Explore top 10 tips to secure your open-source projects now. Read More
×
Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Loading...
Explore Latest Linux Security advisories
We found 27 articles for you...
202
security advisoryimportantOpenSUSEUbuntu 22.04 librsvg Significant Memory Flaw CVE-2026-25729 USN-2026-3460-2
An update that solves one vulnerability can now be installed.. # Security update for librsvg Announcement ID: SUSE-SU-2026:1750-1 Release Date: 2026-05-07T11:52:26Z Rating: important References: * bsc#1257922 Cross-References: * CVE-2026-25727 CVSS scores: * CVE-2026-25727 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-25727 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-25727 ( NVD ): 6.8 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-25727 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H Affected Products: * Basesystem Module 15-SP7 * Desktop Applications Module 15-SP7 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves one vulnerability can now be installed. ## Description: This update for librsvg fixes the following issue: * CVE-2026-25727: time: parsing of user-provided input by the RFC 2822 date parser can lead to stack exhaustion (bsc#1257922). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-1750=1 * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-1750=1 * Desktop Applications Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP7-2026-1750=1 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patchSUSE-SLE-Product-SLES-15-SP6-LTSS-2026-1750=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-1750=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * rsvg-convert-debuginfo-2.57.4-150600.3.8.2 * rsvg-convert-2.57.4-150600.3.8.2 * librsvg-debugsource-2.57.4-150600.3.8.2 * gdk-pixbuf-loader-rsvg-2.57.4-150600.3.8.2 * librsvg-2-2-debuginfo-2.57.4-150600.3.8.2 * gdk-pixbuf-loader-rsvg-debuginfo-2.57.4-150600.3.8.2 * librsvg-devel-2.57.4-150600.3.8.2 * typelib-1_0-Rsvg-2_0-2.57.4-150600.3.8.2 * librsvg-2-2-2.57.4-150600.3.8.2 * openSUSE Leap 15.6 (noarch) * rsvg-thumbnailer-2.57.4-150600.3.8.2 * openSUSE Leap 15.6 (aarch64_ilp32) * librsvg-2-2-64bit-debuginfo-2.57.4-150600.3.8.2 * gdk-pixbuf-loader-rsvg-64bit-debuginfo-2.57.4-150600.3.8.2 * gdk-pixbuf-loader-rsvg-64bit-2.57.4-150600.3.8.2 * librsvg-2-2-64bit-2.57.4-150600.3.8.2 * Basesystem Module 15-SP7 (aarch64 ppc64le s390x x86_64) * librsvg-debugsource-2.57.4-150600.3.8.2 * gdk-pixbuf-loader-rsvg-2.57.4-150600.3.8.2 * librsvg-2-2-debuginfo-2.57.4-150600.3.8.2 * gdk-pixbuf-loader-rsvg-debuginfo-2.57.4-150600.3.8.2 * librsvg-2-2-2.57.4-150600.3.8.2 * Desktop Applications Module 15-SP7 (aarch64 ppc64le s390x x86_64) * typelib-1_0-Rsvg-2_0-2.57.4-150600.3.8.2 * librsvg-devel-2.57.4-150600.3.8.2 * librsvg-debugsource-2.57.4-150600.3.8.2 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * librsvg-debugsource-2.57.4-150600.3.8.2 * gdk-pixbuf-loader-rsvg-2.57.4-150600.3.8.2 * librsvg-2-2-debuginfo-2.57.4-150600.3.8.2 * gdk-pixbuf-loader-rsvg-debuginfo-2.57.4-150600.3.8.2 * librsvg-devel-2.57.4-150600.3.8.2 * typelib-1_0-Rsvg-2_0-2.57.4-150600.3.8.2 * librsvg-2-2-2.57.4-150600.3.8.