Red Hat Security Advisory

RHSA-2020:4709

librsvg2 security update

Released 2020-11-04 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 8) librsvg2-2.42.7-4.el8, librsvg2-devel-2.42.7-4.el8, librsvg2-tools-2.42.7-4.el8

Fixes 1 record

TI-2019-14678 CVE-2019-20446 · GHSA-whvx-2m69-j66g

In xml.rs in GNOME librsvg before 2.46.2, a crafted SVG file with nested patterns can…

LOW 33

In xml.rs in GNOME librsvg before 2.46.2, a crafted SVG file with nested patterns can cause denial of service when passed to the library for processing.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.02125 Published 2020-02-02 Partial fix CWE-400