VDB
ALSA-2023%3A5081
ALSA-2023%3A5081
PUBLISHED
The librsvg2 packages provide a Scalable Vector Graphics (SVG) library based on the libart library. Security Fix(es): * librsvg: Arbitrary file read when xinclude href has special characters (CVE-2023-38633) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| AlmaLinux:9 | librsvg2-tools | 0, 0 |
| AlmaLinux:9 | librsvg2 | 0, 0 |
| AlmaLinux:9 | librsvg2-devel | 0, 0 |
Timeline
- Sep 12, 2023 CVE Published
- Sep 14, 2023 CVE Updated
- Mar 6, 2026 Distribution Patch
- Mar 6, 2026 Distribution Patch
- Mar 6, 2026 Security Advisory
References
- https://access.redhat.com/errata/RHSA-2023:5081 vendor-advisory
- https://access.redhat.com/security/cve/CVE-2023-38633 third-party-advisory
- https://bugzilla.redhat.com/2224945 third-party-advisory
- https://errata.almalinux.org/9/ALSA-2023-5081.html vendor-advisory