UbuntuUpdates.org

Package "libtinygltf1d"

Name: libtinygltf1d

Description:

glTF loader and saver library
Latest version: 2.5.0+dfsg-4ubuntu0.1
Release: jammy (22.04)
Level: security
Repository: universe
Head package: tinygltf
Homepage: https://github.com/syoyo/tinygltf

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "libtinygltf1d"

32-bit deb package
64-bit deb package
APT INSTALL

Other versions of "libtinygltf1d" in Jammy

Repository Area Version
base universe 2.5.0+dfsg-4
updates universe 2.5.0+dfsg-4ubuntu0.1

Changelog

Version: 2.5.0+dfsg-4ubuntu0.1 2024-11-26 15:06:51 UTC

  tinygltf (2.5.0+dfsg-4ubuntu0.1) jammy-security; urgency=medium

  * SECURITY UPDATE: file path expansion function vulnerable to injection
    - debian/patches/CVE-2022-3008.patch: in tiny_gltf.h, disable the
      ExpandFilePath function that unsecurely made use of wordexp and
      was vulnerable to shell command injections.
    - CVE-2022-3008

 -- Noam Nedelec-Salmon <email address hidden> Fri, 15 Nov 2024 15:05:47 +0100
CVE-2022-3008 The tinygltf library uses the C library function wordexp() to perform file path expansion on untrusted paths that are provided from the input file. T


About   -   Send Feedback to @ubuntu_updates