
Changed
* api: add support of date like ISO 8601 but with spaces and lower
t and z in function util_parse_time (#886)
* irc: request and perform SASL authentication when the server
advertises SASL support with message "CAP NEW" (#2277)
* irc: send SASL username with mechanism EXTERNAL (#2270)
* logger: change default time format to %@%F %T.%fZ (UTC) (#886)
* logger: use function util_parse_time to parse date/time in log
files (#886)
* relay/api: return an error 400 (Bad Request) when URL parameters
"colors", "nicks", "lines" and "lines_free" have an invalid value
* relay/api: return an error 401 (Unauthorized) when header
"x-weechat-totp" has an invalid value
* xfer: add buffer local variable "server" in DCC CHAT buffers
* core, irc, relay: add tag "tls" in gnutls messages
* irc: add tags "irc_cap" and "log3" in client capability request
and SASL not supported messages
* build: require Curl ≥ 7.68.0 (#2268)
* build: require GnuTLS ≥ 3.6.3 (#2268)
* build: require libgcrypt ≥ 1.8.0 (#2268)
* build: require Enchant v2 (#2268)
* build: require Lua ≥ 5.3 (#2268)
Added
* core: add option weechat.completion.cycle
* core: add hdata for hooks
* api: add functions util_parse_int, util_parse_long and
util_parse_longlong
* buflist: add variable ${index_displayed}
Fixed
* core: display an error message in case of invalid parameters in
commands /bar, /buffer, /cursor, /print and /window
* api: fix file descriptor leak in hook_url when a timeout occurs
or if the hook is removed during the transfer (#2284)
* api: fix parsing of date/times with timezone offset in function
util_parse_time
* irc: fix warning on creation of irc.msgbuffer option when the
server name contains upper case letters (#2281)
* irc: display a warning for each unknown or invalid server option
in commands /connect and /server
* irc: fix colors in messages 367 (ban mask), 728 (quiet mask) and
MODE (#2286)
* irc: fix reset of color when multiple modes are set with
command /mode
* relay/api: fix crash when an invalid HTTP request is received
from a client
* relay/api: return HTTP error 404 instead of 400 when the buffer
is not found in resources completion and input
* relay/api: return HTTP error 400 in case of invalid body in
resource ping
Patchnames: openSUSE-Leap-16.0-packagehub-516
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
Affected products
Recommended
33 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 16.0:weechat-0:4.10.0-bp160.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:weechat-0:4.10.0-bp160.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:weechat-0:4.10.0-bp160.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:weechat-0:4.10.0-bp160.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:weechat-devel-0:4.10.0-bp160.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:weechat-devel-0:4.10.0-bp160.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:weechat-devel-0:4.10.0-bp160.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:weechat-devel-0:4.10.0-bp160.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:weechat-lang-0:4.10.0-bp160.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:weechat-lua-0:4.10.0-bp160.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:weechat-lua-0:4.10.0-bp160.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:weechat-lua-0:4.10.0-bp160.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:weechat-lua-0:4.10.0-bp160.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:weechat-perl-0:4.10.0-bp160.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:weechat-perl-0:4.10.0-bp160.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:weechat-perl-0:4.10.0-bp160.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:weechat-perl-0:4.10.0-bp160.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:weechat-python-0:4.10.0-bp160.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:weechat-python-0:4.10.0-bp160.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:weechat-python-0:4.10.0-bp160.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:weechat-python-0:4.10.0-bp160.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:weechat-ruby-0:4.10.0-bp160.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:weechat-ruby-0:4.10.0-bp160.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:weechat-ruby-0:4.10.0-bp160.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:weechat-ruby-0:4.10.0-bp160.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:weechat-spell-0:4.10.0-bp160.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:weechat-spell-0:4.10.0-bp160.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:weechat-spell-0:4.10.0-bp160.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:weechat-spell-0:4.10.0-bp160.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:weechat-tcl-0:4.10.0-bp160.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:weechat-tcl-0:4.10.0-bp160.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:weechat-tcl-0:4.10.0-bp160.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:weechat-tcl-0:4.10.0-bp160.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
33 products, the same list as for
CVE-2026-53524
Threats
Impact
important
References
