openSUSE alert openSUSE-SU-2013:0297-1 (inkscape) [LWN.net]


From:
    	       opensuse-security@opensuse.org 
To:
    	       opensuse-updates@opensuse.org 
Subject:
    	       openSUSE-SU-2013:0297-1: moderate: inkscape: two security fixes 
Date:
    	       Fri, 15 Feb 2013 00:04:58 +0100 (CET)
Message-ID:
    	       <20130214230459.52C73320E5@maintenance.suse.de>
Archive-link:
    	       Article, Thread
              
   openSUSE Security Update: inkscape: two security fixes
______________________________________________________________________________

Announcement ID:    openSUSE-SU-2013:0297-1
Rating:             moderate
References:         #794958 #796306 
Cross-References:   CVE-2012-5656 CVE-2012-6076
Affected Products:
                    openSUSE 11.4
______________________________________________________________________________

   An update that fixes two vulnerabilities is now available.

Description:

   Inkscape was updated to fix two security issues:

   - inkscape occasionaly tries to open EPS files from /tmp
   (bnc#796306, CVE-2012-6076).
   - inkscape could load XML from external hosts (bnc#794958,
   CWE-827, CVE-2012-5656).


Patch Instructions:

   To install this openSUSE Security Update use YaST online_update.
   Alternatively you can run the command listed for your product:

   - openSUSE 11.4:

      zypper in -t patch 2013-26

   To bring your system up-to-date, use "zypper patch".


Package List:

   - openSUSE 11.4 (i586 x86_64):

      inkscape-0.48.1-8.1
      inkscape-debuginfo-0.48.1-8.1
      inkscape-debugsource-0.48.1-8.1
      inkscape-extensions-dia-0.48.1-8.1
      inkscape-extensions-extra-0.48.1-8.1
      inkscape-extensions-fig-0.48.1-8.1
      inkscape-extensions-gimp-0.48.1-8.1
      inkscape-extensions-skencil-0.48.1-8.1

   - openSUSE 11.4 (noarch):

      inkscape-lang-0.48.1-8.1


References:

   http://support.novell.com/security/cve/CVE-2012-5656.html

   http://support.novell.com/security/cve/CVE-2012-6076.html

   https://bugzilla.novell.com/794958

   https://bugzilla.novell.com/796306
(Log in to post comments)