SUSE-SU-2020:1984-1 Security update for openexr

This update for openexr fixes the following issues: - CVE-2020-15304: Fixed a NULL pointer dereference in TiledInputFile:TiledInputFile bsc1173466. - CVE-2020-15305: Fixed a use-after-free in DeepScanLineInputFile:DeepScanLineInputFile bsc1173467. - CVE-2020-15306: Fixed a heap buffer overflow in...

openSUSE Security Update : openexr (openSUSE-2020-970)

This update for openexr fixes the following issues : - CVE-2020-15304: Fixed a NULL pointer dereference in TiledInputFile:TiledInputFile bsc1173466. - CVE-2020-15305: Fixed a use-after-free in DeepScanLineInputFile:DeepScanLineInputFile bsc1173467. - CVE-2020-15306: Fixed a heap buffer overflow i...

openSUSE Security Update : openexr (openSUSE-2020-1015)

This update for openexr fixes the following issues : - CVE-2020-15304: Fixed a NULL pointer dereference in TiledInputFile:TiledInputFile bsc1173466. - CVE-2020-15305: Fixed a use-after-free in DeepScanLineInputFile:DeepScanLineInputFile bsc1173467. - CVE-2020-15306: Fixed a heap buffer overflow i...

openSUSE: Security Advisory for openexr (openSUSE-SU-2020:1015-1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

OPENSUSE-SU-2020:1015-1 Security update for openexr

This update for openexr fixes the following issues: - CVE-2020-15304: Fixed a NULL pointer dereference in TiledInputFile:TiledInputFile bsc1173466. - CVE-2020-15305: Fixed a use-after-free in DeepScanLineInputFile:DeepScanLineInputFile bsc1173467. - CVE-2020-15306: Fixed a heap buffer overflow in...

Security update for openexr (moderate)

openSUSE Security Update: Security update for openexr Announcement ID: openSUSE-SU-2020:1015-1 Rating: moderate References: 1173466 1173467 1173469 Cross-References: CVE-2020-15304 CVE-2020-15305 CVE-2020-15306 Affected Products: openSUSE Leap 15.2 An update that fixes three vulnerabilities is no...

openSUSE: Security Advisory for openexr (openSUSE-SU-2020:0970-1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

FreeBSD : OpenEXR/ilmbase 2.5.2 -- patch release with various bug/security fixes (714e6c35-c75b-11ea-aa29-d74973d1f9f3)

Cary Phillips reports : openexr 2.5.2 is a patch release with various bug/security and build/install fixes : - Invalid input could cause a heap-use-after-free error in DeepScanLineInputFile::DeepScanLineInputFile - Invalid chunkCount attributes could cause heap buffer overflow in...

OPENSUSE-SU-2020:0970-1 Security update for openexr

This update for openexr fixes the following issues: - CVE-2020-15304: Fixed a NULL pointer dereference in TiledInputFile:TiledInputFile bsc1173466. - CVE-2020-15305: Fixed a use-after-free in DeepScanLineInputFile:DeepScanLineInputFile bsc1173467. - CVE-2020-15306: Fixed a heap buffer overflow in...

SUSE SLED15 / SLES15 Security Update : openexr (SUSE-SU-2020:1931-1)

This update for openexr fixes the following issues : CVE-2020-15304: Fixed a NULL pointer dereference in TiledInputFile:TiledInputFile bsc1173466. CVE-2020-15305: Fixed a use-after-free in DeepScanLineInputFile:DeepScanLineInputFile bsc1173467. CVE-2020-15306: Fixed a heap buffer overflow in...

Security update for openexr (moderate)

openSUSE Security Update: Security update for openexr Announcement ID: openSUSE-SU-2020:0970-1 Rating: moderate References: 1173466 1173467 1173469 Cross-References: CVE-2020-15304 CVE-2020-15305 CVE-2020-15306 Affected Products: openSUSE Leap 15.1 An update that fixes three vulnerabilities is no...

SUSE-SU-2020:1931-1 Security update for openexr

This update for openexr fixes the following issues: - CVE-2020-15304: Fixed a NULL pointer dereference in TiledInputFile:TiledInputFile bsc1173466. - CVE-2020-15305: Fixed a use-after-free in DeepScanLineInputFile:DeepScanLineInputFile bsc1173467. - CVE-2020-15306: Fixed a heap buffer overflow in...

Fedora 32 : mingw-OpenEXR (2020-a9a0f8f6cd)

Backport patches for CVE-2020-15306, CVE-2020-15305, CVE-2020-15304 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing...

Fedora 31 : mingw-OpenEXR (2020-8394f7fd12)

Backport patches for CVE-2020-15306, CVE-2020-15305, CVE-2020-15304 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing...

ilmbase, openexr -- v2.5.3 is a patch release with various bug/security fixes

Cary Phillips reports: v2.5.3 - Patch release with various bug/security fixes ...: Various sanitizer/fuzz-identified issues related to handling of invalid input...

Fedora: Security Advisory for mingw-OpenEXR (FEDORA-2020-a9a0f8f6cd)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for mingw-OpenEXR (FEDORA-2020-8394f7fd12)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 32 Update: mingw-OpenEXR-2.4.1-2.fc32

MinGW Windows OpenEXR library...

[SECURITY] Fedora 31 Update: mingw-OpenEXR-2.3.0-4.fc31

MinGW Windows OpenEXR library...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : OpenEXR vulnerabilities (USN-4418-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4418-1 advisory. It was discovered that OpenEXR incorrectly handled certain malformed EXR image files. If a user were tricked into opening a craft...