librsvg before 2.40.12 allows context-dependent attackers to cause a denial of service (infinite loop, stack consumption, and application crash) via cyclic references in an SVG document.
{
"availability": "No subscription required",
"binaries": [
{
"binary_version": "2.40.13-1",
"binary_name": "gir1.2-rsvg-2.0"
},
{
"binary_version": "2.40.13-1",
"binary_name": "gir1.2-rsvg-2.0-dbgsym"
},
{
"binary_version": "2.40.13-1",
"binary_name": "librsvg2-2"
},
{
"binary_version": "2.40.13-1",
"binary_name": "librsvg2-2-dbgsym"
},
{
"binary_version": "2.40.13-1",
"binary_name": "librsvg2-bin"
},
{
"binary_version": "2.40.13-1",
"binary_name": "librsvg2-bin-dbgsym"
},
{
"binary_version": "2.40.13-1",
"binary_name": "librsvg2-common"
},
{
"binary_version": "2.40.13-1",
"binary_name": "librsvg2-common-dbgsym"
},
{
"binary_version": "2.40.13-1",
"binary_name": "librsvg2-dbg"
},
{
"binary_version": "2.40.13-1",
"binary_name": "librsvg2-dev"
},
{
"binary_version": "2.40.13-1",
"binary_name": "librsvg2-dev-dbgsym"
},
{
"binary_version": "2.40.13-1",
"binary_name": "librsvg2-doc"
}
]
}