Description
Format string vulnerability in panoFileOutputNamesCreate() in libpano13 2.9.20~rc2+dfsg-3 and earlier can lead to read and write arbitrary memory values.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a libpano13
libpano13 2.9.20_rc3affected
References
- https://sourceforge.net/projects/panotools/files/libpano13/libpano13-2.9.20/ ↗
- https://bugzilla.redhat.com/show_bug.cgi?id=1946284 ↗
- https://lists.debian.org/debian-lts-announce/2021/04/msg00010.html ↗
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JE6YZSXNVD6WZ3AG3ENL2DIHQFF24LYX/ ↗
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VYDYBKHT2MNMQCUMAVJNZW4VH6MD5BOF/ ↗
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FVJRXUOBN56ZWP6QQ3NTA6DIFZMDZAEQ/ ↗
- https://security.gentoo.org/glsa/202107-47 ↗