CVE-2026-78136

chirpmyradio CHIRP before 39178db allows eval injection via crafted CSV data. This occurs in _clean_tmode in drivers/kenwood_itm.py.

chirpmyradio CHIRP before 39178db allows eval injection via crafted CSV data. This occurs in _clean_tmode in drivers/kenwood_itm.py.

chirpmyradio CHIRP before 39178db allows eval injection via crafted CSV data. This occurs in _clean_tmode in drivers/kenwood_itm.py.

chirpmyradio CHIRP before 39178db allows eval injection via crafted CSV data. This occurs in _clean_tmode in drivers/kenwood_itm.py.

chirpmyradio CHIRP before 39178db allows eval injection via crafted CSV data. This occurs in _clean_tmode in drivers/kenwood_itm.py.

CHIRP — Arbitrary Code Execution via eval() in Kenwood ITM Driver

These are all security issues fixed in the chirp-20260911-1.1 package on the GA media of openSUSE Tumbleweed.

This update for chirp fixes the following issues:

Changes in chirp:

• Update to version 20260911:

  • ftm300d: Experimental Yaesu FTM-300DR driver
  • Update Ukrainian localization
  • ar8200: Fix importing memories with AM mode
  • Unify Baofeng setting descriptions across drivers
  • Add Yaesu FT5D
  • uvb5: Fix Reverse setting

• Update to version 20260904:

  • Fix RB28/RB628 tone and DTCS index mapping
  • Retevis RB28/RB628: Fix Busy Channel Lockout display
  • various bug fixes

• Update to version 20260821:

  • Add Kenwood NX-800 driver
  • CVE-2026-78136: kenwood_itm: Fix DCS parsing (boo#1280123)
  • tmd710: various bug fixes
  • Add TK-3180E support
  • tk8180: various updates
  • Support Shift+F10 convention for context menu in memedit
  • Add Baofeng BF-T20, BF-T20FRS setting descriptions
  • Add QYT KT-8900 setting documentation
  • Add user-friendly Baofeng UV-5R setting descriptions

• Update to version 20260626:

  • uvk5_egzumer: Fix battery_text and mic_bar never being saved
  • Fix open filter translated string

• Update to version 20260619:

  • Add Baofeng BF-5RH as alias of UV-5RH
  • locale: Added Czech translation
  • generic_csv: Fix ImmutableValueError when exporting special memories

• Update to version 20260612:

  • Add test image for Bajeton BJ7800
  • Update RT-920 test image for FM,AM & HF memories
  • Add new model Bajeton BJ7800 as a sub-class of RT-920

• Update to version 20260605:

  • Update boot, zone, scan and alarm channels on channel deletion
  • Add GM-15Pro extended UHF range

• Update to version 20260529:

  • Fix RT-900 non-BT, increase to 999 channels.
  • Fix escape character in log message for UV-5R Mini

• Update to version 20260522:

  • tdh8: Fix loading out-of-range group code values
  • baofeng_uv17Pro: Fix uploading over BLE for supported models
  • Add BLE serial detection
  • mp31: Add support for Baofeng MP31

• Update to version 20260515:

  • ha2: Fix defaulting empty memories to sane values

• Update to version 20260508:

  • Don't complain about incompatible tones on import if no tone mode selected
  • ic2730: Add IC-2730E (European variant) support
  • ar8200: Add new driver for AOR AR8200
  • Updated Italian Translation

• Update to version 20260501:

  • tdh8: Fix VFO A/B BCL setting not reading properly
  • tdh8: Add offset dir in VFO settings and fix VFO TX freq
  • h777v4: Fix detected models

• Update to version 20260425:

  • Use common "no response" exception in drivers
  • vx150: Add driver for Vertex Standard VX-150
  • Update 935 and XS20 power handling
  • Fix 935/XS20 new channel creation
  • Fix exporting DV memories from RepeaterBook to CSV
  • TK7162: add initial support
  • tk8160: Fix upload clobbering memory
  • tk8160: Cleanup key definitions

• Update to version 20260417:

  • Add Wouxun XS20 series channel memory support
  • Wouxun 935/8h series extra memory settings
  • TK-372G correct variants and names
  • Add BF-V12D support
  • Improve cache performance for RepeaterBook queries
  • Improve reliability of network source requests and bug reports
  • radtel_rt900: Fix flake8 E501 line too long in FHSS Code setting
  • radtel_rt900: Fix FHSS Code init crash on out-of-range image values
  • radtel_rt900: Expose FHSS Code per-channel setting
  • radtel_rt900: Expose LearnFHSS per-channel setting

• Update to version 20260410:

  • Fix RB query for non-NA countries when translated
  • Update Turkish translation
  • Update Japanese translations
  • vx8: Fix 6.25kHz step channels being off frequency

• Update to version 20260403:

  • Add common KenwoodToneModel and move a number of supported modeels to it
  • Add Baofeng UV-5RM Plus

• Update to version 20260327:

  • Add Retevis C2 driver
  • Add Radioddity GS-10B
  • Updated Italian Translation
  • repeaterbook: Fix query parameters for RoW countries
  • Squash error about "unsure if rtone is valid"

• Update to version 20260320:

  • Fix hiding Tone column on radios that support no tones
  • Add…