The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
In xml.rs in GNOME librsvg before 2.46.2, a crafted SVG file with nested patterns can cause denial of service when passed to the library for processing. The attacker constructs pattern elements so that the number of final rendered objects grows exponentially.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade librsvg2Upgrade librsvg2-toolsUpgrade librsvg2-devel | May 4, 2022 | Feb 2, 2020 |
| Alpine Linux | — | Upgrade librsvg | Aug 22, 2024 | Feb 2, 2020 |
| Centos_linux | — | Upgrade librsvg2-tools-debuginfoUpgrade librsvg2Upgrade librsvg2-debuginfoUpgrade librsvg2-toolsUpgrade librsvg2-develUpgrade librsvg2-debugsource | Nov 5, 2020 | Feb 2, 2020 |
| Debian | — | Upgrade librsvg | Jul 23, 2020 | Feb 2, 2020 |
| Freebsd | — | Upgrade librsvg2-rustUpgrade librsvg2 | Mar 3, 2020 | Mar 2, 2020 |
| Oracle_linux | — | Upgrade librsvg2-develUpgrade librsvg2Upgrade librsvg2-tools | Nov 12, 2020 | Feb 2, 2020 |
| Redhat_linux | — | Upgrade librsvg2-develUpgrade librsvg2-toolsUpgrade librsvg2-debugsourceUpgrade librsvg2-debuginfoUpgrade librsvg2No solution existsUpgrade librsvg2-tools-debuginfo | Nov 5, 2020 | Feb 2, 2020 |
| Rocky_linux | — | Upgrade librsvg2-develUpgrade librsvg2-debuginfoUpgrade librsvg2Upgrade librsvg2-tools-debuginfoUpgrade librsvg2-toolsUpgrade librsvg2-debugsource | Mar 12, 2024 | Feb 2, 2020 |
| Suse | — | Upgrade librsvg-develUpgrade librsvg-2-2-32bitUpgrade rsvg-thumbnailerUpgrade gdk-pixbuf-loader-rsvgUpgrade gdk-pixbuf-loader-rsvg-32bitUpgrade typelib-1_0-Rsvg-2_0Upgrade rsvg-viewUpgrade librsvg-2-2 | Mar 7, 2020 | Feb 2, 2020 |
| Ubuntu | — | Upgrade librsvg2-2 | Aug 5, 2020 | Feb 2, 2020 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub