[Git][security-tracker-team/security-tracker][master] Add references for CVE-2023-38633/librsvg

Salvatore Bonaccorso (@carnil) carnil at debian.org
Sat Jul 29 21:02:15 BST 2023



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
c38ef59f by Salvatore Bonaccorso at 2023-07-29T22:01:36+02:00
Add references for CVE-2023-38633/librsvg

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -659,6 +659,10 @@ CVE-2023-38633 (A directory traversal problem in the URL decoder of librsvg befo
 	- librsvg <unfixed> (bug #1041810)
 	NOTE: https://bugzilla.suse.com/show_bug.cgi?id=1213502
 	NOTE: https://gitlab.gnome.org/GNOME/librsvg/-/issues/996
+	NOTE: https://gitlab.gnome.org/GNOME/librsvg/-/commit/15293f1243e1dd4756ffc1d13d5a8ea49167174f (2.54.6)
+	NOTE: https://gitlab.gnome.org/GNOME/librsvg/-/commit/d1f066bf2198bd46c5ba80cb5123b768ec16e37d (2.50.8)
+	NOTE: https://gitlab.gnome.org/GNOME/librsvg/-/commit/22bcb919c8b39133370c7fc0eb27176fb09aa4fb (2.46.6)
+	NOTE: https://www.openwall.com/lists/oss-security/2023/07/27/1
 CVE-2023-38195 (Datalust Seq before 2023.2.9489 allows insertion of sensitive informat ...)
 	NOT-FOR-US: Datalust Seq
 CVE-2023-3826 (A vulnerability has been found in IBOS OA 4.5.5 and classified as crit ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c38ef59fd2b5653367c0cdab8cd202b7e55f03ab

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c38ef59fd2b5653367c0cdab8cd202b7e55f03ab
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20230729/b87dea72/attachment-0001.htm>


More information about the debian-security-tracker-commits mailing list