ALSA-2026:86921
ALSA-2026:86921 · Important: librsvg2 security update
This page contains facts from public vulnerability sources. Check the original advisory before updating.
The librsvg2 packages provide a Scalable Vector Graphics (SVG) library based on the libart library. Security Fix(es): * librsvg: Use-after-free when XML includes have duplicated entities (CVE-2026-96889,RUSTSEC-2026-0305) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fix available
- Published
- Updated
Stack: system
Affected products and versions
librsvg2 AlmaLinux:9
- Affected ranges
- ECOSYSTEM: < 2.50.7-3.el9_8.1
Update to 2.50.7-3.el9_8.1
librsvg2-devel AlmaLinux:9
- Affected ranges
- ECOSYSTEM: < 2.50.7-3.el9_8.1
Update to 2.50.7-3.el9_8.1
librsvg2-tools AlmaLinux:9
- Affected ranges
- ECOSYSTEM: < 2.50.7-3.el9_8.1
Update to 2.50.7-3.el9_8.1