[Hugin-devs] [Bug 2025035] Re: Use-After-Free bug in HuginBase::ImageVariable::linkWith

2023-12-26 Thread Heewon Park
Hi there. I am Heewon, and I am writing to you regarding the recent vulnerabilities that our security team identified in Hugin. I appreciate your prompt attention to these matters, and I am pleased that the vulnerabilities have been confirmed and successfully patched by your development team. To p

[Hugin-devs] [Bug 2025035] Re: Use-After-Free bug in HuginBase::ImageVariable::linkWith

2023-09-23 Thread tmodes
** Changed in: hugin Status: Fix Committed => Fix Released -- You received this bug notification because you are a member of Hugin Developers, which is subscribed to Hugin. https://bugs.launchpad.net/bugs/2025035 Title: Use-After-Free bug in HuginBase::ImageVariable::linkWith Status in

[Hugin-devs] [Bug 2025035] Re: Use-After-Free bug in HuginBase::ImageVariable::linkWith

2023-06-29 Thread Heewon Park
** Information type changed from Private Security to Public Security -- You received this bug notification because you are a member of Hugin Developers, which is subscribed to Hugin. https://bugs.launchpad.net/bugs/2025035 Title: Use-After-Free bug in HuginBase::ImageVariable::linkWith Status

[Hugin-devs] [Bug 2025035] Re: Use-After-Free bug in HuginBase::ImageVariable::linkWith

2023-06-29 Thread tmodes
Fixed in repository. ** Changed in: hugin Status: New => Fix Committed ** Changed in: hugin Milestone: None => 2023.0beta1 -- You received this bug notification because you are a member of Hugin Developers, which is subscribed to Hugin. https://bugs.launchpad.net/bugs/2025035 Title:

[Hugin-devs] [Bug 2025035] Re: Use-After-Free bug in HuginBase::ImageVariable::linkWith

2023-06-26 Thread Heewon Park
** Description changed: Hi there We want to share that the latest version (2022.0.0) of pto_merge causes heap-use-after-free. We assume that the function HuginBase::BaseSrcPanoImage::setFilename in the function HuginBase::PanoramaMemento::loadPTScript tries to access previously f