File _patchinfo of Package patchinfo.42172

<patchinfo incident="42172">
  <issue tracker="bnc" id="1243867">VUL-0: CVE-2024-12224: librsvg: idna: idna accepts Punycode labels that do not produce any non-ASCII when decoded</issue>
  <issue tracker="cve" id="2024-12224">VUL-0: CVE-2024-12224: librsvg: idna: idna accepts Punycode labels that do not produce any non-ASCII when decoded</issue>
  <packager>federico-mena</packager>
  <rating>moderate</rating>
  <category>security</category>
  <summary>Security update for librsvg</summary>
  <description>This update for librsvg fixes the following issues:

Update to version 2.57.4 - bsc#1243867:

  + CVE-2024-12224: RUSTSEC-2024-0421 - idna accepts Punycode labels that do not produce any non-ASCII when decoded.
  + RUSTSEC-2024-0404 - Unsoundness in anstream.
</description>
</patchinfo>
openSUSE Build Service is sponsored by