[From nobody Sat Oct 17 15:34:42 2026 Received: (at 1148902-close) by bugs.debian.org; 17 Oct 2026 14:33:40 +0000 X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02 (2024-03-25) on buxtehude.debian.org X-Spam-Level: X-Spam-Status: No, score=-114.2 required=4.0 tests=ALL_TRUSTED,BAYES_00, DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FVGT_m_MULTI_ODD, HAS_BUG_NUMBER,MD5_SHA1_SUM,PGPSIGNATURE,SPF_HELO_PASS,SPF_PASS, USER_IN_DKIM_WELCOMELIST autolearn=ham autolearn_force=no version=4.0.1-bugs.debian.org_2005_01_02 X-Spam-Bayes: score:0.0000 Tokens: new, 80; hammy, 150; neutral, 125; spammy, 0. spammytokens: hammytokens:0.000-+--HX-Debian:DAK, 0.000-+--H*rp:D*ftp-master.debian.org, 0.000-+--UD:debian.tar.xz, 0.000-+--H*r:sk:fasolo., 0.000-+--H*MI:fasolo Return-path: <envelope@ftp-master.debian.org> Received: from mailly.debian.org ([2001:41b8:202:deb:6564:a62:52c3:4b72]:38782) by buxtehude.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1xI5Tg-000Fl1-1I for 1148902-close@bugs.debian.org; Sat, 17 Oct 2026 14:33:40 +0000 Received: via submission from C=NA, ST=NA, L=Ankh Morpork, O=Debian SMTP, OU=Debian SMTP CA, CN=fasolo.debian.org, EMAIL=hostmaster@fasolo.debian.org (verified) by mailly.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1xI5Tf-008lZb-0Q for 1148902-close@bugs.debian.org; Sat, 17 Oct 2026 14:33:39 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ftp-master.debian.org; s=smtpauto.fasolo; h=Date:Message-Id:Content-Type: Subject:MIME-Version:To:Reply-To:From:Cc:Content-Transfer-Encoding:Content-ID :Content-Description:In-Reply-To:References; bh=W6eFT4daztb05BowprV9yZfx1jYjL8qT2SakfEL4EVM=; b=i+bjon7PBKvk0IoUZGeMY9NvyX oRZQ1DOYLvJRD24/HnwWEPIkHXy2QdodlUirjxPxkMkpO2F07S8tGzKob65jbTzZ1kYhoXGwK9tGz qKVe9dzdjsBDYHtNwWOpbOu06gXDbTkc+ZEIf92GqxzHPm1T02aZJniymgwt9BkzhJhd56z4Ac1F3 5x4sls/Li1Z4/V7YpMp3Ucp/Qsp/0nZFbDpaW9PCuehMONvVWhkxok5NNbh5jY/+fmi9r2KsEUwEz eRFBOGRDcgl1gDPiQqW9UUFwfSiHrNw+xHwpzRlyvHxwWFKSb2Ndsf4ELcBhZftiD2AzLYnMqz+RF KEU8tXpg==; Received: from dak by fasolo.debian.org with local (Exim 4.98.2) (envelope-from <envelope@ftp-master.debian.org>) id 1xI5Te-0000000Bp30-1K78; Sat, 17 Oct 2026 14:33:38 +0000 From: Debian FTP Masters <ftpmaster@ftp-master.debian.org> Reply-To: =?utf-8?q?Moritz_M=C3=BChlenhoff?= <jmm@debian.org> To: 1148902-close@bugs.debian.org X-DAK: dak process-policy X-Debian: DAK X-Debian-Package: librsvg Debian: DAK Debian-Changes: librsvg_2.60.0+dfsg-1+deb13u1_source.changes Debian-Source: librsvg Debian-Version: 2.60.0+dfsg-1+deb13u1 Debian-Architecture: source Debian-Suite: proposed-updates Debian-Archive-Action: accept MIME-Version: 1.0 Subject: Bug#1148902: fixed in librsvg 2.60.0+dfsg-1+deb13u1 Content-Type: multipart/signed; micalg="pgp-sha256"; protocol="application/pgp-signature"; boundary="===============5903294691722439044==" Message-Id: <E1xI5Te-0000000Bp30-1K78@fasolo.debian.org> Date: Sat, 17 Oct 2026 14:33:38 +0000 --===============5903294691722439044== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Source: librsvg Source-Version: 2.60.0+dfsg-1+deb13u1 Done: Moritz M=C3=BChlenhoff <jmm@debian.org> We