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * librsvg-debugsource-2.57.4-150600.3.8.2 *gdk-pixbuf-loader-rsvg-2.57.4-150600.3.8.2 * librsvg-2-2-debuginfo-2.57.4-150600.3.8.2 * gdk-pixbuf-loader-rsvg-debuginfo-2.57.4-150600.3.8.2 * librsvg-devel-2.57.4-150600.3.8.2 * typelib-1_0-Rsvg-2_0-2.57.4-150600.3.8.2 * librsvg-2-2-2.57.4-150600.3.8.2 ## References: * https://www.suse.com/security/cve/CVE-2026-25727.html * https://bugzilla.suse.com/show_bug.cgi?id=1257922 . A critical update for librsvg on openSUSE resolves a stack exhaustion issue, ensuring better security for users.. librsvg updates, openSUSE security, vulnerabilities resolution, stack exhaustion fix. . Severity: Important. LinuxSecurity.com Team
May 07, 2026
•Important
OpenSUSE
100
security advisorySuSEimportantSUSE 15.3 librsvg Significant Asset Exhaustion Flaw SUSE-SU-2025-21789-6
An update that solves one vulnerability can now be installed.. # Security update for librsvg Announcement ID: SUSE-SU-2026:21377-1 Release Date: 2026-04-22T10:52:20Z Rating: important References: * bsc#1257922 Cross-References: * CVE-2026-25727 CVSS scores: * CVE-2026-25727 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-25727 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-25727 ( NVD ): 6.8 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-25727 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves one vulnerability can now be installed. ## Description: This update for librsvg fixes the following issue: * CVE-2026-25727: time: parsing of user-provided input by the RFC 2822 date parser can lead to stack exhaustion (bsc#1257922). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-622=1 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-622=1 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * librsvg-devel-2.60.2-160000.2.1 * gdk-pixbuf-loader-rsvg-2.60.2-160000.2.1 * librsvg-2-2-2.60.2-160000.2.1 * rsvg-convert-2.60.2-160000.2.1 * librsvg-2-2-debuginfo-2.60.2-160000.2.1 * typelib-1_0-Rsvg-2_0-2.60.2-160000.2.1 * SUSE Linux Enterprise Server for SAP applications 16.0 (noarch) * rsvg-thumbnailer-2.60.2-160000.2.1 * SUSE Linux Enterprise Server 16.0 (aarch64ppc64le s390x x86_64) * librsvg-devel-2.60.2-160000.2.1 * gdk-pixbuf-loader-rsvg-2.60.2-160000.2.1 * librsvg-2-2-2.60.2-160000.2.1 * rsvg-convert-2.60.2-160000.2.1 * librsvg-2-2-debuginfo-2.60.2-160000.2.1 * typelib-1_0-Rsvg-2_0-2.60.2-160000.2.1 * SUSE Linux Enterprise Server 16.0 (noarch) * rsvg-thumbnailer-2.60.2-160000.2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-25727.html * https://bugzilla.suse.com/show_bug.cgi?id=1257922 . Important update for SUSE addressing librsvg security flaw leading to stack exhaustion. Install recommended patches ASAP.. SUSE security update librsvg important stack exhaustion. . Severity: Important. LinuxSecurity.com Team
Apr 28, 2026
•Important
SuSE
100
security advisorySuSEimportantSUSE Linux Micro 6.2 Librsvg Crucial Stack Exhaustion Solution Update
An update that solves one vulnerability can now be installed.. # Security update for librsvg Announcement ID: SUSE-SU-2026:21275-1 Release Date: 2026-04-22T10:52:22Z Rating: important References: * bsc#1257922 Cross-References: * CVE-2026-25727 CVSS scores: * CVE-2026-25727 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-25727 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-25727 ( NVD ): 6.8 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-25727 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves one vulnerability can now be installed. ## Description: This update for librsvg fixes the following issue: * CVE-2026-25727: time: parsing of user-provided input by the RFC 2822 date parser can lead to stack exhaustion (bsc#1257922). