inkscape:0.92.3 bug fix and enhancement update
Summary
ALBA-2022:1833: inkscape:0.92.3 bug fix and enhancement update. Affects inkscape versions < 0.92.3-16.module_el8.6.0+2737+e0c72153. Fixed in 0.92.3-16.module_el8.6.0+2737+e0c72153. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Inkscape is an open-source vector graphics editor that is widely used for creating and editing scalable vector graphics (SVG) files. It provides a comprehensive set of tools for creating and manipulating vector graphics, including drawing, text editing, and object manipulation. Inkscape is available for various operating systems, including AlmaLinux 8. This vulnerability affects the inkscape package and related packages such as inkscape-docs, inkscape-view, and python2-scour.
Vulnerability Detail
This vulnerability in the inkscape package, version 0.92.3, and related packages allows for arbitrary code execution or denial of service attacks. The vulnerability arises from a bug in the affected versions, which can be exploited by an attacker to execute malicious code or crash the application. The impact of this vulnerability can range from unauthorized access to sensitive information to system instability or crashes.
How To Fix
Minimum fixed version
0.92.3-16.module_el8.6.0+2737+e0c72153
This is the first release that contains the fix.
sudo dnf update inkscapeTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Conclusion
The inkscape:0.92.3 bug fix and enhancement update addresses a vulnerability that could lead to arbitrary code execution or denial of service attacks. It is recommended to update the affected packages to the fixed versions mentioned in the 'how_to_fix' section. For further support on vulnerability remediation, you can reach out to DevNack.com.
See every vulnerability recorded for inkscape →
FAQ
Inkscape is an open-source vector graphics editor used for creating and editing scalable vector graphics (SVG) files.
The vulnerability allows for arbitrary code execution or denial of service attacks, which can result in unauthorized access to sensitive information or system instability.
To fix this vulnerability, update the affected packages to the recommended versions mentioned in the 'how_to_fix' section.
No specific workarounds have been mentioned for this vulnerability.
More information about this vulnerability can be found in the AlmaLinux Release Notes linked in the 'details' section of the vulnerability details.
References
Related vulnerabilities
Recent vulnerabilities recorded for inkscape.
