This update for gleam fixes the following issues:
Changes in gleam:
- Update to 1.17.0:
* Fixed security vulnerabilities:
- Restrict custom documentation page `path` and `source` values so
`gleam docs build` cannot escape the docs output directory or project
root (bsc#1267396, CVE-2026-32685)
- Restrict publication tarball creation so they cannot contain files
from outside the project root (bsc#1267397, CVE-2026-42795)
- Stricter deserialisation rules for files internal the build directory
to reject corrupted data (bsc#1267398, CVE-2026-43965)
* All features and bug fixes are extensively highlighted with
examples in the upstream blog post at
https://gleam.run/news/single-file-gleam-beam-programs-with-escript/
and changelog at
https://github.com/gleam-lang/gleam/blob/v1.17.0/CHANGELOG.md some of
the highlights include:
- Various JavaScript code generation fixes and optimization
- Various compiler error handling...
Read the Full Advisory- openSUSE Leap 16.0:
gleam-1.17.0-bp160.1.1
* bsc#1267396
* bsc#1267397
* bsc#1267398
References:
* https://www.suse.com/security/cve/CVE-2026-32685.html
* https://www.suse.com/security/cve/CVE-2026-42795.html
* https://www.suse.com/security/cve/CVE-2026-43965.html
Get the latest Linux and open source security news straight to your inbox.