[CLSA-2026:1788452050] inkscape: Fix of CVE-2026-4980
Type:
security
Severity:
Moderate
Release date:
2026-09-04 13:54:50 UTC
Description:
- CVE-2026-4980: Limit XInclude processing to shortcut keys files - Drop BuildRequires on aspell-en: the package is not present in AlmaLinux 9.6 (BaseOS, AppStream, CRB, devel) nor in the TuxCare 9.6 repositories; it is an EPEL-only package. It is a runtime dictionary that the build does not consume, and aspell-devel is retained, so the produced binaries are unchanged.
CVEs fixed:
Updated packages:
  • inkscape-1.1.1-6.el9.tuxcare.els1.x86_64.rpm
    sha:34bcc84ab8d3dc39bd02166b6967f1d15554febbb81be6e247b17014e5c648eb
  • inkscape-docs-1.1.1-6.el9.tuxcare.els1.x86_64.rpm
    sha:6a9b296418d815637c9b912ce4f32a946f79497f1dccad76c5728eb05e810a1d
  • inkscape-view-1.1.1-6.el9.tuxcare.els1.x86_64.rpm
    sha:355b4d547a128a8f9212bed39ad264cfa56e6eca21fdbccb7cd60394fe7ff916
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.