[ubuntu/jammy-updates] tinygltf 2.5.0+dfsg-4ubuntu0.1 (Accepted)

[Ubuntu Archive Robot]

tinygltf (2.5.0+dfsg-4ubuntu0.1) jammy-security; urgency=medium

  * SECURITY UPDATE: file path expansion function vulnerable to injection
    - debian/patches/CVE-2022-3008.patch: in tiny_gltf.h, disable the
      ExpandFilePath function that unsecurely made use of wordexp and
      was vulnerable to shell command injections.
    - CVE-2022-3008

Date: 2024-11-15 18:20:26.790366+00:00
Changed-By: Noam Nedelec-Salmon <noam.nedelecsalmon at canonical.com>
Signed-By: Ubuntu Archive Robot <ubuntu-archive-robot at lists.canonical.com>
https://launchpad.net/ubuntu/+source/tinygltf/2.5.0+dfsg-4ubuntu0.1
-------------- next part --------------
Sorry, changesfile not available.