Groups > linux.debian.bugs.dist > #1120902

Bug#1021130: bullseye-pu: package tinyexr/1.0.1+dfsg-1+deb11u1

From	"Adam D. Barratt" <adam@adam-barratt.org.uk>
Newsgroups	linux.debian.bugs.dist, linux.debian.devel.release
Subject	Bug#1021130: bullseye-pu: package tinyexr/1.0.1+dfsg-1+deb11u1
Date	2022-10-14 13:00 +0200
Message-ID	<FgqA2-eaU2-15@gated-at.bofh.it> (permalink)
References	<Fcbgd-bAIm-1@gated-at.bofh.it> <Fcbgd-bAIm-1@gated-at.bofh.it>
Organization	linux.* mail to news gateway

Cross-posted to 2 groups.

Show all headers | View raw

Control: tags -1 + confirmed

On Sun, 2022-10-02 at 19:38 +0200, Timo Röhling wrote:
> The update fixes two vulnerabilities with low priority, i.e.
> the security team has decided not to issue a DSA.
> 
> [ Impact ]
> CVE-2022-34300: Heap overflow in DecodePixelData
> CVE-2022-38529: Heap overflow in rleUncompress
> 

+  * Fix low-priority vulnerabilities

I'm not sure I'd use that wording in a changelog personally - more
likely just "fix security issues" or "backport fixes" or similar - but
it's up to you.

Please go ahead.

Regards,

Adam

Back to linux.debian.bugs.dist | Previous | Next — Next in thread | Find similar | Unroll thread

Thread

Bug#1021130: bullseye-pu: package tinyexr/1.0.1+dfsg-1+deb11u1 "Adam D. Barratt" <adam@adam-barratt.org.uk> - 2022-10-14 13:00 +0200
  Bug#1021130: bullseye-pu: package tinyexr/1.0.1+dfsg-1+deb11u1 "Adam D. Barratt" <adam@adam-barratt.org.uk> - 2022-10-14 14:00 +0200
    Bug#1021130: bullseye-pu: package tinyexr/1.0.1+dfsg-1+deb11u1 "Adam D. Barratt" <adam@adam-barratt.org.uk> - 2022-10-14 14:10 +0200
      Bug#1021130: bullseye-pu: package tinyexr/1.0.1+dfsg-1+deb11u1 Timo Röhling <roehling@debian.org> - 2022-10-14 14:40 +0200
    Bug#1021130: bullseye-pu: package tinyexr/1.0.1+dfsg-1+deb11u1 Timo Röhling <timo@gaussglocke.de> - 2022-10-14 14:10 +0200

csiph-web