CVE:CVE-2019-20446
CNNVD:CNNVD-202002-004
librsvg是GNOME的将 SVG 图像渲染到 Cairo 表面的库。GNOME 使用它来呈现 SVG 图标。在 GNOME 之外，其他桌面环境也将其用于类似目的。维基媒体将其用于维基百科的 SVG 图表。
GNOME librsvg 2.46.2之前版本中的xml.rs文件存在资源管理错误漏洞。攻击者可借助特制的SVG文件利用该漏洞造成拒绝服务。
solution:Upgrade gnome librsvg to a higher version than 2.40.21,2.42.8,2.44.16,and avoid the version (,2.40.21),[2.42.0,2.42.8),[2.44.0,2.44.16); Upgrade opensuse leap to a higher version than 15.1,and avoid the version 15.1; Upgrade fedoraproject fedora to a higher version than 30,31,and avoid the version 30,31; Upgrade debian debian_linux to a higher version than 9.0,and avoid the version 9.0; Upgrade canonical ubuntu_linux to a higher version than 16.04,18.04,and avoid the version 16.04,18.04; Upgrade netapp active_iq_unified_manager to a higher version than -