Most recent entries from all

ALSA-2024:8800 — Important: openexr security update

Affected: AlmaLinux:9: openexr, AlmaLinux:9: openexr-devel, AlmaLinux:9: openexr-libs

OpenEXR is an open-source high-dynamic-range floating-point image file format for high-quality image processing and storage. This document presents a brief overview of OpenEXR and explains concepts that are specific to this format. This package containes the binaries for OpenEXR.

Security Fix(es):

* OpenEXR: Heap Overflow in Scanline Deep Data Parsing (CVE-2023-5841)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

bdu:2024-02272

certfr-2024-avi-0785 — De multiples vulnérabilités ont été découvertes dans les produits Apple. Certaines d'entre elles permettent à un attaqu…

certfr-2024-avi-0785

cnvd-2024-09640

EUVD-2026-258859

fkie_cve-2023-5841

Due to a failure in validating the number of scanline samples of a OpenEXR file containing deep scanline data, Academy Software Foundation OpenEX image parsing library version 3.2.1 and prior is susceptible to a heap-based buffer overflow vulnerability. This issue was resolved as of versions v3.2.2 and v3.1.12 of the affected library.

GHSA-gxmr-rxpv-c8fq

gsd-2023-5841

OESA-2024-1215 — OpenEXR security update

Affected: openEuler:22.03-LTS: OpenEXR

OpenEXR is a high dynamic-range (HDR) image file format originally developed by Industrial Light & Magic for use in computer imaging applications. Security Fix(es): Due to a failure in validating the number of scanline samples of a OpenEXR file containing deep scanline data, Academy Software Foundation OpenEX image parsing library version 3.2.1 and prior is susceptible to a heap-based buffer overflow vulnerability. This issue was resolved as of versions v3.2.2 and v3.1.12 of the affected library. (CVE-2023-5841)

openSUSE-SU-2024:13683-1 — libIex-3_1-30-32bit-3.1.11-1.3 on GA media

libIex-3_1-30-32bit-3.1.11-1.3 on GA media

RHSA-2024:8801 — Red Hat Security Advisory: openexr security update

OpenEXR: Heap Overflow in Scanline Deep Data Parsing

UBUNTU-CVE-2023-5841

Affected: Ubuntu:Pro:24.04:LTS: openexr

WID-SEC-W-2024-2153 — Apple iOS und iPadOS: Mehrere Schwachstellen

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Apple iOS und Apple iPadOS ausnutzen, um Sicherheitsmaßnahmen zu umgehen, einen Denial-of-Service-Zustand zu erzeugen oder vertrauliche Informationen offenzulegen.