Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
235597a3 by Salvatore Bonaccorso at 2021-07-18T09:52:15+02:00
Add CVE-2021-20299/openexr
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -40367,8 +40367,12 @@ CVE-2021-20300 [Integer-overflow in
Imf_2_5::hufUncompress]
NOTE: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25562
NOTE:
https://github.com/AcademySoftwareFoundation/openexr/commit/ed560b8a932c78d5e8e5990ce36fe7808b35d9f0
(master)
NOTE:
https://github.com/AcademySoftwareFoundation/openexr/commit/4212416433a230334cef0ac122cb8d722746035d
(2.5.x)
-CVE-2021-20299
+CVE-2021-20299 [Null-dereference READ in Imf_2_5::Header::operator]
RESERVED
+ - openexr 2.5.4-1
+ NOTE: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25740
+ NOTE: https://github.com/AcademySoftwareFoundation/openexr/pull/840
+ NOTE:
https://github.com/AcademySoftwareFoundation/openexr/commit/25e9515b06a6bc293d871622b8cafaee7af84e0f
CVE-2021-20298 [Out-of-memory in B44Compressor]
RESERVED
- openexr 2.5.4-1
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/235597a3c3c13234bc73f781ce9ffe47f49cede7
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/235597a3c3c13234bc73f781ce9ffe47f49cede7
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
debian-security-tracker-commits@alioth-lists.debian.net
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
