SUSE-SU-2026:1750-1

HIGH7.5

Security update for librsvg

Published May 7, 2026

Modified 4 weeks ago

Fix available

Details

Description of the patch:

This update for librsvg fixes the following issue:

CVE-2026-25727: time: parsing of user-provided input by the RFC 2822 date parser can lead to stack exhaustion (bsc#1257922).

Affected Packages

gdk-pixbuf-loader-rsvg

SUSE Linux Enterprise Module for Basesystem 15 SP7SUSE Linux Enterprise Server 15 SP6-LTSSSUSE Linux Enterprise Server for SAP Applications 15 SP6

Fixed in:

2.57.4-150600.3.8.2

librsvg-2-2

SUSE Linux Enterprise Module for Basesystem 15 SP7SUSE Linux Enterprise Server 15 SP6-LTSSSUSE Linux Enterprise Server for SAP Applications 15 SP6

Fixed in:

2.57.4-150600.3.8.2

librsvg-devel

SUSE Linux Enterprise Module for Desktop Applications 15 SP7SUSE Linux Enterprise Server 15 SP6-LTSSSUSE Linux Enterprise Server for SAP Applications 15 SP6

Fixed in:

2.57.4-150600.3.8.2

typelib-1_0-Rsvg-2_0

SUSE Linux Enterprise Module for Desktop Applications 15 SP7SUSE Linux Enterprise Server 15 SP6-LTSSSUSE Linux Enterprise Server for SAP Applications 15 SP6

Fixed in:

2.57.4-150600.3.8.2

References

ADVISORY

https://bugzilla.suse.com/1257922

ADVISORY

https://lists.suse.com/pipermail/sle-updates/2026-May/046293.html

ADVISORY

https://www.suse.com/security/cve/CVE-2026-25727/

WEB

https://www.suse.com/support/security/rating/

ADVISORY