gpp_maybe Security update for assimp

SUSE-SLES-16.0-787

This update for assimp fixes the following issues - CVE-2025-2151: vulnerability affects the function Assimp: GetNextLine in the library ParsingUtils.h (bsc#1239220). - CVE-2025-2591: division by zero in code/AssetLib/MDL/MDLLoader.cpp (bsc#1239920). - CVE-2025-2592: heap-based buffer overflow in Assimp: CSMImporter: InternReadFile of code/AssetLib/CSM/CSMLoader.cpp (bsc#1239916). - CVE-2025-3015: manipulation of the argument mIndices leads to out-of-bounds read (bsc#1240412). - CVE-2025-3548: processing of malformed files may leads to an out-of-bounds read and potential application crash (bsc#1241367).

• Release Date
  May 19 2026
• References
  Bugzilla: 1239220, 1239916, 1239920, 1240412, 1241367
  CVEs: CVE-2025-2151, CVE-2025-2591, CVE-2025-2592, CVE-2025-3015, CVE-2025-3548
• Type
  security
• Severity
  important

cloud_download Downloads

SUSE Linux Enterprise Server 16.0 aarch64

• Packages
  libassimp5
  Library to load and process 3D scenes from various data formats

  5.4.3-160000.3.1 lock rpm

SUSE Linux Enterprise Server 16.0 ppc64le

• Packages
  libassimp5
  Library to load and process 3D scenes from various data formats

  5.4.3-160000.3.1 lock rpm

SUSE Linux Enterprise Server 16.0 s390x

• Packages
  libassimp5
  Library to load and process 3D scenes from various data formats

  5.4.3-160000.3.1 lock rpm

SUSE Linux Enterprise Server 16.0 x86_64

• Packages
  libassimp5
  Library to load and process 3D scenes from various data formats

  5.4.3-160000.3.1 lock rpm

SUSE Linux Enterprise Server for SAP applications 16.0 ppc64le

• Packages
  libassimp5
  Library to load and process 3D scenes from various data formats

  5.4.3-160000.3.1 lock rpm

SUSE Linux Enterprise Server for SAP applications 16.0 x86_64

• Packages
  libassimp5
  Library to load and process 3D scenes from various data formats

  5.4.3-160000.3.1 lock rpm