Red Hat Throws a Curveball: Librsvg2’s Unexpected Vulnerability

Red Hat issues a security advisory for an unexpected vulnerability in the librsvg2 package. The issue, tagged CVE-2023-38633, involves an arbitrary file read when xinclude href has special characters. An update is available for Red Hat Enterprise Linux 9 users.

Membership Required

 You must be a member to access this content.

View Membership Levels
Already a member? Log in here