Skip to content

2.61.5

@federicomenaquintero federicomenaquintero tagged this 25 Sep 21:34
==============

librsvg crate version 2.61.5

librsvg-rebind crate version 0.2.1

This is a security release for bug #1241, RUSTSEC-2026-0305 / CVE-2026-96889:

- #1241: Fix use-after-free when there are duplicate XML entities in
  nested Xinclude documents.  Thanks to Rafael B. Dias for reporting
  this in detail.

- Dependency updates: lopdf for RUSTSEC-2026-0187, crossbeam-epoch for
  RUSTSEC-2026-0204.

- The minimum supported Rust version (MSRV) is 1.89.0.
Assets 2
Loading