Fixes the following security vulnerability:
CVE-2024-40724: Heap-based buffer overflow vulnerability in Assimp versions
prior to 5.4.2 allows a local attacker to execute arbitrary code by
inputting a specially crafted file into the product.
https://github.com/assimp/assimp/pull/5651
Fixes:
https://nvd.nist.gov/vuln/detail/cve-2024-40724
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
[Julien: add link to cve]
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 30da391756)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
4 lines
197 B
Plaintext
4 lines
197 B
Plaintext
# Locally calculated
|
|
sha256 66dfbaee288f2bc43172440a55d0235dfc7bf885dda6435c038e8000e79582cb assimp-5.4.3.tar.gz
|
|
sha256 147874443d242b4e2bae97036e26ec9d6b37f706174c1bd5ecfcc8c1294cef51 LICENSE
|