Sylvain Beucler pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
9398fe7b by Sylvain Beucler at 2021-06-26T20:14:35+02:00
CVE-2021-3477/openexr: precise affected versions
- - - - -
b9d6f206 by Sylvain Beucler at 2021-06-26T20:58:19+02:00
CVE-2021-3478/openexr: reference additional patch
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -13801,6 +13801,7 @@ CVE-2021-3478 (There's a flaw in OpenEXR's scanline
input file functionality in
NOTE: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=27409
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1939160
NOTE:
https://github.com/AcademySoftwareFoundation/openexr/commit/bc88cdb6c97fbf5bc5d11ad8ca55306da931283a
+ NOTE: Depends on prior v3 checks
https://github.com/AcademySoftwareFoundation/openexr/commit/0963ff1c4fcb3e748a9386685622747bfef00eb1
CVE-2021-3477 (There's a flaw in OpenEXR's deep tile sample size calculations
in vers ...)
- openexr <unfixed> (bug #986796)
[bullseye] - openexr <no-dsa> (Minor issue)
@@ -13809,6 +13810,7 @@ CVE-2021-3477 (There's a flaw in OpenEXR's deep tile
sample size calculations in
NOTE: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26956
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1939159
NOTE:
https://github.com/AcademySoftwareFoundation/openexr/commit/467be80b75642efbbe6bdace558079f68c16acb1
+ NOTE: Introduced by
https://github.com/AcademySoftwareFoundation/openexr/commit/9f011ae9ce9b1ca03521ff76e7659d34ee830344
(v2.0.0)
CVE-2021-29645
RESERVED
CVE-2021-29644
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/0f49c586e266dc90706e9407571f53174913ccba...b9d6f206f3a8f0b61d778379e52156bd682294fc
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/0f49c586e266dc90706e9407571f53174913ccba...b9d6f206f3a8f0b61d778379e52156bd682294fc
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