6 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for weechat",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for weechat fixes the following issues:\n\nChanges in weechat:\n\n- Update to 4.10.0:\n\n Added\n * core: add command /theme (#1338)\n * core: add built-in \"light\" theme, applied automatically on first\n start on light-background terminals (#1338)\n * core: add themable flag on configuration options (#1338)\n * core: add options weechat.look.theme and\n weechat.look.theme_backup (#1338)\n * api: add function theme_register (#1338)\n * fset: add filter t:themable (#1338)\n * relay/api: add resource GET /api/scripts\n * relay: add option relay.network.unix_socket_permissions (#2317)\n * script: add info \"script_languages\"\n\n Changed\n * core: improve speed of /upgrade with a lot of buffers and lines\n (#2338, #2339, #2341)\n * core: improve speed of display of long words in chat area (#2336)\n * core: add condition on connected relay api clients in default\n value of option weechat.look.hotlist_add_conditions\n * core: add /mute in default command for key Alt+= (toggle filters)\n * api: change type of parameter \"pos_option_name\" to \"const char **\"\n in function config_search_with_string\n * relay/api: add field \"last_read_line_id\" in GET /api/buffers\n\n Fixed\n * core: fix infinite loop when option weechat.look.read_marker_string\n is set to a string with a width of zero (#2337)\n * core: fix option weechat.look.color_real_white not applied when\n color is \"white\" on 16+ colors terminals (#1742)\n * core: fix buffer overflow in connection to SOCKS5 proxy (#2325)\n * api: fix infinite loop in function string_replace when the search\n string is empty\n * api: do not free dynamic string on error in function string_dyn_concat\n * irc: fix tag in message with list of names when joining a channel\n * fset: remove error displayed in core buffer when clicking with the\n mouse below the last option displayed\n * guile, lua, perl, python, ruby, tcl: fix conversion of dates in\n the API functions\n * irc: fix conversion of dates in received messages\n\n Security\n * core: fix buffer overflow in display of time in chat area with a\n custom time format (#2342)\n * core: fix integer overflow in size calculation when evaluating\n \"${hide:...}\" and \"${base_encode:...}\" (#2335)\n * core: fix possible buffer overflow in command /color alias (#2330)\n * core: fix possible buffer overflow in list of commands displayed\n by /help (#2330)\n * irc: fix heap use-after-free when a batched message causes a\n disconnection from the server (GHSA-rfmh-3r7f-jpx5)\n * irc: fix stack buffer overflow when splitting a JOIN message\n with a large list of channels and keys (GHSA-q2xg-9ggx-77mr)\n * irc: limit size of data received from the server to prevent\n memory exhaustion\n * irc: fix out-of-bounds read on incoming DCC command with a\n quoted filename ending the message (#2322)\n * logger: fix path traversal in log file name when a buffer local\n variable contains the char used internally to protect directory\n separators (#2340)\n * relay: fix use-after-free and double free on remote buffer\n (GHSA-hx59-4hq9-6vmw)\n * relay: fix authentication bypass with the \"plain\" password hash\n algorithm (GHSA-68ff-gq39-pqjm)\n * relay: limit size of decompressed websocket frame with\n permessage-deflate to prevent memory exhaustion\n (GHSA-v2v4-45wm-5cr3, CVE-2026-53524)\n * relay: limit size of received websocket frame and HTTP body to\n prevent memory exhaustion\n * relay: limit size of partial message received while reading an\n HTTP request to prevent memory exhaustion\n * relay: fix timing attack on password authentication\n (GHSA-vhv8-g2r9-cwcc, CVE-2026-53525)\n * relay: fix out-of-bounds read in dump of data (#2324)\n * relay/api: fix memory leak in resources \"handshake\", \"input\" and\n \"completion\" (GHSA-wmpc-m6g9-fwj8)\n * relay: fix read of uncompressed websocket frame (#2331)\n * api, relay: fix timing attack on TOTP validation\n (GHSA-vhv8-g2r9-cwcc, CVE-2026-53525)\n * xfer: replace directory separator in remote nick by underscore\n in download filename to prevent writing the file outside the\n download directory (#2321)\n * xfer: fix out-of-bounds read when receiving empty line in DCC\n chat (#2323)\n * xfer: fix out-of-bounds write in xfer file transfer resume (#2326)\n\n- Update to 4.9.5:\n * core: fix buffer overflow in display of time in chat area with a\n custom time format (#2342)\n * irc: fix heap use-after-free when a batched message causes a\n disconnection from the server (GHSA-rfmh-3r7f-jpx5)\n * irc: fix stack buffer overflow when splitting a JOIN message with\n a large list of channels and keys (GHSA-q2xg-9ggx-77mr)\n * relay: fix use-after-free and double free on remote buffer\n (GHSA-hx59-4hq9-6vmw)\n * relay: increase max size for decompressed websocket frame\n\n- Update to 4.9.4:\n\n Changed\n * core: improve speed of display of long words in chat area (#2336)\n\n Fixed\n * core: fix infinite loop when option weechat.look.read_marker_string\n is set to a string with a width of zero (#2337)\n * core: fix integer overflow in size calculation when evaluating\n \"${hide:...}\" and \"${base_encode:...}\" (#2335)\n * logger: fix path traversal in log file name when a buffer local\n variable contains the char used internally to protect directory\n separators (#2340)\n * relay: fix authentication bypass with the \"plain\" password hash\n algorithm (GHSA-68ff-gq39-pqjm)\n\n- Update to 4.9.3:\n * core: fix buffer overflow in connection to SOCKS5 proxy (#2325)\n * core: fix possible buffer overflow in command /color alias (#2330)\n * core: fix possible buffer overflow in list of commands displayed\n by /help (#2330)\n * api: do not free dynamic string on error in function string_dyn_concat\n * relay/api: fix memory leak in resources \"handshake\", \"input\" and\n \"completion\" (GHSA-wmpc-m6g9-fwj8)\n * relay: fix read of uncompressed websocket frame (#2331)\n * xfer: fix out-of-bounds write in xfer file transfer resume (#2326)\n\n- Update to 4.9.2:\n * api: fix infinite loop in function string_replace when the search\n string is empty\n * irc: limit size of data received from the server to prevent\n memory exhaustion\n * irc: fix out-of-bounds read on incoming