{"id":"EUVD-2026-85608","enisaUuid":"3896b11d-617f-3457-8976-02ac209cd4e8","description":"A flaw was found in librsvg. When processing an SVG document containing nested XML inclusions (Xincludes) with duplicate entity declarations, a use-after-free error can occur. This vulnerability arises because the library incorrectly frees an XML entity that is still in use by the parser. An attacker could potentially exploit this to cause a denial of service or execute arbitrary code.","datePublished":"Sep 23, 2026, 7:40:14 PM","dateUpdated":"Oct 30, 2026, 12:07:41 AM","baseScore":7.8,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","references":"https://access.redhat.com/errata/RHSA-2026:86331\nhttps://access.redhat.com/errata/RHSA-2026:86841\nhttps://access.redhat.com/errata/RHSA-2026:86842\nhttps://access.redhat.com/errata/RHSA-2026:86921\nhttps://access.redhat.com/errata/RHSA-2026:92212\nhttps://access.redhat.com/errata/RHSA-2026:92213\nhttps://access.redhat.com/errata/RHSA-2026:92214\nhttps://access.redhat.com/errata/RHSA-2026:92218\nhttps://access.redhat.com/errata/RHSA-2026:92336\nhttps://access.redhat.com/errata/RHSA-2026:92353\nhttps://access.redhat.com/errata/RHSA-2026:92382\nhttps://access.redhat.com/errata/RHSA-2026:92573\nhttps://access.redhat.com/errata/RHSA-2026:92579\nhttps://access.redhat.com/security/cve/CVE-2026-96889\nhttps://bugzilla.redhat.com/show_bug.cgi?id\u003d2539279\nhttps://crates.io/crates/librsvg\nhttps://gitlab.gnome.org/GNOME/librsvg/-/work_items/1241\nhttps://rustsec.org/advisories/RUSTSEC-2026-0305.html\n","aliases":"CVE-2026-96889\nGHSA-cpvr-w4j5-2mpg\n","assigner":"redhat","epss":0.54,"enisaIdProduct":[{"id":"1933fa59-e537-3aae-af89-a360e8a74e7f","product":{"name":"Red Hat Enterprise Linux 10","vendor":{"name":"Red Hat"}},"product_version":"patch: 0:1.0.1-1.el10_2.2"},{"id":"1ebfcb79-ad79-31d1-afb4-73aca3f32de3","product":{"name":"Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support","vendor":{"name":"Red Hat"}},"product_version":"patch: 0:2.42.7-4.el8_4.1"},{"id":"2a7d85ec-d312-3ca9-8b70-69997a1a5ac3","product":{"name":"Red Hat Enterprise Linux 7 Extended Lifecycle Support","vendor":{"name":"Red Hat"}},"product_version":"patch: 0:2.40.20-1.el7_9.1"},{"id":"34dbd4e2-da4d-329c-8ce9-c4cc39496e86","product":{"name":"Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On","vendor":{"name":"Red Hat"}},"product_version":"patch: 0:2.42.7-4.el8_4.1"},{"id":"449fef43-38fd-3a17-8e7a-9bea37d0368e","product":{"name":"Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support","vendor":{"name":"Red Hat"}},"product_version":"patch: 0:2.42.7-4.el8_6.1"},{"id":"838af168-7573-3e8c-b868-1077079777a0","product":{"name":"Red Hat Enterprise Linux 10","vendor":{"name":"Red Hat"}},"product_version":"patch: 0:2.57.1-9.el10_2.10"},{"id":"9e2cbc43-44d6-38ef-ae1c-9fecd6d180c9","product":{"name":"Red Hat Enterprise Linux 8.8 Telecommunications Update Service","vendor":{"name":"Red Hat"}},"product_version":"patch: 0:2.42.7-4.el8_8.1"},{"id":"a01b8b06-4a64-3f15-b7c1-250788c8d9ad","product":{"name":"Red Hat Enterprise Linux 10.0 Extended Update Support","vendor":{"name":"Red Hat"}},"product_version":"patch: 0:1.0.1-1.el10_0.1"},{"id":"a48d6897-e480-342b-b9b3-0b4ab699eb88","product":{"name":"Red Hat Enterprise Linux 9.6 Extended Update Support","vendor":{"name":"Red Hat"}},"product_version":"patch: 0:2.50.7-3.el9_6.1"},{"id":"a4cd1011-4e29-3055-985e-2ecd2f2c1308","product":{"name":"Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions","vendor":{"name":"Red Hat"}},"product_version":"patch: 0:2.42.7-4.el8_8.1"},{"id":"aac0b408-c50c-3142-a20f-7c062f7979b7","product":{"name":"Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On","vendor":{"name":"Red Hat"}},"product_version":"patch: 0:2.42.7-4.el8_6.1"},{"id":"c73796fa-0dea-3671-b1e0-9b514a9c35e3","product":{"name":"Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions","vendor":{"name":"Red Hat"}},"product_version":"patch: 0:2.50.7-1.el9_2.2"},{"id":"cdfae145-85cc-352b-9a71-c36ca014ac2d","product":{"name":"Red Hat Enterprise Linux 10.0 Extended Update Support","vendor":{"name":"Red Hat"}},"product_version":"patch: 0:2.57.1-9.el10_0.1"},{"id":"d5dd5024-619d-3261-bac9-53abed72c1c2","product":{"name":"Red Hat Enterprise Linux 8","vendor":{"name":"Red Hat"}},"product_version":"patch: 0:2.42.7-6.el8_10"},{"id":"e5c9ed5c-7434-3c49-97d4-f77d7ea6dfae","product":{"name":"Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions","vendor":{"name":"Red Hat"}},"product_version":"patch: 0:2.50.7-3.el9_4.1"},{"id":"fd39d81b-88b4-309d-add9-340af60a0abb","product":{"name":"Red Hat Enterprise Linux 9","vendor":{"name":"Red Hat"}},"product_version":"patch: 0:2.50.7-3.el9_8.1"}],"enisaIdVendor":[{"id":"7ceae257-5eff-372f-a0c4-fd92d17c0ece","vendor":{"name":"Red Hat"}}],"enisaIdVulnerability":[{"id":"0ae4059c-c5d3-3ddc-a1b7-a88e85dbd73f","vulnerability":{"id":"GHSA-cpvr-w4j5-2mpg","description":"Librsvg: