已开启
fix(cve): 修复 CVE-2026-96889 在 librsvg2 中的漏洞 #106
infra_team创建于 9月30日
fix(cve): 修复 CVE-2026-96889 在 librsvg2 中的漏洞 #106
已开启
共 3 个文件变更+9-5
| @@ -1,3 +1,3 @@ | |||
| 1 | version https://git-lfs.github.com/spec/v1 | 1 | version https://git-lfs.github.com/spec/v1 |
| 2 | -oid sha256:cab7f7d1326fb001e4eb9f37990de66d4578a5f48465507471a69322d8b326e3 | 2 | +oid sha256:852b18e1a00b8605528825a27dc7748bff2a5dd254028f59dc22a34ea57e81b6 |
| 3 | -size 6766516 | 3 | +size 6768408 |
| @@ -3,7 +3,7 @@ | |||
| 3 | %global cairo_version 1.18.0 | 3 | %global cairo_version 1.18.0 |
| 4 | 4 | ||
| 5 | Name: librsvg2 | 5 | Name: librsvg2 |
| 6 | -Version: 2.63.0 | 6 | +Version: 2.63.2 |
| 7 | Release: 1 | 7 | Release: 1 |
| 8 | Summary: An SVG library based on cairo | 8 | Summary: An SVG library based on cairo |
| 9 | License: %{shrink: | 9 | License: %{shrink: |
| @@ -109,6 +109,10 @@ rm -vf .cargo Cargo.lock | |||
| 109 | %{_mandir}/man1/*.1* | 109 | %{_mandir}/man1/*.1* |
| 110 | 110 | ||
| 111 | %changelog | 111 | %changelog |
| 112 | +* Wed Sep 30 2026 infra_team <zhaiwenjie1@huawei.com> - 2.63.2-1 | ||
| 113 | +- update to 2.63.2 | ||
| 114 | +- fix CVE-2026-96889 (use-after-free when XML includes have duplicated entities) | ||
| 115 | + | ||
| 112 | * Thu Sep 10 2026 Funda Wang <fundawang@yeah.net> - 2.63.0-1 | 116 | * Thu Sep 10 2026 Funda Wang <fundawang@yeah.net> - 2.63.0-1 |
| 113 | - update to 2.63.0 | 117 | - update to 2.63.0 |
| 114 | 118 | ||