Publishing details

• Published on 2021-04-01
• Copied from ubuntu xenial in PPA for Ubuntu Security Proposed by Marc Deslauriers

Changelog

openexr (2.2.0-10ubuntu2.6) xenial-security; urgency=medium

  * SECURITY UPDATE: shift overflow in FastHufDecoder
    - debian/patches/CVE-2021-3474.patch: compute Huf codelengths using 64
      bit to prevent shift overflow in IlmImf/ImfFastHuf.cpp.
    - CVE-2021-3474
  * SECURITY UPDATE: integer overflow in calculateNumTiles
    - debian/patches/CVE-2021-3475.patch: compute level size with 64 bits
      to avoid overflow in IlmImf/ImfTiledMisc.cpp.
    - CVE-2021-3475
  * SECURITY UPDATE: shift overflows
    - debian/patches/CVE-2021-3476.patch: ignore unused bits in B44 mode
      detection in IlmImf/ImfB44Compressor.cpp.
    - CVE-2021-3476
  * SECURITY UPDATE: out-of-bounds read via deep tile sample size
    - debian/patches/CVE-2021-3477.patch: fix overflow computing deeptile
      sample table size in IlmImf/ImfDeepTiledInputFile.cpp.
    - CVE-2021-3477
  * SECURITY UPDATE: memory consumption via input file
    - debian/patches/CVE-2021-3478-pre1.patch: reduce size limit for
      scanline files; prevent large chunkoffset allocations in
      IlmImf/ImfCompressor.cpp, IlmImf/ImfCompressor.h, IlmImf/ImfMisc.cpp,
      IlmImf/ImfMultiPartInputFile.cpp, IlmImf/ImfScanLineInputFile.cpp.
    - debian/patches/CVE-2021-3478.patch: sanity check ScanlineInput
      bytesPerLine instead of lineOffset size in
      IlmImf/ImfScanLineInputFile.cpp.
    - CVE-2021-3478
  * SECURITY UPDATE: memory consumption in scanline API
    - debian/patches/CVE-2021-3479-pre1.patch: address issues reported by
      Undefined Behavior Sanitizer in IlmImf/ImfInputFile.cpp.
    - debian/patches/CVE-2021-3479.patch: more efficient handling of filled
      channels reading tiles with scanline API in IlmImf/ImfInputFile.cpp,
      IlmImfTest/testScanLineApi.cpp.
    - CVE-2021-3479

 -- Marc Deslauriers <email address hidden>  Thu, 01 Apr 2021 08:47:09 -0400

Builds

• amd64
• arm64
• armhf
• i386
• powerpc
• ppc64el
• s390x

Built packages

• libopenexr-dev development files for the OpenEXR image library

• libopenexr22 runtime files for the OpenEXR image library

• libopenexr22-dbgsym debug symbols for package libopenexr22

• openexr command-line tools for the OpenEXR image format

• openexr-dbgsym debug symbols for package openexr

• openexr-doc documentation and examples for the OpenEXR image format

Package files

• libopenexr-dev_2.2.0-10ubuntu2.6_amd64.deb (687.2 KiB)
• libopenexr-dev_2.2.0-10ubuntu2.6_arm64.deb (669.1 KiB)
• libopenexr-dev_2.2.0-10ubuntu2.6_armhf.deb (668.5 KiB)
• libopenexr-dev_2.2.0-10ubuntu2.6_i386.deb (678.9 KiB)
• libopenexr-dev_2.2.0-10ubuntu2.6_powerpc.deb (675.2 KiB)
• libopenexr-dev_2.2.0-10ubuntu2.6_ppc64el.deb (752.7 KiB)
• libopenexr-dev_2.2.0-10ubuntu2.6_s390x.deb (681.2 KiB)
• libopenexr22-dbgsym_2.2.0-10ubuntu2.6_amd64.ddeb (2.3 MiB)
• libopenexr22-dbgsym_2.2.0-10ubuntu2.6_arm64.ddeb (2.2 MiB)
• libopenexr22-dbgsym_2.2.0-10ubuntu2.6_armhf.ddeb (2.2 MiB)
• libopenexr22-dbgsym_2.2.0-10ubuntu2.6_i386.ddeb (2.1 MiB)
• libopenexr22-dbgsym_2.2.0-10ubuntu2.6_powerpc.ddeb (2.1 MiB)
• libopenexr22-dbgsym_2.2.0-10ubuntu2.6_ppc64el.ddeb (2.4 MiB)
• libopenexr22-dbgsym_2.2.0-10ubuntu2.6_s390x.ddeb (2.1 MiB)
• libopenexr22_2.2.0-10ubuntu2.6_amd64.deb (571.8 KiB)
• libopenexr22_2.2.0-10ubuntu2.6_arm64.deb (543.3 KiB)
• libopenexr22_2.2.0-10ubuntu2.6_armhf.deb (538.7 KiB)
• libopenexr22_2.2.0-10ubuntu2.6_i386.deb (587.8 KiB)
• libopenexr22_2.2.0-10ubuntu2.6_powerpc.deb (581.3 KiB)
• libopenexr22_2.2.0-10ubuntu2.6_ppc64el.deb (617.8 KiB)
• libopenexr22_2.2.0-10ubuntu2.6_s390x.deb (573.7 KiB)
• openexr-dbgsym_2.2.0-10ubuntu2.6_amd64.ddeb (404.1 KiB)
• openexr-dbgsym_2.2.0-10ubuntu2.6_arm64.ddeb (404.1 KiB)
• openexr-dbgsym_2.2.0-10ubuntu2.6_armhf.ddeb (395.4 KiB)
• openexr-dbgsym_2.2.0-10ubuntu2.6_i386.ddeb (383.7 KiB)
• openexr-dbgsym_2.2.0-10ubuntu2.6_powerpc.ddeb (385.1 KiB)
• openexr-dbgsym_2.2.0-10ubuntu2.6_ppc64el.ddeb (448.8 KiB)
• openexr-dbgsym_2.2.0-10ubuntu2.6_s390x.ddeb (382.6 KiB)
• openexr-doc_2.2.0-10ubuntu2.6_all.deb (2.2 MiB)
• openexr_2.2.0-10ubuntu2.6.debian.tar.xz (50.5 KiB)
• openexr_2.2.0-10ubuntu2.6.dsc (2.3 KiB)
• openexr_2.2.0-10ubuntu2.6_amd64.deb (63.9 KiB)
• openexr_2.2.0-10ubuntu2.6_arm64.deb (61.3 KiB)
• openexr_2.2.0-10ubuntu2.6_armhf.deb (56.7 KiB)
• openexr_2.2.0-10ubuntu2.6_i386.deb (64.2 KiB)
• openexr_2.2.0-10ubuntu2.6_powerpc.deb (61.9 KiB)
• openexr_2.2.0-10ubuntu2.6_ppc64el.deb (71.1 KiB)
• openexr_2.2.0-10ubuntu2.6_s390x.deb (61.8 KiB)
• openexr_2.2.0.orig.tar.gz (13.8 MiB)