RHSA-2020:4709 - Security Advisory

Overview
Updated Packages

Synopsis

Moderate: librsvg2 security update

Type/Severity

Security Advisory: Moderate

Red Hat Insights patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for librsvg2 is now available for Red Hat Enterprise Linux 8.

Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

The librsvg2 packages provide a Scalable Vector Graphics (SVG) library based on the libart library.

Security Fix(es):

librsvg: Resource exhaustion via crafted SVG file with nested patterns (CVE-2019-20446)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.3 Release Notes linked from the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

Red Hat Enterprise Linux for x86_64 8 x86_64
Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.4 x86_64
Red Hat Enterprise Linux Server - AUS 8.4 x86_64
Red Hat Enterprise Linux for IBM z Systems 8 s390x
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 8.4 s390x
Red Hat Enterprise Linux for Power, little endian 8 ppc64le
Red Hat Enterprise Linux for Power, little endian - Extended Update Support 8.4 ppc64le
Red Hat Enterprise Linux Server - TUS 8.4 x86_64
Red Hat Enterprise Linux for ARM 64 8 aarch64
Red Hat Enterprise Linux for ARM 64 - Extended Update Support 8.4 aarch64
Red Hat Enterprise Linux Server (for IBM Power LE) - Update Services for SAP Solutions 8.4 ppc64le
Red Hat Enterprise Linux Server - Update Services for SAP Solutions 8.4 x86_64

Fixes

BZ - 1797608 - CVE-2019-20446 librsvg: Resource exhaustion via crafted SVG file with nested patterns

CVEs

CVE-2019-20446

References

Note: More recent versions of these packages may be available. Click a package name for more details.

Red Hat Enterprise Linux for x86_64 8

SRPM
librsvg2-2.42.7-4.el8.src.rpm	SHA-256: 79614d5ac4b3a446fc025e4e7fca945e8707eee118ebab02028b5cad6b1e9585
x86_64
librsvg2-2.42.7-4.el8.i686.rpm	SHA-256: afc93b8bd9c6da0e66c23c7d8c26d2c479c0deae01b96f9cf2db5fc462d73037
librsvg2-2.42.7-4.el8.x86_64.rpm	SHA-256: b31f76f07a1c6f36288b3112fecc53c3a5e0d9d9437aa44f22a3b055134d370e
librsvg2-debuginfo-2.42.7-4.el8.i686.rpm	SHA-256: cdb9aa34f956df2f5d01a30a74eec42e3bcc19832ac78871e16f8de0d1a01a87
librsvg2-debuginfo-2.42.7-4.el8.x86_64.rpm	SHA-256: 3c40a8ed2ce9aa891646f71e5e2b61cd65adf004aa89d7222bc16e298196190d
librsvg2-debugsource-2.42.7-4.el8.i686.rpm	SHA-256: 361516f77eec96d080d8a9bb8b9ac314a68d61b4af9ec3c0d62c39344a55d415
librsvg2-debugsource-2.42.7-4.el8.x86_64.rpm	SHA-256: ec43fffce8bed7aacb7daa9ebf05f90f79cbf78ce12db7e249fa7ebc35dbd43b
librsvg2-devel-2.42.7-4.el8.i686.rpm	SHA-256: 17185da6fefa2bce7b3b2d9d48387650bd8377ebe591ff8d4a11ca26aecb0ae3
librsvg2-devel-2.42.7-4.el8.x86_64.rpm	SHA-256: 7a056a7c0384475f5005033070ea9d78bf753103b5afd665f7a6ca955b871b8a
librsvg2-tools-2.42.7-4.el8.x86_64.rpm	SHA-256: a398e174aac05abdf7467ea4fd87a1fb865323cfa47d99aad1c2df59f5e4d55a
librsvg2-tools-debuginfo-2.42.7-4.el8.i686.rpm	SHA-256: d771b3c41599a8b9b06ae485b3489ac4ca9a2bf3dbd3266b83da86938fe5c497
librsvg2-tools-debuginfo-2.42.7-4.el8.x86_64.rpm	SHA-256: 047aedc965af74a72b448d99c7fdc0d3500c988da8567b0891820188b82de8a9

Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.4

SRPM
librsvg2-2.42.7-4.el8.src.rpm	SHA-256: 79614d5ac4b3a446fc025e4e7fca945e8707eee118ebab02028b5cad6b1e9585
x86_64
librsvg2-2.42.7-4.el8.i686.rpm	SHA-256: afc93b8bd9c6da0e66c23c7d8c26d2c479c0deae01b96f9cf2db5fc462d73037
librsvg2-2.42.7-4.el8.x86_64.rpm	SHA-256: b31f76f07a1c6f36288b3112fecc53c3a5e0d9d9437aa44f22a3b055134d370e
librsvg2-debuginfo-2.42.7-4.el8.i686.rpm	SHA-256: cdb9aa34f956df2f5d01a30a74eec42e3bcc19832ac78871e16f8de0d1a01a87
librsvg2-debuginfo-2.42.7-4.el8.x86_64.rpm	SHA-256: 3c40a8ed2ce9aa891646f71e5e2b61cd65adf004aa89d7222bc16e298196190d
librsvg2-debugsource-2.42.7-4.el8.i686.rpm	SHA-256: 361516f77eec96d080d8a9bb8b9ac314a68d61b4af9ec3c0d62c39344a55d415
librsvg2-debugsource-2.42.7-4.el8.x86_64.rpm	SHA-256: ec43fffce8bed7aacb7daa9ebf05f90f79cbf78ce12db7e249fa7ebc35dbd43b
librsvg2-devel-2.42.7-4.el8.i686.rpm	SHA-256: 17185da6fefa2bce7b3b2d9d48387650bd8377ebe591ff8d4a11ca26aecb0ae3
librsvg2-devel-2.42.7-4.el8.x86_64.rpm	SHA-256: 7a056a7c0384475f5005033070ea9d78bf753103b5afd665f7a6ca955b871b8a
librsvg2-tools-2.42.7-4.el8.x86_64.rpm	SHA-256: a398e174aac05abdf7467ea4fd87a1fb865323cfa47d99aad1c2df59f5e4d55a
librsvg2-tools-debuginfo-2.42.7-4.el8.i686.rpm	SHA-256: d771b3c41599a8b9b06ae485b3489ac4ca9a2bf3dbd3266b83da86938fe5c497
librsvg2-tools-debuginfo-2.42.7-4.el8.x86_64.rpm	SHA-256: 047aedc965af74a72b448d99c7fdc0d3500c988da8567b0891820188b82de8a9

Red Hat Enterprise Linux Server - AUS 8.4

SRPM
librsvg2-2.42.7-4.el8.src.rpm	SHA-256: 79614d5ac4b3a446fc025e4e7fca945e8707eee118ebab02028b5cad6b1e9585
x86_64
librsvg2-2.42.7-4.el8.i686.rpm	SHA-256: afc93b8bd9c6da0e66c23c7d8c26d2c479c0deae01b96f9cf2db5fc462d73037
librsvg2-2.42.7-4.el8.x86_64.rpm	SHA-256: b31f76f07a1c6f36288b3112fecc53c3a5e0d9d9437aa44f22a3b055134d370e
librsvg2-debuginfo-2.42.7-4.el8.i686.rpm	SHA-256: cdb9aa34f956df2f5d01a30a74eec42e3bcc19832ac78871e16f8de0d1a01a87
librsvg2-debuginfo-2.42.7-4.el8.x86_64.rpm	SHA-256: 3c40a8ed2ce9aa891646f71e5e2b61cd65adf004aa89d7222bc16e298196190d
librsvg2-debugsource-2.42.7-4.el8.i686.rpm	SHA-256: 361516f77eec96d080d8a9bb8b9ac314a68d61b4af9ec3c0d62c39344a55d415
librsvg2-debugsource-2.42.7-4.el8.x86_64.rpm	SHA-256: ec43fffce8bed7aacb7daa9ebf05f90f79cbf78ce12db7e249fa7ebc35dbd43b
librsvg2-devel-2.42.7-4.el8.i686.rpm	SHA-256: 17185da6fefa2bce7b3b2d9d48387650bd8377ebe591ff8d4a11ca26aecb0ae3
librsvg2-devel-2.42.7-4.el8.x86_64.rpm	SHA-256: 7a056a7c0384475f5005033070ea9d78bf753103b5afd665f7a6ca955b871b8a
librsvg2-tools-2.42.7-4.el8.x86_64.rpm	SHA-256: a398e174aac05abdf7467ea4fd87a1fb865323cfa47d99aad1c2df59f5e4d55a
librsvg2-tools-debuginfo-2.42.7-4.el8.i686.rpm	SHA-256: d771b3c41599a8b9b06ae485b3489ac4ca9a2bf3dbd3266b83da86938fe5c497
librsvg2-tools-debuginfo-2.42.7-4.el8.x86_64.rpm	SHA-256: 047aedc965af74a72b448d99c7fdc0d3500c988da8567b0891820188b82de8a9