Use-after-free when XML includes have duplicated entities","datePublished":"Oct 22, 2026, 3:52:48 PM","dateUpdated":"Oct 22, 2026, 3:52:48 PM","baseScore":0.0,"references":"https://nvd.nist.gov/vuln/detail/CVE-2026-96889\nhttps://github.com/GNOME/librsvg/commit/0bc935e675947e185d42005d3ad93d7cf61bcea9\nhttps://github.com/GNOME/librsvg/commit/1606574427408baca8203ef723281509a229f9e2\nhttps://github.com/GNOME/librsvg/commit/4d0051a9dbd038a5fe8461b61486677d88f8736d\nhttps://github.com/GNOME/librsvg/commit/e56cc8a33a7184eef6e8a720414aee6205a400ad\nhttps://rustsec.org/advisories/RUSTSEC-2026-0305.html\nhttps://gitlab.gnome.org/GNOME/librsvg/-/work_items/1241\nhttps://gitlab.gnome.org/GNOME/librsvg/-/merge_requests/1211\nhttps://gitlab.gnome.org/GNOME/librsvg/-/commit/8a1b0cd319e9af2d1e9cf878081dd77f227a0504\nhttps://gitlab.gnome.org/GNOME/librsvg\nhttps://github.com/GNOME/librsvg/releases/tag/2.63.2\nhttps://github.com/GNOME/librsvg/releases/tag/2.62.4\nhttps://github.com/GNOME/librsvg/releases/tag/2.61.5\nhttps://github.com/GNOME/librsvg/releases/tag/2.60.3\nhttps://github.com/GNOME/librsvg/releases/tag/2.57.5\nhttps://github.com/GNOME/librsvg/blob/2.63.2/NEWS\nhttps://bugzilla.redhat.com/show_bug.cgi?id\u003d2539279\nhttps://access.redhat.com/security/cve/CVE-2026-96889\nhttps://access.redhat.com/errata/RHSA-2026:86921\nhttps://access.redhat.com/errata/RHSA-2026:86842\nhttps://access.redhat.com/errata/RHSA-2026:86841\nhttps://access.redhat.com/errata/RHSA-2026:86331\n","enisa_id":"EUVD-2026-85608\n","aliases":"GHSA-cpvr-w4j5-2mpg\nCVE-2026-96889\n","epss":0.0,"dataProcessed":"Oct 30, 2026, 7:03:32 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"44426ceb-03f0-3d2e-bbeb-3b163c461d63","vulnerability":{"id":"CVE-2026-96889","description":"A flaw was found in librsvg. When processing an SVG document containing nested XML inclusions (Xincludes) with duplicate entity declarations, a use-after-free error can occur. This vulnerability arises because the library incorrectly frees an XML entity that is still in use by the parser. An attacker could potentially exploit this to cause a denial of service or execute arbitrary code.","datePublished":"Sep 23, 2026, 7:40:14 PM","dateUpdated":"Oct 30, 2026, 12:07:41 AM","status":"PUBLISHED","baseScore":7.8,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","references":"https://access.redhat.com/errata/RHSA-2026:86331\nhttps://access.redhat.com/errata/RHSA-2026:86841\nhttps://access.redhat.com/errata/RHSA-2026:86842\nhttps://access.redhat.com/errata/RHSA-2026:86921\nhttps://access.redhat.com/errata/RHSA-2026:92212\nhttps://access.redhat.com/errata/RHSA-2026:92213\nhttps://access.redhat.com/errata/RHSA-2026:92214\nhttps://access.redhat.com/errata/RHSA-2026:92218\nhttps://access.redhat.com/errata/RHSA-2026:92336\nhttps://access.redhat.com/errata/RHSA-2026:92353\nhttps://access.redhat.com/errata/RHSA-2026:92382\nhttps://access.redhat.com/errata/RHSA-2026:92573\nhttps://access.redhat.com/errata/RHSA-2026:92579\nhttps://access.redhat.com/security/cve/CVE-2026-96889\nhttps://bugzilla.redhat.com/show_bug.cgi?id\u003d2539279\nhttps://crates.io/crates/librsvg\nhttps://gitlab.gnome.org/GNOME/librsvg/-/work_items/1241\nhttps://rustsec.org/advisories/RUSTSEC-2026-0305.html\n","enisa_id":"EUVD-2026-85608\n","assigner":"redhat","epss":0.54,"dataProcessed":"Oct 30, 2026, 2:00:46 PM","vulnerabilityProduct":[{"id":"0935b7c1-564f-351b-bcac-83415a34c96d","product":{"name":"Red Hat Enterprise Linux 9","vendor":{"name":"Red Hat"}},"product_version":"patch: 0:2.50.7-3.el9_8.1"},{"id":"1049e355-6ced-3306-9bf6-261f0e34878d","product":{"name":"Red Hat Enterprise Linux 8","vendor":{"name":"Red Hat"}},"product_version":"patch: 0:2.42.7-6.el8_10"},{"id":"2157d2e0-34f5-3e3f-a01f-a5220c214d84","product":{"name":"Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions","vendor":{"name":"Red Hat"}},"product_version":"patch: 0:2.42.7-4.el8_8.1"},{"id":"2e284c21-2e29-3d47-a87a-464cb2ed715e","product":{"name":"Red Hat Enterprise Linux 7 Extended Lifecycle Support","vendor":{"name":"Red Hat"}},"product_version":"patch: 0:2.40.20-1.el7_9.1"},{"id":"5387cd6d-7071-3997-a7a3-80fbeed40d44","product":{"name":"Red Hat Enterprise Linux 10.0 Extended Update Support","vendor":{"name":"Red Hat"}},"product_version":"patch: 0:1.0.1-1.el10_0.1"},{"id":"6354b6e1-98af-32c3-b99a-89ad3026239f","product":{"name":"Red Hat Enterprise Linux 10","vendor":{"name":"Red Hat"}},"product_version":"patch: 0:1.0.1-1.el10_2.2"},{"id":"77e5c41f-0c21-3b45-ade5-aae13c58d072","product":{"name":"Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions","vendor":{"name":"Red Hat"}},"product_version":"patch: 0:2.50.7-3.el9_4.1"},{"id":"7f724f52-a77e-3f7c-8a5c-d5430243f160","product":{"name":"Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions","vendor":{"name":"Red Hat"}},"product_version":"patch: 