FreeBSD : OpenEXR/ilmbase 2.5.2 -- patch release with various bug/security fixes (714e6c35-c75b-11ea-aa29-d74973d1f9f3)

Cary Phillips reports : openexr 2.5.2 is a patch release with various bug/security and build/install fixes : - Invalid input could cause a heap-use-after-free error in DeepScanLineInputFile::DeepScanLineInputFile - Invalid chunkCount attributes could cause heap buffer overflow in...

openSUSE: Security Advisory for openexr (openSUSE-SU-2020:0970-1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

OPENSUSE-SU-2020:0970-1 Security update for openexr

This update for openexr fixes the following issues: - CVE-2020-15304: Fixed a NULL pointer dereference in TiledInputFile:TiledInputFile bsc1173466. - CVE-2020-15305: Fixed a use-after-free in DeepScanLineInputFile:DeepScanLineInputFile bsc1173467. - CVE-2020-15306: Fixed a heap buffer overflow in...

SUSE SLED15 / SLES15 Security Update : openexr (SUSE-SU-2020:1931-1)

This update for openexr fixes the following issues : CVE-2020-15304: Fixed a NULL pointer dereference in TiledInputFile:TiledInputFile bsc1173466. CVE-2020-15305: Fixed a use-after-free in DeepScanLineInputFile:DeepScanLineInputFile bsc1173467. CVE-2020-15306: Fixed a heap buffer overflow in...

SUSE-SU-2020:1931-1 Security update for openexr

This update for openexr fixes the following issues: - CVE-2020-15304: Fixed a NULL pointer dereference in TiledInputFile:TiledInputFile bsc1173466. - CVE-2020-15305: Fixed a use-after-free in DeepScanLineInputFile:DeepScanLineInputFile bsc1173467. - CVE-2020-15306: Fixed a heap buffer overflow in...

Fedora 31 : mingw-OpenEXR (2020-8394f7fd12)

Backport patches for CVE-2020-15306, CVE-2020-15305, CVE-2020-15304 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing...

Fedora 32 : mingw-OpenEXR (2020-a9a0f8f6cd)

Backport patches for CVE-2020-15306, CVE-2020-15305, CVE-2020-15304 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing...

ilmbase, openexr -- v2.5.3 is a patch release with various bug/security fixes

Cary Phillips reports: v2.5.3 - Patch release with various bug/security fixes ...: Various sanitizer/fuzz-identified issues related to handling of invalid input...

Fedora: Security Advisory for mingw-OpenEXR (FEDORA-2020-a9a0f8f6cd)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for mingw-OpenEXR (FEDORA-2020-8394f7fd12)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 32 Update: mingw-OpenEXR-2.4.1-2.fc32

MinGW Windows OpenEXR library...

[SECURITY] Fedora 31 Update: mingw-OpenEXR-2.3.0-4.fc31

MinGW Windows OpenEXR library...

Ubuntu: Security Advisory (USN-4418-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : OpenEXR vulnerabilities (USN-4418-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4418-1 advisory. It was discovered that OpenEXR incorrectly handled certain malformed EXR image files. If a user were tricked into opening a craft...

USN-4418-1: OpenEXR vulnerabilities

It was discovered that OpenEXR incorrectly handled certain malformed EXR image files. If a user were tricked into opening a crafted EXR image file, a remote attacker could cause a denial of service, or possibly execute arbitrary code...

USN-4418-1 openexr vulnerabilities

It was discovered that OpenEXR incorrectly handled certain malformed EXR image files. If a user were tricked into opening a crafted EXR image file, a remote attacker could cause a denial of service, or possibly execute arbitrary code...

CVE-2020-15305

An issue was discovered in OpenEXR before 2.5.2. Invalid input could cause a use-after-free in DeepScanLineInputFile::DeepScanLineInputFile in IlmImf/ImfDeepScanLineInputFile.cpp...

CVE-2020-15306

An issue was discovered in OpenEXR before v2.5.2. Invalid chunkCount attributes could cause a heap buffer overflow in getChunkOffsetTableSize in IlmImf/ImfMisc.cpp...

CVE-2020-15304

An issue was discovered in OpenEXR before 2.5.2. An invalid tiled input file could cause invalid memory access in TiledInputFile::TiledInputFile in IlmImf/ImfTiledInputFile.cpp, as demonstrated by a NULL pointer dereference...

Industrial Light and Magic OpenEXR Buffer Overflow Vulnerability

Industrial Light and Magic LIM OpenEXR is an image file format from Industrial Light and Magic LIM, USA, for high dynamic range HDR images. A buffer error vulnerability exists in the 'getChunkOffsetTableSize' function of the IlmImf/ImfMisc.cpp file in versions of Industrial Light and Magic OpenEX...