MGASA-2015-0100

Updated librsvg packages fix security vulnerabilities

No scoreFix available

Atte Kettunen's fuzz testing found several vulnerabilities in librsvg:

Invalid memory access caused by incorrect handling of a pattern paint server with an xlink:href to a unexpected type (bgo#744299)
Infinite loop in the handling of gradients (bgo#738169)
Heap-buffer-overflow when there's a missing point in a point-list (bgo#738050)
Out of bounds memory access when clipping (bgo#703102)
Integer overflow in the convolution matrix filter code (commit 53c50c)
Fix double g_free() when processing stroke-dasharray (bgo#744688)

What each source reports

OSV No score

Updated librsvg packages fix security vulnerabilities

Atte Kettunen's fuzz testing found several vulnerabilities in librsvg:

Invalid memory access caused by incorrect handling of a pattern paint server with an xlink:href to a unexpected type (bgo#744299)
Infinite loop in the handling of gradients (bgo#738169)
Heap-buffer-overflow when there's a missing point in a point-list (bgo#738050)
Out of bounds memory access when clipping (bgo#703102)
Integer overflow in the convolution matrix filter code (commit 53c50c)
Fix double g_free() when processing stroke-dasharray (bgo#744688)

Record: MGASA-2015-0100
Updated: 2026-11-02

Affected packages

Affected packages
Package	Affected	Fixed
`librsvg` Mageia:4	before 2.39.0-1.2.mga4	2.39.0-1.2.mga4

History

History
Recorded	Changed	Sources
Nov 2, 2026	first indexed	OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

MGASA-2015-0100 is a vulnerability with no CVSS score yet in librsvg, published March 8, 2015. No source lists public exploit code. Fixed in librsvg 2.39.0-1.2.mga4.

What each source reports

Affected packages

History

In short

References