High ELSA-2026-86331 1 CVE

Important: glycin-loaders security update (Oracle Linux 10)

Published Oct 20, 2026 · Updated Oct 20, 2026

Ecosystem: Oracle Linux

Summary

[1.0.1-2]
- Backport CVE-2026-96889 fix to vendored librsvg

Fixed packages 1

Release	Package	Fixed in
Oracle Linux · 10	glycin-loaders	0:1.0.1-1.el10_2.2

Vulnerabilities 1

High 7.8

CVE-2026-96889 Public exploit

Librsvg: use-after-free when xml includes have duplicated entities

A flaw was found in librsvg. When processing an SVG document containing nested XML inclusions (Xincludes) with duplicate entity declarations, a use-after-free error can occur. This vulnerability arises because the library incorrectly frees an XML entity that …

Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 6 Linux Debian Ubuntu Azure Linux crates.io

Sep 23, 2026