Alerts This Week
Warning Icon 1 692
Alerts This Week
Warning Icon 1 692

Debian: DSA-5484-1 Critical: librsvg Directory Traversal Threat

debian
Calendar Grey August 27, 2023
Debian Logo
Debian Security Advisory DSA-5485-1 responds to a high-severity buffer overflow vulnerability in ImageMagick, affecting image conversions and manipulations.
Zac Sims discovered a directory traversal in the URL decoder of librsvg, a SAX-based renderer library for SVG files, which could result in read of arbitrary files when processing a...
Topics%20covered

Topics Covered

security advisory debian directory traversal critical fix arbitrary file read librsvg

Summary

For the oldstable distribution (bullseye), this problem has been fixed
in version 2.50.3+dfsg-1+deb11u1.

For the stable distribution (bookworm), this problem has been fixed in
version 2.54.7+dfsg-1~deb12u1.

We recommend that you upgrade your librsvg packages.

For the detailed security status of librsvg please refer to its security
tracker page at:
https://security-tracker.debian.org/tracker/source-package/librsvg

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/



Severity
critical
Lowest
Low
Medium
High
Critical

Package: librsvg
CVE ID: CVE-2023-38633

Topics%20covered

Topics Covered

security advisory debian directory traversal critical fix arbitrary file read librsvg

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here