GCVE-110-MAGEIA-2014-4

Advisory Published

Vulnetix · Advisory published January 6, 2014

librsvg before version 2.39.0 allows remote attackers to read arbitrary files via an XML document containing an external entity declaration in conjunction with an entity reference (CVE-2013-1881). gtk+3.0 has been patched to cope with the changes in SVG loading due to the fix in librsvg.

Download JSON Open in Console

Affected Products

Vendor	Product	Versions	Platforms
Mageia	gtk+3.0	0 (affected), gtk+3.0-3.6.4-1.1.mga3 (unaffected)	—
Mageia	librsvg	0 (affected), 2.36.4-2.1.mga3 (unaffected)	—

References

Updated librsvg and gtk+3.0 packages fix security vulnerability

advisory

Updated librsvg and gtk+3.0 packages fix security vulnerability

issue

Updated librsvg and gtk+3.0 packages fix security vulnerability

url

Browse GCVE Records

21,084 records in the GCVE database · Updated October 20, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON