Software-update: Scribus 1.6.7

Versies 1.6.7 van Scribus is uitgekomen. Ook in de 1.7-ontwikkeltak is een nieuwe uitgave verschenen. Scribus is een open source programma voor desktoppublishing. Het programma kan gebruikt worden voor het opmaken en bewerken van documenten voor onder meer drukwerk, die vervolgens als pdf of PostScript-document opgeslagen kunnen worden. Voor meer informatie over Scribus verwijzen we naar de wiki. De changelog voor deze uitgave kan hieronder worden gevonden.

Scribus 1.6.7 Released

The Scribus Team is pleased to announce the release of version 1.6.7. This is a bugfix release with the following changes. This release fixes seven security vulnerabilities in Scribus’s image loaders and import filters, along with several crashes, a macOS preferences issue, and a range of text, canvas and display bugs. It also keeps Scribus building against the latest poppler releases. All users of 1.6.x are strongly encouraged to upgrade, particularly anyone who opens image or vector files from untrusted sources.

Security

Seven memory-safety vulnerabilities have been fixed in the loaders that read PSD, PICT, TIFF, DRW and SVM files. A specially crafted file in any of these formats could cause Scribus to read or write outside allocated memory when placed in an image frame or imported, leading to a crash or potentially worse. Each loader now validates the dimensions and offsets it reads from the file before using them.

• CVE-2026-104061 – PSD: out-of-bounds read from a static array, leading to a heap write
• CVE-2026-104062 – PICT: heap overflow in the pixmap loader when the stored bytes-per-line does not match the image width
• CVE-2026-104063 – PICT: out-of-bounds read of planar image data
• CVE-2026-104064 – TIFF: integer overflow in the tile buffer size calculation, leading to an out-of-bounds write
• CVE-2026-104065 – DRW: out-of-bounds scanline access through an unvalidated vertical offset
• CVE-2026-104066 – PICT: heap overflow when unpacking 4-bit indexed images
• CVE-2026-104067 – SVM: out-of-bounds access when image and mask dimensions differ

Stability

• Fixed a crash when an exception was raised by GraphicsMagick while loading an image
• Fixed a crash caused by the font “Helsinki”
• Fixed a crash when undoing or redoing the deletion of a mark that no longer exists
• Fixed Scribus freezing when importing custom shapes

Text & Typography

• Character formatting such as bold or italic is now carried over when resuming typing after a formatted run
• Superscript text with the Outline effect enabled no longer draws the outline offset from the glyphs
• Multiple consecutive soft hyphens can no longer be inserted
• Property changes are now applied to text imported from OpenDocument (.odt) files

Canvas & Display

• Drop shadows render considerably faster
• Scrolling or zooming no longer leaves stale cursor markers on the rulers
• Preview mode now hides guides and margins while editing a master page
• Preview mode now hides the bleed area while editing a master page

User Interface

• The Ctrl++ zoom-in shortcut now works as expected

macOS

• Starting Scribus with --prefs <dir> no longer moves the existing Scribus 1.5/1.6 preference files out of the default profile location
• Fixed a link failure when building with WANT_GRAPHICSMAGICK where GraphicsMagick is not installed in a default linker path

Build System & Compatibility

• Scribus now builds against newer releases of poppler

Versienummer	1.6.7
Releasestatus	Final
Besturingssystemen	Linux, BSD, macOS, Windows 10, Windows 11
Website	Scribus
Download	https://www.scribus.net/downloads
Licentietype	GPL