MGASA-2021-0326
- Source
- https://advisories.mageia.org/MGASA-2021-0326.html
- Import Source
- https://advisories.mageia.org/MGASA-2021-0326.json
- JSON Data
- https://api.osv.dev/v1/vulns/MGASA-2021-0326
- Related
- Published
- 2021-07-10T12:56:54Z
- Modified
- 2021-07-10T11:34:35Z
- Summary
- Updated openexr packages fix security vulnerabilities
- Details
-
Updated openexr packages fix security vulnerabilities:
It was discovered that OpenEXR incorrectly handled certain malformed EXR image files. If a user were tricked into opening a crafted EXR image file, a remote attacker could cause a denial of service, or possibly execute arbitrary code (CVE-2021-3474, CVE-2021-3475, CVE-2021-3476, CVE-2021-3477, CVE-2021-3478, CVE-2021-3479, CVE-2021-3598, CVE-2021-3605, CVE-2021-20296, CVE-2021-23169, CVE-2021-23215, CVE-2021-26260).
- References
-
- https://advisories.mageia.org/MGASA-2021-0326.html
- https://bugs.mageia.org/show_bug.cgi?id=29005
- https://www.openexr.com/
- https://ubuntu.com/security/notices/USN-4900-1
- https://ubuntu.com/security/notices/USN-4996-1
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/4KYNJSMVA6YJY5NMKDZ5SAISKZG2KCKC/
- Credits
-
-
- Mageia - COORDINATOR
-
Affected packages
Mageia:7 / openexr
Package
- Name
- openexr
- Purl
- pkg:rpm/mageia/openexr?distro=mageia-7
Mageia:8 / openexr
Package
- Name
- openexr
- Purl
- pkg:rpm/mageia/openexr?distro=mageia-8