0:2.50.7-1.el9_2.2"},{"id":"8260cbe4-8354-37d7-9b50-4aa5c4971579","product":{"name":"Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On","vendor":{"name":"Red Hat"}},"product_version":"patch: 0:2.42.7-4.el8_6.1"},{"id":"99c2930b-dcb4-3ab4-8930-87ef775c2da2","product":{"name":"Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support","vendor":{"name":"Red Hat"}},"product_version":"patch: 0:2.42.7-4.el8_4.1"},{"id":"9c2ee76c-b781-37ec-bbdc-eb7c17619e5b","product":{"name":"Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On","vendor":{"name":"Red Hat"}},"product_version":"patch: 0:2.42.7-4.el8_4.1"},{"id":"b72b31f7-29fc-3367-a565-48463e966d42","product":{"name":"Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support","vendor":{"name":"Red Hat"}},"product_version":"patch: 0:2.42.7-4.el8_6.1"},{"id":"b8c0be31-280f-333a-a108-f45a1a15bb08","product":{"name":"Red Hat Enterprise Linux 9.6 Extended Update Support","vendor":{"name":"Red Hat"}},"product_version":"patch: 0:2.50.7-3.el9_6.1"},{"id":"b8da34a8-2363-3696-87dd-d4d27a7364e9","product":{"name":"Red Hat Enterprise Linux 10.0 Extended Update Support","vendor":{"name":"Red Hat"}},"product_version":"patch: 0:2.57.1-9.el10_0.1"},{"id":"e6cc985b-ceed-32e5-b802-5c329bbf5448","product":{"name":"Red Hat Enterprise Linux 10","vendor":{"name":"Red Hat"}},"product_version":"patch: 0:2.57.1-9.el10_2.10"},{"id":"ee52a7ba-55c3-3cbb-bf90-6e8c5dd71d22","product":{"name":"Red Hat Enterprise Linux 8.8 Telecommunications Update Service","vendor":{"name":"Red Hat"}},"product_version":"patch: 0:2.42.7-4.el8_8.1"}],"vulnerabilityVendor":[{"id":"1b561867-3924-3fcf-9138-625c09feb5e0","vendor":{"name":"Red Hat"}}]}}],"enisaIdAdvisory":[{"id":"142317d4-7958-3ea7-b7bf-fa339955ce35","advisory":{"id":"SUSE-SU-2026:24117-1","description":"Security update for librsvg","summary":"Security update for librsvg","datePublished":"Oct 8, 2026, 6:13:45 AM","dateUpdated":"Oct 15, 2026, 5:14:06 PM","baseScore":0.0,"references":"https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_24117-1.json\nhttps://www.suse.com/support/update/announcement/2026/suse-su-202624117-1/\nhttps://www.suse.com/support/update/announcement/2026/suse-su-202624117-1/\nhttps://bugzilla.suse.com/1282612\nhttps://www.suse.com/security/cve/CVE-2026-96889/\n","aliases":"CVE-2026-96889\n","source":{"id":22,"name":"csaf_suse"},"advisoryProduct":[{"id":"6097a6d1-fe46-3166-801d-e82d8590559b","product":{"name":"SUSE Linux Micro 6.2","vendor":{"name":"SUSE"}}},{"id":"675bf0ae-4789-3a38-9c48-bcf36ac0e221","product":{"name":"librsvg-2-2-0:2.60.3-160000.1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"84713135-b2cb-3c9a-b8ab-81d07e9a67c3","product":{"name":"gdk-pixbuf-loader-rsvg-0:2.60.3-160000.1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"97e0b5a9-6da1-3c0e-9db3-8e058f5f24e5","product":{"name":"librsvg-2-2-0:2.60.3-160000.1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"a0f9eeef-8cd6-34b2-bb81-c9d24dc47608","product":{"name":"gdk-pixbuf-loader-rsvg-0:2.60.3-160000.1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"c6c799b2-c965-3d87-b131-77744a208d8f","product":{"name":"gdk-pixbuf-loader-rsvg-0:2.60.3-160000.1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"db262e80-991a-3bf4-b516-cd3462ea4414","product":{"name":"librsvg-2-2-0:2.60.3-160000.1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"dd5466ec-eccb-321b-81af-22e0bf538992","product":{"name":"librsvg-2-2-0:2.60.3-160000.1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"ec0eacf9-c6b2-338d-85aa-e43927231a7e","product":{"name":"gdk-pixbuf-loader-rsvg-0:2.60.3-160000.1.1.aarch64","vendor":{"name":"SUSE"}}}]}},{"id":"46aad7c6-8968-3756-bdca-29079ff7949e","advisory":{"id":"SUSE-SU-2026:24202-1","description":"Security update for librsvg","summary":"Security update for librsvg","datePublished":"Oct 8, 2026, 6:13:45 AM","dateUpdated":"Oct 21, 2026, 11:49:44 AM","baseScore":0.0,"references":"https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_24202-1.json\nhttps://www.suse.com/support/update/announcement/2026/suse-su-202624202-1/\nhttps://www.suse.com/support/update/announcement/2026/suse-su-202624202-1/\nhttps://bugzilla.suse.com/1282612\nhttps://www.suse.com/security/cve/CVE-2026-96889/\n","aliases":"CVE-2026-96889\n","source":{"id":22,"name":"csaf_suse"},"advisoryProduct":[{"id":"0bcb0ddc-3dc8-3695-b8b2-5526224786d3","product":{"name":"gdk-pixbuf-loader-rsvg-0:2.60.3-160000.1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"1a418603-31a2-362e-a547-c99329ce5316","product":{"name":"librsvg-devel-0:2.60.3-160000.1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"1cceabda-63c7-3754-a5e2-c5ca737e2d2c","product":{"name":"rsvg-convert-0:2.60.3-160000.1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"26c08a6e-98c4-347d-b9f6-e479be0b2794","product":{"name":"librsvg-devel-0:2.60.3-160000.1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"2e542b6c-6c50-36b3-a2cf-e44e12d0b195","product":{"name":"librsvg-2-2-0:2.60.3-160000.1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"36eaf24b-4059-3c52-8043-db6c3db59029","product":{"name":"librsvg-2-2-0:2.60.3-160000.1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"3b5ef8d9-6fe1-327f-9d53-2e1816fd3ed9","product":{"name":"gdk-pixbuf-loader-rsvg-0:2.60.3-160000.1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"51190ba1-e523-3d82-ad85-821e33e439dd","product":{"name":"gdk-pixbuf-loader-rsvg-0:2.60.3-160000.1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"660df848-8c06-3120-a00c-a3112de2f884","product":{"name":"librsvg-devel-0:2.60.3-160000.1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"7f79520a-ad91-3271-a0bc-620855ad8348","product":{"name":"SUSE Linux Enterprise Server for SAP applications 16.0","vendor":{"name":"SUSE"}}},{"id":"8564fdf3-a8a7-31a8-9c66-cc038516c341","product":{"name":"rsvg-convert-0:2.60.3-160000.1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"98b4447d-81a0-3c78-8fe0-6776b40c222b","product":{"name":"typelib-1_0-Rsvg-2_0-0:2.60.3-160000.1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"9c7a06a9-98fb-3690-bc14-16c32868a757","product":{"name":"librsvg-devel-0:2.60.3-160000.1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"9f13a679-aba4-34d2-b316-29f28a2a1f27","product":{"name":"librsvg-2-2-0:2.60.3-160000.1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"a8d1d9de-4b83-3750-8532-a9160b3a466a","product":{"name":"typelib-1_0-Rsvg-2_0-0:2.60.3-160000.1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"aeedb044-1e94-3d1f-80f5-4d7c728ee1b7","product":{"name":"rsvg-convert-0:2.60.3-160000.1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"c0453652-ec68-312c-ae08-34ffffad6e2c","product":{"name":"rsvg-thumbnailer-0:2.60.3-160000.1.1.noarch","vendor":{"name":"SUSE"}}},{"id":"c555d8a4-e4cb-397a-9307-437a62fbb1da","product":{"name":"typelib-1_0-Rsvg-2_0-0:2.60.3-160000.1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"c85d6684-971d-3f0b-bc5c-5d181fd99d66","product":{"name":"rsvg-convert-0:2.60.3-160000.1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"d6ccd6c6-17fb-35aa-a8f4-ec4ea71cc6ac","product":{"name":"gdk-pixbuf-loader-rsvg-0:2.60.3-160000.1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"dc49637d-d5ee-37d0-94ef-73c75ec7afeb","product":{"name":"SUSE Linux Enterprise Server 16.0","vendor":{"name":"SUSE"}}},{"id":"ec5e4e60-30f7-316d-b67c-dea269632e5f","product":{"name":"typelib-1_0-Rsvg-2_0-0:2.60.3-160000.1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"f0ea0d77-3007-3e95-9689-a53a0645935c","product":{"name":"librsvg-2-2-0:2.60.3-160000.1.1.aarch64","vendor":{"name":"SUSE"}}}]}},{"id":"5bdb925f-76f3-3502-9c58-f1de56ebec7b","advisory":{"id":"RHSA-2026:86841","description":"Red Hat Security Advisory: librsvg2 security update","summary":"An update for librsvg2 is now available for Red Hat Enterprise Linux 10.2 Extended Update Support.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.","datePublished":"Oct 21, 2026, 11:53:51 AM","dateUpdated":"Oct 30, 2026, 12:51:29 AM","baseScore":0.0,"references":"https://access.redhat.com/errata/RHSA-2026:86841\nhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_86841.json\n","aliases":"CVE-2026-96889\n","source":{"id":9,"name":"csaf_redhat"},"advisoryProduct":[{"id":"025a0736-e885-3eee-9db6-9daf904d4c2b","product":{"name":"rsvg-pixbuf-loader-debuginfo-0:2.57.1-9.el10_2.10.x86_64","vendor":{"name":"Red Hat"}}},{"id":"06c1917c-063c-3ea0-bfb3-f29dc31fed74","product":{"name":"librsvg2-0:2.57.1-9.el10_2.10.aarch64","vendor":{"name":"Red Hat"}}},{"id":"0796b131-e943-3963-a18f-b84e1eaba078","product":{"name":"librsvg2-devel-0:2.57.1-9.el10_2.10.s390x","vendor":{"name":"Red Hat"}}},{"id":"249b7c9f-de62-3f64-af07-0b6573f2f0c9","product":{"name":"librsvg2-debugsource-0:2.57.1-9.el10_2.10.s390x","vendor":{"name":"Red Hat"}}},{"id":"32866c69-85b3-3cd1-b6f8-374f89d066eb","product":{"name":"librsvg2-tools-debuginfo-0:2.57.1-9.el10_2.10.x86_64","vendor":{"name":"Red Hat"}}},{"id":"337c7e2d-daaf-3729-86a1-b9f3c37fe452","product":{"name":"Red Hat Enterprise Linux AppStream (v. 10)","vendor":{"name":"Red Hat"}}},{"id":"39684ad8-2bbd-3d4e-b1c4-e8110ae3da5e","product":{"name":"rsvg-pixbuf-loader-0:2.57.1-9.el10_2.10.s390x","vendor":{"name":"Red Hat"}}},{"id":"4091d032-9ae8-3f24-857b-7ce5206eed40","product":{"name":"librsvg2-debugsource-0:2.57.1-9.el10_2.10.ppc64le","vendor":{"name":"Red Hat"}}},{"id":"48528d17-09d3-3efc-afb2-4d69232a769e","product":{"name":"rsvg-pixbuf-loader-debuginfo-0:2.57.1-9.el10_2.10.s390x","vendor":{"name":"Red Hat"}}},{"id":"519062b3-65bc-3005-a67e-315e7687dd75","product":{"name":"rsvg-pixbuf-loader-debuginfo-0:2.57.1-9.el10_2.10.aarch64","vendor":{"name":"Red Hat"}}},{"id":"531d4986-3381-3d74-a7f7-40cc1a299a0e","product":{"name":"librsvg2-tools-0:2.57.1-9.el10_2.10.s390x","vendor":{"name":"Red