Bug 109993

Summary:	media-gfx/inkscape security updates available
Product:	Gentoo Security	Reporter:	Neil Darlow <neil>
Component:	Vulnerabilities	Assignee:	Gentoo Security <security>
Status:	RESOLVED FIXED
Severity:	normal	CC:	graphics+disabled
Priority:	High
Version:	unspecified
Hardware:	All
OS:	Linux
URL:	http://www.inkscape.org/
Whiteboard:	B2 [glsa] jaervosz
Package list:		Runtime testing required:	---

Description Neil Darlow 2005-10-20 23:36:11 UTC

To quote the Inkscape site announcement:

October 9, 2005

Mentalguy has released new point releases of the past two versions of Inkscape
to correct two issues with arbitrary code execution when opening malicious
files. There are no known exploits for this issue, but if you use Inkscape on a
production machine in a manner that invokes files from arbitrary sources, you
may wish to upgrade.


Reproducible: Always
Steps to Reproduce:
1.
2.
3.

Comment 1 Jakub Moc (RETIRED) gentoo-dev

2005-11-19 14:59:36 UTC

Security, any word on this?

Comment 2 Sune Kloppenborg Jeppesen (RETIRED) gentoo-dev

2005-11-20 00:01:48 UTC

Graphics please provide an updated ebuild.

Comment 3 Karol Wojtaszek (RETIRED) gentoo-dev

2005-11-22 07:19:46 UTC

Bumped in portage

Comment 4 Sune Kloppenborg Jeppesen (RETIRED) gentoo-dev

2005-11-22 09:03:28 UTC

Arches please test and mark stable.

Comment 5 Markus Rothe (RETIRED) gentoo-dev

2005-11-22 10:31:54 UTC

stable on ppc64

Comment 6 Simon Stelling (RETIRED) gentoo-dev

2005-11-22 11:20:11 UTC

amd64 keywording happy hour: get two keywords for the price of one!

Comment 7 Chris White (RETIRED) gentoo-dev

2005-11-22 12:19:39 UTC

x86 stable.  This program is addictive.

Comment 8 Gustavo Zacarias (RETIRED) gentoo-dev

2005-11-22 12:31:57 UTC

sparc stable.

Comment 9 Joe Jezak (RETIRED) gentoo-dev

2005-11-27 11:53:49 UTC

Marked ppc stable.

Comment 10 Thierry Carrez (RETIRED) gentoo-dev

2005-11-28 02:20:30 UTC

Thx everyone
GLSA 200511-22