< back to search

shield Security update for librsvg
SUSE-SLE-SERVER-12-SP4-2020-604

This update for librsvg to version 2.40.21 fixes the following issues: librsvg was updated to version 2.40.21 fixing the following issues: - CVE-2019-20446: Fixed an issue where a crafted SVG file with nested patterns can cause denial of service (bsc#1162501). NOTE: Librsvg now has limits on the number of loaded XML elements, and the number of referenced elements within an SVG document. - Fixed a stack exhaustion with circular references in <use> elements. - Fixed a denial-of-service condition from exponential explosion of rendered elements, through nested use of SVG "use" elements in malicious SVGs.

  • Release Date
    Mar 6 2020
  • References
    Bugzilla: 1162501
    CVEs: CVE-2019-20446
  • Type
    security
  • Severity
    moderate

cloud_download Downloads

SUSE Linux Enterprise Server 12.4 aarch64
  • Packages
    gdk-pixbuf-loader-rsvg
    A Library for Rendering SVG Data -- gdk-pixbuf loader
    2.40.21-5.9.1
    lock rpm
    librsvg
    A Library for Rendering SVG Data
    2.40.21-5.9.1
    lock src
    librsvg-2-2
    A Library for Rendering SVG Data
    2.40.21-5.9.1
    lock rpm
    rsvg-view
    SVG View using the GNOME Render SVG library
    2.40.21-5.9.1
    lock rpm
SUSE Linux Enterprise Server for SAP Applications 12.4 ppc64le
  • Packages
    gdk-pixbuf-loader-rsvg
    A Library for Rendering SVG Data -- gdk-pixbuf loader
    2.40.21-5.9.1
    lock rpm
    librsvg
    A Library for Rendering SVG Data
    2.40.21-5.9.1
    lock src
    librsvg-2-2
    A Library for Rendering SVG Data
    2.40.21-5.9.1
    lock rpm
    rsvg-view
    SVG View using the GNOME Render SVG library
    2.40.21-5.9.1
    lock rpm
SUSE Linux Enterprise Server 12.4 x86_64
  • Packages
    gdk-pixbuf-loader-rsvg
    A Library for Rendering SVG Data -- gdk-pixbuf loader
    2.40.21-5.9.1
    lock rpm
    librsvg
    A Library for Rendering SVG Data
    2.40.21-5.9.1
    lock src
    librsvg-2-2
    A Library for Rendering SVG Data
    2.40.21-5.9.1
    lock rpm
    librsvg-2-2-32bit
    A Library for Rendering SVG Data
    2.40.21-5.9.1
    lock rpm
    rsvg-view
    SVG View using the GNOME Render SVG library
    2.40.21-5.9.1
    lock rpm
SUSE Linux Enterprise Server 12.4 s390x
  • Packages
    gdk-pixbuf-loader-rsvg
    A Library for Rendering SVG Data -- gdk-pixbuf loader
    2.40.21-5.9.1
    lock rpm
    librsvg
    A Library for Rendering SVG Data
    2.40.21-5.9.1
    lock src
    librsvg-2-2
    A Library for Rendering SVG Data
    2.40.21-5.9.1
    lock rpm
    librsvg-2-2-32bit
    A Library for Rendering SVG Data
    2.40.21-5.9.1
    lock rpm
    rsvg-view
    SVG View using the GNOME Render SVG library
    2.40.21-5.9.1
    lock rpm