crates.io/librsvg CVE-2015-7558: high 7.5, EPSS 2.37%
librsvg DoS via Cyclic References
Action: Upgrade librsvg to 2.40.12 or later.
cargo update -p librsvg --precise 2.40.12Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.40.12 | - |
Fixed versions
| 2.40.12 |
Sources
- osv: GHSA-j984-q4qc-6qxf
- https://nvd.nist.gov/vuln/detail/CVE-2015-7558
- https://bugzilla.redhat.com/show_bug.cgi?id=1268243
- https://git.gnome.org/browse/librsvg/commit/?id=a51919f7e1ca9c535390a746fbf6e28c8402dc61
- https://github.com/GNOME/librsvg
- http://www.debian.org/security/2016/dsa-3584
- http://www.openwall.com/lists/oss-security/2015/12/21/5
- http://www.openwall.com/lists/oss-security/2016/04/30/3
CVE-2015-7558 · published · modified · JSON