Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2020:1293-1

Опубликовано: 18 мая 2020
Источник: suse-cvrf

Описание

Security update for openexr

This update for openexr provides the following fix:

Security issues fixed:

  • CVE-2020-11765: Fixed an off-by-one error in use of the ImfXdr.h read function by DwaCompressor:Classifier:Classifier (bsc#1169575).
  • CVE-2020-11764: Fixed an out-of-bounds write in copyIntoFrameBuffer in ImfMisc.cpp (bsc#1169574).
  • CVE-2020-11763: Fixed an out-of-bounds read and write, as demonstrated by ImfTileOffsets.cpp (bsc#1169576).
  • CVE-2020-11762: Fixed an out-of-bounds read and write in DwaCompressor:uncompress in ImfDwaCompressor.cpp when handling the UNKNOWN compression case (bsc#1169549).
  • CVE-2020-11761: Fixed an out-of-bounds read during Huffman uncompression, as demonstrated by FastHufDecoder:refill in ImfFastHuf.cpp (bsc#1169578).
  • CVE-2020-11760: Fixed an out-of-bounds read during RLE uncompression in rleUncompress in ImfRle.cpp (bsc#1169580).
  • CVE-2020-11758: Fixed an out-of-bounds read in ImfOptimizedPixelReading.h (bsc#1169573).

Non-security issue fixed:

  • Enable tests when building the package on x86_64. (bsc#1146648)

Список пакетов

Container containers/lmcache-vllm-openai:0
libIlmImf-2_2-23-2.2.1-3.14.1
Container containers/open-webui:0
libIlmImf-2_2-23-2.2.1-3.14.1
Container containers/vllm-openai:0
libIlmImf-2_2-23-2.2.1-3.14.1
Image ai_15_6
libIlmImf-2_2-23-2.2.1-3.14.1
SUSE Linux Enterprise Module for Desktop Applications 15 SP1
libIlmImf-2_2-23-2.2.1-3.14.1
libIlmImfUtil-2_2-23-2.2.1-3.14.1
openexr-devel-2.2.1-3.14.1

Ссылки

Описание

An issue was discovered in OpenEXR before 2.4.1. There is an out-of-bounds read in ImfOptimizedPixelReading.h.

Затронутые продукты
Container containers/lmcache-vllm-openai:0:libIlmImf-2_2-23-2.2.1-3.14.1
Container containers/open-webui:0:libIlmImf-2_2-23-2.2.1-3.14.1
Container containers/vllm-openai:0:libIlmImf-2_2-23-2.2.1-3.14.1
Image ai_15_6:libIlmImf-2_2-23-2.2.1-3.14.1
Ссылки

Описание

An issue was discovered in OpenEXR before 2.4.1. There is an out-of-bounds read during RLE uncompression in rleUncompress in ImfRle.cpp.

Затронутые продукты
Container containers/lmcache-vllm-openai:0:libIlmImf-2_2-23-2.2.1-3.14.1
Container containers/open-webui:0:libIlmImf-2_2-23-2.2.1-3.14.1
Container containers/vllm-openai:0:libIlmImf-2_2-23-2.2.1-3.14.1
Image ai_15_6:libIlmImf-2_2-23-2.2.1-3.14.1
Ссылки

Описание

An issue was discovered in OpenEXR before 2.4.1. There is an out-of-bounds read during Huffman uncompression, as demonstrated by FastHufDecoder::refill in ImfFastHuf.cpp.

Затронутые продукты
Container containers/lmcache-vllm-openai:0:libIlmImf-2_2-23-2.2.1-3.14.1
Container containers/open-webui:0:libIlmImf-2_2-23-2.2.1-3.14.1
Container containers/vllm-openai:0:libIlmImf-2_2-23-2.2.1-3.14.1
Image ai_15_6:libIlmImf-2_2-23-2.2.1-3.14.1
Ссылки

Описание

An issue was discovered in OpenEXR before 2.4.1. There is an out-of-bounds read and write in DwaCompressor::uncompress in ImfDwaCompressor.cpp when handling the UNKNOWN compression case.

Затронутые продукты
Container containers/lmcache-vllm-openai:0:libIlmImf-2_2-23-2.2.1-3.14.1
Container containers/open-webui:0:libIlmImf-2_2-23-2.2.1-3.14.1
Container containers/vllm-openai:0:libIlmImf-2_2-23-2.2.1-3.14.1
Image ai_15_6:libIlmImf-2_2-23-2.2.1-3.14.1
Ссылки

Описание

An issue was discovered in OpenEXR before 2.4.1. There is an std::vector out-of-bounds read and write, as demonstrated by ImfTileOffsets.cpp.

Затронутые продукты
Container containers/lmcache-vllm-openai:0:libIlmImf-2_2-23-2.2.1-3.14.1
Container containers/open-webui:0:libIlmImf-2_2-23-2.2.1-3.14.1
Container containers/vllm-openai:0:libIlmImf-2_2-23-2.2.1-3.14.1
Image ai_15_6:libIlmImf-2_2-23-2.2.1-3.14.1
Ссылки

Описание

An issue was discovered in OpenEXR before 2.4.1. There is an out-of-bounds write in copyIntoFrameBuffer in ImfMisc.cpp.

Затронутые продукты
Container containers/lmcache-vllm-openai:0:libIlmImf-2_2-23-2.2.1-3.14.1
Container containers/open-webui:0:libIlmImf-2_2-23-2.2.1-3.14.1
Container containers/vllm-openai:0:libIlmImf-2_2-23-2.2.1-3.14.1
Image ai_15_6:libIlmImf-2_2-23-2.2.1-3.14.1
Ссылки

Описание

An issue was discovered in OpenEXR before 2.4.1. There is an off-by-one error in use of the ImfXdr.h read function by DwaCompressor::Classifier::Classifier, leading to an out-of-bounds read.

Затронутые продукты
Container containers/lmcache-vllm-openai:0:libIlmImf-2_2-23-2.2.1-3.14.1
Container containers/open-webui:0:libIlmImf-2_2-23-2.2.1-3.14.1
Container containers/vllm-openai:0:libIlmImf-2_2-23-2.2.1-3.14.1
Image ai_15_6:libIlmImf-2_2-23-2.2.1-3.14.1
Ссылки