inkscape (0.48.3.1-1ubuntu6.1) quantal-security; urgency=low
* SECURITY UPDATE: arbitrary file disclosure via XML external entity
- debian/patches/CVE-2012-5656.patch: disable loading external entities
in src/preferences-skeleton.h, src/ui/dialog/ocaldialogs.cpp,
src/xml/repr-io.cpp.
- CVE-2012-5656
* SECURITY UPDATE: possible file loading from /tmp
- debian/patches/CVE-2012-6076.patch: make sure filename is absolute
in src/extension/implementation/script.cpp.
- CVE-2012-6076
Date: 2013-01-29 23:00:31.284983+00:00
Changed-By: Marc Deslauriers <[email protected]>
https://launchpad.net/ubuntu/quantal/+source/inkscape/0.48.3.1-1ubuntu6.1
Sorry, changesfile not available.
--
Quantal-changes mailing list
[email protected]
Modify settings or unsubscribe at:
https://lists.ubuntu.com/mailman/listinfo/quantal-changes
