[Git][security-tracker-team/security-tracker][master] Track upstream commit from v2.5.18.0 for CVE-2024-55195

Salvatore Bonaccorso (@carnil) carnil at debian.org
Mon Feb 17 18:40:07 GMT 2025



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
97c9df10 by Salvatore Bonaccorso at 2025-02-17T19:39:32+01:00
Track upstream commit from v2.5.18.0 for CVE-2024-55195

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -6048,6 +6048,7 @@ CVE-2024-55195 (An allocation-size-too-big bug in the component /imagebuf.cpp of
 	[bullseye] - openimageio <ignored> (Minor issue)
 	NOTE: https://github.com/AcademySoftwareFoundation/OpenImageIO/issues/4553
 	NOTE: https://github.com/AcademySoftwareFoundation/OpenImageIO/commit/78927acce09bd4fd7d4d7dccf7b7d4eff4295fcf
+	NOTE: https://github.com/AcademySoftwareFoundation/OpenImageIO/commit/f72b3d73d1157c0d25d07b8a1cdb00857788d685 (v2.5.18.0)
 CVE-2024-55194 (OpenImageIO v3.1.0.0dev was discovered to contain a heap overflow via  ...)
 	- openimageio <unfixed> (bug #1094410)
 	[bookworm] - openimageio <no-dsa> (Minor issue)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/97c9df10d0bb3d36e864be5b19a3f1791977dd6f

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/97c9df10d0bb3d36e864be5b19a3f1791977dd6f
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20250217/8f61a2b7/attachment.htm>


More information about the debian-security-tracker-commits mailing list