REDHAT-BUG-1312337: Low severity centos librsvg2 vulnerability
It was found that specially crafted SVG file can trigger crash in pngwriterow when converting the given SVG using librsvg2 and cairo. Crash happens inside libpng when trying to access invalid pointer.
Acknowledgements:
Name: Gustavo Grieco
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-1312337?
The severity of REDHAT-BUG-1312337 is considered moderate due to the potential for crashes when processing specially crafted SVG files.
How do I fix REDHAT-BUG-1312337?
To fix REDHAT-BUG-1312337, update the librsvg2, cairo, and libpng software to the latest versions that address this vulnerability.
What systems are affected by REDHAT-BUG-1312337?
REDHAT-BUG-1312337 affects systems running GNOME librsvg, Cairo, and libpng.
What impact does REDHAT-BUG-1312337 have on users?
The impact of REDHAT-BUG-1312337 includes potential crashes and loss of processing capabilities when handling SVG files.
Is there a known workaround for REDHAT-BUG-1312337?
There are currently no known workarounds for REDHAT-BUG-1312337, making an update to the software the best course of action.