Red Hat Enterprise Linux for IBM z Systems 8

SRPM
librsvg2-2.42.7-4.el8.src.rpm	SHA-256: 79614d5ac4b3a446fc025e4e7fca945e8707eee118ebab02028b5cad6b1e9585
s390x
librsvg2-2.42.7-4.el8.s390x.rpm	SHA-256: a782e13237ae486585a34267a35932f01184056752309ad925f38d6ba29d6e31
librsvg2-debuginfo-2.42.7-4.el8.s390x.rpm	SHA-256: 2b7c8eb78e8419224cf8dc3e96a2c9bc87e1ecb2e178e80dac1ab8ac02001693
librsvg2-debugsource-2.42.7-4.el8.s390x.rpm	SHA-256: f245937b204aeac6d841d49d4e19ee63d6954431b5f937333e0e2c67f45c65e0
librsvg2-devel-2.42.7-4.el8.s390x.rpm	SHA-256: d33e317625378d65a089bc943e020dad8f09e582e6b916b1c8b2579db571ca9d
librsvg2-tools-2.42.7-4.el8.s390x.rpm	SHA-256: b18d3b63b2fc87430d15ec525e8a4055752b873805374a5ce55d81a09e284e9e
librsvg2-tools-debuginfo-2.42.7-4.el8.s390x.rpm	SHA-256: c6d85ffd0109fc99106d395e2f3c80e65441ca60486ea9eb796dd36e6086f472

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 8.4

SRPM
librsvg2-2.42.7-4.el8.src.rpm	SHA-256: 79614d5ac4b3a446fc025e4e7fca945e8707eee118ebab02028b5cad6b1e9585
s390x
librsvg2-2.42.7-4.el8.s390x.rpm	SHA-256: a782e13237ae486585a34267a35932f01184056752309ad925f38d6ba29d6e31
librsvg2-debuginfo-2.42.7-4.el8.s390x.rpm	SHA-256: 2b7c8eb78e8419224cf8dc3e96a2c9bc87e1ecb2e178e80dac1ab8ac02001693
librsvg2-debugsource-2.42.7-4.el8.s390x.rpm	SHA-256: f245937b204aeac6d841d49d4e19ee63d6954431b5f937333e0e2c67f45c65e0
librsvg2-devel-2.42.7-4.el8.s390x.rpm	SHA-256: d33e317625378d65a089bc943e020dad8f09e582e6b916b1c8b2579db571ca9d
librsvg2-tools-2.42.7-4.el8.s390x.rpm	SHA-256: b18d3b63b2fc87430d15ec525e8a4055752b873805374a5ce55d81a09e284e9e
librsvg2-tools-debuginfo-2.42.7-4.el8.s390x.rpm	SHA-256: c6d85ffd0109fc99106d395e2f3c80e65441ca60486ea9eb796dd36e6086f472

