Debian alert DLA-2934-1 (freecad)

From:
             
 
Emilio Pozuelo Monfort <pochu@debian.org>
To:
             
 
<debian-lts-announce@lists.debian.org>
Subject:
             
 
[SECURITY] [DLA 2934-1] freecad security update
Date:
             
 
Mon, 07 Mar 2022 13:10:47 +0100
Message-ID:
             
 
<20220307121047.D4A352A0177@andromeda>
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

- -------------------------------------------------------------------------
Debian LTS Advisory DLA-2934-1                debian-lts@lists.debian.org
https://www.debian.org/lts/security/               Emilio Pozuelo Monfort
March 07, 2022                                https://wiki.debian.org/LTS
- -------------------------------------------------------------------------

Package        : freecad
Version        : 0.16+dfsg2-3+deb9u1
CVE ID         : CVE-2021-45844
Debian Bug     : 1005747

A command injection vulnerability was found in FreeCAD, a parametric 3D
modeler, when importing DWF files with crafted filenames.

For Debian 9 stretch, this problem has been fixed in version
0.16+dfsg2-3+deb9u1.

We recommend that you upgrade your freecad packages.

For the detailed security status of freecad please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/freecad

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS
-----BEGIN PGP SIGNATURE-----

iQIzBAEBCAAdFiEEcJymx+vmJZxd92Q+nUbEiOQ2gwIFAmIl9kQACgkQnUbEiOQ2
gwL+GA//Z/CdsLC0ogXZ7ZSsTxUzQH/vm/YTPEn7rEvckofRiZSlwa4rrSpEGWpm
axJcV7J0VG/Rj0cn7yv/HxDfCGyzhjx8OWrydJ3UQDSTs6KIBTlAYkPoGxMWHGVb
7WJT5WGW86uNZejsM2hTe/HRewJ/PbsdY2J0ZJoa5CZl+3DZ11JWxagUz2Ctx1md
FZSlsM1H8f5X65WuRx5/AeKxpt585H7FXEd/g30WgufsHw9T1zfNFQYEQ3s7jID2
A2HMDKPT4aWokffI1B+VYt2KSScS0vlPz7PIVK7xGwbq0US7hqgVv6T9u0zfuWIr
qw6vjl4oEyOM0R228Qpnedw95Lm9Cbk8fOW7bioVaYLZZ1oFp+d5u8LkDYHaflLt
se4RvjE5nn7zibP7ue/Z31XO/SRv/teVJv14z23GowTA05qhAwaeDTsHYxGg4tIR
YCt2v35BgIVFH0tNKyChexVcCPX1mHmUwPyz7MdkDVXV7dq/m1Yt6j+QqboJ51P1
Epk8+fuzoCgHgNaqwdDKQE5UX/6zAtfNCmAR3nruwo+8JkuTQTNCalLJ7Dx/O/Er
jzoZZjC20Kn3NucgRwrArTTQ8x3kjGkA/9RqwiP3/mv2GEWvdbsmZPqE+Nky6FJ8
33/qd+L9Ks/rDmrD4MQCtPcrkVVyBG6Eg0Jc8hTATr8Qxo45RMM=
=Psfq
-----END PGP SIGNATURE-----