[ubuntu/oneiric-updates] inkscape 0.48.2-0ubuntu1.1 (Accepted)
Ubuntu Archive Robot
cjwatson+ubuntu-archive-robot at chiark.greenend.org.uk
Wed Jan 30 15:58:16 UTC 2013
inkscape (0.48.2-0ubuntu1.1) oneiric-security; urgency=low
* SECURITY UPDATE: arbitrary file disclosure via XML external entity
- debian/patches/CVE-2012-5656.dpatch: disable loading external
entities in src/preferences-skeleton.h,
src/ui/dialog/ocaldialogs.cpp, src/xml/repr-io.cpp.
- CVE-2012-5656
* SECURITY UPDATE: possible file loading from /tmp
- debian/patches/CVE-2012-6076.dpatch: make sure filename is absolute
in src/extension/implementation/script.cpp.
- CVE-2012-6076
Date: 2013-01-29 23:00:26.189857+00:00
Changed-By: Marc Deslauriers <marc.deslauriers at canonical.com>
Signed-By: Ubuntu Archive Robot <cjwatson+ubuntu-archive-robot at chiark.greenend.org.uk>
https://launchpad.net/ubuntu/oneiric/+source/inkscape/0.48.2-0ubuntu1.1
-------------- next part --------------
Sorry, changesfile not available.
More information about the Oneiric-changes
mailing list