Alerts This Week
Warning Icon 1 677
Alerts This Week
Warning Icon 1 677

Mageia 9 python-listen Critical Radical DoS Update MGASA-2026-0123

mageia
Calendar Grey April 18, 2026
Dist Mageia Esm H88
Updated python-cairosvg packages address critical Exponential DoS issue in Mageia 9 affecting CairoSVG. Patch now.
MGASA-2026-0104 - Updated python-cairosvg packages fix security vulnerability

Summary

Description: CairoSVG vulnerable to Exponential DoS via recursive element amplification. (CVE-2026-31899)

References

- https://bugs.mageia.org/show_bug.cgi?id=35370

- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IBVXQHEZ24JPDMWUPRKDEZTECZLM3HVS/

- https://github.com/Kozea/CairoSVG/security/advisories/GHSA-f38f-5xpm-9r7c

- https://www.cve.org/CVERecord?id=CVE-2026-31899

Topics%20covered

Topics Covered

security advisory update critical Mageia python-cairosvg exponential dos

Resolution

SRPMS

- 9/core/python-cairosvg-2.5.2-6.1.mga9

Severity
critical
Lowest
Low
Medium
High
Critical

Publication date: 18 Apr 2026
URL: https://advisories.mageia.org/MGASA-2026-0104.html
Type: security
CVE: CVE-2026-31899

Topics%20covered

Topics Covered

security advisory update critical Mageia python-cairosvg exponential dos

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here