summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorSalvatore Bonaccorso <carnil@debian.org>2021-03-31 22:38:54 +0200
committerSalvatore Bonaccorso <carnil@debian.org>2021-03-31 22:38:54 +0200
commitd3da8429be275fd185390db11440207a3d13c850 (patch)
tree4ef6db75133f92a8c6593a3a7ee0b1d3b678fa84
parent711a33fb534fbe20d20462ac62ae3c731f52cf7e (diff)
Add CVE-2021-347{7,8}/openexr
-rw-r--r--data/CVE/2021.list6
1 files changed, 6 insertions, 0 deletions
diff --git a/data/CVE/2021.list b/data/CVE/2021.list
index 14023deafc..3d231e9f2b 100644
--- a/data/CVE/2021.list
+++ b/data/CVE/2021.list
@@ -50,8 +50,14 @@ CVE-2021-3479 (There's a flaw in OpenEXR's Scanline API functionality in version
NOTE: https://github.com/AcademySoftwareFoundation/openexr/commit/d80f11f4f55100d007ae80a162bf257ec291612c
NOTE: https://github.com/AcademySoftwareFoundation/openexr/pull/830
CVE-2021-3478 (There's a flaw in OpenEXR's scanline input file functionality in versi ...)
+ - openexr <unfixed>
+ NOTE: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=27409
+ NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1939160
TODO: check
CVE-2021-3477 (There's a flaw in OpenEXR's deep tile sample size calculations in vers ...)
+ - openexr <unfixed>
+ NOTE: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26956
+ NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1939159
TODO: check
CVE-2021-29645
RESERVED

© 2014-2024 Faster IT GmbH | imprint | privacy policy