DCC command with a quoted\n filename ending the message (#2322)\n * relay: limit size of received websocket frame and HTTP body to\n prevent memory exhaustion\n * relay: limit size of partial message received while reading an\n HTTP request to prevent memory exhaustion\n * relay: fix out-of-bounds read in dump of data (#2324)\n * xfer: replace directory separator in remote nick by underscore in\n download filename to prevent writing the file outside the download\n directory (#2321)\n * xfer: fix out-of-bounds read when receiving empty line in DCC\n chat (#2323)\n\n- Update to 4.9.1:\n * core: fix option weechat.look.color_real_white not applied when\n color is \"white\" on 16+ colors terminals (#1742)\n * irc: fix tag in message with list of names when joining a channel\n * relay: limit size of decompressed websocket frame with\n permessage-deflate to prevent memory exhaustion (GHSA-v2v4-45wm-5cr3)\n * relay: fix timing attack on password authentication (GHSA-vhv8-g2r9-cwcc)\n * api, relay: fix timing attack on TOTP validation (GHSA-vhv8-g2r9-cwcc)\n\n- Update to 4.9.0:\n\n Added\n * typing: add option typing.look.item_text (#2305)\n\n Fixed\n * core: fix crash with /eval when the current buffer is closed in a\n command\n * core: fix buffer size in function util_parse_time, causing buffer\n overflow error in unit tests\n * irc: fix display of CTCP query sent multiple times to the same\n user when capability echo-message is enabled (#2309)\n * irc: fix unit of server option anti_flood from seconds to\n milliseconds in output of /server listfull\n * irc: fix creation of irc.msgbuffer option without a server name\n * irc: ignore self join if the channel is already joined (#2291)\n * relay/api: fix memory leaks in resources \"ping\" and \"sync\"\n * relay/api: fix memory leak in receive of message from remote WeeChat\n\n- Update to 4.8.2:\n * irc: ignore self join if the channel is already joined (#2291)\n * relay/api: fix memory leaks in resources \"ping\" and \"sync\"\n * relay/api: fix memory leak in receive of message from remote WeeChat\n\n- Update to 4.8.1:\n * core: fix buffer size in function util_parse_time, causing buffer\n overflow error in unit tests\n * irc: fix creation of irc.msgbuffer option without a server name\n\n- Update to 4.8.0:\n\n Removed\n * irc: remove temporary servers and option irc.look.temporary_servers\n\n Changed\n * api: add support of date like ISO 8601 but with spaces and lower\n t and z in function util_parse_time (#886)\n * irc: request and perform SASL authentication when the server\n advertises SASL support with message \"CAP NEW\" (#2277)\n * irc: send SASL username with mechanism EXTERNAL (#2270)\n * logger: change default time format to %@%F %T.%fZ (UTC) (#886)\n * logger: use function util_parse_time to parse date/time in log\n files (#886)\n * relay/api: return an error 400 (Bad Request) when URL parameters\n \"colors\", \"nicks\", \"lines\" and \"lines_free\" have an invalid value\n * relay/api: return an error 401 (Unauthorized) when header\n \"x-weechat-totp\" has an invalid value\n * xfer: add buffer local variable \"server\" in DCC CHAT buffers\n * core, irc, relay: add tag \"tls\" in gnutls messages\n * irc: add tags \"irc_cap\" and \"log3\" in client capability request\n and SASL not supported messages\n * build: require Curl \u2265 7.68.0 (#2268)\n * build: require GnuTLS \u2265 3.6.3 (#2268)\n * build: require libgcrypt \u2265 1.8.0 (#2268)\n * build: require Enchant v2 (#2268)\n * build: require Lua \u2265 5.3 (#2268)\n\n Added\n * core: add option weechat.completion.cycle\n * core: add hdata for hooks\n * api: add functions util_parse_int, util_parse_long and\n util_parse_longlong\n * buflist: add variable ${index_displayed}\n\n Fixed\n * core: display an error message in case of invalid parameters in\n commands /bar, /buffer, /cursor, /print and /window\n * api: fix file descriptor leak in hook_url when a timeout occurs\n or if the hook is removed during the transfer (#2284)\n * api: fix parsing of date/times with timezone offset in function\n util_parse_time\n * irc: fix warning on creation of irc.msgbuffer option when the\n server name contains upper case letters (#2281)\n * irc: display a warning for each unknown or invalid server option\n in commands /connect and /server\n * irc: fix colors in messages 367 (ban mask), 728 (quiet mask) and\n MODE (#2286)\n * irc: fix reset of color when multiple modes are set with\n command /mode\n * relay/api: fix crash when an invalid HTTP request is received\n from a client\n * relay/api: return HTTP error 404 instead of 400 when the buffer\n is not found in resources completion and input\n * relay/api: return HTTP error 400 in case of invalid body in\n resource ping\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-Leap-16.0-packagehub-516",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_21615-1.json"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-53524 page",
"url": "https://www.suse.com/security/cve/CVE-2026-53524/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-53525 page",
"url": "https://www.suse.com/security/cve/CVE-2026-53525/"
}
],
"title": "Security update for weechat",
"tracking": {
"current_release_date": "2026-09-19T15:44:05Z",
"generator": {
"date": "2026-08-20T16:20:15Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2026:21615-1",
"initial_release_date": "2026-08-20T16:20:15Z",
"revision_history": [
{
"date": "2026-08-20T16:20:15Z",
"number": "1",
"summary": "Current version"
},
{
"date": "2026-08-20T16:20:15Z",
"number": "2",
"summary": "unknown changes"
},
{
"date": "2026-09-16T20:45:37Z",
"number": "3",
"summary": "unknown changes"
},
{
"date": "2026-09-16T21:46:46Z",
"number": "4",
"summary": "unknown changes"
},
{
"date": "2026-09-17T17:42:11Z",
"number": "5",
"summary": "unknown changes"
},
{
"date": "2026-09-19T15:44:05Z",
"number": "6",
"summary": "unknown changes"
}
],
"status": "final",
"version": "6"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "weechat-0:4.10.0-bp160.1.1.aarch64",
"product": {
"name": "weechat-0:4.10.0-bp160.1.1.aarch64",
"product_id": "weechat-0:4.10.0-bp160.1.1.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:weechat:weechat:4.10.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/weechat@4.10.0-bp160.1.1?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "weechat-devel-0:4.10.0-bp160.1.1.aarch64",
"product": {
"name": "weechat-devel-0:4.10.0-bp160.1.1.aarch64",
"product_id": "weechat-devel-0:4.10.0-bp160.1.1.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/weechat-devel@4.10.0-bp160.1.1?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "weechat-lua-0:4.10.0-bp160.1.1.aarch64",
"product": {
"name": "weechat-lua-0:4.10.0-bp160.1.1.aarch64",
"product_id": "weechat-lua-0:4.10.0-bp160.1.1.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/weechat-lua@4.10.0-bp160.1.1?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "weechat-perl-0:4.10.0-bp160.1.1.aarch64",
"product": {
"name": "weechat-perl-0:4.10.0-bp160.1.1.aarch64",
"product_id": "weechat-perl-0:4.10.0-bp160.1.1.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/weechat-perl@4.10.0-bp160.1.1?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "weechat-python-0:4.10.0-bp160.1.1.aarch64",
"product": {
"name": "weechat-python-0:4.10.0-bp160.1.1.aarch64",
"product_id": "weechat-python-0:4.10.0-bp160.1.1.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/weechat-python@4.10.0-bp160.1.1?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "weechat-ruby-0:4.10.0-bp160.1.1.aarch64",
"product": {
"name": "weechat-ruby-0:4.10.0-bp160.1.1.aarch64",
"product_id": "weechat-ruby-0:4.10.0-bp160.1.1.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/weechat-ruby@4.10.0-bp160.1.1?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "weechat-spell-0:4.10.0-bp160.1.1.aarch64",
"product": {
"name": "weechat-spell-0:4.10.0-bp160.1.1.aarch64",
"product_id": "weechat-spell-0:4.10.0-bp160.1.1.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/weechat-spell@4.10.0-bp160.1.1?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "weechat-tcl-0:4.10.0-bp160.1.1.aarch64",
"product": {
"name": "weechat-tcl-0:4.10.0-bp160.1.1.aarch64",
"product_id": "weechat-tcl-0:4.10.0-bp160.1.1.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/weechat-tcl@4.10.0-bp160.1.1?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "weechat-lang-0:4.10.0-bp160.1.1.noarch",
"product": {
"name": "weechat-lang-0:4.10.0-bp160.1.1.noarch",
"product_id": "weechat-lang-0:4.10.0-bp160.1.1.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/suse/weechat-lang@4.10.0-bp160.1.1?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "weechat-0:4.10.0-bp160.1.1.ppc64le",
"product": {
"name": "weechat-0:4.10.0-bp160.1.1.ppc64le",
"product_id": "weechat-0:4.10.0-bp160.1.1.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:a:weechat:weechat:4.10.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/weechat@4.10.0-bp160.1.1?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "weechat-devel-0:4.10.0-bp160.1.1.ppc64le",
"product": {
"name": "weechat-devel-0:4.10.0-bp160.1.1.ppc64le",
"product_id": "weechat-devel-0:4.10.0-bp160.1.1.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/suse/weechat-devel@4.10.0-bp160.1.1?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "weechat-lua-0:4.10.0-bp160.1.1.ppc64le",
"product": {
"name": "weechat-lua-0:4.10.0-bp160.1.1.ppc64le",
"product_id": "weechat-lua-0:4.10.0-bp160.1.1.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/suse/weechat-lua@4.10.0-bp160.1.1?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "weechat-perl-0:4.10.0-bp160.1.1.ppc64le",
"product": {
"name": "weechat-perl-0:4.10.0-bp160.1.1.ppc64le",
"product_id": "weechat-perl-0:4.10.0-bp160.1.1.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/suse/weechat-perl@4.10.0-bp160.1.1?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "weechat-python-0:4.10.0-bp160.1.1.ppc64le",
"product": {
"name": "weechat-python-0:4.10.0-bp160.1.1.ppc64le",
"product_id": "weechat-python-0:4.10.0-bp160.1.1.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/suse/weechat-python@4.10.0-bp160.1.1?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "weechat-ruby-0:4.10.0-bp160.1.1.ppc64le",
"product": {
"name": "weechat-ruby-0:4.10.0-bp160.1.1.ppc64le",
"product_id": "weechat-ruby-0:4.10.0-bp160.1.1.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/suse/weechat-ruby@4.10.0-bp160.1.1?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "weechat-spell-0:4.10.0-bp160.1.1.ppc64le",
"product": {
"name": "weechat-spell-0:4.10.0-bp160.1.1.ppc64le",
"product_id": "weechat-spell-0:4.10.0-bp160.1.1.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/suse/weechat-spell@4.10.0-bp160.1.1?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "weechat-tcl-0:4.10.0-bp160.1.1.ppc64le",
"product": {
"name": "weechat-tcl-0:4.10.0-bp160.1.1.ppc64le",
"product_id": "weechat-tcl-0:4.10.0-bp160.1.1.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/suse/weechat-tcl@4.10.0-bp160.1.1?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "weechat-0:4.10.0-bp160.1.1.s390x",
"product": {
"name": "weechat-0:4.10.0-bp160.1.1.s390x",
"product_id": "weechat-0:4.10.0-bp160.1.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:weechat:weechat:4.10.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/weechat@4.10.0-bp160.1.1?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "weechat-devel-0:4.10.0-bp160.1.1.s390x",
