VDB
MAGEIA-2020-159
MAGEIA-2020-159
PUBLISHED
The updated packages fix a security vulnerability: In xml.rs in GNOME librsvg before 2.46.2, a crafted SVG file with nested patterns can cause denial of service when passed to the library for processing. The attacker constructs pattern elements so that the number of final rendered objects grows exponentially. (CVE-2019-20446)
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Mageia | ipset | 0, 7.6-1.mga7 |
| Mageia | librsvg | 2.45.5-3.1.mga7, 0, 0 |
Timeline
- Apr 5, 2020 CVE Updated
- Apr 5, 2020 CVE Published
References
- Updated librsvg packages fix security vulnerability advisory
- Updated librsvg packages fix security vulnerability issue
- Updated librsvg packages fix security vulnerability issue
- Updated librsvg packages fix security vulnerability issue
- Updated ipset packages fix kernel compatibility advisory
- Updated ipset packages fix kernel compatibility issue
- Updated ipset packages fix kernel compatibility issue