pkgsrc changes:
- Remove patches/patch-test-driver: applied upstream
Changes:
2.40.21
-------
- CVE-2019-20446 - Backport the following fixes from 2.46.x:
- #515 - Librsvg now has limits on the number of loaded XML elements,
and the number of referenced elements within an SVG document. This
is to mitigate malicious SVGs which try to consume all memory, and
those which try to consume an exponential amount of CPU time.
- #308 - Fix stack exhaustion with circular references in <use> elements.
- #323 - Fix a denial-of-service condition from exponential explosion
of rendered elements, through nested use of SVG "use" elements in
malicious SVGs. This is similar to the XML "billion laughs attack"
but for SVG instancing.
librsvg is Raph's scalable vector graphics library. It provides support for
SVG graphics, and is used by the GNOME desktop.
This package provides the librsvg library as well as some addons -- a pixbuf
loader and a theme engine -- for the GTK+ toolkit.
This package provides the older 2.40.x branch of librsvg that is written
in plain C.
