openSUSE maintained packages not affected, shipping newer version. Tumbleweed fixed in 2017. Fix included in Flatpak will be defense in depth.