"product": {
"name": "weechat-devel-0:4.10.0-bp160.1.1.s390x",
"product_id": "weechat-devel-0:4.10.0-bp160.1.1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/suse/weechat-devel@4.10.0-bp160.1.1?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "weechat-lua-0:4.10.0-bp160.1.1.s390x",
"product": {
"name": "weechat-lua-0:4.10.0-bp160.1.1.s390x",
"product_id": "weechat-lua-0:4.10.0-bp160.1.1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/suse/weechat-lua@4.10.0-bp160.1.1?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "weechat-perl-0:4.10.0-bp160.1.1.s390x",
"product": {
"name": "weechat-perl-0:4.10.0-bp160.1.1.s390x",
"product_id": "weechat-perl-0:4.10.0-bp160.1.1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/suse/weechat-perl@4.10.0-bp160.1.1?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "weechat-python-0:4.10.0-bp160.1.1.s390x",
"product": {
"name": "weechat-python-0:4.10.0-bp160.1.1.s390x",
"product_id": "weechat-python-0:4.10.0-bp160.1.1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/suse/weechat-python@4.10.0-bp160.1.1?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "weechat-ruby-0:4.10.0-bp160.1.1.s390x",
"product": {
"name": "weechat-ruby-0:4.10.0-bp160.1.1.s390x",
"product_id": "weechat-ruby-0:4.10.0-bp160.1.1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/suse/weechat-ruby@4.10.0-bp160.1.1?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "weechat-spell-0:4.10.0-bp160.1.1.s390x",
"product": {
"name": "weechat-spell-0:4.10.0-bp160.1.1.s390x",
"product_id": "weechat-spell-0:4.10.0-bp160.1.1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/suse/weechat-spell@4.10.0-bp160.1.1?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "weechat-tcl-0:4.10.0-bp160.1.1.s390x",
"product": {
"name": "weechat-tcl-0:4.10.0-bp160.1.1.s390x",
"product_id": "weechat-tcl-0:4.10.0-bp160.1.1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/suse/weechat-tcl@4.10.0-bp160.1.1?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "weechat-0:4.10.0-bp160.1.1.x86_64",
"product": {
"name": "weechat-0:4.10.0-bp160.1.1.x86_64",
"product_id": "weechat-0:4.10.0-bp160.1.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:weechat:weechat:4.10.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/weechat@4.10.0-bp160.1.1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "weechat-devel-0:4.10.0-bp160.1.1.x86_64",
"product": {
"name": "weechat-devel-0:4.10.0-bp160.1.1.x86_64",
"product_id": "weechat-devel-0:4.10.0-bp160.1.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/weechat-devel@4.10.0-bp160.1.1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "weechat-lua-0:4.10.0-bp160.1.1.x86_64",
"product": {
"name": "weechat-lua-0:4.10.0-bp160.1.1.x86_64",
"product_id": "weechat-lua-0:4.10.0-bp160.1.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/weechat-lua@4.10.0-bp160.1.1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "weechat-perl-0:4.10.0-bp160.1.1.x86_64",
"product": {
"name": "weechat-perl-0:4.10.0-bp160.1.1.x86_64",
"product_id": "weechat-perl-0:4.10.0-bp160.1.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/weechat-perl@4.10.0-bp160.1.1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "weechat-python-0:4.10.0-bp160.1.1.x86_64",
"product": {
"name": "weechat-python-0:4.10.0-bp160.1.1.x86_64",
"product_id": "weechat-python-0:4.10.0-bp160.1.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/weechat-python@4.10.0-bp160.1.1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "weechat-ruby-0:4.10.0-bp160.1.1.x86_64",
"product": {
"name": "weechat-ruby-0:4.10.0-bp160.1.1.x86_64",
"product_id": "weechat-ruby-0:4.10.0-bp160.1.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/weechat-ruby@4.10.0-bp160.1.1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "weechat-spell-0:4.10.0-bp160.1.1.x86_64",
"product": {
"name": "weechat-spell-0:4.10.0-bp160.1.1.x86_64",
"product_id": "weechat-spell-0:4.10.0-bp160.1.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/weechat-spell@4.10.0-bp160.1.1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "weechat-tcl-0:4.10.0-bp160.1.1.x86_64",
"product": {
"name": "weechat-tcl-0:4.10.0-bp160.1.1.x86_64",
"product_id": "weechat-tcl-0:4.10.0-bp160.1.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/weechat-tcl@4.10.0-bp160.1.1?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Leap 16.0",
"product": {
"name": "openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0"
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "weechat-0:4.10.0-bp160.1.1.aarch64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:weechat-0:4.10.0-bp160.1.1.aarch64"
},
"product_reference": "weechat-0:4.10.0-bp160.1.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "weechat-0:4.10.0-bp160.1.1.ppc64le as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:weechat-0:4.10.0-bp160.1.1.ppc64le"
},
"product_reference": "weechat-0:4.10.0-bp160.1.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "weechat-0:4.10.0-bp160.1.1.s390x as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:weechat-0:4.10.0-bp160.1.1.s390x"
},
"product_reference": "weechat-0:4.10.0-bp160.1.1.s390x",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "weechat-0:4.10.0-bp160.1.1.x86_64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:weechat-0:4.10.0-bp160.1.1.x86_64"
},
"product_reference": "weechat-0:4.10.0-bp160.1.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "weechat-devel-0:4.10.0-bp160.1.1.aarch64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:weechat-devel-0:4.10.0-bp160.1.1.aarch64"
},
"product_reference": "weechat-devel-0:4.10.0-bp160.1.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "weechat-devel-0:4.10.0-bp160.1.1.ppc64le as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:weechat-devel-0:4.10.0-bp160.1.1.ppc64le"
