[Git][security-tracker-team/security-tracker][master] 2 commits: CVE-2021-3477/openexr: precise affected versions

[Sylvain Beucler (@beuc)]

Sylvain Beucler pushed to branch master at Debian Security Tracker / security-tracker


Commits:
9398fe7b by Sylvain Beucler at 2021-06-26T20:14:35+02:00
CVE-2021-3477/openexr: precise affected versions

- - - - -
b9d6f206 by Sylvain Beucler at 2021-06-26T20:58:19+02:00
CVE-2021-3478/openexr: reference additional patch

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -13801,6 +13801,7 @@ CVE-2021-3478 (There's a flaw in OpenEXR's scanline input file functionality in
 	NOTE: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=27409
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1939160
 	NOTE: https://github.com/AcademySoftwareFoundation/openexr/commit/bc88cdb6c97fbf5bc5d11ad8ca55306da931283a
+	NOTE: Depends on prior v3 checks https://github.com/AcademySoftwareFoundation/openexr/commit/0963ff1c4fcb3e748a9386685622747bfef00eb1
 CVE-2021-3477 (There's a flaw in OpenEXR's deep tile sample size calculations in vers ...)
 	- openexr <unfixed> (bug #986796)
 	[bullseye] - openexr <no-dsa> (Minor issue)
@@ -13809,6 +13810,7 @@ CVE-2021-3477 (There's a flaw in OpenEXR's deep tile sample size calculations in
 	NOTE: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26956
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1939159
 	NOTE: https://github.com/AcademySoftwareFoundation/openexr/commit/467be80b75642efbbe6bdace558079f68c16acb1
+	NOTE: Introduced by https://github.com/AcademySoftwareFoundation/openexr/commit/9f011ae9ce9b1ca03521ff76e7659d34ee830344 (v2.0.0)
 CVE-2021-29645
 	RESERVED
 CVE-2021-29644



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/0f49c586e266dc90706e9407571f53174913ccba...b9d6f206f3a8f0b61d778379e52156bd682294fc

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/0f49c586e266dc90706e9407571f53174913ccba...b9d6f206f3a8f0b61d778379e52156bd682294fc
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20210626/64625614/attachment.htm>