openSUSE security update: security update for openbabel
-------------------------------------------------------------
Announcement ID: openSUSE-SU-2026:21190-1
Rating: critical
References:
* bsc#1217676
* bsc#1258501
* bsc#1258507
* bsc#1259041
Cross-References:
* CVE-2022-37331
* CVE-2022-41793
* CVE-2022-42885
* CVE-2022-43467
* CVE-2022-43607
* CVE-2022-44451
* CVE-2022-46280
* CVE-2022-46289
* CVE-2022-46290
* CVE-2022-46291
* CVE-2022-46292
* CVE-2022-46294
* CVE-2022-46295
* CVE-2025-10994
* CVE-2025-10995
* CVE-2025-10996
* CVE-2025-10997
* CVE-2025-10998
* CVE-2025-10999
* CVE-2025-11000
* CVE-2026-2704
* CVE-2026-2705
* CVE-2026-3408
CVSS scores:
* CVE-2025-10994 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
* CVE-2025-10995 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
* CVE-2025-10996 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
* CVE-2025-10997 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
* CVE-2025-10998 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
* CVE-2025-10999 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
Affected Products:
openSUSE Leap 16.0
-------------------------------------------------------------
An update that solves 23 vulnerabilities and has 4 bug fixes can now be installed.
Description:
This update for openbabel fixes the following issues:
Changes in openbabel:
- Update to version 3.2.0:
* Add an L-BFGS optimizer, used by default for gen3d and
conformer searches
* New macrocycle ring builder (Dale codes) for better initial
3D geometry of large rings
* Add KET (Ketcher JSON) and ChemicalJSON (.cjson) format
support
* Drop Python 2 support; Python 3.13 supported
* Faster, vectorized distance-geometry implementation
* Full CMake 4 compatibility and modernized build
* Backwards compatible with 3.0 and 3.1
* Fix many crash and memory-safety bugs found via OSS-Fuzz
and TALOS, including the following security issues:
CVE-2022-37331 (boo#1217676), CVE-2022-41793, CVE-2022-42885,
CVE-2022-43467, CVE-2022-43607, CVE-2022-44451,
CVE-2022-46280, CVE-2022-46289, CVE-2022-46290,
CVE-2022-46291, CVE-2022-46292, CVE-2022-46294,
CVE-2022-46295, CVE-2025-10994, CVE-2025-10995,
CVE-2025-10996, CVE-2025-10997, CVE-2025-10998,
CVE-2025-10999, CVE-2025-11000,
CVE-2026-2704 (boo#1258501), CVE-2026-2705 (boo#1258507) and
CVE-2026-3408 (boo#1259041)
Patch instructions:
To install this openSUSE security update use the suse recommended installation methods
like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
- openSUSE Leap 16.0
zypper in -t patch openSUSE-Leap-16.0-packagehub-385=1
Package List:
- openSUSE Leap 16.0:
libopenbabel8-3.2.0-bp160.1.1
openbabel-3.2.0-bp160.1.1
openbabel-devel-3.2.0-bp160.1.1
openbabel-gui-3.2.0-bp160.1.1
python3-openbabel-3.2.0-bp160.1.1
References:
* https://www.suse.com/security/cve/CVE-2022-37331.html
* https://www.suse.com/security/cve/CVE-2022-41793.html
* https://www.suse.com/security/cve/CVE-2022-42885.html
* https://www.suse.com/security/cve/CVE-2022-43467.html
* https://www.suse.com/security/cve/CVE-2022-43607.html
* https://www.suse.com/security/cve/CVE-2022-44451.html
* https://www.suse.com/security/cve/CVE-2022-46280.html
* https://www.suse.com/security/cve/CVE-2022-46289.html
* https://www.suse.com/security/cve/CVE-2022-46290.html
* https://www.suse.com/security/cve/CVE-2022-46291.html
* https://www.suse.com/security/cve/CVE-2022-46292.html
* https://www.suse.com/security/cve/CVE-2022-46294.html
* https://www.suse.com/security/cve/CVE-2022-46295.html
* https://www.suse.com/security/cve/CVE-2025-10994.html
* https://www.suse.com/security/cve/CVE-2025-10995.html
* https://www.suse.com/security/cve/CVE-2025-10996.html
* https://www.suse.com/security/cve/CVE-2025-10997.html
* https://www.suse.com/security/cve/CVE-2025-10998.html
* https://www.suse.com/security/cve/CVE-2025-10999.html
* https://www.suse.com/security/cve/CVE-2025-11000.html
* https://www.suse.com/security/cve/CVE-2026-2704.html
* https://www.suse.com/security/cve/CVE-2026-2705.html
* https://www.suse.com/security/cve/CVE-2026-3408.html
lmpx.com only provides a reader for public news (NNTP) servers. It is not
affiliated with the servers or forums shown here and is not responsible for
the content of articles, which is written by their respective authors.