The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
GNOME libsvg before 2.39.0 allows remote attackers to read arbitrary files via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade librsvg2Upgrade librsvg2-devel | Dec 1, 2016 | Oct 9, 2013 |
| Debian | — | Upgrade librsvg | Jul 30, 2024 | Oct 10, 2013 |
| Oracle_linux | — | Upgrade librsvg2-develUpgrade librsvg2 | Oct 16, 2024 | Oct 10, 2013 |
| Suse | — | Upgrade gtk3-immodule-inuktitutUpgrade gtk2-engine-svg-32bitUpgrade gtk3-immodule-vietnamese-32bitUpgrade gtk3-branding-upstreamUpgrade gtk3-immodule-vietnameseUpgrade sle-sdk-releaseUpgrade librsvg-develUpgrade gtk3-immodule-amharicUpgrade gtk3-dataUpgrade gtk3-develUpgrade gtk3-immodule-thai-32bitUpgrade gtk3-immodule-inuktitut-32bitUpgrade gtk3-toolsUpgrade gtk3-immodule-xim-32bitUpgrade typelib-1_0-Rsvg-2_0Upgrade gtk3-devel-32bitUpgrade gtk3-langUpgrade librsvgUpgrade gtk3-immodule-thaiUpgrade libgtk-3-0Upgrade typelib-1_0-Gtk-3_0Upgrade gtk3-immodules-tigrigna-32bitUpgrade librsvg-2-2-32bitUpgrade gtk3-immodule-multipress-32bitUpgrade gtk3-tools-32bitUpgrade libgtk-3-0-32bitUpgrade gtk3-immodule-ximUpgrade rsvg-viewUpgrade librsvg-32bitUpgrade gdk-pixbuf-loader-rsvgUpgrade gtk3Upgrade gdk-pixbuf-loader-rsvg-32bitUpgrade gtk3-immodule-multipressUpgrade gtk3-immodule-amharic-32bitUpgrade librsvg-2-2Upgrade librsvg-x86Upgrade gtk3-immodules-tigrignaUpgrade gtk2-engine-svg | Dec 23, 2013 | Oct 9, 2013 |
| Ubuntu | — | Upgrade libgtk-3-0Upgrade librsvg2-2 | Nov 8, 2024 | Oct 10, 2013 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub