openSUSE-SU-2026:22254-1

See a problem?
Import Source
https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:22254-1.json
JSON Data
https://api.osv.dev/v1/vulns/openSUSE-SU-2026:22254-1
Upstream
CVE (7)
Related
Published
2026-11-04T19:11:46Z
Modified
2026-11-11T17:23:13Z
Summary
Security update for scribus
Details

This update for scribus fixes the following issues:

Changes in scribus:

  • Update to 1.6.7

    • Fixes CVE-2026-104061 / boo#1289047
    • Fixes CVE-2026-104062 / boo#1289046
    • Fixes CVE-2026-104063 / boo#1289045
    • Fixes CVE-2026-104064 / boo#1289044
    • Fixes CVE-2026-104065 / boo#1289043
    • Fixes CVE-2026-104066 / boo#1289042
    • Fixes CVE-2026-104067 / boo#1289041
    • [Text Frames / Story Editor] Superscript text: the text outline is offset
    • [Import / Export] Property changes do not affect the text imported from .odt
    • [Canvas] Rendering of drop shadows is slow (Fahad)
    • [General] The application freezes when attempting to import 'custom shapes'
    • [Undo/Redo] Deleting a non existent mark causes crash
    • [General] Preview mode does not hide guides/margins when editing a master page
    • [General] The bleed area still shows in Preview mode in Master Page editing mode
    • [Typography] Text formatting (e.g. italic, bold) is not inherited when resuming typing
    • [General] Failure to build with poppler 26.07.0
    • [Graphics / Image Frames] Crash with graphicsmagick exception
    • [General] Failure to build with poppler 26.06.0
    • [General] Failure to build with poppler 26.05.0
    • [Fonts] Font "Helsinki" causes crash
  • Fix failure to build with poppler 26.05.0 (boo#1265939)

  • Change scribus-doc sub-package to noarch.

  • Update to 1.6.6

    • [Scripter] Add get/setImageRotation to Scripter
    • [Graphics / Image Frames] Lost image links after collect for output
    • [General] Failure to build with poppler 26.04.0
    • [General] Failure to build with poppler 26.03.0
    • [Import / Export] MS Publisher import needs more development: Image scaling
    • [Plug-ins] Fix bad escape sequences in Python docstring
    • [General] Failure to build with poppler 26.02.0
    • [Plug-ins] Color wheel doesn't move to correct color
    • [PDF] Scribus crashes due to umlaut composition in file names of embedded PDF documents
  • Update to 1.6.5

    • [General] NTLM hash leak in Scribus
    • [User Interface] Dark Color Schema unusable
    • [Color Management] Color picker (eyedropper) does not work (always returns "black")
    • [General] Layer disappears after editing inline object (layer visibility scrambling)
    • [General] Failure to build with poppler 25.10.0
    • [PDF] Scribus crashes when exporting pdf via python and the document has a PDF-Push-Button or other PDF-thingy
    • [Build System] Won't Compile: 'const_key_value_iterator' does not name a type
    • [Styles] The line spacing mode drop down is not correctly displayed for styles with a parent
    • [Build System] Fails to build with poppler 25.07
    • [PDF] Build failure with podofo 1.0
    • [Scripter] Undocumented feature in scribus.ImageExport: transparentBckgnd
    • [Scripter] Documentation of function getBoundingBox() missing from HTML docs
    • [Fonts] Additional Font Path Settings reset
    • [General] Crash when loading legacy file produced with Scribus 1.4.6
    • [Scripter] Using unknown/misspelled named parameter in API call causes Scribus crash
    • [Canvas] Sometimes all items in a document become invisible
    • [General] Failure to build with poppler 25.09.0
    • [General] Accept negative values for the rotation in the properties palette
    • [General] 1.6.4 fails to build with popper 25.06.0
    • [Fonts] Font rendering different after PDF export
    • [Printing] Print Dialog - Inconsistency between output filename extension and printing language
    • [Printing] Print Dialog - Crop marks not present in output when they are the only marks selected
References

Affected packages

openSUSE:Leap 16.0 / scribus

Package

Name
scribus
Purl
pkg:rpm/opensuse/scribus&distro=openSUSE%20Leap%2016.0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.6.7-bp160.1.1

Ecosystem specific

{
    "binaries": [
        {
            "scribus": "1.6.7-bp160.1.1",
            "scribus-doc": "1.6.7-bp160.1.1"
        }
    ]
}

Database specific

source
"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:22254-1.json"