Bug 23144

Summary:	librsvg new security issue CVE-2018-1000041
Product:	Mageia	Reporter:	David Walser <luigiwalser>
Component:	Security	Assignee:	QA Team <qa-bugs>
Status:	RESOLVED FIXED	QA Contact:	Sec team <security>
Severity:	normal
Priority:	Normal	CC:	marja11, mhrambo3501, sysadmin-bugs, tarazed25
Version:	6	Keywords:	advisory, has_procedure, validated_update
Target Milestone:	---
Hardware:	All
OS:	Linux
Whiteboard:	MGA6-64-OK
Source RPM:	librsvg-2.40.18-1.mga6.src.rpm	CVE:
Status comment:
Bug Depends on:
Bug Blocks:	23206

Description David Walser 2018-06-07 23:43:26 CEST

openSUSE has issued an advisory on May 17:
https://lists.opensuse.org/opensuse-updates/2018-05/msg00045.html

Mageia 5 is also affected.

Comment 1 Marja Van Waes 2018-06-08 21:30:21 CEST

Assigning to all packagers collectively, since there is no registered maintainer for this package.

Assignee: bugsquad => pkg-bugs
CC: (none) => marja11

Comment 2 Mike Rambo 2018-06-18 21:07:30 CEST

Patched package uploaded for Mageia 6.

Advisory:
========================

Updated librsvg package fixes security vulnerability:

It was discovered that there was an input validation vulnerability in the librsvg renderer library that could result in data being leaked to remote attackers via a specially-crafted file (CVE-2018-1000041).

References:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000041
https://lists.opensuse.org/opensuse-updates/2018-05/msg00045.html
========================

Updated packages in core/updates_testing:
========================
lib64rsvg2_2-2.40.18-1.1.mga6
lib64rsvg2-devel-2.40.18-1.1.mga6
lib64rsvg-gir2.0-2.40.18-1.1.mga6
librsvg-2.40.18-1.1.mga6

from librsvg-2.40.18-1.1.mga6.src.rpm

Testing procedure https://bugs.mageia.org/show_bug.cgi?id=21368#c4

Keywords: (none) => has_procedure
Assignee: pkg-bugs => qa-bugs
CC: (none) => mrambo

Comment 3 Len Lawrence 2018-06-18 23:46:09 CEST

Mageia 6, x86_64

Updated the packages and ran tests based on the link to bug 21368.

$ rsvg-convert -v
rsvg-convert version 2.40.18

$ rsvg-convert -f pdf -w 607 -h 512 -b '#ebafdc' sample2.svg -o sample2.pdf
$ xpdf sample2.pdf
One page PDF with an image of a crown on a pink background.
$ rsvg-convert -f pdf -w 607 -h 512 -b 'OliveDrab' sample2.svg -o sample3.pdf
$ xpdf sample3.pdf
Crown on a greenish background.

$ rsvg-view-3 -b "#abcdef" mageia-2013.svg
Displayed Mageia logo on pale blue background - and as said the window needs to be stretched.
$ rsvg-view-3 -w 800 -h 600 -b "MistyRose" mageia-2013.svg
This displays as a distorted image (squashed horizontally) on a rose background after stretching the window.  The image responds to resizing with the + and - buttons.

Good for 64-bits.

Whiteboard: (none) => MGA6-64-OK
CC: (none) => tarazed25

Comment 4 claire robinson 2018-06-19 21:42:36 CEST

Advisoried. Validating.

Keywords: (none) => advisory, validated_update
CC: (none) => sysadmin-bugs

Comment 5 Mageia Robot 2018-06-20 01:43:31 CEST

An update for this issue has been pushed to the Mageia Updates repository.

https://advisories.mageia.org/MGASA-2018-0291.html

Status: NEW => RESOLVED
Resolution: (none) => FIXED

David Walser 2018-06-20 13:10:44 CEST

Blocks: (none) => 23206