Alerts This Week
Warning Icon 1 745
Alerts This Week
Warning Icon 1 745

Fedora 44 ThorVG Advisory Denial Of Service Vulnerability 2026-3d1fcd4ffc

fedora
Calendar Grey June 22, 2026
Dist Fedora Esm H88
ThorVG 1.0.6 update in Fedora 44 fixes security concerns, enhancing stability and efficiency in vector graphics processing.
Update to 1.0.6

Summary

ThorVG is an open-source graphics library designed for creating vector-based

scenes and animations. It combines immense power with remarkable lightweight

efficiency, as Thor embodies a dual meaning—symbolizing both thunderous

strength and lightning-fast agility. Embracing the philosophy of simpler is

better, the ThorVG project provides intuitive, user-friendly interfaces while

maintaining a compact footprint and minimal overhead.

The following list shows primitives that are supported by ThorVG:

- Lines & Shapes: rectangles, circles, and paths with coordinate control

- Filling: solid colors, linear & radial gradients, and path clipping

- Stroking: stroke width, joins, caps, dash patterns, and trimming

- Scene Management: retainable scene graph and object transformations

- Composition: various blending and masking

- Text: unicode characters with horizontal text layout using scalable fonts (TTF)

- Images: SVG, JPG, PNG, WebP, and raw bitmaps

- Effects: blur, drop shadow, fill, tint, tritone and color replacement

- Animations: Lottie

Update Information:

Update to 1.0.6

Topics%20covered

Topics Covered

security advisory denial of service fedora version update informational thorvg

Change Log

* Sun Jun 14 2026 Benson Muite - 1.0.6-1 - Update to 1.0.6 * Sat Feb 14 2026 Benson Muite - 1.0.1-1 - Update to 1.0.1 rhbz#2433764 * Sat Jan 17 2026 Fedora Release Engineering - 0.15.16-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild

References


[ 1 ] Bug #2483802 - CVE-2026-45729 thorvg: ThorVG: Denial of Service via untrusted SVG data processing [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2483802

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-3d1fcd4ffc' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
informational
Lowest
Low
Medium
High
Critical

Name: thorvg
Product: Fedora 44
Version: 1.0.6
Release: 1.fc44
URL: https://www.thorvg.org/
Summary: Lightweight vector-based scenes and animation drawing library

Topics%20covered

Topics Covered

security advisory denial of service fedora version update informational thorvg

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here