FEDORA-2020-e244f22a51 — security update for mingw-ilmbase and mingw-OpenEXR

stable

mingw-ilmbase-2.4.1-1.fc32 and mingw-OpenEXR-2.4.1-1.fc32

FEDORA-2020-e244f22a51 created by smani 4 years ago for Fedora 32

Update to OpenEXR-2.4.1, see https://github.com/AcademySoftwareFoundation/openexr/releases/tag/v2.4.1 for details.

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2020-e244f22a51

This update has been submitted for testing by smani.

4 years ago

This update's test gating status has been changed to 'waiting'.

4 years ago

This update's test gating status has been changed to 'ignored'.

4 years ago

This update has been pushed to testing.

4 years ago

This update can be pushed to stable now if the maintainer wishes

4 years ago

This update has been submitted for stable by bodhi.

4 years ago

This update has been pushed to stable.

4 years ago

Please login to add feedback.

Metadata

Type

security

Severity

medium

Karma

Signed

Content Type

RPM

Test Gating

ignored

Builds

mingw-ilmbase-2.4.1-1.fc32

mingw-OpenEXR-2.4.1-1.fc32

Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

7 days

Dates

submitted

4 years ago

in testing

4 years ago

in stable

4 years ago

BZ#1828987 CVE-2020-11765 mingw-OpenEXR: OpenEXR: off-by-one error in ImfXdr.h read function by DwaCompressor::Classifier::Classifier leading to an out-of-bounds read [fedora-all]

BZ#1828992 CVE-2020-11764 mingw-OpenEXR: OpenEXR: out-of-bounds write in copyIntoFrameBuffer function in ImfMisc.cpp [fedora-all]

BZ#1828997 CVE-2020-11763 mingw-OpenEXR: OpenEXR: std::vector out-of-bounds read and write as demonstrated by ImfTileOffsets.cpp [fedora-all]

BZ#1829001 CVE-2020-11762 mingw-OpenEXR: OpenEXR: out-of-bounds read and write in DwaCompressor::uncompress in ImfDwaCompressor.cpp [fedora-all]

BZ#1829003 CVE-2020-11761 mingw-OpenEXR: OpenEXR: out-of-bounds read during Huffman uncompression [fedora-all]

BZ#1829007 CVE-2020-11760 mingw-OpenEXR: OpenEXR: out-of-bounds read during RLE uncompression in rleUncompress function in ImfRle.cpp [fedora-all]

BZ#1829011 CVE-2020-11759 mingw-OpenEXR: OpenEXR: out-of-bounds write due to integer overflows in CompositeDeepScanLine::Data::handleDeepFrameBuffer and readSampleCountForLineBlock [fedora-all]

BZ#1829015 CVE-2020-11758 mingw-OpenEXR: OpenEXR: out-of-bounds read in ImfOptimizedPixelReading.h [fedora-all]

BZ#1829018 CVE-2020-11759 mingw-OpenEXR: OpenEXR: out-of-bounds write due to integer overflows in CompositeDeepScanLine::Data::handleDeepFrameBuffer and readSampleCountForLineBlock [fedora-all]

mingw-ilmbase-2.4.1-1.fc32

mingw-OpenEXR-2.4.1-1.fc32

Automated Test Results

ignored