mailing list archives
From: rPath Update Announcements <announce-noreply () rpath com>
Date: Wed, 28 Mar 2007 22:53:47 -0400
rPath Security Advisory: 2007-0061-1
Products: rPath Linux 1
Exposure Level Classification:
Indirect User Deterministic Unauthorized Access
inkscape=/conary.rpath.com () rpl:devel//1/0.45.1-0.1-1
Previous versions of the inkscape package may execute arbitrary code
when provided with certain strings, particularly when provided with
a maliciously-crafted URI. This vulnerability could have been
exposed for users who configured a browser to open certain document
types with inkscape.
Another vulnerability fixed in this version of inkscape involves
the Whiteboard Jabber client, but this functionality was not
included in the previous version of inkscape included in rPath
Linux, so it was not vulnerable.
Full-Disclosure - We believe in it.
Hosted and sponsored by Secunia - http://secunia.com/
- rPSA-2007-0061-1 inkscape rPath Update Announcements (Mar 29)