Medium ELSA-2020-4039 3 CVEs

Moderate: OpenEXR security update (Oracle Linux 7)

Published Oct 6, 2020 · Updated Oct 6, 2020

Ecosystem: Oracle Linux

Summary

[1.7.1-8]
- fix CVE-2020-11764 (#1833552)
- fix CVE-2020-11763 (#1833566)
- fix CVE-2020-11761 (#1834461)

Fixed packages 3

Release	Package	Fixed in
Oracle Linux · 7	OpenEXR	0:1.7.1-8.el7
Oracle Linux · 7	OpenEXR-devel	0:1.7.1-8.el7
Oracle Linux · 7	OpenEXR-libs	0:1.7.1-8.el7

Vulnerabilities 3

Unscored —

CVE-2020-11761

An issue was discovered in OpenEXR before 2.4.1. There is an out-of-bounds read during Huffman uncompression, as demons…

openexr openexr openexr OpenEXR Debian Ubuntu Azure Linux Alpine

Apr 14, 2020
Unscored —

CVE-2020-11763

An issue was discovered in OpenEXR before 2.4.1. There is an std::vector out-of-bounds read and write, as demonstrated …

openexr openexr openexr OpenEXR Debian Ubuntu Azure Linux Alpine

Apr 14, 2020
Unscored —

CVE-2020-11764

An issue was discovered in OpenEXR before 2.4.1. There is an out-of-bounds write in copyIntoFrameBuffer in ImfMisc.cpp.

openexr openexr openexr OpenEXR Debian Ubuntu Azure Linux Alpine

Apr 14, 2020