[ubuntu/jammy-security] tinygltf 2.5.0+dfsg-4ubuntu0.1 (Accepted)

[Chrisa Oikonomou]

tinygltf (2.5.0+dfsg-4ubuntu0.1) jammy-security; urgency=medium

  * SECURITY UPDATE: file path expansion function vulnerable to injection
    - debian/patches/CVE-2022-3008.patch: in tiny_gltf.h, disable the
      ExpandFilePath function that unsecurely made use of wordexp and
      was vulnerable to shell command injections.
    - CVE-2022-3008

Date: 2024-11-15 18:20:26.790366+00:00
Changed-By: Noam Nedelec-Salmon <noam.nedelecsalmon at canonical.com>
Signed-By: Chrisa Oikonomou <chrisa.oikonomou at canonical.com>
https://launchpad.net/ubuntu/+source/tinygltf/2.5.0+dfsg-4ubuntu0.1
-------------- next part --------------
Sorry, changesfile not available.