Hat"}}},{"id":"6137954c-e4ac-3fa4-a5eb-d46c088b479a","product":{"name":"rsvg-pixbuf-loader-debuginfo-0:2.57.1-9.el10_2.10.ppc64le","vendor":{"name":"Red Hat"}}},{"id":"7154bb52-56fa-3735-95f7-c0500bebdae9","product":{"name":"librsvg2-tools-debuginfo-0:2.57.1-9.el10_2.10.ppc64le","vendor":{"name":"Red Hat"}}},{"id":"7ac896f4-dc10-3ece-be4d-32044e293d8b","product":{"name":"librsvg2-debuginfo-0:2.57.1-9.el10_2.10.aarch64","vendor":{"name":"Red Hat"}}},{"id":"7e569171-d54e-3244-b277-7d411e91baa2","product":{"name":"librsvg2-0:2.57.1-9.el10_2.10.ppc64le","vendor":{"name":"Red Hat"}}},{"id":"81761fbf-bd2c-31fe-9562-b77bc7cd7cbf","product":{"name":"librsvg2-0:2.57.1-9.el10_2.10.s390x","vendor":{"name":"Red Hat"}}},{"id":"8448a0f5-014e-3f24-8f2d-7886691d7f70","product":{"name":"librsvg2-debuginfo-0:2.57.1-9.el10_2.10.ppc64le","vendor":{"name":"Red Hat"}}},{"id":"861479c0-c471-392a-8846-1395b30198b5","product":{"name":"librsvg2-devel-0:2.57.1-9.el10_2.10.aarch64","vendor":{"name":"Red Hat"}}},{"id":"86e613ab-61ee-3fff-a19e-01a209b833d1","product":{"name":"librsvg2-debugsource-0:2.57.1-9.el10_2.10.x86_64","vendor":{"name":"Red Hat"}}},{"id":"89307bfb-1f84-32ea-95f9-998c5a157a5b","product":{"name":"librsvg2-tools-0:2.57.1-9.el10_2.10.x86_64","vendor":{"name":"Red Hat"}}},{"id":"8d9c85a6-b015-3574-a030-635f01437e56","product":{"name":"librsvg2-debuginfo-0:2.57.1-9.el10_2.10.x86_64","vendor":{"name":"Red Hat"}}},{"id":"8f44486e-1fee-38f6-8c6e-e717c9542af8","product":{"name":"librsvg2-tools-debuginfo-0:2.57.1-9.el10_2.10.aarch64","vendor":{"name":"Red Hat"}}},{"id":"9938cf1f-b799-3cd8-9637-61f63eb65992","product":{"name":"SUSE Liberty Linux 10","vendor":{"name":"SUSE"}}},{"id":"9ebfa303-0c07-3da5-8ac0-2162336e13bc","product":{"name":"librsvg2-0:2.57.1-9.el10_2.10.src","vendor":{"name":"Red Hat"}}},{"id":"9f1d40d0-c8b0-31e5-a071-5c82805e58a4","product":{"name":"librsvg2-tools-0:2.57.1-9.el10_2.10.ppc64le","vendor":{"name":"Red Hat"}}},{"id":"9fa4cf23-0b66-35f5-9765-ee7782b015b1","product":{"name":"librsvg2-0:2.57.1-9.el10_2.10.x86_64","vendor":{"name":"Red Hat"}}},{"id":"9fecb922-264c-37d4-bd15-d4c4b7d10977","product":{"name":"rsvg-pixbuf-loader-0:2.57.1-9.el10_2.10.x86_64","vendor":{"name":"Red Hat"}}},{"id":"ac0af1b2-85a0-37c4-81db-385f7ed38efd","product":{"name":"librsvg2-devel-0:2.57.1-9.el10_2.10.x86_64","vendor":{"name":"Red Hat"}}},{"id":"bd5f19f9-a73d-3a26-92cf-6a5d519c7eba","product":{"name":"rsvg-pixbuf-loader-0:2.57.1-9.el10_2.10.ppc64le","vendor":{"name":"Red Hat"}}},{"id":"c8a66a81-4657-34dc-9ce3-304ce326068d","product":{"name":"librsvg2-tools-debuginfo-0:2.57.1-9.el10_2.10.s390x","vendor":{"name":"Red Hat"}}},{"id":"ce65892b-e134-3827-a841-104c76331a9c","product":{"name":"librsvg2-debugsource-0:2.57.1-9.el10_2.10.aarch64","vendor":{"name":"Red Hat"}}},{"id":"dff5558c-f0a1-3cc0-9986-e5fae5b6e825","product":{"name":"rsvg-pixbuf-loader-0:2.57.1-9.el10_2.10.aarch64","vendor":{"name":"Red Hat"}}},{"id":"edf44550-c154-3c0e-94db-3a67e3ec2820","product":{"name":"librsvg2-debuginfo-0:2.57.1-9.el10_2.10.s390x","vendor":{"name":"Red Hat"}}},{"id":"f4911741-ee17-36e0-984a-e648897abb1a","product":{"name":"librsvg2-tools-0:2.57.1-9.el10_2.10.aarch64","vendor":{"name":"Red Hat"}}},{"id":"fc9e49fa-f6e0-362b-8daf-2a8064b4c540","product":{"name":"librsvg2-devel-0:2.57.1-9.el10_2.10.ppc64le","vendor":{"name":"Red Hat"}}}]}},{"id":"76b9e94d-cc13-3aed-aa2b-4b8e76e796fa","advisory":{"id":"RHSA-2026:86921","description":"Red Hat Security Advisory: librsvg2 security update","summary":"An update for librsvg2 is now available for Red Hat Enterprise Linux 9.8 Extended Update Support.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.","datePublished":"Oct 21, 2026, 12:31:56 PM","dateUpdated":"Oct 30, 2026, 12:51:28 AM","baseScore":0.0,"references":"https://access.redhat.com/errata/RHSA-2026:86921\nhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_86921.json\n","aliases":"CVE-2026-96889\n","source":{"id":9,"name":"csaf_redhat"},"advisoryProduct":[{"id":"1082cb67-a3c5-31a5-8f18-9b6f5e013a3c","product":{"name":"Red Hat Enterprise Linux AppStream (v. 9)","vendor":{"name":"Red Hat"}}},{"id":"1efbaf75-1d03-3b00-8742-3c9d934792f5","product":{"name":"librsvg2-debuginfo-0:2.50.7-3.el9_8.1.i686","vendor":{"name":"Red Hat"}}},{"id":"21ff12fb-230a-3f9e-b090-0296b09e31a1","product":{"name":"librsvg2-0:2.50.7-3.el9_8.1.ppc64le","vendor":{"name":"Red Hat"}}},{"id":"2311e4bc-124f-3df8-893c-a1d3506e0462","product":{"name":"librsvg2-debuginfo-0:2.50.7-3.el9_8.1.ppc64le","vendor":{"name":"Red Hat"}}},{"id":"2313768a-a1a7-329e-91aa-6f1a489e4c33","product":{"name":"librsvg2-tools-0:2.50.7-3.el9_8.1.aarch64","vendor":{"name":"Red Hat"}}},{"id":"279c6d0f-a166-34ae-94b1-dc94813c9ea9","product":{"name":"librsvg2-0:2.50.7-3.el9_8.1.s390x","vendor":{"name":"Red Hat"}}},{"id":"2b0e08fa-34ec-3075-b425-50ac8c2745ac","product":{"name":"librsvg2-debuginfo-0:2.50.7-3.el9_8.1.aarch64","vendor":{"name":"Red