Red Hat Enterprise Linux for Power, little endian 8

SRPM
librsvg2-2.42.7-4.el8.src.rpm	SHA-256: 79614d5ac4b3a446fc025e4e7fca945e8707eee118ebab02028b5cad6b1e9585
ppc64le
librsvg2-2.42.7-4.el8.ppc64le.rpm	SHA-256: 9f1b48a377663a89c751467b8f098eace613a61990ee1dc359da205f5fe3c19d
librsvg2-debuginfo-2.42.7-4.el8.ppc64le.rpm	SHA-256: 5ca9e068e8e233d44148bf489e57a7f4020bd2bb2e80a3dc8101213d2d519d38
librsvg2-debugsource-2.42.7-4.el8.ppc64le.rpm	SHA-256: ea3b2132e9524b11929cc9ac5b256df8fcc0a6aad1a822e1a7a35146697504ea
librsvg2-devel-2.42.7-4.el8.ppc64le.rpm	SHA-256: b2746ab9e2530707643603d0d6b4983c25c564193e6e143fd19fc601f97434d4
librsvg2-tools-2.42.7-4.el8.ppc64le.rpm	SHA-256: 312346f0f177a886490f52d897d8b21c296e8187ad5d1930ed0bd1014dbf31b0
librsvg2-tools-debuginfo-2.42.7-4.el8.ppc64le.rpm	SHA-256: f09fcc04f091ef68edcb8eb360eb5c6b411991e5efc6e1e4a329619871fdab9c

Red Hat Enterprise Linux for Power, little endian - Extended Update Support 8.4

SRPM
librsvg2-2.42.7-4.el8.src.rpm	SHA-256: 79614d5ac4b3a446fc025e4e7fca945e8707eee118ebab02028b5cad6b1e9585
ppc64le
librsvg2-2.42.7-4.el8.ppc64le.rpm	SHA-256: 9f1b48a377663a89c751467b8f098eace613a61990ee1dc359da205f5fe3c19d
librsvg2-debuginfo-2.42.7-4.el8.ppc64le.rpm	SHA-256: 5ca9e068e8e233d44148bf489e57a7f4020bd2bb2e80a3dc8101213d2d519d38
librsvg2-debugsource-2.42.7-4.el8.ppc64le.rpm	SHA-256: ea3b2132e9524b11929cc9ac5b256df8fcc0a6aad1a822e1a7a35146697504ea
librsvg2-devel-2.42.7-4.el8.ppc64le.rpm	SHA-256: b2746ab9e2530707643603d0d6b4983c25c564193e6e143fd19fc601f97434d4
librsvg2-tools-2.42.7-4.el8.ppc64le.rpm	SHA-256: 312346f0f177a886490f52d897d8b21c296e8187ad5d1930ed0bd1014dbf31b0
librsvg2-tools-debuginfo-2.42.7-4.el8.ppc64le.rpm	SHA-256: f09fcc04f091ef68edcb8eb360eb5c6b411991e5efc6e1e4a329619871fdab9c

Red Hat Enterprise Linux Server - TUS 8.4

SRPM
librsvg2-2.42.7-4.el8.src.rpm	SHA-256: 79614d5ac4b3a446fc025e4e7fca945e8707eee118ebab02028b5cad6b1e9585
x86_64
librsvg2-2.42.7-4.el8.i686.rpm	SHA-256: afc93b8bd9c6da0e66c23c7d8c26d2c479c0deae01b96f9cf2db5fc462d73037
librsvg2-2.42.7-4.el8.x86_64.rpm	SHA-256: b31f76f07a1c6f36288b3112fecc53c3a5e0d9d9437aa44f22a3b055134d370e
librsvg2-debuginfo-2.42.7-4.el8.i686.rpm	SHA-256: cdb9aa34f956df2f5d01a30a74eec42e3bcc19832ac78871e16f8de0d1a01a87
librsvg2-debuginfo-2.42.7-4.el8.x86_64.rpm	SHA-256: 3c40a8ed2ce9aa891646f71e5e2b61cd65adf004aa89d7222bc16e298196190d
librsvg2-debugsource-2.42.7-4.el8.i686.rpm	SHA-256: 361516f77eec96d080d8a9bb8b9ac314a68d61b4af9ec3c0d62c39344a55d415
librsvg2-debugsource-2.42.7-4.el8.x86_64.rpm	SHA-256: ec43fffce8bed7aacb7daa9ebf05f90f79cbf78ce12db7e249fa7ebc35dbd43b
librsvg2-devel-2.42.7-4.el8.i686.rpm	SHA-256: 17185da6fefa2bce7b3b2d9d48387650bd8377ebe591ff8d4a11ca26aecb0ae3
librsvg2-devel-2.42.7-4.el8.x86_64.rpm	SHA-256: 7a056a7c0384475f5005033070ea9d78bf753103b5afd665f7a6ca955b871b8a
librsvg2-tools-2.42.7-4.el8.x86_64.rpm	SHA-256: a398e174aac05abdf7467ea4fd87a1fb865323cfa47d99aad1c2df59f5e4d55a
librsvg2-tools-debuginfo-2.42.7-4.el8.i686.rpm	SHA-256: d771b3c41599a8b9b06ae485b3489ac4ca9a2bf3dbd3266b83da86938fe5c497
librsvg2-tools-debuginfo-2.42.7-4.el8.x86_64.rpm	SHA-256: 047aedc965af74a72b448d99c7fdc0d3500c988da8567b0891820188b82de8a9

