Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2021:0536-1

Опубликовано: 10 апр. 2021
Источник: suse-cvrf

Описание

Security update for openexr

This update for openexr fixes the following issues:

  • CVE-2021-3474: Undefined-shift in Imf_2_5::FastHufDecoder::FastHufDecoder (bsc#1184174)
  • CVE-2021-3475: Integer-overflow in Imf_2_5::calculateNumTiles (bsc#1184173)
  • CVE-2021-3476: Undefined-shift in Imf_2_5::unpack14 (bsc#1184172)

This update was imported from the SUSE:SLE-15:Update update project.

Список пакетов

openSUSE Leap 15.2
libIlmImf-2_2-23-2.2.1-lp152.7.11.1
libIlmImf-2_2-23-32bit-2.2.1-lp152.7.11.1
libIlmImfUtil-2_2-23-2.2.1-lp152.7.11.1
libIlmImfUtil-2_2-23-32bit-2.2.1-lp152.7.11.1
openexr-2.2.1-lp152.7.11.1
openexr-devel-2.2.1-lp152.7.11.1
openexr-doc-2.2.1-lp152.7.11.1

Ссылки

Описание

There's a flaw in OpenEXR in versions before 3.0.0-beta. A crafted input file that is processed by OpenEXR could cause a shift overflow in the FastHufDecoder, potentially leading to problems with application availability.

Затронутые продукты
openSUSE Leap 15.2:libIlmImf-2_2-23-2.2.1-lp152.7.11.1
openSUSE Leap 15.2:libIlmImf-2_2-23-32bit-2.2.1-lp152.7.11.1
openSUSE Leap 15.2:libIlmImfUtil-2_2-23-2.2.1-lp152.7.11.1
openSUSE Leap 15.2:libIlmImfUtil-2_2-23-32bit-2.2.1-lp152.7.11.1
Ссылки

Описание

There is a flaw in OpenEXR in versions before 3.0.0-beta. An attacker who can submit a crafted file to be processed by OpenEXR could cause an integer overflow, potentially leading to problems with application availability.

Затронутые продукты
openSUSE Leap 15.2:libIlmImf-2_2-23-2.2.1-lp152.7.11.1
openSUSE Leap 15.2:libIlmImf-2_2-23-32bit-2.2.1-lp152.7.11.1
openSUSE Leap 15.2:libIlmImfUtil-2_2-23-2.2.1-lp152.7.11.1
openSUSE Leap 15.2:libIlmImfUtil-2_2-23-32bit-2.2.1-lp152.7.11.1
Ссылки

Описание

A flaw was found in OpenEXR's B44 uncompression functionality in versions before 3.0.0-beta. An attacker who is able to submit a crafted file to OpenEXR could trigger shift overflows, potentially affecting application availability.

Затронутые продукты
openSUSE Leap 15.2:libIlmImf-2_2-23-2.2.1-lp152.7.11.1
openSUSE Leap 15.2:libIlmImf-2_2-23-32bit-2.2.1-lp152.7.11.1
openSUSE Leap 15.2:libIlmImfUtil-2_2-23-2.2.1-lp152.7.11.1
openSUSE Leap 15.2:libIlmImfUtil-2_2-23-32bit-2.2.1-lp152.7.11.1
Ссылки
Уязвимость openSUSE-SU-2021:0536-1