Stay Secure with the Latest Linux Advisories

security advisorydenial of serviceDebian

Debian 9: DLA-2285-1 Critical: Librsvg Denial of Service Issues

Several vulnerabilities have been found in librsvg, an SVG rendering library. This update corrects some denial of service issues via exponential element processing, stack exhaustion or application crash when processing specially crafted files, as well as some memory safety . - ------------------------------------------------------------------------- Debian LTS Advisory DLA-2285-1 This email address is being protected from spambots. You need JavaScript enabled to view it. https://www.debian.org/lts/security/ Emilio Pozuelo Monfort July 22, 2020 https://wiki.debian.org/LTS - ------------------------------------------------------------------------- Package : librsvg Version : 2.40.21-0+deb9u1 CVE ID : CVE-2017-11464 CVE-2019-20446 Several vulnerabilities have been found in librsvg, an SVG rendering library. This update corrects some denial of service issues via exponential element processing, stack exhaustion or application crash when processing specially crafted files, as well as some memory safety issues. For Debian 9 stretch, these problems have been fixed in version 2.40.21-0+deb9u1. We recommend that you upgrade your librsvg packages. For the detailed security status of librsvg please refer to its security tracker page at: https://security-tracker.debian.org/tracker/source-package/librsvg Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS . Ubuntu LTS USN-4600-1 tackles severe vulnerabilities in libpng that pose memory corruption and potential service outage threats.. Debian LTS,symbolic vector graphics security,package update,SVG library vulnerabilities. . Severity: Critical. LinuxSecurity.com Team

Jul 22, 2020 •Critical Debian LTS