Ubuntu 20.10: 4901-2 Important: OpenEXR Buffer Overflow Vulnerability

ubuntu

April 1, 2021

Several security issues were fixed in OpenEXR.

Summary

Several security issues were fixed in OpenEXR.

Software Description:

- openexr: tools for the OpenEXR image format

Details:

It was discovered that OpenEXR incorrectly handled certain malformed EXR

image files. If a user were tricked into opening a crafted EXR image file,

a remote attacker could cause a denial of service, or possibly execute

arbitrary code.

Topics Covered

security advisory denial of service critical issue ubuntu openexr

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 20.10:
  libopenexr25                    2.5.3-2ubuntu0.2
  openexr                         2.5.3-2ubuntu0.2

Ubuntu 20.04 LTS:
  libopenexr24                    2.3.0-6ubuntu0.5
  openexr                         2.3.0-6ubuntu0.5

Ubuntu 18.04 LTS:
  libopenexr22                    2.2.0-11.1ubuntu1.6
  openexr                         2.2.0-11.1ubuntu1.6

Ubuntu 16.04 LTS:
  libopenexr22                    2.2.0-10ubuntu2.6
  openexr                         2.2.0-10ubuntu2.6

In general, a standard system update will make all the necessary changes.