tocsin

Debian/openexr: high 7.8

In OpenEXR 2.2.0, a crafted image causes a heap-based buffer over-read in the hufDecode function in IlmImf/ImfHuf.cpp during exrmaketiled execution; it may result in denial of service or possibly unsp

Action: Upgrade openexr to 2.2.0-11.1 or later.

Affected

introducedfixedlast affected
02.2.0-11.1-

Fixed versions

2.2.0-11.1

Sources

published · modified · JSON