Red Hat Security AdvisoryRHSA-2014:0127
librsvg2 security update
Released 2014-02-03 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) librsvg2-2.26.0-6.el6_5.3
- Red Hat Enterprise Linux Desktop Optional (v. 6) librsvg2-2.26.0-6.el6_5.3, librsvg2-devel-2.26.0-6.el6_5.3
- Red Hat Enterprise Linux HPC Node (v. 6) librsvg2-2.26.0-6.el6_5.3
- Red Hat Enterprise Linux HPC Node Optional (v. 6) librsvg2-2.26.0-6.el6_5.3, librsvg2-devel-2.26.0-6.el6_5.3
- Red Hat Enterprise Linux Server (v. 6) librsvg2-2.26.0-6.el6_5.3, librsvg2-2.26.0-6.el6_5.3.ppc, librsvg2-devel-2.26.0-6.el6_5.3 +1
- Red Hat Enterprise Linux Workstation (v. 6) librsvg2-2.26.0-6.el6_5.3, librsvg2-devel-2.26.0-6.el6_5.3
Fixes 1 record
Priority LOW 26
GNOME libsvg before 2.39.0 allows remote attackers to read arbitrary files via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) is…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.03197 · Published 2013-10-10 · Fixed CWE-20
