Medium ELSA-2020-4709 1 CVE

Moderate: librsvg2 security update (Oracle Linux 8)

Published Nov 10, 2020 · Updated Nov 10, 2020

Ecosystem: Oracle Linux

Summary

[2.42.7-4]
- Resolves: rhbz#1804519 Add patch for CVE-2019-20446

Fixed packages 3

Release	Package	Fixed in
Oracle Linux · 8	librsvg2	0:2.42.7-4.el8
Oracle Linux · 8	librsvg2-devel	0:2.42.7-4.el8
Oracle Linux · 8	librsvg2-tools	0:2.42.7-4.el8

Vulnerabilities 1

Unscored —

CVE-2019-20446

In xml.rs in GNOME librsvg before 2.46.2, a crafted SVG file with nested patterns can cause denial of service when pass…

librsvg librsvg librsvg Debian Ubuntu Alpine

Feb 2, 2020