Alerts This Week
Warning Icon 1 758
Alerts This Week
Warning Icon 1 758

Ubuntu 22.04 librsvg Significant Memory Flaw CVE-2026-25729 USN-2026-3460-2

opensuse
Calendar Grey May 7, 2026
Dist Opensuse Esm H88
A critical update for librsvg on openSUSE resolves a stack exhaustion issue, ensuring better security for users.
An update that solves one vulnerability can now be installed.

Description

This update for librsvg fixes the following issue:

* CVE-2026-25727: time: parsing of user-provided input by the RFC 2822 date

parser can lead to stack exhaustion (bsc#1257922).

Topics%20covered

Topics Covered

security advisory important OpenSUSE stack exhaustion librsvg cve-2026-25727

Patch

## Patch Instructions:

To install this SUSE update use the SUSE recommended installation methods like

YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

* openSUSE Leap 15.6

zypper in -t patch SUSE-2026-1750=1

* Basesystem Module 15-SP7

zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-1750=1

* Desktop Applications Module 15-SP7

zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP7-2026-1750=1

* SUSE Linux Enterprise Server 15 SP6 LTSS

zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-1750=1

* SUSE Linux Enterprise Server for SAP Applications 15 SP6

zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-1750=1

Package List

* openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64)

* rsvg-convert-debuginfo-2.57.4-150600.3.8.2

* rsvg-convert-2.57.4-150600.3.8.2

* librsvg-debugsource-2.57.4-150600.3.8.2

* gdk-pixbuf-loader-rsvg-2.57.4-150600.3.8.2

* librsvg-2-2-debuginfo-2.57.4-150600.3.8.2

* gdk-pixbuf-loader-rsvg-debuginfo-2.57.4-150600.3.8.2

* librsvg-devel-2.57.4-150600.3.8.2

* typelib-1_0-Rsvg-2_0-2.57.4-150600.3.8.2

* librsvg-2-2-2.57.4-150600.3.8.2

* openSUSE Leap 15.6 (noarch)

* rsvg-thumbnailer-2.57.4-150600.3.8.2

* openSUSE Leap 15.6 (aarch64_ilp32)

* librsvg-2-2-64bit-debuginfo-2.57.4-150600.3.8.2

* gdk-pixbuf-loader-rsvg-64bit-debuginfo-2.57.4-150600.3.8.2

* gdk-pixbuf-loader-rsvg-64bit-2.57.4-150600.3.8.2

* librsvg-2-2-64bit-2.57.4-150600.3.8.2

* Basesystem Module 15-SP7 (aarch64 ppc64le s390x x86_64)

* librsvg-debugsource-2.57.4-150600.3.8.2

* gdk-pixbuf-loader-rsvg-2.57.4-150600.3.8.2

* librsvg-2-2-debuginfo-2.57.4-150600.3.8.2

* gdk-pixbuf-loader-rsvg-debuginfo-2.57.4-150600.3.8.2

* librsvg-2-2-2.57.4-150600.3.8.2

*...

Read the Full Advisory

References

* bsc#1257922

## References:

* https://www.suse.com/security/cve/CVE-2026-25727.html

* https://bugzilla.suse.com/show_bug.cgi?id=1257922

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2026:1750-1
Release Date: 2026-05-07T11:52:26Z
Affected Products: * Basesystem Module 15-SP7 * Desktop Applications Module 15-SP7 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7

Topics%20covered

Topics Covered

security advisory important OpenSUSE stack exhaustion librsvg cve-2026-25727

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here