openexr 2.2.1-4.1ubuntu1.2 source package in Ubuntu

Changelog

openexr (2.2.1-4.1ubuntu1.2) eoan-security; urgency=medium

  * SECURITY UPDATE: use-after-free in DeepScanLineInputFile
    - debian/patches/CVE-2020-15305.patch: add missing throw in
      deepscanline error handling in IlmImf/ImfDeepScanLineInputFile.cpp.
    - CVE-2020-15305
  * SECURITY UPDATE: heap buffer overflow in getChunkOffsetTableSize()
    - debian/patches/CVE-2020-15306.patch: always ignore chunkCount
      attribute unless it cannot be computed in
      IlmImf/ImfDeepTiledOutputFile.cpp, IlmImf/ImfMisc.cpp,
      IlmImf/ImfMisc.h, IlmImf/ImfMultiPartInputFile.cpp,
      IlmImf/ImfMultiPartOutputFile.cpp.
    - CVE-2020-15306

 -- Marc Deslauriers <email address hidden>  Tue, 30 Jun 2020 14:23:38 -0400

Upload details

Uploaded by:
Marc Deslauriers
Uploaded to:
Eoan
Original maintainer:
Ubuntu Developers
Architectures:
any all
Section:
graphics
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
openexr_2.2.1.orig.tar.gz 17.3 MiB 8f9a5af6131583404261931d9a5c83de0a425cb4b8b25ddab2b169fbf113aecd
openexr_2.2.1-4.1ubuntu1.2.debian.tar.xz 30.0 KiB 4dc3409f8e5f1d028216561c83544cf8c96f22264664e19948b602cd5640fbff
openexr_2.2.1-4.1ubuntu1.2.dsc 2.3 KiB 8fbece5556d70687812b69b45e23dbec5c4867b4bb7555e9a4538073d441d5b4

View changes file

Binary packages built by this source

libopenexr-dev: No summary available for libopenexr-dev in ubuntu eoan.

No description available for libopenexr-dev in ubuntu eoan.

libopenexr23: No summary available for libopenexr23 in ubuntu eoan.

No description available for libopenexr23 in ubuntu eoan.

libopenexr23-dbgsym: No summary available for libopenexr23-dbgsym in ubuntu eoan.

No description available for libopenexr23-dbgsym in ubuntu eoan.

openexr: No summary available for openexr in ubuntu eoan.

No description available for openexr in ubuntu eoan.

openexr-dbgsym: No summary available for openexr-dbgsym in ubuntu eoan.

No description available for openexr-dbgsym in ubuntu eoan.

openexr-doc: No summary available for openexr-doc in ubuntu eoan.

No description available for openexr-doc in ubuntu eoan.