Hat"}}},{"id":"2eaa0615-e675-310f-a149-5e5b4eff4995","product":{"name":"librsvg2-tools-debuginfo-0:2.50.7-3.el9_8.1.aarch64","vendor":{"name":"Red Hat"}}},{"id":"3c391349-e512-3d19-a355-6caaa86b6a8d","product":{"name":"librsvg2-0:2.50.7-3.el9_8.1.x86_64","vendor":{"name":"Red Hat"}}},{"id":"42bd5a73-5ab4-3ec0-a15f-d5d7f167a9ed","product":{"name":"librsvg2-0:2.50.7-3.el9_8.1.aarch64","vendor":{"name":"Red Hat"}}},{"id":"510fd7e5-a437-37dd-89c6-78f66bdb8804","product":{"name":"librsvg2-tools-debuginfo-0:2.50.7-3.el9_8.1.x86_64","vendor":{"name":"Red Hat"}}},{"id":"633903b4-250a-3d73-a7d9-278f4cbd7cfc","product":{"name":"librsvg2-debugsource-0:2.50.7-3.el9_8.1.i686","vendor":{"name":"Red Hat"}}},{"id":"6dabf106-cb46-35e2-a1b3-7f1a199b8b2e","product":{"name":"librsvg2-devel-0:2.50.7-3.el9_8.1.aarch64","vendor":{"name":"Red Hat"}}},{"id":"70c63832-cec4-3547-a5e7-357ca7b589f6","product":{"name":"librsvg2-debugsource-0:2.50.7-3.el9_8.1.ppc64le","vendor":{"name":"Red Hat"}}},{"id":"71b2f54a-3275-3637-af69-b77ff1e5edac","product":{"name":"librsvg2-tools-0:2.50.7-3.el9_8.1.x86_64","vendor":{"name":"Red Hat"}}},{"id":"765df212-1d24-33a4-b7d9-96cf3f13c7d7","product":{"name":"librsvg2-devel-0:2.50.7-3.el9_8.1.s390x","vendor":{"name":"Red Hat"}}},{"id":"76f97d0e-ec30-3ca5-b6c1-a167dc978845","product":{"name":"librsvg2-debuginfo-0:2.50.7-3.el9_8.1.s390x","vendor":{"name":"Red Hat"}}},{"id":"7d85abc6-7d73-36ad-a7a1-618779455c1b","product":{"name":"librsvg2-tools-0:2.50.7-3.el9_8.1.s390x","vendor":{"name":"Red Hat"}}},{"id":"8de097c7-8ca4-3343-9835-0f4ecf7c4b02","product":{"name":"librsvg2-debugsource-0:2.50.7-3.el9_8.1.x86_64","vendor":{"name":"Red Hat"}}},{"id":"8fd8bbf3-5178-3204-9e60-c4151480d7bf","product":{"name":"librsvg2-0:2.50.7-3.el9_8.1.i686","vendor":{"name":"Red Hat"}}},{"id":"9fed8811-ef02-39a2-a383-c28e9f15b46c","product":{"name":"librsvg2-tools-debuginfo-0:2.50.7-3.el9_8.1.ppc64le","vendor":{"name":"Red Hat"}}},{"id":"ae1593fc-f63e-3909-98f6-f80598e877b3","product":{"name":"librsvg2-devel-0:2.50.7-3.el9_8.1.i686","vendor":{"name":"Red Hat"}}},{"id":"c0013fa0-eb8d-3ab8-a396-af0114ffb4f1","product":{"name":"librsvg2-debuginfo-0:2.50.7-3.el9_8.1.x86_64","vendor":{"name":"Red Hat"}}},{"id":"d16f6c32-314c-3970-a638-fc4ea5b03ccc","product":{"name":"librsvg2-debugsource-0:2.50.7-3.el9_8.1.aarch64","vendor":{"name":"Red Hat"}}},{"id":"d359007c-745b-3a50-83c0-47f8597722fd","product":{"name":"librsvg2-devel-0:2.50.7-3.el9_8.1.ppc64le","vendor":{"name":"Red Hat"}}},{"id":"dca9ad06-3247-3e97-aa18-3330f829f25d","product":{"name":"SUSE Liberty Linux 9","vendor":{"name":"SUSE"}}},{"id":"e641a3ed-b961-38f6-a518-68c74f744bfa","product":{"name":"librsvg2-tools-0:2.50.7-3.el9_8.1.ppc64le","vendor":{"name":"Red Hat"}}},{"id":"ebc57c7a-1611-33ed-bddb-74b3a5a529f7","product":{"name":"librsvg2-debugsource-0:2.50.7-3.el9_8.1.s390x","vendor":{"name":"Red Hat"}}},{"id":"f248b5ea-92be-3354-8371-f8ad562c18f1","product":{"name":"librsvg2-tools-debuginfo-0:2.50.7-3.el9_8.1.i686","vendor":{"name":"Red Hat"}}},{"id":"f5d8b05b-8f28-3f99-8f00-5c7eb8cbfb7a","product":{"name":"librsvg2-devel-0:2.50.7-3.el9_8.1.x86_64","vendor":{"name":"Red Hat"}}},{"id":"f92768f2-d696-3f59-a270-bddc567d7c81","product":{"name":"librsvg2-0:2.50.7-3.el9_8.1.src","vendor":{"name":"Red Hat"}}},{"id":"fac97790-fc3e-3240-8311-b2408100e73d","product":{"name":"librsvg2-tools-debuginfo-0:2.50.7-3.el9_8.1.s390x","vendor":{"name":"Red Hat"}}}]}},{"id":"818d0cfb-9b21-35e8-8a69-c035d621c351","advisory":{"id":"openSUSE-SU-2026:22051-1","description":"Security update for librsvg","summary":"Security update for librsvg","datePublished":"Oct 8, 2026, 6:15:26 AM","dateUpdated":"Oct 19, 2026, 5:24:39 PM","baseScore":0.0,"references":"https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_22051-1.json\nhttps://bugzilla.suse.com/1282612\nhttps://www.suse.com/security/cve/CVE-2026-96889/\n","aliases":"CVE-2026-96889\n","source":{"id":21,"name":"csaf_opensuse"},"advisoryProduct":[{"id":"1400cf3f-1b40-33ce-8c8d-571932c35255","product":{"name":"librsvg-devel-0:2.60.3-160000.1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"1f629fa4-3263-3009-8acf-aebf6313ce5e","product":{"name":"rsvg-convert-0:2.60.3-160000.1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"2267cd46-3562-30a7-a672-30c1119f61a6","product":{"name":"librsvg-2-2-0:2.60.3-160000.1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"22978eea-2e61-37ab-bcfa-3bb49a18f6da","product":{"name":"rsvg-convert-0:2.60.3-160000.1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"25c231bd-402e-373b-bb36-8ce3cee28d8c","product":{"name":"librsvg-devel-0:2.60.3-160000.1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"300b061e-99f3-3603-a85e-d3f2e88a87b7","product":{"name":"librsvg-2-2-0:2.60.3-160000.1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"31c31b4c-89d4-3253-976e-b6db73fb4bbe","product":{"name":"gdk-pixbuf-loader-rsvg-0:2.60.3-160000.1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