==========================================================================
Ubuntu Security Notice USN-2149-1
March 17, 2014
librsvg vulnerability
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
– Ubuntu 13.10
– Ubuntu 12.10
– Ubuntu 12.04 LTS
Summary:
Librsvg could be made to expose sensitive information.
Software Description:
– librsvg: renderer library for SVG files
Details:
It was discovered that librsvg would load XML external entities by default.
If a user were tricked into viewing a specially crafted SVG file, an
attacker could possibly obtain access to arbitrary files.
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 13.10:
librsvg2-2 2.36.4-2ubuntu0.1
Ubuntu 12.10:
librsvg2-2 2.36.3-0ubuntu1.1
Ubuntu 12.04 LTS:
librsvg2-2 2.36.1-0ubuntu1.1
After a standard system update you need to restart your session to make all
the necessary changes.
References:
http://www.ubuntu.com/usn/usn-2149-1
CVE-2013-1881
Package Information:
https://launchpad.net/ubuntu/+source/librsvg/2.36.4-2ubuntu0.1
https://launchpad.net/ubuntu/+source/librsvg/2.36.3-0ubuntu1.1
https://launchpad.net/ubuntu/+source/librsvg/2.36.1-0ubuntu1.1
—–BEGIN PGP SIGNATURE—–
Version: GnuPG v1
Comment: Using GnuPG with Thunderbird – http://www.enigmail.net/
iQIcBAEBCgAGBQJTJuX0AAoJEGVp2FWnRL6TteAP/3rYaPmrYh6muL2xhzEMLsBg
nREpqdS8K0L58G19DSO6eSVtBnX2hd3RHykkJvA/U94cQUG3FKQ+sDondhEwTxXL
IGY4GyFw07bkyMVk7cM/FqKKQUPrgDsASfj/1UK+he8E9BYk8hTtbALaSsIFtRBE
7OejOAdTZZY1eU+xbI6cWcadh41c9GJYF2pLmDxpr//Svf87lqEFBYopSsbTAVki
LyAQmyub8lC64SIyxpt5FlrCXFSYpXWpJK6JnzuI1bYv+FK8ZVZII52G4+urWj1Z
7gD+KSfSq0RL67X5Qsbjv+1pz3m31xPebYAdpoB/xo9prOmUcZNU8uzFdKeTfwDJ
MaWvcVtoiwBVTpYzWF5v7RgYGFvh/k/+zF5gcRX2GnZ5c5Wr527FxBd3Nlx0xUeS
NDXdjm4d9Whkox7WW8oJAfyfx6C10c8i1vK4/Ku1YvgMlqiZvcyTa02aTjalpDz8
a1OkPNyZ9w/zsTA28PWe4wQFTCXkHuxpAurbx32iFELiJvLx78mgL4qP6YaMLSX8
qY9r2wHk5PUO7L3lt+pF+F4uXJ+ydhx9YhInEDgLyI5DFxxnEc+BZeqeopIvSOXM
P0nCLyJ5qYs3NabUr35zNF+ehIYFNS3+lg8S+kDzE3fNTEXzdMIei+1JQ9gGiyor
CNdv83QA+0+po3E/m2vK
=+8nd
—–END PGP SIGNATURE—–
—
