An update for librsvg2 is now available for openEuler-24.03-LTS-SP1 Security Advisory openeuler-security@openeuler.org openEuler security committee openEuler-SA-2026-4263 Final 1.0 1.0 2026-10-16 Initial 2026-10-16 2026-10-16 openEuler SA Tool V1.0 2026-10-16 librsvg2 security update An update for librsvg2 is now available for openEuler-24.03-LTS-SP1 An SVG library based on cairo. Security Fix(es): A flaw was found in librsvg. When processing an SVG document containing nested XML inclusions (Xincludes) with duplicate entity declarations, a use-after-free error can occur. This vulnerability arises because the library incorrectly frees an XML entity that is still in use by the parser. An attacker could potentially exploit this to cause a denial of service or execute arbitrary code.(CVE-2026-96889) An update for librsvg2 is now available for openEuler-24.03-LTS-SP1. openEuler Security has rated this update as having a security impact of high. A Common Vunlnerability Scoring System(CVSS)base score,which gives a detailed severity rating, is available for each vulnerability from the CVElink(s) in the References section. High librsvg2 https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4263 https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-96889 https://nvd.nist.gov/vuln/detail/CVE-2026-96889 openEuler-24.03-LTS-SP1 librsvg2-2.57.1-7.oe2403sp1.src.rpm librsvg2-2.57.1-7.oe2403sp1.x86_64.rpm librsvg2-debuginfo-2.57.1-7.oe2403sp1.x86_64.rpm librsvg2-debugsource-2.57.1-7.oe2403sp1.x86_64.rpm librsvg2-devel-2.57.1-7.oe2403sp1.x86_64.rpm librsvg2-tools-2.57.1-7.oe2403sp1.x86_64.rpm librsvg2-help-2.57.1-7.oe2403sp1.noarch.rpm librsvg2-2.57.1-7.oe2403sp1.aarch64.rpm librsvg2-debuginfo-2.57.1-7.oe2403sp1.aarch64.rpm librsvg2-debugsource-2.57.1-7.oe2403sp1.aarch64.rpm librsvg2-devel-2.57.1-7.oe2403sp1.aarch64.rpm librsvg2-tools-2.57.1-7.oe2403sp1.aarch64.rpm A flaw was found in librsvg. When processing an SVG document containing nested XML inclusions (Xincludes) with duplicate entity declarations, a use-after-free error can occur. This vulnerability arises because the library incorrectly frees an XML entity that is still in use by the parser. An attacker could potentially exploit this to cause a denial of service or execute arbitrary code. 2026-10-16 CVE-2026-96889 openEuler-24.03-LTS-SP1 High 7.8 AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H librsvg2 security update 2026-10-16 https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4263