Alerts This Week
Warning Icon 1 923
Alerts This Week
Warning Icon 1 923

Mageia 8 MGASA-2022-0020 Critical: OpenEXR Buffer Overflow Advisory

mageia
Calendar Grey January 16, 2022
Dist Mageia Esm H88
Revised openexr modules in Mageia address potential buffer overflow vulnerability linked to CVE-2021-45942, released on January 16, 2022.
OpenEXR 3.1.0 through 3.1.3 has a heap-based buffer overflow in Imf_3_1::LineCompositeTask::execute (called from IlmThread_3_1::NullThreadPoolProvider::addTask and IlmThread_3_1:...

Summary

OpenEXR 3.1.0 through 3.1.3 has a heap-based buffer overflow in Imf_3_1::LineCompositeTask::execute (called from IlmThread_3_1::NullThreadPoolProvider::addTask and IlmThread_3_1::ThreadPool::addGlobalTask). (CVE-2021-45942)

References

- https://bugs.mageia.org/show_bug.cgi?id=29888

- https://lists.suse.com/pipermail/sle-security-updates/2022-January/009997.html

-

- https://www.cve.org/CVERecord?id=CVE-2021-45942

Topics%20covered

Topics Covered

security advisory security update buffer overflow critical openexr mageia heap-based

Resolution

SRPMS

- 8/core/openexr-2.5.7-1.3.mga8

Severity
critical
Lowest
Low
Medium
High
Critical

Publication date: 16 Jan 2022
URL: https://advisories.mageia.org/MGASA-2022-0020.html
Type: security
CVE: CVE-2021-45942

Topics%20covered

Topics Covered

security advisory security update buffer overflow critical openexr mageia heap-based

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here