Bug 918100 (CVE-2023-38633)

Summary:	<gnome-base/librsvg-2.56.3: arbitrary file read via crafted xinclude href
Product:	Gentoo Security	Reporter:	John Helmert III <ajak>
Component:	Vulnerabilities	Assignee:	Gentoo Security <security>
Status:	CONFIRMED ---
Severity:	normal	CC:	gnome
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
URL:	https://gitlab.gnome.org/GNOME/librsvg/-/issues/996
Whiteboard:	A3 [glsa?]
Package list:		Runtime testing required:	---

Description John Helmert III archtester

2023-11-23 18:34:40 UTC

CVE-2023-38633:

A directory traversal problem in the URL decoder of librsvg before 2.56.3 could be used by local or remote attackers to disclose files (on the local filesystem outside of the expected area), as demonstrated by href=".?../../../../../../../../../../etc/passwd" in an xi:include element.

Fixed in 2.56.3.