},
"product_reference": "weechat-devel-0:4.10.0-bp160.1.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "weechat-devel-0:4.10.0-bp160.1.1.s390x as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:weechat-devel-0:4.10.0-bp160.1.1.s390x"
},
"product_reference": "weechat-devel-0:4.10.0-bp160.1.1.s390x",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "weechat-devel-0:4.10.0-bp160.1.1.x86_64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:weechat-devel-0:4.10.0-bp160.1.1.x86_64"
},
"product_reference": "weechat-devel-0:4.10.0-bp160.1.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "weechat-lang-0:4.10.0-bp160.1.1.noarch as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:weechat-lang-0:4.10.0-bp160.1.1.noarch"
},
"product_reference": "weechat-lang-0:4.10.0-bp160.1.1.noarch",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "weechat-lua-0:4.10.0-bp160.1.1.aarch64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:weechat-lua-0:4.10.0-bp160.1.1.aarch64"
},
"product_reference": "weechat-lua-0:4.10.0-bp160.1.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "weechat-lua-0:4.10.0-bp160.1.1.ppc64le as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:weechat-lua-0:4.10.0-bp160.1.1.ppc64le"
},
"product_reference": "weechat-lua-0:4.10.0-bp160.1.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "weechat-lua-0:4.10.0-bp160.1.1.s390x as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:weechat-lua-0:4.10.0-bp160.1.1.s390x"
},
"product_reference": "weechat-lua-0:4.10.0-bp160.1.1.s390x",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "weechat-lua-0:4.10.0-bp160.1.1.x86_64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:weechat-lua-0:4.10.0-bp160.1.1.x86_64"
},
"product_reference": "weechat-lua-0:4.10.0-bp160.1.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "weechat-perl-0:4.10.0-bp160.1.1.aarch64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:weechat-perl-0:4.10.0-bp160.1.1.aarch64"
},
"product_reference": "weechat-perl-0:4.10.0-bp160.1.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "weechat-perl-0:4.10.0-bp160.1.1.ppc64le as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:weechat-perl-0:4.10.0-bp160.1.1.ppc64le"
},
"product_reference": "weechat-perl-0:4.10.0-bp160.1.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "weechat-perl-0:4.10.0-bp160.1.1.s390x as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:weechat-perl-0:4.10.0-bp160.1.1.s390x"
},
"product_reference": "weechat-perl-0:4.10.0-bp160.1.1.s390x",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "weechat-perl-0:4.10.0-bp160.1.1.x86_64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:weechat-perl-0:4.10.0-bp160.1.1.x86_64"
},
"product_reference": "weechat-perl-0:4.10.0-bp160.1.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "weechat-python-0:4.10.0-bp160.1.1.aarch64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:weechat-python-0:4.10.0-bp160.1.1.aarch64"
},
"product_reference": "weechat-python-0:4.10.0-bp160.1.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "weechat-python-0:4.10.0-bp160.1.1.ppc64le as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:weechat-python-0:4.10.0-bp160.1.1.ppc64le"
},
"product_reference": "weechat-python-0:4.10.0-bp160.1.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "weechat-python-0:4.10.0-bp160.1.1.s390x as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:weechat-python-0:4.10.0-bp160.1.1.s390x"
},
"product_reference": "weechat-python-0:4.10.0-bp160.1.1.s390x",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "weechat-python-0:4.10.0-bp160.1.1.x86_64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:weechat-python-0:4.10.0-bp160.1.1.x86_64"
},
"product_reference": "weechat-python-0:4.10.0-bp160.1.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "weechat-ruby-0:4.10.0-bp160.1.1.aarch64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:weechat-ruby-0:4.10.0-bp160.1.1.aarch64"
},
"product_reference": "weechat-ruby-0:4.10.0-bp160.1.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "weechat-ruby-0:4.10.0-bp160.1.1.ppc64le as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:weechat-ruby-0:4.10.0-bp160.1.1.ppc64le"
},
"product_reference": "weechat-ruby-0:4.10.0-bp160.1.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "weechat-ruby-0:4.10.0-bp160.1.1.s390x as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:weechat-ruby-0:4.10.0-bp160.1.1.s390x"
},
"product_reference": "weechat-ruby-0:4.10.0-bp160.1.1.s390x",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "weechat-ruby-0:4.10.0-bp160.1.1.x86_64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:weechat-ruby-0:4.10.0-bp160.1.1.x86_64"
},
"product_reference": "weechat-ruby-0:4.10.0-bp160.1.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "weechat-spell-0:4.10.0-bp160.1.1.aarch64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:weechat-spell-0:4.10.0-bp160.1.1.aarch64"
},
"product_reference": "weechat-spell-0:4.10.0-bp160.1.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "weechat-spell-0:4.10.0-bp160.1.1.ppc64le as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:weechat-spell-0:4.10.0-bp160.1.1.ppc64le"
},
"product_reference": "weechat-spell-0:4.10.0-bp160.1.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "weechat-spell-0:4.10.0-bp160.1.1.s390x as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:weechat-spell-0:4.10.0-bp160.1.1.s390x"
},
"product_reference": "weechat-spell-0:4.10.0-bp160.1.1.s390x",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "weechat-spell-0:4.10.0-bp160.1.1.x86_64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:weechat-spell-0:4.10.0-bp160.1.1.x86_64"
},
"product_reference": "weechat-spell-0:4.10.0-bp160.1.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "weechat-tcl-0:4.10.0-bp160.1.1.aarch64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:weechat-tcl-0:4.10.0-bp160.1.1.aarch64"
},
"product_reference": "weechat-tcl-0:4.10.0-bp160.1.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "weechat-tcl-0:4.10.0-bp160.1.1.ppc64le as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:weechat-tcl-0:4.10.0-bp160.1.1.ppc64le"
},
"product_reference": "weechat-tcl-0:4.10.0-bp160.1.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "weechat-tcl-0:4.10.0-bp160.1.1.s390x as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:weechat-tcl-0:4.10.0-bp160.1.1.s390x"
},
"product_reference": "weechat-tcl-0:4.10.0-bp160.1.1.s390x",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "weechat-tcl-0:4.10.0-bp160.1.1.x86_64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:weechat-tcl-0:4.10.0-bp160.1.1.x86_64"
},
"product_reference": "weechat-tcl-0:4.10.0-bp160.1.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 16.0"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-53524",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-53524"
}
],
"notes": [
{
"category": "general",
"text": "WeeChat (Wee Enhanced Environment for Chat) is a free chat client. In versions 4.3.0 through 4.9.0, the WeeChat relay module\u0027s WebSocket permessage-deflate decompression function relay_websocket_inflate() has no upper bound on output size. An authenticated relay user can send a small compressed WebSocket frame (~100 bytes) that decompresses to gigabytes, exhausting all server memory and crashing the entire WeeChat process. The api protocol enables permessage-deflate and requires authentication before WebSocket upgrade. Version 4.9.1 patches the issue.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:weechat-0:4.10.0-bp160.1.1.aarch64",
"openSUSE Leap 16.0:weechat-0:4.10.0-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:weechat-0:4.10.0-bp160.1.1.s390x",
"openSUSE Leap 16.0:weechat-0:4.10.0-bp160.1.1.x86_64",
"openSUSE Leap 16.0:weechat-devel-0:4.10.0-bp160.1.1.aarch64",
"openSUSE Leap 16.0:weechat-devel-0:4.10.0-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:weechat-devel-0:4.10.0-bp160.1.1.s390x",
"openSUSE Leap 16.0:weechat-devel-0:4.10.0-bp160.1.1.x86_64",
"openSUSE Leap 16.0:weechat-lang-0:4.10.0-bp160.1.1.noarch",
"openSUSE Leap 16.0:weechat-lua-0:4.10.0-bp160.1.1.aarch64",
"openSUSE Leap 16.0:weechat-lua-0:4.10.0-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:weechat-lua-0:4.10.0-bp160.1.1.s390x",
"openSUSE Leap 16.0:weechat-lua-0:4.10.0-bp160.1.1.x86_64",
"openSUSE Leap 16.0:weechat-perl-0:4.10.0-bp160.1.1.aarch64",
"openSUSE Leap 16.0:weechat-perl-0:4.10.0-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:weechat-perl-0:4.10.0-bp160.1.1.s390x",
"openSUSE Leap 16.0:weechat-perl-0:4.10.0-bp160.1.1.x86_64",
"openSUSE Leap 16.0:weechat-python-0:4.10.0-bp160.1.1.aarch64",
"openSUSE Leap 16.0:weechat-python-0:4.10.0-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:weechat-python-0:4.10.0-bp160.1.1.s390x",
"openSUSE Leap 16.0:weechat-python-0:4.10.0-bp160.1.1.x86_64",
"openSUSE Leap 16.0:weechat-ruby-0:4.10.0-bp160.1.1.aarch64",
"openSUSE Leap 16.0:weechat-ruby-0:4.10.0-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:weechat-ruby-0:4.10.0-bp160.1.1.s390x",
"openSUSE Leap 16.0:weechat-ruby-0:4.10.0-bp160.1.1.x86_64",
"openSUSE Leap 16.0:weechat-spell-0:4.10.0-bp160.1.1.aarch64",
"openSUSE Leap 16.0:weechat-spell-0:4.10.0-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:weechat-spell-0:4.10.0-bp160.1.1.s390x",
"openSUSE Leap 16.0:weechat-spell-0:4.10.0-bp160.1.1.x86_64",
"openSUSE Leap 16.0:weechat-tcl-0:4.10.0-bp160.1.1.aarch64",
"openSUSE Leap 16.0:weechat-tcl-0:4.10.0-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:weechat-tcl-0:4.10.0-bp160.1.1.s390x",
"openSUSE Leap 16.0:weechat-tcl-0:4.10.0-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-53524",
"url": "https://www.suse.com/security/cve/CVE-2026-53524"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:weechat-0:4.10.0-bp160.1.1.aarch64",
"openSUSE Leap 16.0:weechat-0:4.10.0-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:weechat-0:4.10.0-bp160.1.1.s390x",
"openSUSE Leap 16.0:weechat-0:4.10.0-bp160.1.1.x86_64",
"openSUSE Leap 16.0:weechat-devel-0:4.10.0-bp160.1.1.aarch64",
"openSUSE Leap 16.0:weechat-devel-0:4.10.0-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:weechat-devel-0:4.10.0-bp160.1.1.s390x",
"openSUSE Leap 16.0:weechat-devel-0:4.10.0-bp160.1.1.x86_64",
"openSUSE Leap 16.0:weechat-lang-0:4.10.0-bp160.1.1.noarch",
"openSUSE Leap 16.0:weechat-lua-0:4.10.0-bp160.1.1.aarch64",
"openSUSE Leap 16.0:weechat-lua-0:4.10.0-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:weechat-lua-0:4.10.0-bp160.1.1.s390x",
"openSUSE Leap 16.0:weechat-lua-0:4.10.0-bp160.1.1.x86_64",
"openSUSE Leap 16.0:weechat-perl-0:4.10.0-bp160.1.1.aarch64",
"openSUSE Leap 16.0:weechat-perl-0:4.10.0-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:weechat-perl-0:4.10.0-bp160.1.1.s390x",
"openSUSE Leap 16.0:weechat-perl-0:4.10.0-bp160.1.1.x86_64",
"openSUSE Leap 16.0:weechat-python-0:4.10.0-bp160.1.1.aarch64",
"openSUSE Leap 16.0:weechat-python-0:4.10.0-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:weechat-python-0:4.10.0-bp160.1.1.s390x",
"openSUSE Leap 16.0:weechat-python-0:4.10.0-bp160.1.1.x86_64",
"openSUSE Leap 16.0:weechat-ruby-0:4.10.0-bp160.1.1.aarch64",
"openSUSE Leap 16.0:weechat-ruby-0:4.10.0-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:weechat-ruby-0:4.10.0-bp160.1.1.s390x",
"openSUSE Leap 16.0:weechat-ruby-0:4.10.0-bp160.1.1.x86_64",
"openSUSE Leap 16.0:weechat-spell-0:4.10.0-bp160.1.1.aarch64",
