ELSA-2026-86841

ELSA-2026-86841 - librsvg2 security update

Type:SECURITY
Impact:IMPORTANT
Release Date:2026-10-21

Description


[2.57.1-10]
- CVE-2026-96889 librsvg2: Use-after-free when XML includes have duplicated
entities


Related CVEs


CVE-2026-96889

Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle Linux 10 (aarch64) librsvg2-2.57.1-9.el10_2.10.src.rpmaed0e2baa43c56b6f840c1487d7c9becb3adfc47631c00e8a05bb3a0c9305e0d-ol10_aarch64_appstream
librsvg2-2.57.1-9.el10_2.10.aarch64.rpm625636625ae706fc12fab1c4135f215d5adf9bb81f93fd43da13259b6133c5b2-ol10_aarch64_appstream
librsvg2-devel-2.57.1-9.el10_2.10.aarch64.rpm456946e571336f4f0aa07197df1c85e36ece747ae7b9d702fd2e6b00a5843f16-ol10_aarch64_appstream
librsvg2-tools-2.57.1-9.el10_2.10.aarch64.rpm8331310587625a16821598c8a1ad3ae33d24efca6e7b51e5340a317e82c8ab6e-ol10_aarch64_appstream
rsvg-pixbuf-loader-2.57.1-9.el10_2.10.aarch64.rpmc8b150089cd5d2d9fb612c118ebea8ab7aa706bc77bcc73512f3f8ba64e7c10b-ol10_aarch64_appstream
Oracle Linux 10 (x86_64) librsvg2-2.57.1-9.el10_2.10.src.rpmaed0e2baa43c56b6f840c1487d7c9becb3adfc47631c00e8a05bb3a0c9305e0d-ol10_x86_64_appstream
librsvg2-2.57.1-9.el10_2.10.x86_64.rpmced7bb50295b375df4da872ff40d87068dd655b56c93794c9da9fc67e69e8c45-ol10_x86_64_appstream
librsvg2-devel-2.57.1-9.el10_2.10.x86_64.rpm4b90184f2474fb8ed40ff512aadec529f78400603c5a6a2c1cdb82b1c45d5e26-ol10_x86_64_appstream
librsvg2-tools-2.57.1-9.el10_2.10.x86_64.rpm80d7edf5bc19dc9c13d905a1e149dff1f6b61c42dd8ed5ad9603b4705823fb7a-ol10_x86_64_appstream
rsvg-pixbuf-loader-2.57.1-9.el10_2.10.x86_64.rpm513af86466f61e2d52be692fc218140f1996a84159b071f5dcbf499f149b2f12-ol10_x86_64_appstream



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete