[Inkscape-devel] Further information about CVEs

Hi there,

As you may know, 3 CVEs [0] [1] [2] have been assigned to Inkscape, but there are a very few information available. The 3 CVE pages redirect to the same CISA page [3], mentioning Inkscape version 1.0 or later as fixed. Could you please confirm this information? Moreover, in the case of backporting patches is preferred instead of upgrading, could you please point me to the fixing commits? That would be very awesome.:)

Best regards,

Thomas

[0]https://nvd.nist.gov/vuln/detail/CVE-2021-42700 [1]https://nvd.nist.gov/vuln/detail/CVE-2021-42702 [2]https://nvd.nist.gov/vuln/detail/CVE-2021-42704 [3]https://www.cisa.gov/uscert/ics/advisories/icsa-22-132-03