believe that the bug you reported is fixed in the latest version of librsvg, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 1148902@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Moritz M=C3=BChlenhoff <jmm@debian.org> (supplier of updated librsvg package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmaster@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 07 Oct 2026 00:03:53 +0200 Source: librsvg Architecture: source Version: 2.60.0+dfsg-1+deb13u1 Distribution: trixie-security Urgency: medium Maintainer: Debian GNOME Maintainers <pkg-gnome-maintainers@lists.alioth.debi= an.org> Changed-By: Moritz M=C3=BChlenhoff <jmm@debian.org> Closes: 1148902 Changes: librsvg (2.60.0+dfsg-1+deb13u1) trixie-security; urgency=3Dmedium . * CVE-2026-96889 (Closes: #1148902) Checksums-Sha1: 202c730587c076f7c93b2c579bc5abf4c05b41cb 3089 librsvg_2.60.0+dfsg-1+deb13u1.= dsc d5bede0ff479277fc8578bc89f328de79290fbfd 6735208 librsvg_2.60.0+dfsg.orig.ta= r.xz 5c20fd47882d4627d52567c3431fc149311a6aeb 10833628 librsvg_2.60.0+dfsg-1+deb1= 3u1.debian.tar.xz b606b96d71b6b8a5d036adb7d113318a4fb87f24 16154 librsvg_2.60.0+dfsg-1+deb13u1= _amd64.buildinfo Checksums-Sha256: 1653a531d1e0374318197cc008c3b9a4286d5e178d34c52a38f2b867d4f56fc2 3089 librsv= g_2.60.0+dfsg-1+deb13u1.dsc 1b9f126ad3115e4126c682f3011023a05dcf19a69e5e878fbffb420ade671b81 6735208 lib= rsvg_2.60.0+dfsg.orig.tar.xz 8ba361c954a3337a0257ce46960bfc874c99912381b9342a475db6c6422203bf 10833628 li= brsvg_2.60.0+dfsg-1+deb13u1.debian.tar.xz 7dbffe4d1142bfea2a908578688bb57f981c0f49b160af3b716c14ab6ba3ae2e 16154 librs= vg_2.60.0+dfsg-1+deb13u1_amd64.buildinfo Files: 7d08d16f04427f870d116182b24e13ac 3089 libs optional librsvg_2.60.0+dfsg-1+de= b13u1.dsc 81c109a434a07a979ef33b3294d5e447 6735208 libs optional librsvg_2.60.0+dfsg.o= rig.tar.xz 794c5ba3e03ddc856fd0ae1c1daebc9c 10833628 libs optional librsvg_2.60.0+dfsg-= 1+deb13u1.debian.tar.xz 13247c1cc7be116accfc586e4ee14a05 16154 libs optional librsvg_2.60.0+dfsg-1+d= eb13u1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEtuYvPRKsOElcDakFEMKTtsN8TjYFAmrGiZEACgkQEMKTtsN8 Tja9SQ//UDqnGxuMhcjHRlbITvbgOAyNBPL0ywLTelG7hQPv8boQydjTBPTBeI2C 3vSlif9LOCVFmrQQyZlNlsiUKUy5CdgZ+MJw3/BYmChtEe3sZvmZMKm/tV+V04X0 hWWG9BFbMCMmEZTV7bor8ycrtWrse4r15gSDWT9k39tmBEdu015vgnXdYJMgYUNw lsB3THpwkZoy3Ws9DmEZ+iHfNTNIYiYv4DbfIkhqJU6dHi9xafkB2TiNszgQJdkc yVIHDDemko36wHUPccxSNbTARF1jE5q/HCvPAmovX0GGuBo9HGCuDMArcwtRaSJx di46pf8ZnDnSsGpdLlcRyWSc2UDPoML87SO9yDNXZqd3Q6TAfxrkXDOi6yhUGE4z SXdEJJVlch34tq+VgKwKJoWsA7gspOte/FLknpDb3p3vkSwLzQuBgmnun01cK3vL N/HZRSkqeepU0eLQRBkXs8lwfjohjv1G3b+8EeISo07JMTyStnAtV/0F1sTGWQ+q eSn7OY/RF7r2WpjmdyTlQXoQmxhe+e5WJ8C2ygDWsEjvKdMDT9/Q3/4/qpbpzmeu gfj+ry5KFWqaZqbFV1S6ff3gL1eVMx9CJmzC2EdszRpjhkQzeOUMu0W6Wpp0boUY EXaTqzxkA2IhzM8SHOwjA+CSfEmyLVZziltD0Fb9P4JFni1at9M=3D =3D5cKZ -----END PGP SIGNATURE----- --===============5903294691722439044== Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCatOHQgAKCRCb9qggYcy5 IW+3AP4jDJodo4BOv6Xi1waF41d7iMGuD0Fa657lnJpaRG7cwgEAnc9CNCs1Wc8Q oH41H39iVhyuDJs40QPFDJyEw9Qvrw0= =Wi9E -----END PGP SIGNATURE----- --===============5903294691722439044==-- ]