Ubuntu Security Notice USN-193-1 – Joxean Koret discovered that the SVG import plugin did not properly sanitize data read from an SVG file. By tricking an user into opening a specially crafted SVG file, an attacker could exploit this to execute arbitrary code with the privileges of the user.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/40443/USN-193-1.txt
Source: https://packetstormsecurity.com/files/40443/Ubuntu-Security-Notice-193-1.html