Debian Security Advisory
DLA-1278-1 librsvg -- LTS security update
- Date Reported:
- 12 Feb 2018
- Affected Packages:
- librsvg
- Vulnerable:
- Yes
- Security database references:
- In Mitre's CVE dictionary: CVE-2018-1000041.
- More information:
-
It was discovered that there was an input validation vulnerability in the librsvg renderer library that could result in data being leaked to remote attackers via a specially-crafted file.
For Debian 7
Wheezy
, this issue has been fixed in librsvg version 2.36.1-2+deb7u3.We recommend that you upgrade your librsvg packages.