Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

Mageia: 2020-0114 Moderate Threat from OpenEXR Memory Leak Issue

mageia
Calendar Grey March 6, 2020
Dist Mageia Esm H88
Upgraded libimage packages fix a vulnerability in OpenEXR resulting in memory leaks, enhancing system reliability.
The updated packages fix a security vulnerability: OpenEXR 2.3.0 has a memory leak in ThreadPool in IlmBase/IlmThread/ IlmThreadPool.cpp, as demonstrated by exrmultiview

Summary

The updated packages fix a security vulnerability:
OpenEXR 2.3.0 has a memory leak in ThreadPool in IlmBase/IlmThread/ IlmThreadPool.cpp, as demonstrated by exrmultiview. (CVE-2018-18443)

References

- https://bugs.mageia.org/show_bug.cgi?id=25966

- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/IZN7WUH3SR6DSRODRB4SLFTBKP74FVC5/

- https://www.cve.org/CVERecord?id=CVE-2018-18443

Topics%20covered

Topics Covered

security advisory update threat memory leak OpenEXR Mageia ilmbase

Resolution

SRPMS

- 7/core/ilmbase-2.3.0-1.1.mga7

Severity
important
Lowest
Low
Medium
High
Critical

Publication date: 06 Mar 2020
URL: https://advisories.mageia.org/MGASA-2020-0114.html
Type: security
CVE: CVE-2018-18443

Topics%20covered

Topics Covered

security advisory update threat memory leak OpenEXR Mageia ilmbase

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here