Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 514
Alerts This Week
Warning Icon 1 514

Fedora 43: lunasvg Critical Update for Various Flaws 2025-58c0baba42

fedora
Calendar Grey December 10, 2025
Scroller Fedora
Update lunasvg library in Fedora for security fixes and improved performance by unbundling plutovg.
Unbundle plutovg from lunasvg, this avoids shipping a duplicate library with conflicting files

Summary

LunaSVG is a standalone SVG rendering library in C++.

Update Information:

Unbundle plutovg from lunasvg, this avoids shipping a duplicate library with conflicting files. Update lunasvg to consume the plutovg version already available in the repositories and to fix various CVEs. Rebuild imhex for the updated lunasvg.

Topics%20covered

Topics Covered

security advisory fedora critical software update CVE lunasvg

Change Log

* Mon Dec 1 2025 Simone Caronni - 3.5.0-1 - Update to 3.5.0, remove bundled plutovg (#2400407)

References


[ 1 ] Bug #2295891 - lunasvg-3.5.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2295891 [ 2 ] Bug #2341675 - CVE-2024-57719 CVE-2024-57720 CVE-2024-57721 CVE-2024-57722 CVE-2024-57723 CVE-2024-57724 lunasvg: various flaws [epel-9] https://bugzilla.redhat.com/show_bug.cgi?id=2341675 [ 3 ] Bug #2343567 - CVE-2024-55456 lunasvg: From CVEorg collector [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2343567 [ 4 ] Bug #2400407 - file conflict between plutovg-devel and lunasvg-devel https://bugzilla.redhat.com/show_bug.cgi?id=2400407

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-58c0baba42' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
critical
Lowest
Low
Medium
High
Critical

Name: lunasvg
Product: Fedora 43
Version: 3.5.0
Release: 1.fc43
URL: https://github.com/sammycage/lunasvg
Summary: Standalone SVG rendering library in C++

Topics%20covered

Topics Covered

security advisory fedora critical software update CVE lunasvg

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.