Red Hat Security Advisory

RHSA-2023:4809

librsvg2 security update

Released 2023-08-29 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream EUS (v.9.0) librsvg2-2.50.7-1.el9_0.1, librsvg2-devel-2.50.7-1.el9_0.1, librsvg2-tools-2.50.7-1.el9_0.1

Fixes 1 record

TI-2023-20000 CVE-2023-38633 · GHSA-jf6v-gw88-w63q

A directory traversal problem in the URL decoder of librsvg before 2.56.3 could be used…

LOW 29

A directory traversal problem in the URL decoder of librsvg before 2.56.3 could be used by local or remote attackers to disclose files (on the local filesystem outside of the expected area), as demonstrated by href=".?..…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.02325 Published 2023-07-22 Partial fix CWE-22