ALT-BU-2024-3764-1
Branch sisyphus_e2k update bulletin.
Package librsvg updated to version 2.52.5-alt1.1 for branch sisyphus_e2k.
Closed vulnerabilities
BDU:2018-01491
Уязвимость библиотеки отрисовки векторной графики librsvg, связанная с ошибкой при проверке ввода данных, позволяющая нарушителю вызвать отказ в обслуживании
BDU:2021-00123
Уязвимость множества функций из xml.rs библиотеки отрисовки векторной графики librsvg, связанная с ошибкой механизма контроля расходуемых ресурсов, позволяющая нарушителю вызвать отказ в обслуживании
Modified: 2024-11-21
CVE-2018-1000041
GNOME librsvg version before commit c6ddf2ed4d768fd88adbea2b63f575cd523022ea contains a Improper input validation vulnerability in rsvg-io.c that can result in the victim's Windows username and NTLM password hash being leaked to remote attackers through SMB. This attack appear to be exploitable via The victim must process a specially crafted SVG file containing an UNC path on Windows.
- https://github.com/GNOME/librsvg/commit/c6ddf2ed4d768fd88adbea2b63f575cd523022ea
- https://github.com/GNOME/librsvg/commit/c6ddf2ed4d768fd88adbea2b63f575cd523022ea
- https://github.com/ImageMagick/librsvg/commit/f9d69eadd2b16b00d1a1f9f286122123f8e547dd
- https://github.com/ImageMagick/librsvg/commit/f9d69eadd2b16b00d1a1f9f286122123f8e547dd
- [debian-lts-announce] 20180212 [SECURITY] [DLA 1278-1] librsvg security update
- [debian-lts-announce] 20180212 [SECURITY] [DLA 1278-1] librsvg security update
Modified: 2024-11-21
CVE-2019-20446
In xml.rs in GNOME librsvg before 2.46.2, a crafted SVG file with nested patterns can cause denial of service when passed to the library for processing. The attacker constructs pattern elements so that the number of final rendered objects grows exponentially.
- openSUSE-SU-2020:0343
- openSUSE-SU-2020:0343
- https://gitlab.gnome.org/GNOME/librsvg/issues/515
- https://gitlab.gnome.org/GNOME/librsvg/issues/515
- [debian-lts-announce] 20200722 [SECURITY] [DLA 2285-1] librsvg security update
- [debian-lts-announce] 20200722 [SECURITY] [DLA 2285-1] librsvg security update
- FEDORA-2020-39e0b8bd14
- FEDORA-2020-39e0b8bd14
- FEDORA-2020-f6271d7afa
- FEDORA-2020-f6271d7afa
- https://security.netapp.com/advisory/ntap-20221111-0004/
- https://security.netapp.com/advisory/ntap-20221111-0004/
- USN-4436-1
- USN-4436-1
Package faust updated to version 0.9.90-alt5 for branch sisyphus_e2k.
Closed bugs
faust2appls требует android-tools, это действительно необходимо?
Package libgegl updated to version 0.4.46-alt2 for branch sisyphus_e2k.
Closed bugs
libgegl: unmet dependencies
Package appstream updated to version 0.16.4-alt2 for branch sisyphus_e2k.
Closed bugs
appstream: missing compose library and tool