ELSA-2026-86842

ELSA-2026-86842 - librsvg2 security update

Type:SECURITY
Impact:IMPORTANT
Release Date:2026-10-21

Description


[2.42.7-6]
- CVE-2026-96889 librsvg2: Use-after-free when XML includes have duplicated entities
duplicated entities
- Resolves: RHEL-267981


Related CVEs


CVE-2026-96889

Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle Linux 8 (aarch64) librsvg2-2.42.7-6.el8_10.src.rpm2a84aaab55636f76813019b11cf04806635e6ec8bcfbb4123cc0bcdc5c2fb7d4-ol8_aarch64_appstream
librsvg2-2.42.7-6.el8_10.aarch64.rpm2ef914406a26ea3901bf5f01a807f79a31e0330edc701fe5ff8319c6191ff1fc-ol8_aarch64_appstream
librsvg2-devel-2.42.7-6.el8_10.aarch64.rpm2d0453974878c83a677111bd9961cf66eddb9ef864b3ffe50642cb974ae4b44a-ol8_aarch64_appstream
librsvg2-tools-2.42.7-6.el8_10.aarch64.rpmf6af6a0079d4fdf75b806fadae99c9a4584cdf10bfac98d0b0772749e550b7d6-ol8_aarch64_appstream
Oracle Linux 8 (x86_64) librsvg2-2.42.7-6.el8_10.src.rpm2a84aaab55636f76813019b11cf04806635e6ec8bcfbb4123cc0bcdc5c2fb7d4-ol8_x86_64_appstream
librsvg2-2.42.7-6.el8_10.i686.rpmd06d451108e59334cbee1c62d490e9448efbf3fc5d7e77681715e7b9d7ec0fd9-ol8_x86_64_appstream
librsvg2-2.42.7-6.el8_10.x86_64.rpmaa35b42219e1593ec05fae08e8b74f50fb0e2b8654823b3fe6e732256866601e-ol8_x86_64_appstream
librsvg2-devel-2.42.7-6.el8_10.i686.rpm891735520c5880d0f7f03c6a74cc9c45265b41d621dfca4c786c65f42d6cafec-ol8_x86_64_appstream
librsvg2-devel-2.42.7-6.el8_10.x86_64.rpmd7fb5a4de0fa05e057de3eb9722b1e693e1419b7678e7013ad76af24c2e01116-ol8_x86_64_appstream
librsvg2-tools-2.42.7-6.el8_10.x86_64.rpmaf0c2bc3297c197ca6d3410d0647fc665f6051be9829989a8090b40a0daded35-ol8_x86_64_appstream



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete