Security update for librsvg SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2015:1785-1 Final 1 1 2015-10-12T08:30:54Z current 2015-10-12T08:30:54Z 2015-10-12T08:30:54Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for librsvg librsvg was updated to fix one security issue. This security issue was fixed: - CVE-2013-1881: GNOME libsvg allowed remote attackers to read arbitrary files via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue (bsc#840753). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). sdksp3-librsvg-12145,sdksp4-librsvg-12145,sledsp3-librsvg-12145,sledsp4-librsvg-12145,slessp3-librsvg-12145,slessp4-librsvg-12145 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2015/suse-su-20151785-1/ Link for SUSE-SU-2015:1785-1 https://lists.opensuse.org/opensuse-security-announce/2015-10/msg00020.html E-Mail link for SUSE-SU-2015:1785-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/840753 SUSE Bug 840753 https://www.suse.com/security/cve/CVE-2013-1881/ SUSE CVE CVE-2013-1881 page SUSE Linux Enterprise Desktop 11 SP3 SUSE Linux Enterprise Desktop 11 SP4 SUSE Linux Enterprise Server 11 SP3 SUSE Linux Enterprise Server 11 SP3-TERADATA SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Server for SAP Applications 11 SP3 SUSE Linux Enterprise Server for SAP Applications 11 SP4 SUSE Linux Enterprise Software Development Kit 11 SP3 SUSE Linux Enterprise Software Development Kit 11 SP4 librsvg-devel-2.26.0-2.5.1 librsvg-2.26.0-2.5.1 librsvg-32bit-2.26.0-2.5.1 rsvg-view-2.26.0-2.5.1 librsvg-x86-2.26.0-2.5.1 librsvg-2.26.0-2.5.1 as a component of SUSE Linux Enterprise Desktop 11 SP3 librsvg-32bit-2.26.0-2.5.1 as a component of SUSE Linux Enterprise Desktop 11 SP3 rsvg-view-2.26.0-2.5.1 as a component of SUSE Linux Enterprise Desktop 11 SP3 librsvg-2.26.0-2.5.1 as a component of SUSE Linux Enterprise Desktop 11 SP4 librsvg-32bit-2.26.0-2.5.1 as a component of SUSE Linux Enterprise Desktop 11 SP4 rsvg-view-2.26.0-2.5.1 as a component of SUSE Linux Enterprise Desktop 11 SP4 librsvg-2.26.0-2.5.1 as a component of SUSE Linux Enterprise Server 11 SP3 librsvg-32bit-2.26.0-2.5.1 as a component of SUSE Linux Enterprise Server 11 SP3 librsvg-x86-2.26.0-2.5.1 as a component of SUSE Linux Enterprise Server 11 SP3 rsvg-view-2.26.0-2.5.1 as a component of SUSE Linux Enterprise Server 11 SP3 librsvg-2.26.0-2.5.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA librsvg-32bit-2.26.0-2.5.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA librsvg-x86-2.26.0-2.5.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA rsvg-view-2.26.0-2.5.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA librsvg-2.26.0-2.5.1 as a component of SUSE Linux Enterprise Server 11 SP4 librsvg-32bit-2.26.0-2.5.1 as a component of SUSE Linux Enterprise Server 11 SP4 librsvg-x86-2.26.0-2.5.1 as a component of SUSE Linux Enterprise Server 11 SP4 rsvg-view-2.26.0-2.5.1 as a component of SUSE Linux Enterprise Server 11 SP4 librsvg-2.26.0-2.5.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP3 librsvg-32bit-2.26.0-2.5.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP3 librsvg-x86-2.26.0-2.5.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP3 rsvg-view-2.26.0-2.5.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP3 librsvg-2.26.0-2.5.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 librsvg-32bit-2.26.0-2.5.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 librsvg-x86-2.26.0-2.5.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 rsvg-view-2.26.0-2.5.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 librsvg-devel-2.26.0-2.5.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP3 librsvg-devel-2.26.0-2.5.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 GNOME libsvg before 2.39.0 allows remote attackers to read arbitrary files via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue. CVE-2013-1881 SUSE Linux Enterprise Desktop 11 SP3:librsvg-2.26.0-2.5.1 SUSE Linux Enterprise Desktop 11 SP3:librsvg-32bit-2.26.0-2.5.1 SUSE Linux Enterprise Desktop 11 SP3:rsvg-view-2.26.0-2.5.1 SUSE Linux Enterprise Desktop 11 SP4:librsvg-2.26.0-2.5.1 SUSE Linux Enterprise Desktop 11 SP4:librsvg-32bit-2.26.0-2.5.1 SUSE Linux Enterprise Desktop 11 SP4:rsvg-view-2.26.0-2.5.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:librsvg-2.26.0-2.5.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:librsvg-32bit-2.26.0-2.5.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:librsvg-x86-2.26.0-2.5.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:rsvg-view-2.26.0-2.5.1 SUSE Linux Enterprise Server 11 SP3:librsvg-2.26.0-2.5.1 SUSE Linux Enterprise Server 11 SP3:librsvg-32bit-2.26.0-2.5.1 SUSE Linux Enterprise Server 11 SP3:librsvg-x86-2.26.0-2.5.1 SUSE Linux Enterprise Server 11 SP3:rsvg-view-2.26.0-2.5.1 SUSE Linux Enterprise Server 11 SP4:librsvg-2.26.0-2.5.1 SUSE Linux Enterprise Server 11 SP4:librsvg-32bit-2.26.0-2.5.1 SUSE Linux Enterprise Server 11 SP4:librsvg-x86-2.26.0-2.5.1 SUSE Linux Enterprise Server 11 SP4:rsvg-view-2.26.0-2.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:librsvg-2.26.0-2.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:librsvg-32bit-2.26.0-2.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:librsvg-x86-2.26.0-2.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP3:rsvg-view-2.26.0-2.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:librsvg-2.26.0-2.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:librsvg-32bit-2.26.0-2.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:librsvg-x86-2.26.0-2.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:rsvg-view-2.26.0-2.5.1 SUSE Linux Enterprise Software Development Kit 11 SP3:librsvg-devel-2.26.0-2.5.1 SUSE Linux Enterprise Software Development Kit 11 SP4:librsvg-devel-2.26.0-2.5.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151785-1/ https://www.suse.com/security/cve/CVE-2013-1881.html CVE-2013-1881 https://bugzilla.suse.com/840753 SUSE Bug 840753