Sylvain Beucler pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
2ab0d228 by Sylvain Beucler at 2022-01-10T16:43:32+01:00
CVE-2021-45948/assimp: stretch not-affected
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1910,10 +1910,12 @@ CVE-2021-45949 (Ghostscript GhostPDL 9.50 through
9.54.0 has a heap-based buffer
NOTE:
https://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=2a3129365d3bc0d4a41f107ef175920d1505d1f7
CVE-2021-45948 (Open Asset Import Library (aka assimp) 5.1.0 and 5.1.1 has a
heap-base ...)
- assimp 5.1.1~ds0-1
+ [stretch] - assimp <not-affected> (M3D format support not present)
NOTE: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34416
NOTE:
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/assimp/OSV-2021-775.yaml
NOTE: https://github.com/assimp/assimp/pull/4146
NOTE:
https://github.com/assimp/assimp/commit/30f17aa2064b86c0096f0ec701b9e8ea9312fef2
(v5.1.0)
+ NOTE: Introduced by:
https://github.com/assimp/assimp/commit/a622e109a0739435e3e2f05bfbedba0e8385282d
(v5.1.0.rc1)
CVE-2021-45947 (Wasm3 0.5.0 has an out-of-bounds write in Runtime_Release
(called from ...)
NOT-FOR-US: wasm3
CVE-2021-45946 (Wasm3 0.5.0 has an out-of-bounds write in CompileBlock (called
from Co ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/2ab0d228d74577f8bf8b38f748ca6a9cbca49457
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/2ab0d228d74577f8bf8b38f748ca6a9cbca49457
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
