SUSE-SU-2025:4411-1

This update for librsvg fixes the following issues:

Update to version 2.52.12.

CVE-2024-12224: idna: incorrect hostname comparisons and URL parsing may be performed due to acceptance of Punycode labels that do not produce any non-ASCII output when decoded (bsc#1243867).
CVE-2024-43806: rustix: unbounded memory explosion leading to an application OOM crash when using the rustix::fs::Dir iterator with the linux_raw backend (bsc#1229950).

SUSE:Linux Enterprise Micro 5.3gdk-pixbuf-loader-rsvg

Fixed in:

2.52.12-150400.3.9.1

SUSE:Linux Enterprise Micro 5.3librsvg

Fixed in:

2.52.12-150400.3.9.1

SUSE:Linux Enterprise Micro 5.3librsvg-2-2

Fixed in:

2.52.12-150400.3.9.1

SUSE:Linux Enterprise Micro 5.4gdk-pixbuf-loader-rsvg

Fixed in:

2.52.12-150400.3.9.1

SUSE:Linux Enterprise Micro 5.4librsvg

Fixed in:

2.52.12-150400.3.9.1

SUSE:Linux Enterprise Micro 5.4librsvg-2-2

Fixed in:

2.52.12-150400.3.9.1

SUSE:Linux Enterprise Micro 5.5gdk-pixbuf-loader-rsvg

Fixed in:

2.52.12-150400.3.9.1

SUSE:Linux Enterprise Micro 5.5librsvg

Fixed in:

2.52.12-150400.3.9.1

SUSE:Linux Enterprise Micro 5.5librsvg-2-2

Fixed in:

2.52.12-150400.3.9.1