Описание
Security update for openexr
This update for openexr fixes the following issues:
Security issues fixed:
- CVE-2017-9111: Fixed an invalid write of size 8 in the storeSSE function in ImfOptimizedPixelReading.h (bsc#1040109).
- CVE-2017-9113: Fixed an invalid write of size 1 in the bufferedReadPixels function in ImfInputFile.cpp (bsc#1040113).
- CVE-2017-9115: Fixed an invalid write of size 2 in the = operator function inhalf.h (bsc#1040115).
This update was imported from the SUSE:SLE-15:Update update project.
Список пакетов
openSUSE Leap 15.1
libIlmImf-2_2-23-2.2.1-lp151.4.3.1
libIlmImf-2_2-23-32bit-2.2.1-lp151.4.3.1
libIlmImfUtil-2_2-23-2.2.1-lp151.4.3.1
libIlmImfUtil-2_2-23-32bit-2.2.1-lp151.4.3.1
openexr-2.2.1-lp151.4.3.1
openexr-devel-2.2.1-lp151.4.3.1
openexr-doc-2.2.1-lp151.4.3.1
Ссылки
- E-Mail link for openSUSE-SU-2019:1826-1
- SUSE Security Ratings
- SUSE Bug 1040109
- SUSE Bug 1040113
- SUSE Bug 1040115
- SUSE CVE CVE-2017-9111 page
- SUSE CVE CVE-2017-9113 page
- SUSE CVE CVE-2017-9115 page
Описание
In OpenEXR 2.2.0, an invalid write of size 8 in the storeSSE function in ImfOptimizedPixelReading.h could cause the application to crash or execute arbitrary code.
Затронутые продукты
openSUSE Leap 15.1:libIlmImf-2_2-23-2.2.1-lp151.4.3.1
openSUSE Leap 15.1:libIlmImf-2_2-23-32bit-2.2.1-lp151.4.3.1
openSUSE Leap 15.1:libIlmImfUtil-2_2-23-2.2.1-lp151.4.3.1
openSUSE Leap 15.1:libIlmImfUtil-2_2-23-32bit-2.2.1-lp151.4.3.1
Ссылки
- CVE-2017-9111
- SUSE Bug 1040109
Описание
In OpenEXR 2.2.0, an invalid write of size 1 in the bufferedReadPixels function in ImfInputFile.cpp could cause the application to crash or execute arbitrary code.
Затронутые продукты
openSUSE Leap 15.1:libIlmImf-2_2-23-2.2.1-lp151.4.3.1
openSUSE Leap 15.1:libIlmImf-2_2-23-32bit-2.2.1-lp151.4.3.1
openSUSE Leap 15.1:libIlmImfUtil-2_2-23-2.2.1-lp151.4.3.1
openSUSE Leap 15.1:libIlmImfUtil-2_2-23-32bit-2.2.1-lp151.4.3.1
Ссылки
- CVE-2017-9113
- SUSE Bug 1040113
Описание
In OpenEXR 2.2.0, an invalid write of size 2 in the = operator function in half.h could cause the application to crash or execute arbitrary code.
Затронутые продукты
openSUSE Leap 15.1:libIlmImf-2_2-23-2.2.1-lp151.4.3.1
openSUSE Leap 15.1:libIlmImf-2_2-23-32bit-2.2.1-lp151.4.3.1
openSUSE Leap 15.1:libIlmImfUtil-2_2-23-2.2.1-lp151.4.3.1
openSUSE Leap 15.1:libIlmImfUtil-2_2-23-32bit-2.2.1-lp151.4.3.1
Ссылки
- CVE-2017-9115
- SUSE Bug 1040115