"openSUSE Leap 16.0:weechat-spell-0:4.10.0-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:weechat-spell-0:4.10.0-bp160.1.1.s390x",
"openSUSE Leap 16.0:weechat-spell-0:4.10.0-bp160.1.1.x86_64",
"openSUSE Leap 16.0:weechat-tcl-0:4.10.0-bp160.1.1.aarch64",
"openSUSE Leap 16.0:weechat-tcl-0:4.10.0-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:weechat-tcl-0:4.10.0-bp160.1.1.s390x",
"openSUSE Leap 16.0:weechat-tcl-0:4.10.0-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-20T16:20:15Z",
"details": "moderate"
}
],
"title": "CVE-2026-53524"
},
{
"cve": "CVE-2026-53525",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-53525"
}
],
"notes": [
{
"category": "general",
"text": "WeeChat (Wee Enhanced Environment for Chat) is a free chat client. In versions 0.3.1 through 4.9.0, the WeeChat relay authentication uses non-constant-time string comparison functions (weechat_strcasecmp and strcmp) to verify password hashes and plaintext passwords. An attacker can exploit timing differences to extract the server-computed hash character by character, then authenticate using the correct hash without knowing the password. Version 4.9.1 fixes the issue.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:weechat-0:4.10.0-bp160.1.1.aarch64",
"openSUSE Leap 16.0:weechat-0:4.10.0-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:weechat-0:4.10.0-bp160.1.1.s390x",
"openSUSE Leap 16.0:weechat-0:4.10.0-bp160.1.1.x86_64",
"openSUSE Leap 16.0:weechat-devel-0:4.10.0-bp160.1.1.aarch64",
"openSUSE Leap 16.0:weechat-devel-0:4.10.0-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:weechat-devel-0:4.10.0-bp160.1.1.s390x",
"openSUSE Leap 16.0:weechat-devel-0:4.10.0-bp160.1.1.x86_64",
"openSUSE Leap 16.0:weechat-lang-0:4.10.0-bp160.1.1.noarch",
"openSUSE Leap 16.0:weechat-lua-0:4.10.0-bp160.1.1.aarch64",
"openSUSE Leap 16.0:weechat-lua-0:4.10.0-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:weechat-lua-0:4.10.0-bp160.1.1.s390x",
"openSUSE Leap 16.0:weechat-lua-0:4.10.0-bp160.1.1.x86_64",
"openSUSE Leap 16.0:weechat-perl-0:4.10.0-bp160.1.1.aarch64",
"openSUSE Leap 16.0:weechat-perl-0:4.10.0-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:weechat-perl-0:4.10.0-bp160.1.1.s390x",
"openSUSE Leap 16.0:weechat-perl-0:4.10.0-bp160.1.1.x86_64",
"openSUSE Leap 16.0:weechat-python-0:4.10.0-bp160.1.1.aarch64",
"openSUSE Leap 16.0:weechat-python-0:4.10.0-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:weechat-python-0:4.10.0-bp160.1.1.s390x",
"openSUSE Leap 16.0:weechat-python-0:4.10.0-bp160.1.1.x86_64",
"openSUSE Leap 16.0:weechat-ruby-0:4.10.0-bp160.1.1.aarch64",
"openSUSE Leap 16.0:weechat-ruby-0:4.10.0-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:weechat-ruby-0:4.10.0-bp160.1.1.s390x",
"openSUSE Leap 16.0:weechat-ruby-0:4.10.0-bp160.1.1.x86_64",
"openSUSE Leap 16.0:weechat-spell-0:4.10.0-bp160.1.1.aarch64",
"openSUSE Leap 16.0:weechat-spell-0:4.10.0-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:weechat-spell-0:4.10.0-bp160.1.1.s390x",
"openSUSE Leap 16.0:weechat-spell-0:4.10.0-bp160.1.1.x86_64",
"openSUSE Leap 16.0:weechat-tcl-0:4.10.0-bp160.1.1.aarch64",
"openSUSE Leap 16.0:weechat-tcl-0:4.10.0-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:weechat-tcl-0:4.10.0-bp160.1.1.s390x",
"openSUSE Leap 16.0:weechat-tcl-0:4.10.0-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-53525",
"url": "https://www.suse.com/security/cve/CVE-2026-53525"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:weechat-0:4.10.0-bp160.1.1.aarch64",
"openSUSE Leap 16.0:weechat-0:4.10.0-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:weechat-0:4.10.0-bp160.1.1.s390x",
"openSUSE Leap 16.0:weechat-0:4.10.0-bp160.1.1.x86_64",
"openSUSE Leap 16.0:weechat-devel-0:4.10.0-bp160.1.1.aarch64",
"openSUSE Leap 16.0:weechat-devel-0:4.10.0-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:weechat-devel-0:4.10.0-bp160.1.1.s390x",
"openSUSE Leap 16.0:weechat-devel-0:4.10.0-bp160.1.1.x86_64",
"openSUSE Leap 16.0:weechat-lang-0:4.10.0-bp160.1.1.noarch",
"openSUSE Leap 16.0:weechat-lua-0:4.10.0-bp160.1.1.aarch64",
"openSUSE Leap 16.0:weechat-lua-0:4.10.0-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:weechat-lua-0:4.10.0-bp160.1.1.s390x",
"openSUSE Leap 16.0:weechat-lua-0:4.10.0-bp160.1.1.x86_64",
"openSUSE Leap 16.0:weechat-perl-0:4.10.0-bp160.1.1.aarch64",
"openSUSE Leap 16.0:weechat-perl-0:4.10.0-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:weechat-perl-0:4.10.0-bp160.1.1.s390x",
"openSUSE Leap 16.0:weechat-perl-0:4.10.0-bp160.1.1.x86_64",
"openSUSE Leap 16.0:weechat-python-0:4.10.0-bp160.1.1.aarch64",
"openSUSE Leap 16.0:weechat-python-0:4.10.0-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:weechat-python-0:4.10.0-bp160.1.1.s390x",
"openSUSE Leap 16.0:weechat-python-0:4.10.0-bp160.1.1.x86_64",
"openSUSE Leap 16.0:weechat-ruby-0:4.10.0-bp160.1.1.aarch64",
"openSUSE Leap 16.0:weechat-ruby-0:4.10.0-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:weechat-ruby-0:4.10.0-bp160.1.1.s390x",
"openSUSE Leap 16.0:weechat-ruby-0:4.10.0-bp160.1.1.x86_64",
"openSUSE Leap 16.0:weechat-spell-0:4.10.0-bp160.1.1.aarch64",
"openSUSE Leap 16.0:weechat-spell-0:4.10.0-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:weechat-spell-0:4.10.0-bp160.1.1.s390x",
"openSUSE Leap 16.0:weechat-spell-0:4.10.0-bp160.1.1.x86_64",
"openSUSE Leap 16.0:weechat-tcl-0:4.10.0-bp160.1.1.aarch64",
"openSUSE Leap 16.0:weechat-tcl-0:4.10.0-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:weechat-tcl-0:4.10.0-bp160.1.1.s390x",
"openSUSE Leap 16.0:weechat-tcl-0:4.10.0-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-08-20T16:20:15Z",
"details": "important"
}
],
"title": "CVE-2026-53525"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…