Alerts This Week
Warning Icon 1 758
Alerts This Week
Warning Icon 1 758

Fedora 44 python-cairosvg Important CVE-2026-31899 DoS Security Fix

fedora
Calendar Grey April 25, 2026
Dist Fedora Esm H88
Fedora 44 python-cairosvg receives a security fix for DoS via CVE-2026-31899 to enhance application resilience.
Security fix for CVE-2026-31899: https://nvd.nist.gov/vuln/detail/CVE-2026-31899 / https://github.com/Kozea/CairoSVG/security/advisories/GHSA-f38f-5xpm-9r7c Exponential DoS via rec...

Summary

CairoSVG is a SVG 1.1 to PNG, PDF, PS and SVG converter which can also be used

as a Python library.

Update Information:

Security fix for CVE-2026-31899: https://nvd.nist.gov/vuln/detail/CVE-2026-31899 / https://github.com/Kozea/CairoSVG/security/advisories/GHSA-f38f-5xpm-9r7c Exponential DoS via recursive element amplification

Topics%20covered

Topics Covered

security advisory fedora DoS application security important exponential amplification

Change Log

* Wed Apr 15 2026 Michel Lind - 2.9.0-1 - Update to 2.9.0 upstream release - Resolves: rhbz#2229363 - Resolves: CVE-2026-31899 - Enable Packit - Drop unneeded test shenanigans - Enforce that license is preinstalled, stop installing by hand

References


[ 1 ] Bug #2447854 - CVE-2026-31899 python-cairosvg: CairoSVG: Denial of Service via recursive element amplification [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2447854

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-448e26a9c8' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
important
Lowest
Low
Medium
High
Critical

Name: python-cairosvg
Product: Fedora 44
Version: 2.9.0
Release: 1.fc44
URL: https://cairosvg.org/
Summary: A Simple SVG Converter for Cairo

Topics%20covered

Topics Covered

security advisory fedora DoS application security important exponential amplification

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here