ALSA-2026:86331

[ALSA-2026:86331] Important: glycin-loaders security update

Type:

security

Severity:

important

Release date:

2026-10-22

Description:

Sandboxed and extendable image decoding.  

Security Fix(es):  

  * librsvg: Use-after-free when XML includes have duplicated entities (CVE-2026-96889,RUSTSEC-2026-0305)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

References:

Updated packages listed below:

Architecture	Package	Checksum
ppc64le	glycin-loaders-1.0.1-1.el10_2.2.ppc64le.rpm	29115f71353e0f9a85ef9b1a8a729aa1ed500ffefe7ba4ac284099edd51a5c38
x86_64	glycin-loaders-1.0.1-1.el10_2.2.x86_64.rpm	11ef5e2ffcd9a93ecbbed7cbb8066605915593feb027de50fc78b6830bfdb2f7
x86_64_v2	glycin-loaders-1.0.1-1.el10_2.2.x86_64_v2.rpm	9ef98813c712703755ec88975333c9244d9efa5193140b9766ea69d62876b698

Notes:

This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.