Updated librsvg and gtk+3.0 packages fix security vulnerability

2014-01-0605:08:20

Gentoo Foundation

advisories.mageia.org

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

0.003 Low

EPSS

Percentile

70.0%

JSON

librsvg before version 2.39.0 allows remote attackers to read arbitrary files via an XML document containing an external entity declaration in conjunction with an entity reference (CVE-2013-1881). gtk+3.0 has been patched to cope with the changes in SVG loading due to the fix in librsvg.

OSVersionArchitecturePackageVersionFilename
Mageia3noarchlibrsvg< 2.36.4-2.1librsvg-2.36.4-2.1.mga3
Mageia3noarchgtk+3.0< 3.6.4-1.1gtk+3.0-3.6.4-1.1.mga3