Publishing details

• Published on 2023-08-01
• Copied from ubuntu focal in PPA for Ubuntu Security Proposed by Marc Deslauriers

Changelog

librsvg (2.48.9-1ubuntu0.20.04.4) focal-security; urgency=medium

  * SECURITY UPDATE: Arbitrary file read when xinclude href has special
    characters
    - debian/patches/CVE-2023-38633.patch: validate URLs in
      librsvg/rsvg-handle.c, rsvg_internals/src/allowed_url.rs,
      rsvg_internals/src/filters/component_transfer.rs, tests/*.
    - debian/patches/fix_old_rust_compat.patch: fix compatibility with
      older rust versions in rsvg_internals/src/allowed_url.rs.
    - CVE-2023-38633
  * Don't fail the build on tests error for i386

 -- Marc Deslauriers <email address hidden>  Fri, 28 Jul 2023 08:56:58 -0400

Builds

• amd64
• arm64
• armhf
• i386
• ppc64el
• riscv64
• s390x

Built packages

• gir1.2-rsvg-2.0 gir files for renderer library for SVG files

• librsvg2-2 SAX-based renderer library for SVG files (runtime)

• librsvg2-2-dbgsym debug symbols for librsvg2-2

• librsvg2-bin command-line utility to convert SVG files

• librsvg2-bin-dbgsym debug symbols for librsvg2-bin

• librsvg2-common SAX-based renderer library for SVG files (extra runtime)

• librsvg2-common-dbgsym debug symbols for librsvg2-common

• librsvg2-dev SAX-based renderer library for SVG files (development)

• librsvg2-doc SAX-based renderer library for SVG files (documentation)

