Date: Fri, 16 Sep 2011 08:28:31 +0200 From: Yves-Alexis Perez <corsac@...ian.org> To: oss-security@...ts.openwall.com Cc: Nicolas Grégoire <nicolas.gregoire@...rri.fr> Subject: Re: Is there a maintainer for librsvg ? On jeu., 2011-09-15 at 15:23 +0200, Nicolas Grégoire wrote: > Hello, > > librsvg is a SVG rendering library hosted at librsvg.sourceforge.net. No > new version was published since 2005, and a (security) bug that I > reported via bugzilla.gnome.org 6 weeks ago wasn't even triaged. > > Given that this lib is used by a lot of distros, what can I do in order > to get this bug (and others) patched ? It seems that librsvg is hosted on GNOME since quite some time, see http://git.gnome.org/browse/librsvg/ and http://ftp.gnome.org/pub/GNOME/sources/librsvg/2.34/ (and https://bugzilla.gnome.org/buglist.cgi?quicksearch=librsvg) Regards, -- Yves-Alexis Download attachment "signature.asc" of type "application/pgp-signature" (837 bytes)
Powered by blists - more mailing lists
Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.
Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.