File _patchinfo of Package patchinfo.17686
<patchinfo incident="17686">
<issue tracker="cve" id="2020-16588"/>
<issue tracker="cve" id="2020-16587"/>
<issue tracker="cve" id="2020-16589"/>
<issue tracker="bnc" id="1179879">VUL-1: CVE-2020-16587: openexr: heap-based buffer overflow in chunkOffsetReconstruction in ImfMultiPartInputFile.cpp</issue>
<packager>pgajdos</packager>
<rating>moderate</rating>
<category>security</category>
<summary>Security update for openexr</summary>
<description>This update for openexr fixes the following issues:
Security issues fixed:
- CVE-2020-16587: Fixed a heap-based buffer overflow in chunkOffsetReconstruction in ImfMultiPartInputFile.cpp (bsc#1179879).
- CVE-2020-16588: Fixed a null pointer deference in generatePreview (bsc#1179879).
- CVE-2020-16589: Fixed a heap-based buffer overflow in writeTileData in ImfTiledOutputFile.cpp (bsc#1179879).
</description>
</patchinfo>