Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
a5b7167f by Salvatore Bonaccorso at 2021-03-31T22:38:54+02:00
Add CVE-2021-347{7,8}/openexr
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -54,8 +54,14 @@ CVE-2021-3479 (There's a flaw in OpenEXR's Scanline API
functionality in version
NOTE:
https://github.com/AcademySoftwareFoundation/openexr/commit/d80f11f4f55100d007ae80a162bf257ec291612c
NOTE: https://github.com/AcademySoftwareFoundation/openexr/pull/830
CVE-2021-3478 (There's a flaw in OpenEXR's scanline input file functionality
in versi ...)
+ - openexr <unfixed>
+ NOTE: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=27409
+ NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1939160
TODO: check
CVE-2021-3477 (There's a flaw in OpenEXR's deep tile sample size calculations
in vers ...)
+ - openexr <unfixed>
+ NOTE: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26956
+ NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1939159
TODO: check
CVE-2021-29645
RESERVED
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a5b7167fb2567d7bf4b460a172eaa33c5bccd171
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a5b7167fb2567d7bf4b460a172eaa33c5bccd171
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
