openSUSE-SU-2026:22255-1

See a problem?
Import Source
https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:22255-1.json
JSON Data
https://api.test.osv.dev/v1/vulns/openSUSE-SU-2026:22255-1
Upstream
CVE (2)
Related
Published
2026-11-04T19:09:37Z
Modified
2026-11-11T17:23:13Z
Summary
Security update for gnome-podcasts
Details

This update for gnome-podcasts fixes the following issues:

Changes in gnome-podcasts:

  • Update vendor dependencies (bsc#1274520 bsc#1285866 CVE-2026-25541 CVE-2026-63430)

  • Migrate to xz compression and manual service run

  • Update to version 0.7.1:

    • Fixed screenshot link.
  • Changes from version 0.7.0:

    • Added:
      • Replace add button popover with dedicated page.
      • discovery: add a spinner on the search result subscribe button.
      • feed_manager: add a locked feed refresh manager
      • app: add additional keyboard shortcuts.
      • episode_description: add stream/download/play/delete buttons.
    • Changed:
      • podcasts-gtk: player: replace "mpris_player" with "mpris_server"
      • gtk: Create the widgets in the background before inserting them.
      • lazy_load: Improve the loading of widgets.
      • Use newer libadwaita 1.4 widgets.
    • Fixed:
      • data: Don't identify episodes by their title when they have a guid.
      • player_toolbar: request a minimum width.
References

Affected packages

openSUSE:Leap 16.0 / gnome-podcasts

Package

Name
gnome-podcasts
Purl
pkg:rpm/opensuse/gnome-podcasts&distro=openSUSE%20Leap%2016.0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0.7.1-bp160.1.1

Ecosystem specific

{
    "binaries": [
        {
            "gnome-podcasts": "0.7.1-bp160.1.1",
            "gnome-podcasts-lang": "0.7.1-bp160.1.1"
        }
    ]
}

Database specific

source
"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:22255-1.json"