Package files

• gir1.2-rsvg-2.0_2.48.9-1ubuntu0.20.04.4_amd64.deb (7.9 KiB)
• gir1.2-rsvg-2.0_2.48.9-1ubuntu0.20.04.4_arm64.deb (7.9 KiB)
• gir1.2-rsvg-2.0_2.48.9-1ubuntu0.20.04.4_armhf.deb (7.9 KiB)
• gir1.2-rsvg-2.0_2.48.9-1ubuntu0.20.04.4_i386.deb (7.9 KiB)
• gir1.2-rsvg-2.0_2.48.9-1ubuntu0.20.04.4_ppc64el.deb (7.9 KiB)
• gir1.2-rsvg-2.0_2.48.9-1ubuntu0.20.04.4_riscv64.deb (7.9 KiB)
• gir1.2-rsvg-2.0_2.48.9-1ubuntu0.20.04.4_s390x.deb (7.9 KiB)
• librsvg2-2-dbgsym_2.48.9-1ubuntu0.20.04.4_amd64.ddeb (14.2 MiB)
• librsvg2-2-dbgsym_2.48.9-1ubuntu0.20.04.4_arm64.ddeb (14.0 MiB)
• librsvg2-2-dbgsym_2.48.9-1ubuntu0.20.04.4_armhf.ddeb (13.8 MiB)
• librsvg2-2-dbgsym_2.48.9-1ubuntu0.20.04.4_i386.ddeb (13.5 MiB)
• librsvg2-2-dbgsym_2.48.9-1ubuntu0.20.04.4_ppc64el.ddeb (13.9 MiB)
• librsvg2-2-dbgsym_2.48.9-1ubuntu0.20.04.4_riscv64.ddeb (14.4 MiB)
• librsvg2-2-dbgsym_2.48.9-1ubuntu0.20.04.4_s390x.ddeb (16.7 MiB)
• librsvg2-2_2.48.9-1ubuntu0.20.04.4_amd64.deb (2.2 MiB)
• librsvg2-2_2.48.9-1ubuntu0.20.04.4_arm64.deb (1.9 MiB)
• librsvg2-2_2.48.9-1ubuntu0.20.04.4_armhf.deb (1.8 MiB)
• librsvg2-2_2.48.9-1ubuntu0.20.04.4_i386.deb (2.3 MiB)
• librsvg2-2_2.48.9-1ubuntu0.20.04.4_ppc64el.deb (2.2 MiB)
• librsvg2-2_2.48.9-1ubuntu0.20.04.4_riscv64.deb (2.0 MiB)
• librsvg2-2_2.48.9-1ubuntu0.20.04.4_s390x.deb (2.3 MiB)
• librsvg2-bin-dbgsym_2.48.9-1ubuntu0.20.04.4_amd64.ddeb (17.2 KiB)
• librsvg2-bin-dbgsym_2.48.9-1ubuntu0.20.04.4_arm64.ddeb (16.7 KiB)
• librsvg2-bin-dbgsym_2.48.9-1ubuntu0.20.04.4_armhf.ddeb (17.2 KiB)
• librsvg2-bin-dbgsym_2.48.9-1ubuntu0.20.04.4_i386.ddeb (15.9 KiB)
• librsvg2-bin-dbgsym_2.48.9-1ubuntu0.20.04.4_ppc64el.ddeb (17.5 KiB)
• librsvg2-bin-dbgsym_2.48.9-1ubuntu0.20.04.4_riscv64.ddeb (16.7 KiB)
• librsvg2-bin-dbgsym_2.48.9-1ubuntu0.20.04.4_s390x.ddeb (16.3 KiB)
• librsvg2-bin_2.48.9-1ubuntu0.20.04.4_amd64.deb (13.9 KiB)
• librsvg2-bin_2.48.9-1ubuntu0.20.04.4_arm64.deb (13.5 KiB)
• librsvg2-bin_2.48.9-1ubuntu0.20.04.4_armhf.deb (13.4 KiB)
• librsvg2-bin_2.48.9-1ubuntu0.20.04.4_i386.deb (14.1 KiB)
• librsvg2-bin_2.48.9-1ubuntu0.20.04.4_ppc64el.deb (14.6 KiB)
• librsvg2-bin_2.48.9-1ubuntu0.20.04.4_riscv64.deb (13.0 KiB)
• librsvg2-bin_2.48.9-1ubuntu0.20.04.4_s390x.deb (13.3 KiB)
• librsvg2-common-dbgsym_2.48.9-1ubuntu0.20.04.4_amd64.ddeb (10.8 KiB)
• librsvg2-common-dbgsym_2.48.9-1ubuntu0.20.04.4_arm64.ddeb (10.9 KiB)
• librsvg2-common-dbgsym_2.48.9-1ubuntu0.20.04.4_armhf.ddeb (10.8 KiB)
• librsvg2-common-dbgsym_2.48.9-1ubuntu0.20.04.4_i386.ddeb (10.4 KiB)
• librsvg2-common-dbgsym_2.48.9-1ubuntu0.20.04.4_ppc64el.ddeb (11.0 KiB)
• librsvg2-common-dbgsym_2.48.9-1ubuntu0.20.04.4_riscv64.ddeb (10.6 KiB)
• librsvg2-common-dbgsym_2.48.9-1ubuntu0.20.04.4_s390x.ddeb (10.5 KiB)
• librsvg2-common_2.48.9-1ubuntu0.20.04.4_amd64.deb (9.0 KiB)
• librsvg2-common_2.48.9-1ubuntu0.20.04.4_arm64.deb (8.8 KiB)
• librsvg2-common_2.48.9-1ubuntu0.20.04.4_armhf.deb (8.5 KiB)
• librsvg2-common_2.48.9-1ubuntu0.20.04.4_i386.deb (9.1 KiB)
• librsvg2-common_2.48.9-1ubuntu0.20.04.4_ppc64el.deb (9.2 KiB)
• librsvg2-common_2.48.9-1ubuntu0.20.04.4_riscv64.deb (8.4 KiB)
• librsvg2-common_2.48.9-1ubuntu0.20.04.4_s390x.deb (8.8 KiB)
• librsvg2-dev_2.48.9-1ubuntu0.20.04.4_amd64.deb (30.8 KiB)
• librsvg2-dev_2.48.9-1ubuntu0.20.04.4_arm64.deb (30.8 KiB)
• librsvg2-dev_2.48.9-1ubuntu0.20.04.4_armhf.deb (30.8 KiB)
• librsvg2-dev_2.48.9-1ubuntu0.20.04.4_i386.deb (30.8 KiB)
• librsvg2-dev_2.48.9-1ubuntu0.20.04.4_ppc64el.deb (30.8 KiB)
• librsvg2-dev_2.48.9-1ubuntu0.20.04.4_riscv64.deb (30.8 KiB)
• librsvg2-dev_2.48.9-1ubuntu0.20.04.4_s390x.deb (30.8 KiB)
• librsvg2-doc_2.48.9-1ubuntu0.20.04.4_all.deb (37.0 KiB)
• librsvg_2.48.9-1ubuntu0.20.04.4.debian.tar.xz (27.4 KiB)
• librsvg_2.48.9-1ubuntu0.20.04.4.dsc (3.0 KiB)
• librsvg_2.48.9.orig.tar.xz (12.1 MiB)