oss-sec mailing list archives

Re: Is there a maintainer for librsvg ?


From: Yves-Alexis Perez <corsac () debian org>
Date: Fri, 16 Sep 2011 08:28:31 +0200

On jeu., 2011-09-15 at 15:23 +0200, Nicolas Grégoire wrote:
Hello,

librsvg is a SVG rendering library hosted at librsvg.sourceforge.net. No
new version was published since 2005, and a (security) bug that I
reported via bugzilla.gnome.org 6 weeks ago wasn't even triaged.

Given that this lib is used by a lot of distros, what can I do in order
to get this bug (and others) patched ?

It seems that librsvg is hosted on GNOME since quite some time, see
http://git.gnome.org/browse/librsvg/ and
http://ftp.gnome.org/pub/GNOME/sources/librsvg/2.34/ (and
https://bugzilla.gnome.org/buglist.cgi?quicksearch=librsvg)

Regards,
-- 
Yves-Alexis

Attachment: signature.asc
Description: This is a digitally signed message part


Current thread: