shield Security update for librsvg

SUSE-SLE-Micro-5.5-2025-4411

This update for librsvg fixes the following issues: Update to version 2.52.12. - CVE-2024-12224: idna: incorrect hostname comparisons and URL parsing may be performed due to acceptance of Punycode labels that do not produce any non-ASCII output when decoded (bsc#1243867). - CVE-2024-43806: rustix: unbounded memory explosion leading to an application OOM crash when using the `rustix::fs::Dir` iterator with the `linux_raw` backend (bsc#1229950).

• Release Date
  Dec 16 2025
• References
  Bugzilla: 1229950, 1243867
  CVEs: CVE-2024-12224, CVE-2024-43806
• Type
  security
• Severity
  moderate

cloud_download Downloads

SUSE Linux Enterprise Micro 5.5 ppc64le

• Packages
  gdk-pixbuf-loader-rsvg
  A gdk-pixbuf loader for SVG using librsvg

  2.52.12-150400.3.9.1 lock rpm

  librsvg
  A Library for Rendering SVG Data

  2.52.12-150400.3.9.1 lock src

  librsvg-2-2
  A Library for Rendering SVG Data

  2.52.12-150400.3.9.1 lock rpm

SUSE Linux Enterprise Micro 5.5 x86_64

• Packages
  gdk-pixbuf-loader-rsvg
  A gdk-pixbuf loader for SVG using librsvg

  2.52.12-150400.3.9.1 lock rpm

  librsvg
  A Library for Rendering SVG Data

  2.52.12-150400.3.9.1 lock src

  librsvg-2-2
  A Library for Rendering SVG Data

  2.52.12-150400.3.9.1 lock rpm

SUSE Linux Enterprise Micro 5.5 aarch64

• Packages
  gdk-pixbuf-loader-rsvg
  A gdk-pixbuf loader for SVG using librsvg

  2.52.12-150400.3.9.1 lock rpm

  librsvg
  A Library for Rendering SVG Data

  2.52.12-150400.3.9.1 lock src

  librsvg-2-2
  A Library for Rendering SVG Data

  2.52.12-150400.3.9.1 lock rpm

SUSE Linux Enterprise Micro 5.5 s390x

• Packages
  gdk-pixbuf-loader-rsvg
  A gdk-pixbuf loader for SVG using librsvg

  2.52.12-150400.3.9.1 lock rpm

  librsvg
  A Library for Rendering SVG Data

  2.52.12-150400.3.9.1 lock src

  librsvg-2-2
  A Library for Rendering SVG Data

  2.52.12-150400.3.9.1 lock rpm