An update that solves one vulnerability and has one bug fix can now be installed.. openSUSE security update: security update for loupe ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21074-1 Rating: low References: * bsc#1249009 Cross-References: * CVE-2025-58160 CVSS scores: * CVE-2025-58160 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N * CVE-2025-58160 ( SUSE ): 2.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N Affected Products: openSUSE Leap 16.0 ------------------------------------------------------------- An update that solves one vulnerability and has one bug fix can now be installed. Description: This update for loupe fixes the following issue - CVE-2025-58160: tracing-subscriber: untrusted input containing ANSI escape sequences can lead to terminal manipulation (bsc#1249009). Changes for loupe: - Update to version 48.2: - Check if the is-hidden property is available before reading it. - Considerably increased speed for listing other images in folders, especially for remote locations. This allows for switching to other images to become available much quicker. - Fix panics, probably occuring when using an action like 'copy', and then closing the window. The crash causes all other windows to close. - The creation date for images that don't provide a timezone was displayed as if the recorded date and time was in UTC. - Zooming in would not work via the zoom menu, if the resulting zoom state would still fit the image inside the window. - Update to version 48.1: - Crash when closing the window, probably in the exact moment when the animnation for hiding controls starts. - Editing does not work correctly if PNGs or JPEGs are already rotated via an Exif orientation entry before editing. - Printed pages don't contain anything or garbled output. This is a temporary workaround for , using the cairo renderer for the rotation and scaling of the image in the printpreparation. Patch instructions: To install this openSUSE security update use the suse recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 16.0 zypper in -t patch openSUSE-Leap-16.0-1096=1 Package List: - openSUSE Leap 16.0: loupe-48.2-160000.1.1 loupe-lang-48.2-160000.1.1 References: * https://www.suse.com/security/cve/CVE-2025-58160.html . An openSUSE security update for Loupe addresses a critical issue by providing crucial fixes and improvements.. openSUSE update, loupe security, tracing subscriber, terminal manipulation, CVE-2025-58160. . Severity: Low. LinuxSecurity.com Team
Get the latest Linux and open source security news straight to your inbox.