[Git][security-tracker-team/security-tracker][master] openimageio fixed in sid

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
0b0db33a by Moritz Muehlenhoff at 2025-02-16T20:07:17+01:00
openimageio fixed in sid

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -5909,25 +5909,25 @@ CVE-2024-57326 (A Reflected Cross-Site Scripting (XSS) vulnerability exists in t
 CVE-2024-55573 (An issue was discovered in Centreon centreon-web 24.10.x before 24.10. ...)
 	- centreon-web <itp> (bug #913903)
 CVE-2024-55195 (An allocation-size-too-big bug in the component /imagebuf.cpp of OpenI ...)
-	- openimageio <unfixed> (bug #1094408)
+	- openimageio 2.5.18.0+dfsg-1 (bug #1094408)
 	[bookworm] - openimageio <no-dsa> (Minor issue)
 	[bullseye] - openimageio <ignored> (Minor issue)
 	NOTE: https://github.com/AcademySoftwareFoundation/OpenImageIO/issues/4553
 	NOTE: https://github.com/AcademySoftwareFoundation/OpenImageIO/commit/78927acce09bd4fd7d4d7dccf7b7d4eff4295fcf
 CVE-2024-55194 (OpenImageIO v3.1.0.0dev was discovered to contain a heap overflow via  ...)
-	- openimageio <unfixed> (bug #1094410)
+	- openimageio 2.5.18.0+dfsg-1 (bug #1094410)
 	[bookworm] - openimageio <no-dsa> (Minor issue)
 	[bullseye] - openimageio <ignored> (Minor issue)
 	NOTE: https://github.com/AcademySoftwareFoundation/OpenImageIO/issues/4552
 	NOTE: https://github.com/AcademySoftwareFoundation/OpenImageIO/commit/34b29f33217e58b7f0d42c059ecf1696c381322a
 CVE-2024-55193 (OpenImageIO v3.1.0.0dev was discovered to contain a segmentation viola ...)
-	- openimageio <unfixed> (bug #1094411)
+	- openimageio 2.5.18.0+dfsg-1 (bug #1094411)
 	[bookworm] - openimageio <no-dsa> (Minor issue)
 	[bullseye] - openimageio <ignored> (Minor issue)
 	NOTE: https://github.com/AcademySoftwareFoundation/OpenImageIO/issues/4551
 	NOTE: https://github.com/AcademySoftwareFoundation/OpenImageIO/commit/d2077eb22a821d0ef7614d06cc1540b952d37ddf
 CVE-2024-55192 (OpenImageIO v3.1.0.0dev was discovered to contain a heap overflow via  ...)
-	- openimageio <unfixed> (bug #1094398)
+	- openimageio 2.5.18.0+dfsg-1 (bug #1094398)
 	[bookworm] - openimageio <no-dsa> (Minor issue)
 	[bullseye] - openimageio <ignored> (Minor issue)
 	NOTE: https://github.com/AcademySoftwareFoundation/OpenImageIO/issues/4550



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0b0db33afc3edbb9096deeda88e02356dbb98560

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0b0db33afc3edbb9096deeda88e02356dbb98560
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20250216/636d63b0/attachment.htm>