| Summary: | <media-libs/openexr-3.1.11: oss-fuzz stack buffer overread | ||
|---|---|---|---|
| Product: | Gentoo Security | Reporter: | John Helmert III <ajak> |
| Component: | Vulnerabilities | Assignee: | Gentoo Security <security> |
| Status: | CONFIRMED --- | ||
| Severity: | minor | CC: | ajak, media-video, proxy-maint, waebbl-gentoo |
| Priority: | Normal | Keywords: | PullRequest |
| Version: | unspecified | ||
| Hardware: | All | ||
| OS: | Linux | ||
| URL: | https://github.com/AcademySoftwareFoundation/openexr/releases/tag/v3.1.8 | ||
| See Also: | https://github.com/gentoo/gentoo/pull/34218 | ||
| Whiteboard: | B4 [glsa? cleanup] | ||
| Package list: | Runtime testing required: | --- | |
| Bug Depends on: | 920470 | ||
| Bug Blocks: | |||
The bug has been closed via the following commit(s): https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=b98534f3604d967cd45877e8c1752cd7116563ca commit b98534f3604d967cd45877e8c1752cd7116563ca Author: Paul Zander <negril.nx+gentoo@gmail.com> AuthorDate: 2023-10-26 08:07:14 +0000 Commit: Sam James <sam@gentoo.org> CommitDate: 2024-02-21 01:44:49 +0000 media-libs/openexr: add 3.1.12, 3.2.2 Closes: https://bugs.gentoo.org/920528 Closes: https://bugs.gentoo.org/916514 Closes: https://bugs.gentoo.org/908257 Signed-off-by: Paul Zander <negril.nx+gentoo@gmail.com> Closes: https://github.com/gentoo/gentoo/pull/34218 Signed-off-by: Sam James <sam@gentoo.org> media-libs/openexr/Manifest | 3 + .../files/openexr-3.2.1-bintests-iff-utils.patch | 14 +++ media-libs/openexr/openexr-3.1.12.ebuild | 69 +++++++++++ media-libs/openexr/openexr-3.2.2.ebuild | 130 +++++++++++++++++++++ 4 files changed, 216 insertions(+) See the "Note:" at the top of sec bugs. |
"This release also addresses: OSS-fuzz 59070 Stack-buffer-overflow in DwaCompressor_readChannelRules" Fix is in 3.1.8, please bump.