needinfo canceled: [Bug 646103] OpenSceneGraph contains an embedded copy of lib3ds, prone to CVE-2010-0280