"3abac298-df24-3eba-ad42-7c487e0e9b67","product":{"name":"librsvg-devel-0:2.60.3-160000.1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"418da577-0c85-3da1-8ef9-c3bce76c98df","product":{"name":"typelib-1_0-Rsvg-2_0-0:2.60.3-160000.1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"4ce039be-fa27-3cfb-9efc-cde3780c3582","product":{"name":"librsvg-2-2-0:2.60.3-160000.1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"598d8896-b49a-3168-886f-75f8d08b914f","product":{"name":"gdk-pixbuf-loader-rsvg-0:2.60.3-160000.1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"5e776b86-1be3-3a9e-92fc-1fbbc4b92a6f","product":{"name":"typelib-1_0-Rsvg-2_0-0:2.60.3-160000.1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"604411ee-9c78-3b97-9082-e939cd7d53e4","product":{"name":"typelib-1_0-Rsvg-2_0-0:2.60.3-160000.1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"699c8a9a-9e22-3b2d-83aa-4b923f497983","product":{"name":"typelib-1_0-Rsvg-2_0-0:2.60.3-160000.1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"6b3c8260-05ed-398a-b436-1c438808b2f0","product":{"name":"openSUSE Leap 16.0","vendor":{"name":"SUSE"}}},{"id":"73fb3425-3d61-383d-99ef-0159dbe6f2e7","product":{"name":"gdk-pixbuf-loader-rsvg-0:2.60.3-160000.1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"80187fb0-f1f2-3ccd-9ed3-9ee72aa1268e","product":{"name":"rsvg-convert-0:2.60.3-160000.1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"875e350a-d061-3e65-9ce6-90a0d52187af","product":{"name":"rsvg-convert-0:2.60.3-160000.1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"e3f0e3fc-99e8-3bc9-848f-28ba625c01a3","product":{"name":"gdk-pixbuf-loader-rsvg-0:2.60.3-160000.1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"e6ee3ffa-7db0-3366-aaa0-cf635a4ed72f","product":{"name":"rsvg-thumbnailer-0:2.60.3-160000.1.1.noarch","vendor":{"name":"SUSE"}}},{"id":"ec7637c5-4f1f-36c3-881c-c1ec17a24368","product":{"name":"librsvg-devel-0:2.60.3-160000.1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"fb7943d6-2764-332c-abc0-031959dd49c0","product":{"name":"librsvg-2-2-0:2.60.3-160000.1.1.aarch64","vendor":{"name":"SUSE"}}}]}},{"id":"ac94a439-4b95-3f26-94a6-9c2196c891ff","advisory":{"id":"msrc_CVE-2026-96889","description":"Librsvg: use-after-free when xml includes have duplicated entities","datePublished":"Sep 27, 2026, 11:30:17 PM","dateUpdated":"Oct 7, 2026, 2:00:08 AM","baseScore":0.0,"references":"https://msrc.microsoft.com/csaf/vex/2026/msrc_cve-2026-96889.json\n","aliases":"CVE-2026-96889\n","source":{"id":20,"name":"csaf_microsoft"},"advisoryProduct":[{"id":"23f235ef-98d7-3592-b620-8b6911a7d30a","product":{"name":"Azure Linux","vendor":{"name":"Microsoft"}}},{"id":"65e2275c-b881-3a69-afde-ab6f5a525d15","product":{"name":"azl3 librsvg2 0:2.58.1-8.azl3","vendor":{"name":"Microsoft"}}},{"id":"97bc5b7a-b62e-317a-ac2e-3c08da8ffa79","product":{"name":"3.0","vendor":{"name":"Wind River"}}},{"id":"e40b5b9a-7565-3fab-86aa-5ac8ab8935ea","product":{"name":"librsvg2","vendor":{"name":"Microsoft"}}}]}},{"id":"b2b74ee9-f316-3ebf-9fa9-ab0804d279be","advisory":{"id":"RHSA-2026:86842","description":"Red Hat Security Advisory: librsvg2 security update","summary":"An update for librsvg2 is now available for Red Hat Enterprise Linux 8.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.","datePublished":"Oct 21, 2026, 12:06:32 PM","dateUpdated":"Oct 30, 2026, 12:51:29 AM","baseScore":0.0,"references":"https://access.redhat.com/errata/RHSA-2026:86842\nhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_86842.json\n","aliases":"CVE-2026-96889\n","source":{"id":9,"name":"csaf_redhat"},"advisoryProduct":[{"id":"02e8a87a-e845-3ea5-954a-db3c8a20177d","product":{"name":"librsvg2-debugsource-0:2.42.7-6.el8_10.x86_64","vendor":{"name":"Red Hat"}}},{"id":"02fd27e1-b36d-3b00-b6fc-7f16b00b482e","product":{"name":"librsvg2-debuginfo-0:2.42.7-6.el8_10.aarch64","vendor":{"name":"Red Hat"}}},{"id":"07517dd7-edfb-3900-a32f-c04061f87708","product":{"name":"librsvg2-devel-0:2.42.7-6.el8_10.aarch64","vendor":{"name":"Red Hat"}}},{"id":"075c1819-c183-3b05-8970-71128c36e044","product":{"name":"librsvg2-tools-0:2.42.7-6.el8_10.x86_64","vendor":{"name":"Red Hat"}}},{"id":"136669e0-5981-3d96-87ed-86e3a2c4dc2c","product":{"name":"librsvg2-debugsource-0:2.42.7-6.el8_10.i686","vendor":{"name":"Red Hat"}}},{"id":"17a8ddbd-4a8b-3d11-9dfe-b6428e8db593","product":{"name":"librsvg2-debugsource-0:2.42.7-6.el8_10.s390x","vendor":{"name":"Red Hat"}}},{"id":"2d5cbb85-d3ad-38a7-8132-e13c90176e01","product":{"name":"librsvg2-debugsource-0:2.42.7-6.el8_10.aarch64","vendor":{"name":"Red Hat"}}},{"id":"376480cd-9dab-385b-8033-eec971252fbc","product":{"name":"librsvg2-debuginfo-0:2.42.7-6.el8_10.x86_64","vendor":{"name":"Red Hat"}}},{"id":"400f070b-a0fe-34e2-a134-ee710231b6e2","product":{"name":"librsvg2-tools-0:2.42.7-6.el8_10.ppc64le","vendor":{"name":"Red