diff options
author | Federico Mena Quintero <federico@gnome.org> | 2019-10-28 17:14:32 -0600 |
---|---|---|
committer | Federico Mena Quintero <federico@gnome.org> | 2019-10-28 17:26:07 -0600 |
commit | a11f5d68e555c5231d0adcbaf83d963e53c65764 (patch) | |
tree | 20e15df03b2d94e3d8efab5910555ae60ac343f6 | |
parent | 8d97c1d6ca9773fbb3cb0f9a567a790399053812 (diff) | |
download | librsvg-a11f5d68e555c5231d0adcbaf83d963e53c65764.tar.gz |
Update NEWS2.47.0
-rw-r--r-- | NEWS | 15 |
1 files changed, 15 insertions, 0 deletions
@@ -25,6 +25,21 @@ Version 2.47.0 is to mitigate malicious SVGs which try to consume all memory, and those which try to consume an exponential amount of CPU time. +- #521 - Compute geometries correctly if there is a viewBox attribute. + +- #308 - Fix stack exhaustion with circular references in <use> elements. + +- Consistently use the LGPL 2.1 wherever it is mentioned. + +- Patterns and gradients reused across more than one element will only + get resolved once now; this should make things marginally faster for + patterns or gradients with fallbacks. + +- #515 - Librsvg now has limits on the number of loaded XML elements, + and the number of referenced elements within an SVG document. This + is to mitigate malicious SVGs which try to consume all memory, and + those which try to consume an exponential amount of CPU time. + - #506 - Fix empty patterns which reference a fallback pattern with children. |