Security update for inkscape
SUSE Security Update: Security update for inkscape
inkscape has been updated to fix a XXE (Xml eXternal
Entity) attack during rasterization of SVG images.
(CVE-2012-5656), where the rendering of malicious SVG
images could have connected from inkscape to internal hosts.
Security Issue reference:
* CVE-2012-5656
>
Announcement ID: | SUSE-SU-2013:0350-1 |
Rating: | moderate |
References: | #794958 |
Affected Products: |
An update that fixes one vulnerability is now available.
Description:
inkscape has been updated to fix a XXE (Xml eXternal
Entity) attack during rasterization of SVG images.
(CVE-2012-5656), where the rendering of malicious SVG
images could have connected from inkscape to internal hosts.
Security Issue reference:
* CVE-2012-5656
Package List:
- SUSE Linux Enterprise Desktop 10 SP4 (i586 x86_64):
- inkscape-0.43-20.22.1
- SLE SDK 10 SP4 (i586 ia64 ppc s390x x86_64):
- inkscape-0.43-20.22.1
References:
- http://support.novell.com/security/cve/CVE-2012-5656.html
- https://bugzilla.novell.com/794958
- http://download.suse.com/patch/finder/?keywords=d5a97ae9b73a7b9ad83db7b862966e52