Publishing details
-
Removed from disk
.
-
Removal requested
.
-
Deleted
by Marc Deslauriers
-
Published
Changelog
openexr (2.2.1-4.1ubuntu1.2) eoan-security; urgency=medium
* SECURITY UPDATE: use-after-free in DeepScanLineInputFile
- debian/patches/CVE-2020-15305.patch: add missing throw in
deepscanline error handling in IlmImf/ImfDeepScanLineInputFile.cpp.
- CVE-2020-15305
* SECURITY UPDATE: heap buffer overflow in getChunkOffsetTableSize()
- debian/patches/CVE-2020-15306.patch: always ignore chunkCount
attribute unless it cannot be computed in
IlmImf/ImfDeepTiledOutputFile.cpp, IlmImf/ImfMisc.cpp,
IlmImf/ImfMisc.h, IlmImf/ImfMultiPartInputFile.cpp,
IlmImf/ImfMultiPartOutputFile.cpp.
- CVE-2020-15306
-- Marc Deslauriers <email address hidden> Tue, 30 Jun 2020 14:23:38 -0400
Builds
Package files