SUSE-SU-2021:14846-1

Import Source

JSON Data

https://api.osv.dev/v1/vulns/SUSE-SU-2021:14846-1

Related

Published

2021-12-01T15:50:02Z

Modified

2021-12-01T15:50:02Z

Summary

Security update for OpenEXR

Details

This update for OpenEXR fixes the following issues:

CVE-2021-20298: Fixed out-of-memory in B44Compressor (bsc#1188460).
CVE-2021-20300: Fixed integer-overflow in Imf25:hufUncompress (bsc#1188458).
CVE-2021-20303: Fixed heap-buffer-overflow in Imf25::copyIntoFrameBuffe (bsc#1188457).
CVE-2021-20304: Fixed undefined-shift in Imf25:hufDecode (bsc#1188461).
CVE-2021-3941: Fixed divide-by-zero in Imf31:RGBtoXYZ (bsc#1192556).

References

Affected packages

Name: OpenEXR
Purl: purl:rpm/suse/OpenEXR&distro=SUSE%20Linux%20Enterprise%20Point%20of%20Sale%2011%20SP3

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.6.1-83.17.30.1

{
    "binaries": [
        {
            "OpenEXR": "1.6.1-83.17.30.1"
        }
    ]
}

Name: OpenEXR
Purl: purl:rpm/suse/OpenEXR&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4-LTSS

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.6.1-83.17.30.1

{
    "binaries": [
        {
            "OpenEXR": "1.6.1-83.17.30.1",
            "OpenEXR-32bit": "1.6.1-83.17.30.1"
        }
    ]
}