p PatchFirst

RLSA-2020:4709

RLSA-2020:4709 · Moderate: librsvg2 security update

Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.

The librsvg2 packages provide a Scalable Vector Graphics (SVG) library based on the libart library. Security Fix(es): * librsvg: Resource exhaustion via crafted SVG file with nested patterns (CVE-2019-20446) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the Rocky Linux 8.3 Release Notes linked from the References section.

CVSS 6.5 · Moyenne · Correctif disponible

Publication
Mise à jour

Pile logicielle: system

Produits et versions concernés

  • librsvg2 Rocky Linux:8

    Plages de versions concernées
    • ECOSYSTEM: < 0:2.42.7-4.el8

    Mettez à jour vers 0:2.42.7-4.el8

Sources originales

Vérifiez votre serveur →