* src/image.c (svg_load_image): Fix off-by-one mistake (bug#80851).
authorEli Zaretskii <eliz@gnu.org>
Sat, 18 Apr 2026 07:35:05 +0000 (10:35 +0300)
committerRob Browning <rlb@defaultvalue.org>
Fri, 21 Aug 2026 17:24:00 +0000 (12:24 -0500)
commitdf007cb127bee7e5c67118cc02cefad9fcdeba6a
treeefab54f1918c8511fa440fc45fa602cb1af8f23a
parent696952c10c44aa1de074a2a0910903e9487ea70b
* src/image.c (svg_load_image): Fix off-by-one mistake (bug#80851).

Origin: upstream, commit: 8f535370b9efbc91673b20c6987a5cae4f6dc562
Added-by: Rob Browning <rlb@defaultvalue.org>
Bug: https://debbugs.gnu.org/80851
Bug-Debian: https://bugs.debian.org/1134692
README-Debian: An SVG-related security vulnerability has been fixed (CVE-2026-6861)
 This vulnerability, a memory corruption issue, could occur when Emacs
 processed specially crafted SVG (Scalable Vector Graphics)
 CSS (Cascading Style Sheets) data. A local user could exploit this by
 convincing a victim to open a malicious SVG file, which might lead to a
 denial of service (DoS) or potentially information disclosure.

Gbp-Pq: Name 0023-src-image.c-svg_load_image-Fix-off-by-one-mistake-bu.patch
src/image.c