Red Hat Enterprise Linux for ARM 64 8

SRPM
librsvg2-2.42.7-4.el8.src.rpm	SHA-256: 79614d5ac4b3a446fc025e4e7fca945e8707eee118ebab02028b5cad6b1e9585
aarch64
librsvg2-2.42.7-4.el8.aarch64.rpm	SHA-256: ff8c039edb5c9d2349054136f7175f981c800dfbd740449e2842f5d52bdc5c53
librsvg2-debuginfo-2.42.7-4.el8.aarch64.rpm	SHA-256: 3bbd437d79ac63dc48e1d763d0cb439873438891cb62c9451af8847c1ac8e990
librsvg2-debugsource-2.42.7-4.el8.aarch64.rpm	SHA-256: 25cb134d28633d60e6c8a24a4fc9cdca00cbf41f5fb47a4031b5d29788042298
librsvg2-devel-2.42.7-4.el8.aarch64.rpm	SHA-256: 605c8f26d096ff876254c02cf6cd19404107e33d4bb1facf43ce9a59dc6f8047
librsvg2-tools-2.42.7-4.el8.aarch64.rpm	SHA-256: 25b55260bf2c033e353e7a586d5f4737feed70301a3b0ea58a51dadc7978fb61
librsvg2-tools-debuginfo-2.42.7-4.el8.aarch64.rpm	SHA-256: e54f9bc6e2841805838cd1093dc8cc269dc59974249b2f3f9d9b2b81238a24b4

Red Hat Enterprise Linux for ARM 64 - Extended Update Support 8.4

SRPM
librsvg2-2.42.7-4.el8.src.rpm	SHA-256: 79614d5ac4b3a446fc025e4e7fca945e8707eee118ebab02028b5cad6b1e9585
aarch64
librsvg2-2.42.7-4.el8.aarch64.rpm	SHA-256: ff8c039edb5c9d2349054136f7175f981c800dfbd740449e2842f5d52bdc5c53
librsvg2-debuginfo-2.42.7-4.el8.aarch64.rpm	SHA-256: 3bbd437d79ac63dc48e1d763d0cb439873438891cb62c9451af8847c1ac8e990
librsvg2-debugsource-2.42.7-4.el8.aarch64.rpm	SHA-256: 25cb134d28633d60e6c8a24a4fc9cdca00cbf41f5fb47a4031b5d29788042298
librsvg2-devel-2.42.7-4.el8.aarch64.rpm	SHA-256: 605c8f26d096ff876254c02cf6cd19404107e33d4bb1facf43ce9a59dc6f8047
librsvg2-tools-2.42.7-4.el8.aarch64.rpm	SHA-256: 25b55260bf2c033e353e7a586d5f4737feed70301a3b0ea58a51dadc7978fb61
librsvg2-tools-debuginfo-2.42.7-4.el8.aarch64.rpm	SHA-256: e54f9bc6e2841805838cd1093dc8cc269dc59974249b2f3f9d9b2b81238a24b4