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-622=1 ## Package List: * SUSE Linux Micro 6.2 (aarch64 ppc64le s390x x86_64) * librsvg-2-2-2.60.2-160000.2.1 * gdk-pixbuf-loader-rsvg-2.60.2-160000.2.1 * librsvg-2-2-debuginfo-2.60.2-160000.2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-25727.html * https://bugzilla.suse.com/show_bug.cgi?id=1257922 . Critical update for librsvg addressing important stack exhaustion issue. Install via zypper for SUSE Linux Micro 6.2.. SUSE Update, Librsvg Security, Stack Exhaustion, SUSE Linux, Important Fix. . Severity: Important. LinuxSecurity.com Team
Apr 24, 2026
•Important
SuSE
100
security advisorySuSEimportantSUSE 15 Librsvg Important Stack Exhaustion Issue 2026-1599-1 CVE-2026-25727
An update that solves one vulnerability can now be installed.. # Security update for librsvg Announcement ID: SUSE-SU-2026:1599-1 Release Date: 2026-04-24T11:45:53Z Rating: important References: * bsc#1257922 Cross-References: * CVE-2026-25727 CVSS scores: * CVE-2026-25727 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-25727 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-25727 ( NVD ): 6.8 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-25727 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves one vulnerability can now be installed. ## Description: This update for librsvg fixes the following issue: * CVE-2026-25727: time: parsing of user-provided input by the RFC 2822 date parser can lead to stack exhaustion (bsc#1257922). ## Patch Instructions: To install this SUSE update use the SUSE recommended installationmethods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2026-1599=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-1599=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-1599=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-1599=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-1599=1 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-1599=1 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-1599=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-1599=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-1599=1 * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-1599=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-1599=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-1599=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-1599=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-1599=1 ## Package List: * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * gdk-pixbuf-loader-rsvg-debuginfo-2.52.12-150400.3.12.1 * librsvg-2-2-2.52.12-150400.3.12.1 * gdk-pixbuf-loader-rsvg-2.52.12-150400.3.12.1 * librsvg-2-2-debuginfo-2.52.12-150400.3.12.1 *librsvg-debugsource-2.52.12-150400.3.12.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * gdk-pixbuf-loader-rsvg-debuginfo-2.52.12-150400.3.12.1 * typelib-1_0-Rsvg-2_0-2.52.12-150400.3.12.1 * librsvg-2-2-2.52.12-150400.3.12.1 * gdk-pixbuf-loader-rsvg-2.52.12-150400.3.12.1 * librsvg-devel-2.52.12-150400.3.12.1 * librsvg-2-2-debuginfo-2.52.12-150400.3.12.1 * librsvg-debugsource-2.52.12-150400.3.12.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * gdk-pixbuf-loader-rsvg-debuginfo-2.52.12-150400.3.12.1 * typelib-1_0-Rsvg-2_0-2.52.12-150400.3.12.1 * librsvg-2-2-2.52.12-150400.3.12.1 * gdk-pixbuf-loader-rsvg-2.52.12-150400.3.12.1 * librsvg-devel-2.52.12-150400.3.12.1 * librsvg-2-2-debuginfo-2.52.12-150400.3.12.1 * librsvg-debugsource-2.52.12-150400.3.12.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * gdk-pixbuf-loader-rsvg-debuginfo-2.52.12-150400.3.12.1 * typelib-1_0-Rsvg-2_0-2.52.12-150400.3.12.1 * librsvg-2-2-2.52.12-150400.3.12.1 * gdk-pixbuf-loader-rsvg-2.52.12-150400.3.12.1 * librsvg-devel-2.52.12-150400.3.12.1 * librsvg-2-2-debuginfo-2.52.12-150400.3.12.1 * librsvg-debugsource-2.52.12-150400.3.12.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * gdk-pixbuf-loader-rsvg-debuginfo-2.52.12-150400.3.12.1 * typelib-1_0-Rsvg-2_0-2.52.12-150400.3.12.1 * librsvg-2-2-2.52.12-150400.3.12.1 * gdk-pixbuf-loader-rsvg-2.52.12-150400.3.12.1 * librsvg-devel-2.52.12-150400.3.12.1 * librsvg-2-2-debuginfo-2.52.12-150400.3.12.1 * librsvg-debugsource-2.52.12-150400.3.12.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * gdk-pixbuf-loader-rsvg-debuginfo-2.52.12-150400.3.12.1 * typelib-1_0-Rsvg-2_0-2.52.12-150400.3.12.1 * librsvg-2-2-2.52.12-150400.3.12.1 * gdk-pixbuf-loader-rsvg-2.52.12-150400.3.12.1 *librsvg-devel-2.52.12-150400.3.12.1 * librsvg-2-2-debuginfo-2.52.12-150400.3.12.1 * librsvg-debugsource-2.52.12-150400.3.12.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * gdk-pixbuf-loader-rsvg-debuginfo-2.52.12-150400.3.12.1 * typelib-1_0-Rsvg-2_0-2.52.12-150400.3.12.1 * librsvg-2-2-2.52.12-150400.3.12.1 * gdk-pixbuf-loader-rsvg-2.52.12-150400.3.12.1 * librsvg-devel-2.52.12-150400.3.12.1 * librsvg-2-2-debuginfo-2.52.12-150400.3.12.1 * librsvg-debugsource-2.52.12-150400.3.12.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * gdk-pixbuf-loader-rsvg-debuginfo-2.52.12-150400.3.12.1 * typelib-1_0-Rsvg-2_0-2.52.12-150400.3.12.1 * librsvg-2-2-2.52.12-150400.3.12.1 * gdk-pixbuf-loader-rsvg-2.52.12-150400.3.12.1 * librsvg-devel-2.52.12-150400.3.12.1 * librsvg-2-2-debuginfo-2.52.12-150400.3.12.1 * librsvg-debugsource-2.52.12-150400.3.12.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * gdk-pixbuf-loader-rsvg-debuginfo-2.52.12-150400.3.12.1 * typelib-1_0-Rsvg-2_0-2.52.12-150400.3.12.1 * librsvg-2-2-2.52.12-150400.3.12.1 * gdk-pixbuf-loader-rsvg-2.52.12-150400.3.12.1 * librsvg-devel-2.52.12-150400.3.12.1 * librsvg-2-2-debuginfo-2.52.12-150400.3.12.1 * librsvg-debugsource-2.52.12-150400.3.12.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * gdk-pixbuf-loader-rsvg-debuginfo-2.52.12-150400.3.12.1 * typelib-1_0-Rsvg-2_0-2.52.12-150400.3.12.1 * librsvg-2-2-2.52.12-150400.3.12.1 * rsvg-convert-2.52.12-150400.3.12.1 * gdk-pixbuf-loader-rsvg-2.52.12-150400.3.12.1 * librsvg-devel-2.52.12-150400.3.12.1 * librsvg-2-2-debuginfo-2.52.12-150400.3.12.1 * librsvg-debugsource-2.52.12-150400.3.12.1 * openSUSE Leap 15.4 (noarch) * rsvg-thumbnailer-2.52.12-150400.3.12.1 * openSUSE Leap 15.4 (aarch64_ilp32) * librsvg-2-2-64bit-debuginfo-2.52.12-150400.3.12.1 *gdk-pixbuf-loader-rsvg-64bit-2.52.12-150400.3.12.1 * librsvg-2-2-64bit-2.52.12-150400.3.12.1 * gdk-pixbuf-loader-rsvg-64bit-debuginfo-2.52.12-150400.3.12.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * gdk-pixbuf-loader-rsvg-debuginfo-2.52.12-150400.3.12.1 * librsvg-2-2-2.52.12-150400.3.12.1 * gdk-pixbuf-loader-rsvg-2.52.12-150400.3.12.1 * librsvg-2-2-debuginfo-2.52.12-150400.3.12.1 * librsvg-debugsource-2.52.12-150400.3.12.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * gdk-pixbuf-loader-rsvg-debuginfo-2.52.12-150400.3.12.1 * librsvg-2-2-2.52.12-150400.3.12.1 * gdk-pixbuf-loader-rsvg-2.52.12-150400.3.12.1 * librsvg-2-2-debuginfo-2.52.12-150400.3.12.1 * librsvg-debugsource-2.52.12-150400.3.12.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * gdk-pixbuf-loader-rsvg-debuginfo-2.52.12-150400.3.12.1 * librsvg-2-2-2.52.12-150400.3.12.1 * gdk-pixbuf-loader-rsvg-2.52.12-150400.3.12.1 * librsvg-2-2-debuginfo-2.52.12-150400.3.12.1 * librsvg-debugsource-2.52.12-150400.3.12.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * gdk-pixbuf-loader-rsvg-debuginfo-2.52.12-150400.3.12.1 * librsvg-2-2-2.52.12-150400.3.12.1 * gdk-pixbuf-loader-rsvg-2.52.12-150400.3.12.1 * librsvg-2-2-debuginfo-2.52.12-150400.3.12.1 * librsvg-debugsource-2.52.12-150400.3.12.1 ## References: * https://www.suse.com/security/cve/CVE-2026-25727.html * https://bugzilla.suse.com/show_bug.cgi?id=1257922 . Install essential updates for librsvg on SUSE to address critical issues linked to potential stack exhaustion risk.. SUSE Update, Security Patch, librsvg Vulnerability, Linux Security Advisory. . Severity: Important. LinuxSecurity.com Team
Apr 24, 2026
•Important
SuSE
100
security advisorymoderateSuSESUSE Linux Enterprise Server 2026 Moderate Librsvg Memory Fix 2026-20910-1
An update that solves two vulnerabilities and has one fix can now be installed.. # Security update for librsvg Announcement ID: SUSE-SU-2026:20910-1 Release Date: 2026-03-19T08:11:15Z Rating: moderate References: * bsc#1229376 * bsc#1229950 * bsc#1243867 Cross-References: * CVE-2024-12224 * CVE-2024-43806 CVSS scores: * CVE-2024-12224 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2024-12224 ( SUSE ): 4.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2024-12224 ( NVD ): 5.1 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:N/VI:N/VA:N/SC:H/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2024-43806 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Affected Products: * SUSE Linux Enterprise Server - BCI 16.0 An update that solves two vulnerabilities and has one fix can now be installed. ## Description: This update for librsvg fixes the following issues: Update to version 2.60.2: * CVE-2024-12224: Fixed idna accepts Punycode labels that do not produce any non-ASCII when decoded (bsc#1243867). * CVE-2024-43806: Fixed memory explosion in rustix (bsc#1229950). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server - BCI 16.0 zypper in -t patch SUSE-SLES-16.0-410=1 ## Package List: * SUSE Linux Enterprise Server - BCI 16.0 (aarch64 ppc64le s390x x86_64) * librsvg-2-2-debuginfo-2.60.2-160000.1.1 * librsvg-2-2-2.60.2-160000.1.1 * typelib-1_0-Rsvg-2_0-2.60.2-160000.1.1 * gdk-pixbuf-loader-rsvg-2.60.2-160000.1.1 * rsvg-convert-2.60.2-160000.1.1 * librsvg-devel-2.60.2-160000.1.1 * SUSE Linux Enterprise Server - BCI 16.0 (noarch) * rsvg-thumbnailer-2.60.2-160000.1.1 ## References: *https://www.suse.com/security/cve/CVE-2024-12224.html * https://www.suse.com/security/cve/CVE-2024-43806.html * https://bugzilla.suse.com/show_bug.cgi?id=1229376 * https://bugzilla.suse.com/show_bug.cgi?id=1229950 * https://bugzilla.suse.com/show_bug.cgi?id=1243867 . Two vulnerabilities in librsvg have been addressed with a moderate security update for SUSE systems.. librsvg update,SUSE fix,security advisory,moderate vulnerabilities. . LinuxSecurity.com Team
