Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale. Voir CVE-2026-34399 →

DEBIAN-CVE-2026-34399

FreeCAD is a free and open-source multiplatform 3D parametric modeler. From 0.19 until 1.1.1, FreeCAD's BIM Workbench contains an eval() call on untru...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

FreeCAD is a free and open-source multiplatform 3D parametric modeler. From 0.19 until 1.1.1, FreeCAD's BIM Workbench contains an eval() call on untrusted data from SVG template files. When a user creates a TechDraw page from a malicious SVG template, arbitrary Python code executes. The vulnerable code is in src/Mod/BIM/bimcommands/BimTDPage.py (line 87). This issue is fixed in version 1.1.1.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Paquets affectés

Debian:13 freecad

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.0+dfsg-8+deb13u3"}]}]

Debian:14 freecad

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1+dfsg-1"}]}]

Références

advisory security-tracker.debian.org