{"id":"openSUSE-SU-2026:22254-1","summary":"Security update for scribus","details":"This update for scribus fixes the following issues:\n\nChanges in scribus:\n\n- Update to 1.6.7\n  * Fixes CVE-2026-104061 / boo#1289047\n  * Fixes CVE-2026-104062 / boo#1289046\n  * Fixes CVE-2026-104063 / boo#1289045\n  * Fixes CVE-2026-104064 / boo#1289044\n  * Fixes CVE-2026-104065 / boo#1289043\n  * Fixes CVE-2026-104066 / boo#1289042\n  * Fixes CVE-2026-104067 / boo#1289041\n  * [Text Frames / Story Editor] Superscript text: the text\n    outline is offset\n  * [Import / Export] Property changes do not affect the text\n    imported from .odt\n  * [Canvas] Rendering of drop shadows is slow (Fahad)\n  * [General] The application freezes when attempting to import\n    'custom shapes'\n  * [Undo/Redo] Deleting a non existent mark causes crash\n  * [General] Preview mode does not hide guides/margins when\n    editing a master page\n  * [General] The bleed area still shows in Preview mode in\n    Master Page editing mode\n  * [Typography] Text formatting (e.g. italic, bold) is not\n    inherited when resuming typing\n  * [General] Failure to build with poppler 26.07.0\n  * [Graphics / Image Frames] Crash with graphicsmagick exception\n  * [General] Failure to build with poppler 26.06.0\n  * [General] Failure to build with poppler 26.05.0\n  * [Fonts] Font \"Helsinki\" causes crash\n\n- Fix failure to build with poppler 26.05.0 (boo#1265939)\n- Change scribus-doc sub-package to noarch.\n\n- Update to 1.6.6\n  * [Scripter] Add get/setImageRotation to Scripter\n  * [Graphics / Image Frames] Lost image links after collect for\n    output\n  * [General] Failure to build with poppler 26.04.0\n  * [General] Failure to build with poppler 26.03.0\n  * [Import / Export] MS Publisher import needs more\n    development: Image scaling\n  * [Plug-ins] Fix bad escape sequences in Python docstring\n  * [General] Failure to build with poppler 26.02.0\n  * [Plug-ins] Color wheel doesn't move to correct color\n  * [PDF] Scribus crashes due to umlaut composition in file names\n    of embedded PDF documents\n\n- Update to 1.6.5\n  * [General]  NTLM hash leak in Scribus\n  * [User Interface]  Dark Color Schema unusable\n  * [Color Management]  Color picker (eyedropper) does not work\n    (always returns \"black\")\n  * [General]  Layer disappears after editing inline object\n    (layer visibility scrambling)\n  * [General]  Failure to build with poppler 25.10.0\n  * [PDF]  Scribus crashes when exporting pdf via python and the\n    document has a PDF-Push-Button or other PDF-thingy\n  * [Build System]  Won't Compile: 'const_key_value_iterator' does\n    not name a type\n  * [Styles]  The line spacing mode drop down is not correctly\n    displayed for styles with a parent\n  * [Build System]  Fails to build with poppler 25.07\n  * [PDF]  Build failure with podofo 1.0\n  * [Scripter]  Undocumented feature in scribus.ImageExport: transparentBckgnd\n  * [Scripter]  Documentation of function getBoundingBox()\n    missing from HTML docs\n  * [Fonts]  Additional Font Path Settings reset\n  * [General]  Crash when loading legacy file produced with\n    Scribus 1.4.6\n  * [Scripter]  Using unknown/misspelled named parameter in API\n    call causes Scribus crash\n  * [Canvas]  Sometimes all items in a document become invisible\n  * [General]  Failure to build with poppler 25.09.0\n  * [General]  Accept negative values for the rotation in the\n    properties palette\n  * [General]  1.6.4 fails to build with popper 25.06.0\n  * [Fonts]  Font rendering different after PDF export\n  * [Printing]  Print Dialog - Inconsistency between output\n    filename extension and printing language\n  * [Printing]  Print Dialog - Crop marks not present in output\n    when they are the only marks selected\n","modified":"2026-11-11T17:23:13.166606451Z","published":"2026-11-04T19:11:46Z","related":["CVE-2026-104061","CVE-2026-104062","CVE-2026-104063","CVE-2026-104064","CVE-2026-104065","CVE-2026-104066","CVE-2026-104067"],"upstream":["CVE-2026-104061","CVE-2026-104062","CVE-2026-104063","CVE-2026-104064","CVE-2026-104065","CVE-2026-104066","CVE-2026-104067"],"references":[{"type":"ADVISORY"},{"type":"REPORT","url":"https://bugzilla.suse.com/1249440"},{"type":"REPORT","url":"https://bugzilla.suse.com/1257664"},{"type":"REPORT","url":"https://bugzilla.suse.com/1265939"},{"type":"REPORT","url":"https://bugzilla.suse.com/1289041"},{"type":"REPORT","url":"https://bugzilla.suse.com/1289042"},{"type":"REPORT","url":"https://bugzilla.suse.com/1289043"},{"type":"REPORT","url":"https://bugzilla.suse.com/1289044"},{"type":"REPORT","url":"https://bugzilla.suse.com/1289045"},{"type":"REPORT","url":"https://bugzilla.suse.com/1289046"},{"type":"REPORT","url":"https://bugzilla.suse.com/1289047"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-104061"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-104062"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-104063"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-104064"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-104065"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-104066"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-104067"}],"affected":[{"package":{"name":"scribus","ecosystem":"openSUSE:Leap 16.0","purl":"pkg:rpm/opensuse/scribus&distro=openSUSE%20Leap%2016.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.7-bp160.1.1"}]}],"ecosystem_specific":{"binaries":[{"scribus-doc":"1.6.7-bp160.1.1","scribus":"1.6.7-bp160.1.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:22254-1.json"}}],"schema_version":"1.9.2"}