First Last Prev Next    No search results available      Search page      Enter new bug
Bug#: 109993
Alias:
Product:
Component:
Status: RESOLVED
Resolution: FIXED
Assigned To: Gentoo Security <security@gentoo.org>
Hardware:
OS:
Version:
Priority:
Severity:
Reporter: Neil Darlow <neil@darlow.co.uk>
Add CC:
CC:
Remove selected CCs
URL:
Summary:
Status Whiteboard:
Keywords:
Flags: Requestee:
 
 
  ()

Filename Description Type Creator Created Size Actions
Create a New Attachment (proposed patch, testcase, etc.) View All

Bug 109993 depends on: Show dependency tree
Show dependency graph
Bug 109993 blocks:

Additional Comments: (this is where you put emerge --info)







View Bug Activity   |   Format For Printing   |   XML   |   Clone This Bug

Description:   Opened: 2005-10-20 23:36 0000 
To quote the Inkscape site announcement:

October 9, 2005

Mentalguy has released new point releases of the past two versions of Inkscape
to correct two issues with arbitrary code execution when opening malicious
files. There are no known exploits for this issue, but if you use Inkscape on a
production machine in a manner that invokes files from arbitrary sources, you
may wish to upgrade.


Reproducible: Always
Steps to Reproduce:
1.
2.
3.

------- Comment #1 From Jakub Moc 2005-11-19 14:59:36 0000 ------- 
Security, any word on this?

------- Comment #2 From Sune Kloppenborg Jeppesen 2005-11-20 00:01:48 0000 ------- 
Graphics please provide an updated ebuild.

------- Comment #3 From Karol Wojtaszek (RETIRED) 2005-11-22 07:19:46 0000 ------- 
Bumped in portage

------- Comment #4 From Sune Kloppenborg Jeppesen 2005-11-22 09:03:28 0000 ------- 
Arches please test and mark stable.

------- Comment #5 From Markus Rothe 2005-11-22 10:31:54 0000 ------- 
stable on ppc64

------- Comment #6 From Simon Stelling (RETIRED) 2005-11-22 11:20:11 0000 ------- 
amd64 keywording happy hour: get two keywords for the price of one!

------- Comment #7 From Chris White (RETIRED) 2005-11-22 12:19:39 0000 ------- 
x86 stable.  This program is addictive.

------- Comment #8 From Gustavo Zacarias (RETIRED) 2005-11-22 12:31:57 0000 ------- 
sparc stable.

------- Comment #9 From Joe Jezak 2005-11-27 11:53:49 0000 ------- 
Marked ppc stable.

------- Comment #10 From Thierry Carrez (RETIRED) 2005-11-28 02:20:30 0000 ------- 
Thx everyone
GLSA 200511-22
First Last Prev Next    No search results available      Search page      Enter new bug