~ubuntu-branches/ubuntu/oneiric/inkscape/oneiric-security

Viewing all changes in revision 60.

  • Committer: Package Import Robot
  • Author(s): Marc Deslauriers
  • Date: 2013-01-29 13:40:53 UTC
  • Revision ID: package-import@ubuntu.com-20130129134053-01qe4o6vmz0821vn
Tags: 0.48.2-0ubuntu1.1
* SECURITY UPDATE: arbitrary file disclosure via XML external entity
  - debian/patches/CVE-2012-5656.dpatch: disable loading external
    entities in src/preferences-skeleton.h,
    src/ui/dialog/ocaldialogs.cpp, src/xml/repr-io.cpp.
  - CVE-2012-5656
* SECURITY UPDATE: possible file loading from /tmp
  - debian/patches/CVE-2012-6076.dpatch: make sure filename is absolute
    in src/extension/implementation/script.cpp.
  - CVE-2012-6076

expand all expand all

Show diffs side-by-side

added added

removed removed

Lines of Context: