Описание
Security update for openexr
This update for openexr provides the following fix:
Security issues fixed:
- CVE-2020-11764: Fixed an out-of-bounds write in copyIntoFrameBuffer in ImfMisc.cpp (bsc#1169574).
- CVE-2020-11763: Fixed an out-of-bounds read and write, as demonstrated by ImfTileOffsets.cpp (bsc#1169576).
- CVE-2020-11758: Fixed an out-of-bounds read in ImfOptimizedPixelReading.h (bsc#1169573).
- CVE-2020-11760: Fixed an out-of-bounds read during RLE uncompression in rleUncompress in ImfRle.cpp (bsc#1169580).
Non-security issue fixed:
- Enable tests when building the package on x86_64. (bsc#1146648)
Список пакетов
SUSE Linux Enterprise Server 12 SP4
libIlmImf-Imf_2_1-21-2.1.0-6.20.1
openexr-2.1.0-6.20.1
SUSE Linux Enterprise Server 12 SP5
libIlmImf-Imf_2_1-21-2.1.0-6.20.1
openexr-2.1.0-6.20.1
SUSE Linux Enterprise Server for SAP Applications 12 SP4
libIlmImf-Imf_2_1-21-2.1.0-6.20.1
openexr-2.1.0-6.20.1
SUSE Linux Enterprise Server for SAP Applications 12 SP5
libIlmImf-Imf_2_1-21-2.1.0-6.20.1
openexr-2.1.0-6.20.1
SUSE Linux Enterprise Software Development Kit 12 SP4
openexr-devel-2.1.0-6.20.1
SUSE Linux Enterprise Software Development Kit 12 SP5
openexr-devel-2.1.0-6.20.1
SUSE Linux Enterprise Workstation Extension 12 SP4
libIlmImf-Imf_2_1-21-32bit-2.1.0-6.20.1
SUSE Linux Enterprise Workstation Extension 12 SP5
libIlmImf-Imf_2_1-21-32bit-2.1.0-6.20.1
Ссылки
- Link for SUSE-SU-2020:1292-1
- E-Mail link for SUSE-SU-2020:1292-1
- SUSE Security Ratings
- SUSE Bug 1146648
- SUSE Bug 1169573
- SUSE Bug 1169574
- SUSE Bug 1169576
- SUSE Bug 1169580
- SUSE CVE CVE-2020-11758 page
- SUSE CVE CVE-2020-11760 page
- SUSE CVE CVE-2020-11763 page
- SUSE CVE CVE-2020-11764 page
Описание
An issue was discovered in OpenEXR before 2.4.1. There is an out-of-bounds read in ImfOptimizedPixelReading.h.
Затронутые продукты
SUSE Linux Enterprise Server 12 SP4:libIlmImf-Imf_2_1-21-2.1.0-6.20.1
SUSE Linux Enterprise Server 12 SP4:openexr-2.1.0-6.20.1
SUSE Linux Enterprise Server 12 SP5:libIlmImf-Imf_2_1-21-2.1.0-6.20.1
SUSE Linux Enterprise Server 12 SP5:openexr-2.1.0-6.20.1
Ссылки
- CVE-2020-11758
- SUSE Bug 1169549
- SUSE Bug 1169573
- SUSE Bug 1169574
Описание
An issue was discovered in OpenEXR before 2.4.1. There is an out-of-bounds read during RLE uncompression in rleUncompress in ImfRle.cpp.
Затронутые продукты
SUSE Linux Enterprise Server 12 SP4:libIlmImf-Imf_2_1-21-2.1.0-6.20.1
SUSE Linux Enterprise Server 12 SP4:openexr-2.1.0-6.20.1
SUSE Linux Enterprise Server 12 SP5:libIlmImf-Imf_2_1-21-2.1.0-6.20.1
SUSE Linux Enterprise Server 12 SP5:openexr-2.1.0-6.20.1
Ссылки
- CVE-2020-11760
- SUSE Bug 1169580
Описание
An issue was discovered in OpenEXR before 2.4.1. There is an std::vector out-of-bounds read and write, as demonstrated by ImfTileOffsets.cpp.
Затронутые продукты
SUSE Linux Enterprise Server 12 SP4:libIlmImf-Imf_2_1-21-2.1.0-6.20.1
SUSE Linux Enterprise Server 12 SP4:openexr-2.1.0-6.20.1
SUSE Linux Enterprise Server 12 SP5:libIlmImf-Imf_2_1-21-2.1.0-6.20.1
SUSE Linux Enterprise Server 12 SP5:openexr-2.1.0-6.20.1
Ссылки
- CVE-2020-11763
- SUSE Bug 1169576
Описание
An issue was discovered in OpenEXR before 2.4.1. There is an out-of-bounds write in copyIntoFrameBuffer in ImfMisc.cpp.
Затронутые продукты
SUSE Linux Enterprise Server 12 SP4:libIlmImf-Imf_2_1-21-2.1.0-6.20.1
SUSE Linux Enterprise Server 12 SP4:openexr-2.1.0-6.20.1
SUSE Linux Enterprise Server 12 SP5:libIlmImf-Imf_2_1-21-2.1.0-6.20.1
SUSE Linux Enterprise Server 12 SP5:openexr-2.1.0-6.20.1
Ссылки
- CVE-2020-11764
- SUSE Bug 1169574