CLSA-2026-1788167338 Fix CVE(s): CVE-2021-20298, CVE-2021-20299, CVE-2021-20304

SECURITY UPDATE: Memory exhaustion in the B44 compressor - debian/patches/CVE-2021-20298.patch: size tmpBuffer in elements rather than bytes in IlmImf/ImfB44Compressor.cpp. - CVE-2021-20298 SECURITY UPDATE: Null dereference on multipart files with no parts - debian/patches/CVE-2021-20299.patch:...

OpenEXR B44Compressor DoS

The vulnerability of the B44Compressor component of the OpenEXR image storage software, which handles images with wide dynamic range of brightness, is related to buffer overflow attacks. Exploiting this vulnerability allows a malicious actor to trigger a service failure using a specially created...

OESA-2022-1884 OpenEXR security update

OpenEXR is a high dynamic-range HDR image file format originally developed by Industrial Light & Magic for use in computer imaging applications. Security Fixes: A flaw was found in OpenEXR's B44Compressor. This flaw allows an attacker who can submit a crafted file to be processed by OpenEXR, to...

OESA-2022-1885 OpenEXR security update

OpenEXR is a high dynamic-range HDR image file format originally developed by Industrial Light & Magic for use in computer imaging applications. Security Fixes: A flaw was found in OpenEXR's B44Compressor. This flaw allows an attacker who can submit a crafted file to be processed by OpenEXR, to...