Apr 01, 2026
SuSE
100
security advisorymoderateSuSESUSE Librsvg Moderate Memory Issue Fix 2026-20755-1 CVE-2024-12224
An update that solves two vulnerabilities and has one fix can now be installed.. # Security update for librsvg Announcement ID: SUSE-SU-2026:20755-1 Release Date: 2026-03-19T08:08:47Z Rating: moderate References: * bsc#1229376 * bsc#1229950 * bsc#1243867 Cross-References: * CVE-2024-12224 * CVE-2024-43806 CVSS scores: * CVE-2024-12224 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2024-12224 ( SUSE ): 4.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2024-12224 ( NVD ): 5.1 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:N/VI:N/VA:N/SC:H/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2024-43806 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves two vulnerabilities and has one fix can now be installed. ## Description: This update for librsvg fixes the following issues: Update to version 2.60.2: * CVE-2024-12224: Fixed idna accepts Punycode labels that do not produce any non-ASCII when decoded (bsc#1243867). * CVE-2024-43806: Fixed memory explosion in rustix (bsc#1229950). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-410=1 ## Package List: * SUSE Linux Micro 6.2 (aarch64 ppc64le s390x x86_64) * gdk-pixbuf-loader-rsvg-2.60.2-160000.1.1 * librsvg-2-2-debuginfo-2.60.2-160000.1.1 * librsvg-2-2-2.60.2-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2024-12224.html * https://www.suse.com/security/cve/CVE-2024-43806.html * https://bugzilla.suse.com/show_bug.cgi?id=1229376 * https://bugzilla.suse.com/show_bug.cgi?id=1229950 * https://bugzilla.suse.com/show_bug.cgi?id=1243867 . Update forlibrsvg addresses two notable issues, including memory problems. Critical for system stability and performance.. librsvg patch SUSE vulnerabilities update. . LinuxSecurity.com Team
Mar 24, 2026
SuSE
202
security advisorymoderateOpenSUSEFedora libpng Adjustment CVE-2025-13402 FEDORA-SU-2026:0421-4
An update that solves one vulnerability can now be installed.. # Security update for librsvg Announcement ID: SUSE-SU-2026:0243-1 Release Date: 2026-01-22T13:57:48Z Rating: moderate References: * bsc#1243867 Cross-References: * CVE-2024-12224 CVSS scores: * CVE-2024-12224 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2024-12224 ( SUSE ): 4.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2024-12224 ( NVD ): 5.1 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:N/VI:N/VA:N/SC:H/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affected Products: * Basesystem Module 15-SP7 * Desktop Applications Module 15-SP7 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves one vulnerability can now be installed. ## Description: This update for librsvg fixes the following issues: Update to version 2.57.4 - bsc#1243867: * CVE-2024-12224: RUSTSEC-2024-0421 - idna accepts Punycode labels that do not produce any non-ASCII when decoded. * RUSTSEC-2024-0404 - Unsoundness in anstream. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-243=1 * Desktop Applications Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP7-2026-243=1 * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-243=1 openSUSE-SLE-15.6-2026-243=1 ## Package List: * Basesystem Module 15-SP7 (aarch64 ppc64le s390x x86_64) * gdk-pixbuf-loader-rsvg-debuginfo-2.57.4-150600.3.3.1 * librsvg-debugsource-2.57.4-150600.3.3.1 *librsvg-2-2-2.57.4-150600.3.3.1 * librsvg-2-2-debuginfo-2.57.4-150600.3.3.1 * gdk-pixbuf-loader-rsvg-2.57.4-150600.3.3.1 * Desktop Applications Module 15-SP7 (aarch64 ppc64le s390x x86_64) * librsvg-debugsource-2.57.4-150600.3.3.1 * librsvg-devel-2.57.4-150600.3.3.1 * typelib-1_0-Rsvg-2_0-2.57.4-150600.3.3.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * typelib-1_0-Rsvg-2_0-2.57.4-150600.3.3.1 * gdk-pixbuf-loader-rsvg-debuginfo-2.57.4-150600.3.3.1 * rsvg-convert-2.57.4-150600.3.3.1 * librsvg-debugsource-2.57.4-150600.3.3.1 * librsvg-devel-2.57.4-150600.3.3.1 * librsvg-2-2-2.57.4-150600.3.3.1 * librsvg-2-2-debuginfo-2.57.4-150600.3.3.1 * gdk-pixbuf-loader-rsvg-2.57.4-150600.3.3.1 * rsvg-convert-debuginfo-2.57.4-150600.3.3.1 * openSUSE Leap 15.6 (x86_64) * librsvg-2-2-32bit-2.57.4-150600.3.3.1 * librsvg-2-2-32bit-debuginfo-2.57.4-150600.3.3.1 * gdk-pixbuf-loader-rsvg-32bit-debuginfo-2.57.4-150600.3.3.1 * gdk-pixbuf-loader-rsvg-32bit-2.57.4-150600.3.3.1 * openSUSE Leap 15.6 (noarch) * rsvg-thumbnailer-2.57.4-150600.3.3.1 * openSUSE Leap 15.6 (aarch64_ilp32) * gdk-pixbuf-loader-rsvg-64bit-2.57.4-150600.3.3.1 * gdk-pixbuf-loader-rsvg-64bit-debuginfo-2.57.4-150600.3.3.1 * librsvg-2-2-64bit-debuginfo-2.57.4-150600.3.3.1 * librsvg-2-2-64bit-2.57.4-150600.3.3.1 ## References: * https://www.suse.com/security/cve/CVE-2024-12224.html * https://bugzilla.suse.com/show_bug.cgi?id=1243867 . SUSE updates librsvg with a moderate severity fix for CVE-2024-12224, addressing critical security risks.. openSUSE updates, librsvg security, RUSTSEC issues, moderate severity fixes. . LinuxSecurity.com Team
Jan 22, 2026
OpenSUSE
100
security advisorymoderateSuSESUSE: Librsvg Moderate Security Update OOM Crash CVE-2024-12224 2025:4411-1
An update that solves two vulnerabilities can now be installed.. # Security update for librsvg Announcement ID: SUSE-SU-2025:4411-1 Release Date: 2025-12-16T11:35:36Z Rating: moderate References: * bsc#1229950 * bsc#1243867 Cross-References: * CVE-2024-12224 * CVE-2024-43806 CVSS scores: * CVE-2024-12224 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2024-12224 ( SUSE ): 4.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2024-12224 ( NVD ): 5.1 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:N/VI:N/VA:N/SC:H/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2024-43806 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 An update that solves two vulnerabilities can now be installed. ## Description: This update for librsvg fixes the following issues: Update to version 2.52.12. * CVE-2024-12224: idna: incorrect hostname comparisons and URL parsing may be performed due to acceptance of Punycode labels that do not produce any non- ASCII output when decoded (bsc#1243867). * CVE-2024-43806: rustix: unbounded memory explosion leading to an application OOM crash when using the `rustix::fs::Dir` iterator with the `linux_raw` backend (bsc#1229950). