Debian alert DLA-3987-1 (renderdoc)

From:
             
 
Adrian Bunk <bunk@debian.org>
To:
             
 
debian-lts-announce@lists.debian.org
Subject:
             
 
[SECURITY] [DLA 3987-1] renderdoc security update
Date:
             
 
Sun, 08 Dec 2024 19:09:04 +0200
Message-ID:
             
 
<Z1XSsJvHLAE7t1KC@localhost>
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

- -------------------------------------------------------------------------
Debian LTS Advisory DLA-3987-1                debian-lts@lists.debian.org
https://www.debian.org/lts/security/                          Adrian Bunk
December 08, 2024                             https://wiki.debian.org/LTS
- -------------------------------------------------------------------------

Package        : renderdoc
Version        : 1.11+dfsg-5+deb11u1
CVE ID         : CVE-2023-33863 CVE-2023-33864 CVE-2023-33865
Debian Bug     : 1037208

Multiple vulnerabilities have been fixed in the graphics debugger RenderDoc.

CVE-2023-33863

    integer overflow

CVE-2023-33864

    integer overflow

CVE-2023-33865

    symlink attack

For Debian 11 bullseye, these problems have been fixed in version
1.11+dfsg-5+deb11u1.

We recommend that you upgrade your renderdoc packages.

For the detailed security status of renderdoc please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/renderdoc

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS
-----BEGIN PGP SIGNATURE-----
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=mmtI
-----END PGP SIGNATURE-----