Alerts This Week
Warning Icon 1 692
Alerts This Week
Warning Icon 1 692

SUSE: 2019:1962-1 Moderate: Openexr Security Threats Resolved

suse
Calendar Grey July 24, 2019
Dist Suse Esm H88
SUSE Security Alert: Patches for openexr security issues now released to improve overall system integrity.
An update that fixes 5 vulnerabilities is now available

Summary

This update for openexr fixes the following issues: Security issue fixed: - CVE-2017-9111: Fixed an invalid write of size 8 in the storeSSE function in ImfOptimizedPixelReading.h (bsc#1040109). - CVE-2017-9113: Fixed an invalid write of size 1 in the bufferedReadPixels function in ImfInputFile.cpp (bsc#1040113). - CVE-2017-9115: Fixed an invalid write of size 2 in the = operator function inhalf.h (bsc#1040115). - CVE-2018-18444: Fixed Out-of-bounds write in makeMultiView.cpp (bsc#1113455). - CVE-2017-9112: Fixed invalid read of size 1 in the getBits function in ImfHuf.cpp (bsc#1040112). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product:

Topics%20covered

Topics Covered

security advisory moderate security issue software update SUSE patch instructions openexr

References

#1040109 #1040112 #1040113 #1040115 #1113455

Cross- CVE-2017-9111 CVE-2017-9112 CVE-2017-9113

CVE-2017-9115 CVE-2018-18444

Affected Products:

SUSE Linux Enterprise Workstation Extension 12-SP4

SUSE Linux Enterprise Software Development Kit 12-SP4

SUSE Linux Enterprise Server 12-SP4

SUSE Linux Enterprise Desktop 12-SP4

https://www.suse.com/security/cve/CVE-2017-9111.html

https://www.suse.com/security/cve/CVE-2017-9112.html

https://www.suse.com/security/cve/CVE-2017-9113.html

https://www.suse.com/security/cve/CVE-2017-9115.html

https://www.suse.com/security/cve/CVE-2018-18444.html

https://bugzilla.suse.com/1040109

https://bugzilla.suse.com/1040112

https://bugzilla.suse.com/1040113

https://bugzilla.suse.com/1040115

Announcement ID: SUSE-SU-2019:1962-1
Rating: moderate

Topics%20covered

Topics Covered

security advisory moderate security issue software update SUSE patch instructions openexr

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here