Debian/freecad: high 7.8

Improper sanitization in the invocation of ODA File Converter from FreeCAD 0.19 allows an attacker to inject OS commands via a crafted filename.

Action: Upgrade freecad to 0.19.4+dfsg1-1 or later.

Affected

Fixed versions

Sources

• osv: DEBIAN-CVE-2021-45844
• https://security-tracker.debian.org/tracker/CVE-2021-45844

published 2022-01-25T13:15:07.997Z · modified 2026-10-23T18:04:57.311574169Z · JSON