librsvg - Debian Package Tracker

general

source: librsvg (main)
version: 2.63.3+dfsg-1
maintainer: Debian GNOME Maintainers (archive) (DMD)
uploaders: Laurent Bigonville [DMD] – Emilio Pozuelo Monfort [DMD] – Jeremy Bícha [DMD]
arch: all any
std-ver: 4.7.4
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

o-o-stable: 2.50.3+dfsg-1+deb11u1
o-o-sec: 2.50.3+dfsg-1+deb11u1
oldstable: 2.54.7+dfsg-1~deb12u1
old-sec: 2.54.7+dfsg-1~deb12u1
stable: 2.60.0+dfsg-1
stable-sec: 2.60.0+dfsg-1+deb13u1
stable-p-u: 2.60.0+dfsg-1+deb13u1
testing: 2.63.3+dfsg-1
unstable: 2.63.3+dfsg-1

versioned links

2.50.3+dfsg-1+deb11u1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
2.54.7+dfsg-1~deb12u1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
2.60.0+dfsg-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
2.60.0+dfsg-1+deb13u1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
2.63.3+dfsg-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

gir1.2-rsvg-2.0
librsvg2-2 (11 bugs: 0, 11, 0, 0)
librsvg2-bin (15 bugs: 0, 12, 3, 0)
librsvg2-common (5 bugs: 0, 5, 0, 0)
librsvg2-dev
librsvg2-doc
librsvg2-tests

action needed

A new upstream version is available: 2.63.4 high

A new upstream version 2.63.4 is available, you should consider packaging it.

Created: 2026-10-27 Last update: 2026-11-01 14:30

lintian reports 1 error and 3 warnings high

Lintian reports 1 error and 3 warnings about this package. You should make the package lintian clean getting rid of them.

Created: 2026-10-20 Last update: 2026-10-27 10:31

1 security issue in bookworm high

There is 1 open security issue in bookworm.

1 important issue:

CVE-2026-96889: A flaw was found in librsvg. When processing an SVG document containing nested XML inclusions (Xincludes) with duplicate entity declarations, a use-after-free error can occur. This vulnerability arises because the library incorrectly frees an XML entity that is still in use by the parser. An attacker could potentially exploit this to cause a denial of service or execute arbitrary code.

Created: 2026-09-24 Last update: 2026-10-26 01:32

Multiarch hinter reports 1 issue(s) normal

There are issues with the multiarch metadata for this package.

librsvg2-tests could be marked Multi-Arch: same

Created: 2026-10-22 Last update: 2026-11-01 14:00

Does not build reproducibly during testing normal

A package building reproducibly enables third parties to verify that the source matches the distributed binaries. It has been identified that this source package produced different results, failed to build or had other issues in a test environment. Please read about how to improve the situation!

Created: 2026-04-15 Last update: 2026-11-01 12:05

version in VCS is newer than in repository, is it time to upload? normal

vcswatch reports that this package seems to have a new changelog entry (version 2.63.3+dfsg-2, distribution UNRELEASED) and new commits in its VCS. You should consider whether it's time to make an upload.

Here are the relevant commit messages:

commit 518103ee5a622f255a99779411f5a34c8e78a19e
Author: Jeremy Bícha <jbicha@ubuntu.com>
Date:   Sat Oct 31 16:01:34 2026 +0100

    Update lintian override syntax
    
    Gbp-Dch: Ignore

commit 2ff5ef3e36e4e9f80924a51fa0532b2aec4511dc
Author: Jeremy Bícha <jbicha@ubuntu.com>
Date:   Sat Oct 31 14:24:40 2026 +0100

    Update changelog
    
    since we'll be importing a new upstream version soon

commit a55a5a2964c3366e4eac692f1b2c4e33319d8ca4
Author: Jeremy Bícha <jbicha@ubuntu.com>
Date:   Sat Oct 31 14:23:53 2026 +0100

    Update debian/README.source to suggest that vendoring be done
    
    from an Ubuntu system

commit 4ed73c0c69c13d7839eeaf7595452adc2a067da4
Author: Jeremy Bícha <jbicha@ubuntu.com>
Date:   Sat Oct 31 14:20:56 2026 +0100

    Stop disabling avif support for Ubuntu
    
    It looks like avif is ready for promotion to Ubuntu main
    https://launchpad.net/bugs/2130005

Created: 2026-10-31 Last update: 2026-10-31 16:33

news

[rss feed]