Red Hat Enterprise Linux Server (for IBM Power LE) - Update Services for SAP Solutions 8.4

SRPM
librsvg2-2.42.7-4.el8.src.rpm	SHA-256: 79614d5ac4b3a446fc025e4e7fca945e8707eee118ebab02028b5cad6b1e9585
ppc64le
librsvg2-2.42.7-4.el8.ppc64le.rpm	SHA-256: 9f1b48a377663a89c751467b8f098eace613a61990ee1dc359da205f5fe3c19d
librsvg2-debuginfo-2.42.7-4.el8.ppc64le.rpm	SHA-256: 5ca9e068e8e233d44148bf489e57a7f4020bd2bb2e80a3dc8101213d2d519d38
librsvg2-debugsource-2.42.7-4.el8.ppc64le.rpm	SHA-256: ea3b2132e9524b11929cc9ac5b256df8fcc0a6aad1a822e1a7a35146697504ea
librsvg2-devel-2.42.7-4.el8.ppc64le.rpm	SHA-256: b2746ab9e2530707643603d0d6b4983c25c564193e6e143fd19fc601f97434d4
librsvg2-tools-2.42.7-4.el8.ppc64le.rpm	SHA-256: 312346f0f177a886490f52d897d8b21c296e8187ad5d1930ed0bd1014dbf31b0
librsvg2-tools-debuginfo-2.42.7-4.el8.ppc64le.rpm	SHA-256: f09fcc04f091ef68edcb8eb360eb5c6b411991e5efc6e1e4a329619871fdab9c

Red Hat Enterprise Linux Server - Update Services for SAP Solutions 8.4

SRPM
librsvg2-2.42.7-4.el8.src.rpm	SHA-256: 79614d5ac4b3a446fc025e4e7fca945e8707eee118ebab02028b5cad6b1e9585
x86_64
librsvg2-2.42.7-4.el8.i686.rpm	SHA-256: afc93b8bd9c6da0e66c23c7d8c26d2c479c0deae01b96f9cf2db5fc462d73037
librsvg2-2.42.7-4.el8.x86_64.rpm	SHA-256: b31f76f07a1c6f36288b3112fecc53c3a5e0d9d9437aa44f22a3b055134d370e
librsvg2-debuginfo-2.42.7-4.el8.i686.rpm	SHA-256: cdb9aa34f956df2f5d01a30a74eec42e3bcc19832ac78871e16f8de0d1a01a87
librsvg2-debuginfo-2.42.7-4.el8.x86_64.rpm	SHA-256: 3c40a8ed2ce9aa891646f71e5e2b61cd65adf004aa89d7222bc16e298196190d
librsvg2-debugsource-2.42.7-4.el8.i686.rpm	SHA-256: 361516f77eec96d080d8a9bb8b9ac314a68d61b4af9ec3c0d62c39344a55d415
librsvg2-debugsource-2.42.7-4.el8.x86_64.rpm	SHA-256: ec43fffce8bed7aacb7daa9ebf05f90f79cbf78ce12db7e249fa7ebc35dbd43b
librsvg2-devel-2.42.7-4.el8.i686.rpm	SHA-256: 17185da6fefa2bce7b3b2d9d48387650bd8377ebe591ff8d4a11ca26aecb0ae3
librsvg2-devel-2.42.7-4.el8.x86_64.rpm	SHA-256: 7a056a7c0384475f5005033070ea9d78bf753103b5afd665f7a6ca955b871b8a
librsvg2-tools-2.42.7-4.el8.x86_64.rpm	SHA-256: a398e174aac05abdf7467ea4fd87a1fb865323cfa47d99aad1c2df59f5e4d55a
librsvg2-tools-debuginfo-2.42.7-4.el8.i686.rpm	SHA-256: d771b3c41599a8b9b06ae485b3489ac4ca9a2bf3dbd3266b83da86938fe5c497
librsvg2-tools-debuginfo-2.42.7-4.el8.x86_64.rpm	SHA-256: 047aedc965af74a72b448d99c7fdc0d3500c988da8567b0891820188b82de8a9

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.