Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
redhatRedHatRHSA-2014:0127
HistoryFeb 03, 2014 - 12:00 a.m.

(RHSA-2014:0127) Moderate: librsvg2 security update

2014-02-0300:00:00
access.redhat.com
12

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

0.003 Low

EPSS

Percentile

65.8%

JSON

The librsvg2 packages provide an SVG (Scalable Vector Graphics) library
based on libart.

An XML External Entity expansion flaw was found in the way librsvg2
processed SVG files. If a user were to open a malicious SVG file, a remote
attacker could possibly obtain a copy of the local resources that the user
had access to. (CVE-2013-1881)

All librsvg2 users are advised to upgrade to these updated packages, which
contain a backported patch to correct this issue. All running applications
that use librsvg2 must be restarted for this update to take effect.

OSVersionArchitecturePackageVersionFilename
RedHat6srclibrsvg2< 2.26.0-6.el6_5.2librsvg2-2.26.0-6.el6_5.2.src.rpm
RedHat6ppclibrsvg2-devel< 2.26.0-6.el6_5.2librsvg2-devel-2.26.0-6.el6_5.2.ppc.rpm
RedHat6s390librsvg2-debuginfo< 2.26.0-6.el6_5.2librsvg2-debuginfo-2.26.0-6.el6_5.2.s390.rpm
RedHat6s390librsvg2< 2.26.0-6.el6_5.2librsvg2-2.26.0-6.el6_5.2.s390.rpm
RedHat6s390xlibrsvg2-debuginfo< 2.26.0-6.el6_5.2librsvg2-debuginfo-2.26.0-6.el6_5.2.s390x.rpm
RedHat6s390xlibrsvg2< 2.26.0-6.el6_5.2librsvg2-2.26.0-6.el6_5.2.s390x.rpm
RedHat6x86_64librsvg2-devel< 2.26.0-6.el6_5.3librsvg2-devel-2.26.0-6.el6_5.3.x86_64.rpm
RedHat6srclibrsvg2< 2.26.0-6.el6_5.3librsvg2-2.26.0-6.el6_5.3.src.rpm
RedHat6s390librsvg2-devel< 2.26.0-6.el6_5.2librsvg2-devel-2.26.0-6.el6_5.2.s390.rpm
RedHat6ppc64librsvg2-debuginfo< 2.26.0-6.el6_5.2librsvg2-debuginfo-2.26.0-6.el6_5.2.ppc64.rpm
Rows per page:
1-10 of 381

Related

suse 1
nessus 9
cve 1
centos 1
openvas 11
securityvulns 2
veracode 1
prion 1
ubuntucve 1
ubuntu 2
mageia 1
debiancve 1
oraclelinux 1
suse
suse
Security update for librsvg (important)
2015-10-20 13:10:05
nessus
nessus
SUSE SLED11 / SLES11 Security Update : librsvg (SUSE-SU-2015:1785-1)
2015-10-22 00:00:00
Ubuntu 12.04 LTS / 12.10 / 13.10 : librsvg vulnerability (USN-2149-1)
2014-03-18 00:00:00
Oracle Linux 6 : librsvg2 (ELSA-2014-0127)
2014-02-04 00:00:00
cve
cve
CVE-2013-1881
2013-10-10 00:55:00
centos
centos
librsvg2 security update
2014-02-04 05:35:04
openvas
openvas
Ubuntu Update for gtk+3.0 USN-2149-2
2014-03-20 00:00:00
Ubuntu Update for librsvg USN-2149-1
2014-03-20 00:00:00
CentOS Update for librsvg2 CESA-2014:0127 centos6
2014-02-11 00:00:00
securityvulns
securityvulns
libsvg information leakage
2014-01-29 00:00:00
[ MDVSA-2014:009 ] librsvg
2014-01-29 00:00:00
veracode
veracode
XML External Entity (XXE)
2019-01-15 08:56:03
prion
prion
Xxe
2013-10-10 00:55:00
ubuntucve
ubuntucve
CVE-2013-1881
2013-10-09 00:00:00
ubuntu
ubuntu
GTK+ update
2014-03-17 00:00:00
librsvg vulnerability
2014-03-17 00:00:00
mageia
mageia
Updated librsvg and gtk+3.0 packages fix security vulnerability
2014-01-06 05:08:20
debiancve
debiancve
CVE-2013-1881
2013-10-10 00:55:00
oraclelinux
oraclelinux
librsvg2 security update (updated 02/05/2014)
2014-02-03 00:00:00

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

0.003 Low

EPSS

Percentile

65.8%

JSON
Related for RHSA-2014:0127
suse1nessus9cve1centos1openvas11securityvulns2veracode1prion1ubuntucve1ubuntu2mageia1debiancve1oraclelinux1