[2026-10-26] librsvg 2.63.3+dfsg-1 MIGRATED to testing (Debian testing watch)
[2026-10-19] Accepted librsvg 2.63.3+dfsg-1 (source) into unstable (Jeremy Bícha)
[2026-10-17] Accepted librsvg 2.60.0+dfsg-1+deb13u1 (source) into proposed-updates (Debian FTP Masters) (signed by: Moritz Mühlenhoff)
[2026-10-12] Accepted librsvg 2.60.0+dfsg-1+deb13u1 (source) into stable-security (Debian FTP Masters) (signed by: Moritz Mühlenhoff)
[2026-10-10] librsvg 2.63.2+dfsg-1 MIGRATED to testing (Debian testing watch)
[2026-10-03] Accepted librsvg 2.63.2+dfsg-1 (source) into unstable (Jeremy Bícha)
[2026-04-14] librsvg 2.62.1+dfsg-1 MIGRATED to testing (Debian testing watch)
[2026-04-08] Accepted librsvg 2.62.1+dfsg-1 (source) into unstable (Jeremy Bícha)
[2025-12-18] librsvg 2.61.3+dfsg-3 MIGRATED to testing (Debian testing watch)
[2025-12-10] Accepted librsvg 2.61.3+dfsg-3 (source) into unstable (Jeremy Bícha)
[2025-11-11] librsvg 2.61.3+dfsg-2 MIGRATED to testing (Debian testing watch)
[2025-11-04] Accepted librsvg 2.61.3+dfsg-2 (source) into unstable (Jeremy Bícha)
[2025-11-04] Accepted librsvg 2.61.3+dfsg-1 (source) into experimental (Jeremy Bícha)
[2025-10-28] Accepted librsvg 2.61.2+dfsg-1 (source) into experimental (Jeremy Bícha)
[2025-03-24] librsvg 2.60.0+dfsg-1 MIGRATED to testing (Debian testing watch)
[2025-03-19] Accepted librsvg 2.60.0+dfsg-1 (source) into unstable (Jeremy Bícha) (signed by: Jeremy Bicha)
[2025-02-17] librsvg 2.59.90+dfsg-2 MIGRATED to testing (Debian testing watch)
[2025-02-12] Accepted librsvg 2.59.90+dfsg-2 (source) into unstable (Jeremy Bícha) (signed by: Jeremy Bicha)
[2025-02-11] Accepted librsvg 2.59.90+dfsg-1 (source) into experimental (Jeremy Bícha) (signed by: Jeremy Bicha)
[2024-11-26] Accepted librsvg 2.59.2+dfsg-1 (source) into unstable (Nathan Pratta Teodosio) (signed by: Sebastien Bacher)
[2024-10-06] librsvg 2.59.1+dfsg-1 MIGRATED to testing (Debian testing watch)
[2024-09-30] Accepted librsvg 2.59.1+dfsg-1 (source) into unstable (Jeremy Bícha) (signed by: Jeremy Bicha)
[2024-09-20] librsvg 2.59.0+dfsg-3 MIGRATED to testing (Debian testing watch)
[2024-09-14] Accepted librsvg 2.59.0+dfsg-3 (source) into unstable (Jeremy Bícha) (signed by: Jeremy Bicha)
[2024-09-14] Accepted librsvg 2.59.0+dfsg-2 (source) into unstable (Jeremy Bícha) (signed by: Jeremy Bicha)
[2024-09-13] Accepted librsvg 2.59.0+dfsg-1 (source) into experimental (Jeremy Bícha) (signed by: Jeremy Bicha)
[2024-09-11] Accepted librsvg 2.58.94+dfsg-3 (source) into experimental (Jeremy Bícha) (signed by: Jeremy Bicha)
[2024-09-10] Accepted librsvg 2.58.94+dfsg-2 (source) into experimental (Jeremy Bícha) (signed by: Jeremy Bicha)
[2024-09-04] Accepted librsvg 2.58.94+dfsg-1 (source) into experimental (Alessandro Astone) (signed by: Jeremy Bicha)
[2024-08-27] Accepted librsvg 2.58.93+dfsg-5 (source) into experimental (Jeremy Bícha) (signed by: Jeremy Bicha)

bugs [bug history graph]

all: 38 39
RC: 1
I&N: 33 34
M&W: 4
F&P: 0
patch: 0

links

homepage
lintian (1, 3)
buildd: logs, reproducibility, cross
popcon
browse source code
other distros
security tracker
debian patches
debci

ubuntu

[Information about Ubuntu for Debian Developers]

version: 2.63.3+dfsg-1
34 bugs (1 patch)