Oval Definition:	oval:org.opensuse.security:def:66764
Revision Date: 2021-05-04 Version: 1 Title: Security update for openexr (Important) Description: This update for openexr fixes the following issues: - CVE-2021-23215: Fixed an integer-overflow in Imf_2_5:DwaCompressor:initializeBuffers (bsc#1185216). - CVE-2021-26260: Fixed an Integer-overflow in Imf_2_5:DwaCompressor:initializeBuffers (bsc#1185217). - CVE-2021-20296: Fixed a Null Pointer dereference in Imf_2_5:hufUncompress (bsc#1184355). - CVE-2021-3477: Fixed a Heap-buffer-overflow in Imf_2_5::DeepTiledInputFile::readPixelSampleCounts (bsc#1184353). - CVE-2021-3479: Fixed an Out-of-memory caused by allocation of a very large buffer (bsc#1184354). Family: unix Class: patch Status: Reference(s): 1184353 1184354 1184355 1185216 1185217 CVE-2017-12678 CVE-2018-11439 CVE-2018-14404 CVE-2018-16468 CVE-2018-16470 CVE-2019-11068 CVE-2019-18904 CVE-2019-5419 CVE-2021-20296 CVE-2021-23215 CVE-2021-26260 CVE-2021-3477 CVE-2021-3479 Platform(s): SUSE Linux Enterprise Module for Desktop Applications 15 SP2 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP2 SUSE Linux Enterprise Module for Public Cloud 15 SP2 Product(s): Definition Synopsis SUSE Linux Enterprise Module for Desktop Applications 15 SP2 is installed AND Package Information libtag-devel-1.11.1-4.6 is installed OR libtag_c0-1.11.1-4.6 is installed Definition Synopsis SUSE Linux Enterprise Module for Public Cloud 15 SP2 is installed AND rmt-server-pubcloud-2.5.4-1 is installed
BACK