Mageia: Security Advisory (MGASA-2022-0325)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MGASA-2022-0325 Updated freecad packages fix security vulnerability

Improper sanitization in the invocation of ODA File Converter from FreeCAD 0.19 allows an attacker to inject OS commands via a crafted filename. CVE-2021-45844...

Debian DSA-5229-1 : freecad - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5229 advisory. - Improper sanitization in the invocation of ODA File Converter from FreeCAD 0.19 allows an attacker to inject OS commands via a crafted filename. CVE-2021-45844 ...

Debian dla-3076 : freecad - security update

The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3076 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3076-1 [email protected] https://www.debian.org/lts/security/...

Debian DLA-2934-1 : freecad - LTS security update

The remote Debian 9 host has a package installed that is affected by a vulnerability as referenced in the dla-2934 advisory. - Improper sanitization in the invocation of ODA File Converter from FreeCAD 0.19 allows an attacker to inject OS commands via a crafted filename. CVE-2021-45844 Note that...

CVE-2021-45844

creationtimestamp| type| source ---|---|--- 2022-01-25 16:18:42+00:00| seen| https://t.me/cibsecurity/36210...

CVE-2021-45844

Improper sanitization in the invocation of ODA File Converter from FreeCAD 0.19 allows an attacker to inject OS commands via a crafted filename...

CVE-2021-45844

Improper sanitization in the invocation of ODA File Converter from FreeCAD 0.19 allows an attacker to inject OS commands via a crafted filename...

CVE-2021-45844

Improper sanitization in the invocation of ODA File Converter from FreeCAD 0.19 allows an attacker to inject OS commands via a crafted filename...

CVE-2021-45844

Improper sanitization in the invocation of ODA File Converter from FreeCAD 0.19 allows an attacker to inject OS commands via a crafted filename...

CVE-2021-45844

CVE-2021-45844 affects FreeCAD 0.19 via improper sanitization when invoking the ODA File Converter, enabling OS command injection through a crafted filename. Mitigations include upgrading FreeCAD to fixed releases cited by Debian/Mageia advisories (e.g., FreeCAD 0.19.1+dfsg1-2+deb11u1 for Debian ...