Lucene search

K
mageiaGentoo FoundationMGASA-2020-0159
HistoryApr 05, 2020 - 8:07 p.m.

Updated librsvg packages fix security vulnerability

2020-04-0520:07:15
Gentoo Foundation
advisories.mageia.org
15

0.004 Low

EPSS

Percentile

73.2%

The updated packages fix a security vulnerability: In xml.rs in GNOME librsvg before 2.46.2, a crafted SVG file with nested patterns can cause denial of service when passed to the library for processing. The attacker constructs pattern elements so that the number of final rendered objects grows exponentially. (CVE-2019-20446)

OSVersionArchitecturePackageVersionFilename
Mageia7noarchlibrsvg< 2.45.5-3.1librsvg-2.45.5-3.1.mga7