Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2020:3934-1

Опубликовано: 24 дек. 2020
Источник: suse-cvrf

Описание

Security update for openexr

This update for openexr fixes the following issues:

Security issues fixed:

  • CVE-2020-16587: Fixed a heap-based buffer overflow in chunkOffsetReconstruction in ImfMultiPartInputFile.cpp (bsc#1179879).
  • CVE-2020-16588: Fixed a null pointer deference in generatePreview (bsc#1179879).
  • CVE-2020-16589: Fixed a heap-based buffer overflow in writeTileData in ImfTiledOutputFile.cpp (bsc#1179879).

Список пакетов

Container containers/lmcache-vllm-openai:0
libIlmImf-2_2-23-2.2.1-3.21.1
Container containers/open-webui:0
libIlmImf-2_2-23-2.2.1-3.21.1
Container containers/vllm-openai:0
libIlmImf-2_2-23-2.2.1-3.21.1
Image ai_15_6
libIlmImf-2_2-23-2.2.1-3.21.1
SUSE Linux Enterprise Module for Desktop Applications 15 SP1
libIlmImf-2_2-23-2.2.1-3.21.1
libIlmImfUtil-2_2-23-2.2.1-3.21.1
openexr-devel-2.2.1-3.21.1
SUSE Linux Enterprise Module for Desktop Applications 15 SP2
libIlmImf-2_2-23-2.2.1-3.21.1
libIlmImfUtil-2_2-23-2.2.1-3.21.1
openexr-devel-2.2.1-3.21.1

Ссылки

Описание

A heap-based buffer overflow vulnerability exists in Academy Software Foundation OpenEXR 2.3.0 in chunkOffsetReconstruction in ImfMultiPartInputFile.cpp that can cause a denial of service via a crafted EXR file.

Затронутые продукты
Container containers/lmcache-vllm-openai:0:libIlmImf-2_2-23-2.2.1-3.21.1
Container containers/open-webui:0:libIlmImf-2_2-23-2.2.1-3.21.1
Container containers/vllm-openai:0:libIlmImf-2_2-23-2.2.1-3.21.1
Image ai_15_6:libIlmImf-2_2-23-2.2.1-3.21.1
Ссылки

Описание

A Null Pointer Deference issue exists in Academy Software Foundation OpenEXR 2.3.0 in generatePreview in makePreview.cpp that can cause a denial of service via a crafted EXR file.

Затронутые продукты
Container containers/lmcache-vllm-openai:0:libIlmImf-2_2-23-2.2.1-3.21.1
Container containers/open-webui:0:libIlmImf-2_2-23-2.2.1-3.21.1
Container containers/vllm-openai:0:libIlmImf-2_2-23-2.2.1-3.21.1
Image ai_15_6:libIlmImf-2_2-23-2.2.1-3.21.1
Ссылки

Описание

A head-based buffer overflow exists in Academy Software Foundation OpenEXR 2.3.0 in writeTileData in ImfTiledOutputFile.cpp that can cause a denial of service via a crafted EXR file.

Затронутые продукты
Container containers/lmcache-vllm-openai:0:libIlmImf-2_2-23-2.2.1-3.21.1
Container containers/open-webui:0:libIlmImf-2_2-23-2.2.1-3.21.1
Container containers/vllm-openai:0:libIlmImf-2_2-23-2.2.1-3.21.1
Image ai_15_6:libIlmImf-2_2-23-2.2.1-3.21.1
Ссылки