Format: 1.8 Date: Fri, 28 Jul 2023 08:56:58 -0400 Source: librsvg Binary: gir1.2-rsvg-2.0 librsvg2-2 librsvg2-bin librsvg2-common librsvg2-dev Architecture: ppc64el ppc64el_translations Version: 2.48.9-1ubuntu0.20.04.4 Distribution: focal Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Marc Deslauriers Description: gir1.2-rsvg-2.0 - gir files for renderer library for SVG files librsvg2-2 - SAX-based renderer library for SVG files (runtime) librsvg2-bin - command-line utility to convert SVG files librsvg2-common - SAX-based renderer library for SVG files (extra runtime) librsvg2-dev - SAX-based renderer library for SVG files (development) Changes: librsvg (2.48.9-1ubuntu0.20.04.4) focal-security; urgency=medium . * SECURITY UPDATE: Arbitrary file read when xinclude href has special characters - debian/patches/CVE-2023-38633.patch: validate URLs in librsvg/rsvg-handle.c, rsvg_internals/src/allowed_url.rs, rsvg_internals/src/filters/component_transfer.rs, tests/*. - debian/patches/fix_old_rust_compat.patch: fix compatibility with older rust versions in rsvg_internals/src/allowed_url.rs. - CVE-2023-38633 * Don't fail the build on tests error for i386 Checksums-Sha1: fad86e36b009e263fd9afc28a726fc2b14c66e25 8096 gir1.2-rsvg-2.0_2.48.9-1ubuntu0.20.04.4_ppc64el.deb 00d77e7414c700daac9dd0f9ad722b2aa132438f 14548620 librsvg2-2-dbgsym_2.48.9-1ubuntu0.20.04.4_ppc64el.ddeb c68ce348adcc5c32b33e2e2a8e4ab0568990f3a7 2260596 librsvg2-2_2.48.9-1ubuntu0.20.04.4_ppc64el.deb cbd46a77b9c00ab5533c51282a3699fb63dd92e2 17896 librsvg2-bin-dbgsym_2.48.9-1ubuntu0.20.04.4_ppc64el.ddeb 6836f426697a7c18dc2bad859cde112c435ccecf 14912 librsvg2-bin_2.48.9-1ubuntu0.20.04.4_ppc64el.deb cb5b0122e6e15e4926c9e4e688600be09886c42a 11228 librsvg2-common-dbgsym_2.48.9-1ubuntu0.20.04.4_ppc64el.ddeb 04d6675cc051a227df9aa6ccb445af8c7a6c7579 9420 librsvg2-common_2.48.9-1ubuntu0.20.04.4_ppc64el.deb b7e28384902ce38c9a8b7588421a4e63e17b5235 31504 librsvg2-dev_2.48.9-1ubuntu0.20.04.4_ppc64el.deb 1baec59bcbabbc4896bb9ee4aa2b33e6b0910b96 16127 librsvg_2.48.9-1ubuntu0.20.04.4_ppc64el.buildinfo 42f7aa7f91f1e402769c8337569ab8c451be0169 2074 librsvg_2.48.9-1ubuntu0.20.04.4_ppc64el_translations.tar.gz Checksums-Sha256: 5933a0e5808ec3b2633d1bcdf264f26bd03859dc70d281c1ce09a0eb74832fe8 8096 gir1.2-rsvg-2.0_2.48.9-1ubuntu0.20.04.4_ppc64el.deb 533630839fd9cd81c449747c9bf992a1b50630bf29abd372f4885fd6c79e14e3 14548620 librsvg2-2-dbgsym_2.48.9-1ubuntu0.20.04.4_ppc64el.ddeb 13f05a641befb27411023c48860609ca374797022313ab9f60c63e627456b707 2260596 librsvg2-2_2.48.9-1ubuntu0.20.04.4_ppc64el.deb 99e093bd74841a3518f8d5dd74fdb3050180b816d786072546cde4b16133e005 17896 librsvg2-bin-dbgsym_2.48.9-1ubuntu0.20.04.4_ppc64el.ddeb 997d3c01d489e7f80c0906fe541a6bd1dcffb801d2f52c1cf1c9730b3e4e5fdb 14912 librsvg2-bin_2.48.9-1ubuntu0.20.04.4_ppc64el.deb a4319d7d0ee1d18e4e4b2cb2a4f39b46e5d80baa828b06c33f6b3a9585aca56b 11228 librsvg2-common-dbgsym_2.48.9-1ubuntu0.20.04.4_ppc64el.ddeb 6446000ea0d8f9e6f9ba513430f26dfeae777ed5a1dd00f305d9ef3c64fb2846 9420 librsvg2-common_2.48.9-1ubuntu0.20.04.4_ppc64el.deb f24cd19946b6ef8e8c8b6d7eee5d953b8fcba461848e67b59b265273b4d80a5b 31504 librsvg2-dev_2.48.9-1ubuntu0.20.04.4_ppc64el.deb 0254b98b7268ebed99b81bf0d5255223114c83a2c0fedf32b29e411dec2f3cf5 16127 librsvg_2.48.9-1ubuntu0.20.04.4_ppc64el.buildinfo 30c28885e1dd095c8746ae60e69afbc90c949cf93810306010a41292781a7ffb 2074 librsvg_2.48.9-1ubuntu0.20.04.4_ppc64el_translations.tar.gz Files: 8855efc5d6d258f821257a0da0813098 8096 introspection optional gir1.2-rsvg-2.0_2.48.9-1ubuntu0.20.04.4_ppc64el.deb 4997b5aa2490b04da9dfaf79d07fb90b 14548620 debug optional librsvg2-2-dbgsym_2.48.9-1ubuntu0.20.04.4_ppc64el.ddeb b16371172de55204bb41e6cda1027612 2260596 libs optional librsvg2-2_2.48.9-1ubuntu0.20.04.4_ppc64el.deb 329f740a8009834598db6b75cea05263 17896 debug optional librsvg2-bin-dbgsym_2.48.9-1ubuntu0.20.04.4_ppc64el.ddeb 097b0bb3f12457ccca2228c88911c1dd 14912 graphics optional librsvg2-bin_2.48.9-1ubuntu0.20.04.4_ppc64el.deb 8050386744b423467855008e28096f1d 11228 debug optional librsvg2-common-dbgsym_2.48.9-1ubuntu0.20.04.4_ppc64el.ddeb 245ea9aba90bc639fb0ed54be2205d9b 9420 libs optional librsvg2-common_2.48.9-1ubuntu0.20.04.4_ppc64el.deb 7257e5d95f43b02b06d738c12d3ea2fe 31504 libdevel optional librsvg2-dev_2.48.9-1ubuntu0.20.04.4_ppc64el.deb 837600c6ca1e039cd01ad8e75204c23e 16127 libs optional librsvg_2.48.9-1ubuntu0.20.04.4_ppc64el.buildinfo d01693cf27ced971dc78f248d011f593 2074 raw-translations - librsvg_2.48.9-1ubuntu0.20.04.4_ppc64el_translations.tar.gz Original-Maintainer: Debian GNOME Maintainers