Hat"}}},{"id":"42502c74-12ea-3437-8094-b091dc90d589","product":{"name":"librsvg2-tools-debuginfo-0:2.42.7-6.el8_10.ppc64le","vendor":{"name":"Red Hat"}}},{"id":"48396c1d-3f19-3330-bbe0-59bd4cc6197b","product":{"name":"librsvg2-tools-0:2.42.7-6.el8_10.aarch64","vendor":{"name":"Red Hat"}}},{"id":"49ff01b9-264a-3173-8799-c353f6da2bdb","product":{"name":"librsvg2-devel-0:2.42.7-6.el8_10.i686","vendor":{"name":"Red Hat"}}},{"id":"529ed98a-f3de-3b03-8676-e9a3d361350a","product":{"name":"librsvg2-debuginfo-0:2.42.7-6.el8_10.i686","vendor":{"name":"Red Hat"}}},{"id":"62798c3d-37b2-3c10-b000-2cc5612929a4","product":{"name":"librsvg2-debugsource-0:2.42.7-6.el8_10.ppc64le","vendor":{"name":"Red Hat"}}},{"id":"664a6476-ad7b-3128-88b3-9b41da4c4f37","product":{"name":"librsvg2-0:2.42.7-6.el8_10.src","vendor":{"name":"Red Hat"}}},{"id":"6f7665cc-f6ba-3af8-bd21-5f4e9bde19a0","product":{"name":"librsvg2-tools-0:2.42.7-6.el8_10.s390x","vendor":{"name":"Red Hat"}}},{"id":"744890a2-54f6-3f78-961f-992650f723c3","product":{"name":"librsvg2-0:2.42.7-6.el8_10.x86_64","vendor":{"name":"Red Hat"}}},{"id":"7b7eeb6f-1a4d-35ad-a549-79fcf6e13d6f","product":{"name":"librsvg2-0:2.42.7-6.el8_10.aarch64","vendor":{"name":"Red Hat"}}},{"id":"7cb85d40-fa3e-375c-84e9-a53f158e0fd2","product":{"name":"librsvg2-debuginfo-0:2.42.7-6.el8_10.s390x","vendor":{"name":"Red Hat"}}},{"id":"7e86ce3e-018e-3641-bba9-8e8e1a39f125","product":{"name":"librsvg2-devel-0:2.42.7-6.el8_10.s390x","vendor":{"name":"Red Hat"}}},{"id":"9682bd6b-6a00-3f70-a754-2eb437b0084f","product":{"name":"librsvg2-devel-0:2.42.7-6.el8_10.x86_64","vendor":{"name":"Red Hat"}}},{"id":"97850ed9-a4a9-3e85-9081-fef53b3e3852","product":{"name":"librsvg2-devel-0:2.42.7-6.el8_10.ppc64le","vendor":{"name":"Red Hat"}}},{"id":"988ee49f-abd1-3c3b-975f-7a61eae01e57","product":{"name":"SUSE Liberty Linux 8","vendor":{"name":"SUSE"}}},{"id":"9a5c5112-46d2-39b0-b0e4-030b241b6198","product":{"name":"librsvg2-0:2.42.7-6.el8_10.ppc64le","vendor":{"name":"Red Hat"}}},{"id":"9ac13088-a54d-3397-bd4b-f0f6e67d3dfa","product":{"name":"librsvg2-debuginfo-0:2.42.7-6.el8_10.ppc64le","vendor":{"name":"Red Hat"}}},{"id":"aba14461-b7ac-36b3-8677-c731bb134f74","product":{"name":"librsvg2-tools-debuginfo-0:2.42.7-6.el8_10.aarch64","vendor":{"name":"Red Hat"}}},{"id":"b67fcd02-83f2-3209-9084-a7cb4816ad5d","product":{"name":"librsvg2-tools-debuginfo-0:2.42.7-6.el8_10.s390x","vendor":{"name":"Red Hat"}}},{"id":"d474fc5d-3d35-3871-b7ba-23112bebb6a2","product":{"name":"librsvg2-0:2.42.7-6.el8_10.i686","vendor":{"name":"Red Hat"}}},{"id":"e07e4291-0120-350d-81b4-8ed2b326031c","product":{"name":"librsvg2-tools-debuginfo-0:2.42.7-6.el8_10.x86_64","vendor":{"name":"Red Hat"}}},{"id":"e1171cc2-33e6-3c09-8936-eaf7c4a6e525","product":{"name":"Red Hat Enterprise Linux AppStream (v. 8)","vendor":{"name":"Red Hat"}}},{"id":"e5c1ac16-ba07-387d-a570-c6d3ef9a713c","product":{"name":"librsvg2-tools-debuginfo-0:2.42.7-6.el8_10.i686","vendor":{"name":"Red Hat"}}},{"id":"fb0535a0-fca5-3016-9050-f8a2b5491bf2","product":{"name":"librsvg2-0:2.42.7-6.el8_10.s390x","vendor":{"name":"Red Hat"}}}]}},{"id":"f23909db-7756-37a9-9de2-fae558d6e030","advisory":{"id":"RHSA-2026:86331","description":"Red Hat Security Advisory: glycin-loaders security update","summary":"An update for glycin-loaders is now available for Red Hat Enterprise Linux 10.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.","datePublished":"Oct 21, 2026, 12:19:36 AM","dateUpdated":"Oct 30, 2026, 12:51:28 AM","baseScore":0.0,"references":"https://access.redhat.com/errata/RHSA-2026:86331\nhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_86331.json\n","aliases":"CVE-2026-96889\n","source":{"id":9,"name":"csaf_redhat"},"advisoryProduct":[{"id":"273dc4a1-c98d-3487-a87b-10ee383dbee0","product":{"name":"Red Hat Enterprise Linux AppStream (v. 10)","vendor":{"name":"Red Hat"}}},{"id":"2e5b74e4-5ff0-3c1b-9571-7f03fdac1b52","product":{"name":"glycin-loaders-debuginfo-0:1.0.1-1.el10_2.2.x86_64","vendor":{"name":"Red Hat"}}},{"id":"3e6386f7-107e-3c96-ad70-9e7cb1e98606","product":{"name":"glycin-loaders-0:1.0.1-1.el10_2.2.x86_64","vendor":{"name":"Red Hat"}}},{"id":"83ed9f68-753f-3490-ab8c-f97f7e584d75","product":{"name":"glycin-loaders-0:1.0.1-1.el10_2.2.src","vendor":{"name":"Red Hat"}}},{"id":"8476407a-2be1-3212-b7b2-172aa6fac2e0","product":{"name":"glycin-loaders-debugsource-0:1.0.1-1.el10_2.2.x86_64","vendor":{"name":"Red Hat"}}},{"id":"ae9de1e2-6265-3b2f-acc6-bba494f63c0e","product":{"name":"glycin-loaders-debuginfo-0:1.0.1-1.el10_2.2.ppc64le","vendor":{"name":"Red Hat"}}},{"id":"b01f402c-428f-34cf-9c64-ee7bc97d7b47","product":{"name":"glycin-loaders-0:1.0.1-1.el10_2.2.ppc64le","vendor":{"name":"Red Hat"}}},{"id":"d26511c1-125f-312e-bc5a-b1359becaf4e","product":{"name":"glycin-loaders-debugsource-0:1.0.1-1.el10_2.2.ppc64le","vendor":{"name":"Red Hat"}}},{"id":"dd131feb-b04b-3fcc-aaea-e6e2d5475c0f","product":{"name":"SUSE Liberty Linux 10","vendor":{"name":"SUSE"}}}]}}]}