[Git][security-tracker-team/security-tracker][master] Add CVE-2021-347{7,8}/openexr

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
a5b7167f by Salvatore Bonaccorso at 2021-03-31T22:38:54+02:00
Add CVE-2021-347{7,8}/openexr

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -54,8 +54,14 @@ CVE-2021-3479 (There's a flaw in OpenEXR's Scanline API functionality in version
 	NOTE: https://github.com/AcademySoftwareFoundation/openexr/commit/d80f11f4f55100d007ae80a162bf257ec291612c
 	NOTE: https://github.com/AcademySoftwareFoundation/openexr/pull/830
 CVE-2021-3478 (There's a flaw in OpenEXR's scanline input file functionality in versi ...)
+	- openexr <unfixed>
+	NOTE: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=27409
+	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1939160
 	TODO: check
 CVE-2021-3477 (There's a flaw in OpenEXR's deep tile sample size calculations in vers ...)
+	- openexr <unfixed>
+	NOTE: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26956
+	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1939159
 	TODO: check
 CVE-2021-29645
 	RESERVED



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a5b7167fb2567d7bf4b460a172eaa33c5bccd171

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a5b7167fb2567d7bf4b460a172eaa33c5bccd171
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20210331/334c905d/attachment.htm>