Описание
Security update for openexr
This update for openexr fixes the following issues:
- CVE-2020-15304: Fixed a NULL pointer dereference in TiledInputFile:TiledInputFile() (bsc#1173466).
- CVE-2020-15305: Fixed a use-after-free in DeepScanLineInputFile:DeepScanLineInputFile() (bsc#1173467).
- CVE-2020-15306: Fixed a heap buffer overflow in getChunkOffsetTableSize() (bsc#1173469).
Список пакетов
openSUSE Leap 15.2
libIlmImf-2_2-23-2.2.1-lp152.7.5.1
libIlmImf-2_2-23-32bit-2.2.1-lp152.7.5.1
libIlmImfUtil-2_2-23-2.2.1-lp152.7.5.1
libIlmImfUtil-2_2-23-32bit-2.2.1-lp152.7.5.1
openexr-2.2.1-lp152.7.5.1
openexr-devel-2.2.1-lp152.7.5.1
openexr-doc-2.2.1-lp152.7.5.1
Ссылки
- E-Mail link for openSUSE-SU-2020:1015-1
- SUSE Security Ratings
- SUSE Bug 1173466
- SUSE Bug 1173467
- SUSE Bug 1173469
- SUSE CVE CVE-2020-15304 page
- SUSE CVE CVE-2020-15305 page
- SUSE CVE CVE-2020-15306 page
Описание
An issue was discovered in OpenEXR before 2.5.2. An invalid tiled input file could cause invalid memory access in TiledInputFile::TiledInputFile() in IlmImf/ImfTiledInputFile.cpp, as demonstrated by a NULL pointer dereference.
Затронутые продукты
openSUSE Leap 15.2:libIlmImf-2_2-23-2.2.1-lp152.7.5.1
openSUSE Leap 15.2:libIlmImf-2_2-23-32bit-2.2.1-lp152.7.5.1
openSUSE Leap 15.2:libIlmImfUtil-2_2-23-2.2.1-lp152.7.5.1
openSUSE Leap 15.2:libIlmImfUtil-2_2-23-32bit-2.2.1-lp152.7.5.1
Ссылки
- CVE-2020-15304
- SUSE Bug 1173466
Описание
An issue was discovered in OpenEXR before 2.5.2. Invalid input could cause a use-after-free in DeepScanLineInputFile::DeepScanLineInputFile() in IlmImf/ImfDeepScanLineInputFile.cpp.
Затронутые продукты
openSUSE Leap 15.2:libIlmImf-2_2-23-2.2.1-lp152.7.5.1
openSUSE Leap 15.2:libIlmImf-2_2-23-32bit-2.2.1-lp152.7.5.1
openSUSE Leap 15.2:libIlmImfUtil-2_2-23-2.2.1-lp152.7.5.1
openSUSE Leap 15.2:libIlmImfUtil-2_2-23-32bit-2.2.1-lp152.7.5.1
Ссылки
- CVE-2020-15305
- SUSE Bug 1173467
Описание
An issue was discovered in OpenEXR before v2.5.2. Invalid chunkCount attributes could cause a heap buffer overflow in getChunkOffsetTableSize() in IlmImf/ImfMisc.cpp.
Затронутые продукты
openSUSE Leap 15.2:libIlmImf-2_2-23-2.2.1-lp152.7.5.1
openSUSE Leap 15.2:libIlmImf-2_2-23-32bit-2.2.1-lp152.7.5.1
openSUSE Leap 15.2:libIlmImfUtil-2_2-23-2.2.1-lp152.7.5.1
openSUSE Leap 15.2:libIlmImfUtil-2_2-23-32bit-2.2.1-lp152.7.5.1
Ссылки
- CVE-2020-15306
- SUSE Bug 1173469