CVE-2021-33293

NameCVE-2021-33293
DescriptionPanorama Tools libpano13 v2.9.20 was discovered to contain an out-of-bounds read in the function panoParserFindOLine() in parser.c.
SourceCVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
ReferencesDLA-2957-1
Debian Bugs1008024

Vulnerable and fixed packages

The table below lists information on source packages.

Source PackageReleaseVersionStatus
libpano13 (PTS)buster2.9.19+dfsg-3+deb10u1vulnerable
bullseye2.9.20~rc3+dfsg-1vulnerable
bookworm2.9.21+dfsg-3fixed
trixie2.9.22+dfsg-1fixed
sid2.9.22+dfsg-1.1fixed

The information below is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
libpano13sourceexperimental2.9.21~rc1+dfsg-1
libpano13sourcestretch2.9.19+dfsg-2+deb9u2DLA-2957-1
libpano13source(unstable)2.9.21+dfsg-21008024

Notes

[bullseye] - libpano13 <no-dsa> (Minor issue)
[buster] - libpano13 <no-dsa> (Minor issue)
https://groups.google.com/u/1/g/hugin-ptx/c/gLtz2vweD74
Fixed by: https://sourceforge.net/p/panotools/libpano13/ci/62aa7eed8fae5d8f247a2508a757f31000de386f/

Search for package or bug name: Reporting problems