Debian/inkscape: medium 5.5
The rasterization process in Inkscape before 0.48.4 allows local users to read arbitrary files via an external entity in a SVG file, aka an XML external entity (XXE) injection attack.
Action: Upgrade inkscape to 0.48.3.1-1.2 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.48.3.1-1.2 | - |
Fixed versions
| 0.48.3.1-1.2 |
Sources
published · modified · JSON