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2025-4411=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2025-4411=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patchSUSE-SLE-Micro-5.3-2025-4411=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2025-4411=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2025-4411=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2025-4411=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * librsvg-debugsource-2.52.12-150400.3.9.1 * gdk-pixbuf-loader-rsvg-debuginfo-2.52.12-150400.3.9.1 * librsvg-2-2-debuginfo-2.52.12-150400.3.9.1 * librsvg-2-2-2.52.12-150400.3.9.1 * typelib-1_0-Rsvg-2_0-2.52.12-150400.3.9.1 * rsvg-convert-2.52.12-150400.3.9.1 * gdk-pixbuf-loader-rsvg-2.52.12-150400.3.9.1 * librsvg-devel-2.52.12-150400.3.9.1 * openSUSE Leap 15.4 (x86_64) * gdk-pixbuf-loader-rsvg-32bit-debuginfo-2.52.12-150400.3.9.1 * gdk-pixbuf-loader-rsvg-32bit-2.52.12-150400.3.9.1 * librsvg-2-2-32bit-2.52.12-150400.3.9.1 * librsvg-2-2-32bit-debuginfo-2.52.12-150400.3.9.1 * openSUSE Leap 15.4 (noarch) * rsvg-thumbnailer-2.52.12-150400.3.9.1 * openSUSE Leap 15.4 (aarch64_ilp32) * librsvg-2-2-64bit-debuginfo-2.52.12-150400.3.9.1 * gdk-pixbuf-loader-rsvg-64bit-2.52.12-150400.3.9.1 * librsvg-2-2-64bit-2.52.12-150400.3.9.1 * gdk-pixbuf-loader-rsvg-64bit-debuginfo-2.52.12-150400.3.9.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * librsvg-debugsource-2.52.12-150400.3.9.1 * gdk-pixbuf-loader-rsvg-debuginfo-2.52.12-150400.3.9.1 * librsvg-2-2-debuginfo-2.52.12-150400.3.9.1 * librsvg-2-2-2.52.12-150400.3.9.1 * gdk-pixbuf-loader-rsvg-2.52.12-150400.3.9.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * librsvg-debugsource-2.52.12-150400.3.9.1 * gdk-pixbuf-loader-rsvg-debuginfo-2.52.12-150400.3.9.1 * librsvg-2-2-debuginfo-2.52.12-150400.3.9.1 * librsvg-2-2-2.52.12-150400.3.9.1 * gdk-pixbuf-loader-rsvg-2.52.12-150400.3.9.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390xx86_64) * librsvg-debugsource-2.52.12-150400.3.9.1 * gdk-pixbuf-loader-rsvg-debuginfo-2.52.12-150400.3.9.1 * librsvg-2-2-debuginfo-2.52.12-150400.3.9.1 * librsvg-2-2-2.52.12-150400.3.9.1 * gdk-pixbuf-loader-rsvg-2.52.12-150400.3.9.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * librsvg-debugsource-2.52.12-150400.3.9.1 * gdk-pixbuf-loader-rsvg-debuginfo-2.52.12-150400.3.9.1 * librsvg-2-2-debuginfo-2.52.12-150400.3.9.1 * librsvg-2-2-2.52.12-150400.3.9.1 * gdk-pixbuf-loader-rsvg-2.52.12-150400.3.9.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * librsvg-debugsource-2.52.12-150400.3.9.1 * gdk-pixbuf-loader-rsvg-debuginfo-2.52.12-150400.3.9.1 * librsvg-2-2-debuginfo-2.52.12-150400.3.9.1 * librsvg-2-2-2.52.12-150400.3.9.1 * gdk-pixbuf-loader-rsvg-2.52.12-150400.3.9.1 ## References: * https://www.suse.com/security/cve/CVE-2024-12224.html * https://www.suse.com/security/cve/CVE-2024-43806.html * https://bugzilla.suse.com/show_bug.cgi?id=1229950 * https://bugzilla.suse.com/show_bug.cgi?id=1243867 . This update resolves two vulnerabilities in librsvg to prevent memory issues and incorrect hostname handling for better security.. librsvg update,SUSE security,moderate vulnerabilities,memory explosion. . LinuxSecurity.com Team
Dec 16, 2025
SuSE
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!