Back Linuxsecurity Oracle librsvg2 Update Fixes XML Entity Use-After
Two serious PHP flaws could let an attacker run code without logging in. See which setups and PHP versions are affected ×
[2.50.7-3.1] - CVE-2026-96889 librsvg2: Use-after-free when XML includes have duplicated entities entities
[2.50.7-3.1] - CVE-2026-96889 librsvg2: Use-after-free when XML includes have duplicated entities entities
librsvg2-2.50.7-3.el9_8.1.i686.rpm librsvg2-2.50.7-3.el9_8.1.x86_64.rpm librsvg2-devel-2.50.7-3.el9_8.1.i686.rpm librsvg2-devel-2.50.7-3.el9_8.1.x86_64.rpm librsvg2-tools-2.50.7-3.el9_8.1.x86_64.rpm
librsvg2-2.50.7-3.el9_8.1.i686.rpm librsvg2-2.50.7-3.el9_8.1.x86_64.rpm librsvg2-devel-2.50.7-3.el9_8.1.i686.rpm librsvg2-devel-2.50.7-3.el9_8.1.x86_64.rpm librsvg2-tools-2.50.7-3.el9_8.1.x86_64.rpm
librsvg2-2.50.7-3.el9_8.1.aarch64.rpm librsvg2-devel-2.50.7-3.el9_8.1.aarch64.rpm librsvg2-tools-2.50.7-3.el9_8.1.aarch64.rpm
librsvg2-2.50.7-3.el9_8.1.aarch64.rpm librsvg2-devel-2.50.7-3.el9_8.1.aarch64.rpm librsvg2-tools-2.50.7-3.el9_8.1.aarch64.rpm
Related CVEs: CVE-2026-96889
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
The full story
This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.
