openSUSE-SU-2021:1198-1

See a problem?
Import Source
https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2021:1198-1.json
JSON Data
https://api.test.osv.dev/v1/vulns/openSUSE-SU-2021:1198-1
Related
Published
2021-08-25T19:51:46Z
Modified
2021-08-25T19:51:46Z
Summary
Security update for openexr
Details

This update for openexr fixes the following issues:

  • CVE-2021-20298 [bsc#1188460]: Fixed Out-of-memory in B44Compressor
  • CVE-2021-20299 [bsc#1188459]: Fixed Null-dereference READ in Imf25:Header:operator
  • CVE-2021-20300 [bsc#1188458]: Fixed Integer-overflow in Imf25:hufUncompress
  • CVE-2021-20302 [bsc#1188462]: Fixed Floating-point-exception in Imf25:precalculateTileInfot
  • CVE-2021-20303 [bsc#1188457]: Fixed Heap-buffer-overflow in Imf25::copyIntoFrameBuffer
  • CVE-2021-20304 [bsc#1188461]: Fixed Undefined-shift in Imf25:hufDecode

This update was imported from the SUSE:SLE-15:Update update project.

References

Affected packages

openSUSE:Leap 15.2 / openexr

Package

Name
openexr
Purl
pkg:rpm/opensuse/openexr&distro=openSUSE%20Leap%2015.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.2.1-lp152.7.20.1

Ecosystem specific 

{
    "binaries": [
        {
            "openexr-devel": "2.2.1-lp152.7.20.1",
            "openexr-doc": "2.2.1-lp152.7.20.1",
            "libIlmImfUtil-2_2-23-32bit": "2.2.1-lp152.7.20.1",
            "libIlmImfUtil-2_2-23": "2.2.1-lp152.7.20.1",
            "libIlmImf-2_2-23": "2.2.1-lp152.7.20.1",
            "libIlmImf-2_2-23-32bit": "2.2.1-lp152.7.20.1",
            "openexr": "2.2.1-lp152.7.20.1"
        }
    ]
}