shield Security update for librsvg

SUSE-SLE-Module-Basesystem-15-SP1-2020-629

This update for librsvg to version 2.42.8 fixes the following issues: librsvg was updated to version 2.42.8 fixing the following issues: - CVE-2019-20446: Fixed an issue where a crafted SVG file with nested patterns can cause denial of service (bsc#1162501). NOTE: Librsvg now has limits on the number of loaded XML elements, and the number of referenced elements within an SVG document. - Fixed a stack exhaustion with circular references in <use> elements. - Fixed a denial-of-service condition from exponential explosion of rendered elements, through nested use of SVG "use" elements in malicious SVGs.

• Release Date
  Jul 7 2020
• References
  Bugzilla: 1162501
  CVEs: CVE-2019-20446
• Type
  security
• Severity
  moderate

cloud_download Downloads

Basesystem Module 15.1 s390x

• Packages
  gdk-pixbuf-loader-rsvg
  A gdk-pixbuf loader for SVG using librsvg

  2.42.8-3.3.1 lock rpm

  librsvg
  A Library for Rendering SVG Data

  2.42.8-3.3.1 lock src

  librsvg-2-2
  A Library for Rendering SVG Data

  2.42.8-3.3.1 lock rpm

Basesystem Module 15.1 aarch64

• Packages
  gdk-pixbuf-loader-rsvg
  A gdk-pixbuf loader for SVG using librsvg

  2.42.8-3.3.1 lock rpm

  librsvg
  A Library for Rendering SVG Data

  2.42.8-3.3.1 lock src

  librsvg-2-2
  A Library for Rendering SVG Data

  2.42.8-3.3.1 lock rpm

Basesystem Module 15.1 ppc64le

• Packages
  gdk-pixbuf-loader-rsvg
  A gdk-pixbuf loader for SVG using librsvg

  2.42.8-3.3.1 lock rpm

  librsvg
  A Library for Rendering SVG Data

  2.42.8-3.3.1 lock src

  librsvg-2-2
  A Library for Rendering SVG Data

  2.42.8-3.3.1 lock rpm

Basesystem Module 15.1 x86_64

• Packages
  gdk-pixbuf-loader-rsvg
  A gdk-pixbuf loader for SVG using librsvg

  2.42.8-3.3.1 lock rpm

  librsvg
  A Library for Rendering SVG Data

  2.42.8-3.3.1 lock src

  librsvg-2-2
  A Library for Rendering SVG Data

  2.42.8-3.3.1 lock rpm