Skip to content

2.60.3

@federicomenaquintero federicomenaquintero tagged this 28 Sep 21:49
==============

librsvg crate version 2.60.3

librsvg-rebind crate version 0.1.0

This is a security release for bug #1241, RUSTSEC-2026-0305 / CVE-2026-96889:

- #1241: Fix use-after-free when there are duplicate XML entities in
  nested Xinclude documents.  Thanks to Rafael B. Dias for reporting
  this in detail.

- Dependency updates: lopdf for RUSTSEC-2026-0187, crossbeam-epoch for
  RUSTSEC-2026-0204, time for RUSTSEC-2026-0009.

- The minimum supported Rust version (MSRV) is 1.89.0.
Assets 2
Loading