it-securitynotifies AT lists.piratenpartei.de
Betreff: Sicherheitsankündigungen
Listenarchiv
- From: Moritz Muehlenhoff <jmm AT debian.org>
- To: debian-security-announce AT lists.debian.org
- Subject: [IT-SecNots] [SECURITY] [DSA 4887-1] lib3mf security update
- Date: Thu, 8 Apr 2021 18:27:27 +0000
- Authentication-results: mail02.piratenpartei.de; dkim=none; spf=none (mail02.piratenpartei.de: domain of "bounce-debian-security-announce=it-securitynotifies=lists.piratenpartei.de AT lists.debian.org" has no SPF policy when checking 82.195.75.100) smtp.mailfrom="bounce-debian-security-announce=it-securitynotifies=lists.piratenpartei.de AT lists.debian.org"; dmarc=none
- List-archive: https://lists.debian.org/msgid-search/20210408182727.GA10624 AT seger.debian.org
- List-id: <debian-security-announce.lists.debian.org>
- List-url: <http://lists.debian.org/debian-security-announce/>
- Old-dkim-signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=debian.org; s=smtpauto.seger; h=Content-Type:MIME-Version:Message-ID:Subject:To:From: Date:Reply-To:Cc:Content-Transfer-Encoding:Content-ID:Content-Description: In-Reply-To:References; bh=vztd8FT5A5rWfSanaxn9JQKNmgnaCNbSfaLIwLxEqTY=; b=hY GFxS0FMd0VJT5qs6k/p8E7ZuX1bPP3VW3FFyMqY66X/SlDih8kNocXEzCZrd7pFGC9uOwoKpKp0aY zr+A7OMA7i2eikwJnqSDl+QzpxcSBU5FGVlpWquCly+4jxoqIcCz6ik7Akn1CvcoG0Fvf7ADwlj7C b7jyqRMgpmTZKDMEV7iK+fkOYMESkSui8IDWvHBHhBYZF/K949A+FjKOtTp90ah0oDJdEzqdw5pC9 4iTC0K/59zaZmVw4Jhfx3TZiDTgV/sbdCEls/mkDvgs+ftXPYmWWr1MxBCjWxgF99WpDf4phkAlZ1 RxJQHJ97d6jouTf0AEu10iQ9lIlUuoGQ==;
- Old-return-path: <jmm AT seger.debian.org>
- Priority: urgent
- Resent-date: Thu, 8 Apr 2021 18:27:45 +0000 (UTC)
- Resent-from: debian-security-announce AT lists.debian.org
- Resent-message-id: <7tqd9knFXWF.A.iKD.gs0bgB@bendel>
- Resent-sender: debian-security-announce-request AT lists.debian.org
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
- -------------------------------------------------------------------------
Debian Security Advisory DSA-4887-1 security AT debian.org
https://www.debian.org/security/ Moritz Muehlenhoff
April 08, 2021 https://www.debian.org/security/faq
- -------------------------------------------------------------------------
Package : lib3mf
CVE ID : CVE-2021-21772
Debian Bug : 985092
A use-after-free was discovered in Lib3MF, a C++ implementation of the
3D Manufacturing Format, which could result in the execution of
arbitrary code if a malformed file is opened.
For the stable distribution (buster), this problem has been fixed in
version 1.8.1+ds-3+deb10u1.
We recommend that you upgrade your lib3mf packages.
For the detailed security status of lib3mf please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/lib3mf
Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/
Mailing list: debian-security-announce AT lists.debian.org
-----BEGIN PGP SIGNATURE-----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=AmSX
-----END PGP SIGNATURE-----
- [IT-SecNots] [SECURITY] [DSA 4887-1] lib3mf security update, Moritz Muehlenhoff, 08.04.2021
Archiv bereitgestellt durch MHonArc 2.6.24.