openSUSE Security Update : openexr (openSUSE-2021-536)

This update for openexr fixes the following issues : - CVE-2021-3474: Undefined-shift in Imf25::FastHufDecoder::FastHufDecoder bsc1184174 - CVE-2021-3475: Integer-overflow in Imf25::calculateNumTiles bsc1184173 - CVE-2021-3476: Undefined-shift in Imf25::unpack14 bsc1184172 This update was importe...

OSV-2021-443 Segv on unknown address in Imf_2_5::copyIntoFrameBuffer

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31293 Crash type: Segv on unknown address Crash state: Imf25::copyIntoFrameBuffer Imf25::LineBufferTask::execute IlmThread::NullThreadPoolProvider::addTask...

OSV-2021-2 Heap-buffer-overflow in Imf_2_5::FastHufDecoder::decode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29106 Crash type: Heap-buffer-overflow READ 2 Crash state: Imf25::FastHufDecoder::decode Imf25::hufUncompress Imf25::PizCompressor::uncompress...

OSV-2020-1809 UNKNOWN WRITE in Imf_2_5::copyIntoFrameBuffer

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25770 Crash type: UNKNOWN WRITE Crash state: Imf25::copyIntoFrameBuffer Imf25::LineBufferTask::execute IlmThread25::NullThreadPoolProvider::addTask...

openexr:openexr_scanlines_fuzzer: Crash in Imf_2_5::copyIntoFrameBuffer

Project: https://github.com/AcademySoftwareFoundation/openexr.git Detailed Report: https://oss-fuzz.com/testcase?key=5099738956038144 Project: openexr Fuzzing Engine: afl Fuzz Target: openexrscanlinesfuzzer Job Type: aflasanopenexr Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address:...

openexr:openexr_scanlines_fuzzer: Heap-buffer-overflow in Imf_2_5::FastHufDecoder::FastHufDecoder

Project: https://github.com/AcademySoftwareFoundation/openexr.git Detailed Report: https://oss-fuzz.com/testcase?key=5715033768853504 Project: openexr Fuzzing Engine: afl Fuzz Target: openexrscanlinesfuzzer Job Type: aflasanopenexr Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...

OSV-2020-1610 Segv on unknown address in Imf_2_5::hufUncompress

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24854 Crash type: Segv on unknown address Crash state: Imf25::hufUncompress Imf25::DwaCompressor::uncompress Imf25::DwaCompressor::uncompress...