p PatchFirst

ALSA-2026:86841

ALSA-2026:86841 · Important: librsvg2 security update

This page contains facts from public vulnerability sources. Check the original advisory before updating.

The librsvg2 packages provide a Scalable Vector Graphics (SVG) library based on the libart library. Security Fix(es): * librsvg: Use-after-free when XML includes have duplicated entities (CVE-2026-96889,RUSTSEC-2026-0305) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Fix available

Published
Updated

Stack: system

Affected products and versions

  • librsvg2 AlmaLinux:10

    Affected ranges
    • ECOSYSTEM: < 2.57.1-9.el10_2.10

    Update to 2.57.1-9.el10_2.10

  • librsvg2-devel AlmaLinux:10

    Affected ranges
    • ECOSYSTEM: < 2.57.1-9.el10_2.10

    Update to 2.57.1-9.el10_2.10

  • librsvg2-tools AlmaLinux:10

    Affected ranges
    • ECOSYSTEM: < 2.57.1-9.el10_2.10

    Update to 2.57.1-9.el10_2.10

  • rsvg-pixbuf-loader AlmaLinux:10

    Affected ranges
    • ECOSYSTEM: < 2.57.1-9.el10_2.10

    Update to 2.57.1-9.el10_2.10

Original sources

Check your server →