Scribus has released two updates, version 1.6.7 for the stable branch and 1.7.4 for development, both addressing seven memory-safety vulnerabilities that could lead to crashes or arbitrary code execution when loading specific image file types. The 1.7.4 update also introduces a significant overhaul of the table editing feature, making it more user-friendly and similar to word processors and spreadsheets, along with improvements for right-to-left text rendering. Both releases were made available simultaneously, showcasing a coordinated security response and emphasizing the importance of updating to protect users from potential exploits. Scribus continues to be a leading free and open-source alternative for desktop publishing, with ongoing developments aimed at modernizing the software ahead of the anticipated 1.8 stable release

Scribus 1.6.7 and 1.7.4 Ship Security Fixes and Long-Awaited Tables Overhaul

Scribus released two updates on the same day: 1.6.7 for the stable branch and 1.7.4 for development, both patched against the same seven memory-safety CVEs. The flaws live in the code that loads PSD, PICT, TIFF, DRW, and SVM files and could let a crafted image cause crashes or even arbitrary code execution. The 1.7.4 release additionally carries the long-criticized tables overhaul, right-to-left text improvements, and other features headed for the 1.8 stable release. All fixes came from responsible disclosure by Tristan Madani of Talence Security, and both builds are now available free under the GPL.

Scribus 1.6.7 and 1.7.4 Ship Security Fixes and Long-Awaited Tables Overhaul @ Linux Compatible