Summary
The librsvg2 packages provide a Scalable Vector Graphics (SVG) library based on the libart library.
Security Fix(es):
* librsvg: Arbitrary file read when xinclude href has special characters (CVE-2023-38633)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux · 9 | librsvg2 | 2.50.7-1.el9_2.1 |
| AlmaLinux · 9 | librsvg2-devel | 2.50.7-1.el9_2.1 |
| AlmaLinux · 9 | librsvg2-tools | 2.50.7-1.el9_2.1 |
Vulnerabilities 1
-
Unscored —
A directory traversal problem in the URL decoder of librsvg before 2.56.3 could be used by local or remote attackers to…