Lucene search
SuseOPENSUSE-SU-2021:2158-1HistoryJul 11, 2021 - 12:00 a.m.
Security update for openexr (important)
2021-07-1100:00:00
lists.opensuse.org
8
EPSS
0.001
Percentile
31.7%
An update that fixes two vulnerabilities is now available.
Description:
This update for openexr fixes the following issues:
- Fixed CVE-2021-3605 [bsc#1187395]: Heap buffer overflow in the
rleUncompress function - Fixed CVE-2021-3598 [bsc#1187310]: Heap buffer overflow in
Imf_3_1:CharPtrIO:readChars
Patch Instructions:
To install this openSUSE Security Update use the SUSE recommended installation methods
like YaST online_update or “zypper patch”.
Alternatively you can run the command listed for your product:
-
openSUSE Leap 15.3:
zypper in -t patch openSUSE-SLE-15.3-2021-2158=1
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| openSUSE Leap | 15.3 | aarch64 | < - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): | - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64):.aarch64.rpm | |
| openSUSE Leap | 15.3 | ppc64le | < - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): | - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64):.ppc64le.rpm | |
| openSUSE Leap | 15.3 | s390x | < - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): | - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64):.s390x.rpm | |
| openSUSE Leap | 15.3 | x86_64 | < - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): | - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64):.x86_64.rpm | |
| openSUSE Leap | 15.3 | x86_64 | < - openSUSE Leap 15.3 (x86_64): | - openSUSE Leap 15.3 (x86_64):.x86_64.rpm |
Related
suse
suse
Security update for openexr (important)
2021-06-25 00:00:00
nessus
nessus
openSUSE 15 Security Update : openexr (openSUSE-SU-2021:2158-1)
2021-07-16 00:00:00
openSUSE 15 Security Update : openexr (openSUSE-SU-2021:0925-1)
2021-06-28 00:00:00
SUSE SLED15 / SLES15 Security Update : openexr (SUSE-SU-2021:2158-1)
2021-06-28 00:00:00
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2021:2158-1)
2021-06-25 00:00:00
openSUSE: Security Advisory for openexr (openSUSE-SU-2021:2158-1)
2021-07-13 00:00:00
openSUSE: Security Advisory for openexr (openSUSE-SU-2021:0925-1)
2021-06-26 00:00:00
fedora
fedora
[SECURITY] Fedora 34 Update: mingw-openexr-2.5.5-3.fc34
2021-06-20 01:09:26
[SECURITY] Fedora 33 Update: mingw-ilmbase-2.4.1-3.fc33
2021-06-20 01:07:46
cloudfoundry
cloudfoundry
USN-4996-1: OpenEXR vulnerabilities | Cloud Foundry
2021-07-08 00:00:00
cve
cve
CVE-2021-3605
2021-08-25 19:15:14
CVE-2021-3598
2021-07-06 15:15:07
alpinelinux
alpinelinux
CVE-2021-3605
2021-08-25 19:15:00
CVE-2021-3598
2021-07-06 15:15:07
cvelist
cvelist
CVE-2021-3605
2021-08-25 00:00:00
CVE-2021-3598
2021-07-06 00:00:00
redhatcve
redhatcve
CVE-2021-3605
2021-06-15 18:23:51
CVE-2021-3598
2021-06-11 19:14:18
cnvd
cnvd
Industrial Light And Magic OpenEXR Buffer Overflow Vulnerability (CNVD-2022-19853)
2021-08-05 00:00:00
OpenEXR Logic Flaw Vulnerability
2021-06-17 00:00:00
osv
osv
CVE-2021-3605
2021-08-25 19:15:14
openexr vulnerabilities
2021-06-22 11:46:27
openexr vulnerabilities
2021-06-22 11:09:05
debiancve
debiancve
CVE-2021-3605
2021-08-25 19:15:14
CVE-2021-3598
2021-07-06 15:15:07
ubuntu
ubuntu
OpenEXR vulnerabilities
2021-06-22 00:00:00
OpenEXR vulnerabilities
2021-06-22 00:00:00
OpenEXR vulnerabilities
2022-09-20 00:00:00
nvd
nvd
CVE-2021-3605
2021-08-25 19:15:14
CVE-2021-3598
2021-07-06 15:15:07
ubuntucve
ubuntucve
CVE-2021-3605
2021-06-17 00:00:00
CVE-2021-3598
2021-06-15 00:00:00
prion
prion
Out-of-bounds
2021-08-25 19:15:00
Out-of-bounds
2021-07-06 15:15:00
veracode
veracode
Denial Of Service (DoS)
2021-07-11 00:48:52
archlinux
archlinux
[ASA-202107-14] openexr: arbitrary code execution
2021-07-06 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2023-2248
2023-10-17 12:58:34
gentoo
gentoo
OpenEXR: Multiple Vulnerabilities
2022-10-31 00:00:00
debian
debian
[SECURITY] [DSA 5299-1] openexr security update
2022-12-10 16:27:46
[SECURITY] [DLA 2732-1] openexr security update
2021-08-04 19:53:02
[SECURITY] [DLA 3236-1] openexr security update
2022-12-11 23:52:53
mageia
mageia
Updated openexr packages fix security vulnerabilities
2021-07-10 15:56:54
amazon
amazon
Medium: OpenEXR
2023-06-05 16:39:00