Lucene search
AlmaLinuxALSA-2023:5081HistorySep 12, 2023 - 12:00 a.m.
Moderate: librsvg2 security update
2023-09-1200:00:00
errata.almalinux.org
4
librsvg2
security update
scalable vector graphics
cve-2023-38633
CVSS3
5.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS
0.002
Percentile
52.4%
The librsvg2 packages provide a Scalable Vector Graphics (SVG) library based on the libart library.
Security Fix(es):
- librsvg: Arbitrary file read when xinclude href has special characters (CVE-2023-38633)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| almalinux | 9 | i686 | librsvg2-devel | < 2.50.7-1.el9_2.1 | librsvg2-devel-2.50.7-1.el9_2.1.i686.rpm |
| almalinux | 9 | i686 | librsvg2 | < 2.50.7-1.el9_2.1 | librsvg2-2.50.7-1.el9_2.1.i686.rpm |
| almalinux | 9 | x86_64 | librsvg2-tools | < 2.50.7-1.el9_2.1 | librsvg2-tools-2.50.7-1.el9_2.1.x86_64.rpm |
| almalinux | 9 | x86_64 | librsvg2-devel | < 2.50.7-1.el9_2.1 | librsvg2-devel-2.50.7-1.el9_2.1.x86_64.rpm |
| almalinux | 9 | x86_64 | librsvg2 | < 2.50.7-1.el9_2.1 | librsvg2-2.50.7-1.el9_2.1.x86_64.rpm |
| almalinux | 9 | ppc64le | librsvg2-devel | < 2.50.7-1.el9_2.1 | librsvg2-devel-2.50.7-1.el9_2.1.ppc64le.rpm |
| almalinux | 9 | ppc64le | librsvg2 | < 2.50.7-1.el9_2.1 | librsvg2-2.50.7-1.el9_2.1.ppc64le.rpm |
| almalinux | 9 | ppc64le | librsvg2-tools | < 2.50.7-1.el9_2.1 | librsvg2-tools-2.50.7-1.el9_2.1.ppc64le.rpm |
| almalinux | 9 | aarch64 | librsvg2 | < 2.50.7-1.el9_2.1 | librsvg2-2.50.7-1.el9_2.1.aarch64.rpm |
| almalinux | 9 | aarch64 | librsvg2-tools | < 2.50.7-1.el9_2.1 | librsvg2-tools-2.50.7-1.el9_2.1.aarch64.rpm |
Related
alpinelinux
alpinelinux
CVE-2023-38633
2023-07-22 17:15:09
oraclelinux
oraclelinux
librsvg2 security update
2023-09-13 00:00:00
nessus
nessus
Oracle Linux 9 : librsvg2 (ELSA-2023-5081)
2023-09-13 00:00:00
AlmaLinux 9 : librsvg2 (ALSA-2023:5081)
2023-09-14 00:00:00
SUSE SLES15 / openSUSE 15 Security Update : librsvg (SUSE-SU-2023:3208-1)
2023-08-08 00:00:00
osv
osv
Moderate: librsvg2 security update
2023-09-12 00:00:00
librsvg - security update
2023-08-27 00:00:00
librsvg vulnerability
2023-08-01 11:43:51
prion
prion
Directory traversal
2023-07-22 17:15:00
ubuntucve
ubuntucve
CVE-2023-38633
2023-07-22 00:00:00
debian
debian
[SECURITY] [DSA 5484-1] librsvg security update
2023-08-27 14:28:48
cve
cve
CVE-2023-38633
2023-07-22 17:15:09
openvas
openvas
Ubuntu: Security Advisory (USN-6266-1)
2023-08-02 00:00:00
Debian: Security Advisory (DSA-5484-1)
2023-08-28 00:00:00
openSUSE: Security Advisory for librsvg (SUSE-SU-2023:3208-1)
2024-03-04 00:00:00
redhatcve
redhatcve
CVE-2023-38633
2023-07-26 08:55:52
redhat
redhat
(RHSA-2023:4809) Moderate: librsvg2 security update
2023-08-29 07:29:09
(RHSA-2023:5081) Moderate: librsvg2 security update
2023-09-12 07:43:42
ubuntu
ubuntu
librsvg vulnerability
2023-08-01 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2023-2276
2023-10-22 06:30:12
nvd
nvd
CVE-2023-38633
2023-07-22 17:15:09
debiancve
debiancve
CVE-2023-38633
2023-07-22 17:15:09
fedora
fedora
[SECURITY] Fedora 37 Update: librsvg2-2.54.6-1.fc37
2023-08-17 00:34:16
[SECURITY] Fedora 38 Update: librsvg2-2.56.3-1.fc38
2023-08-04 01:29:53
cvelist
cvelist
CVE-2023-38633
2023-07-22 00:00:00
cloudfoundry
cloudfoundry
USN-6266-1: librsvg vulnerability | Cloud Foundry
2023-08-16 00:00:00
redos
redos
ROS-20230911-09
2023-09-11 00:00:00
mageia
mageia
Updated librsvg packages fix security vulnerability
2023-09-11 16:07:54
veracode
veracode
Information Disclosure
2023-08-08 05:28:14
ibm
ibm
hp
hp
HP ThinPro 8.0 SP 8 Security Updates
2024-03-01 00:00:00
CVSS3
5.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS
0.002
Percentile
52.4%
Related for ALSA-2023:5081