Red Hat Security AdvisoryRHSA-2024:8801
openexr security update
Released 2024-11-04 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat CodeReady Linux Builder EUS (v.9.2) openexr-devel-3.1.1-2.el9_2.1
- Red Hat Enterprise Linux AppStream EUS (v.9.2) openexr-3.1.1-2.el9_2.1, openexr-libs-3.1.1-2.el9_2.1
Fixes 1 record
Priority HIGH 80
Due to a failure in validating the number of scanline samples of a OpenEXR file containing deep scanline data, Academy Software Foundation OpenEX image parsing library version 3.2.1 and prior is susceptible to a heap-bas…
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.01248 · Published 2024-02-01 · Partial fix · 3.2.2, 3.1.12 CWE-122