1
1
This repository has been archived on 2023-10-09. You can view files and clone it, but cannot push or open issues or pull requests.
Files
blender-archive/extern
Julian Squires 466eb426ed Extern: Update TinyGLTF to include fix for CVE-2022-3008
The use of wordexp(3) permits arbitrary code execution from manually-crafted
glTF files. See https://github.com/syoyo/tinygltf/issues/368 for more details.
In practice this shouldn't be an issue for Blender since the GlTF data isn't
manually crafted but from the OpenXR runtime (a bit like a driver). But
updating the library to include the fix is not a big deal anyway.

Note that the warning that required the local modification is no longer present upstream since
  0bfcb4f49e

Pull Request: blender/blender#105536
2023-03-10 14:56:35 +01:00
..
2022-02-11 09:14:36 +11:00
2022-02-11 09:14:36 +11:00
2022-06-17 19:40:01 +02:00
2019-08-21 14:15:28 +02:00
2022-02-11 09:14:36 +11:00
2021-09-22 09:07:09 +02:00
2022-02-11 09:14:36 +11:00
2022-02-11 09:14:36 +11:00
2022-02-11 09:14:36 +11:00

When updating a library remember to:

* Update the README.blender with the corresponding version.
* Update the THIRD-PARTY-LICENSE.txt document