File _patchinfo of Package patchinfo.9352
<patchinfo incident="9352">
<issue tracker="bnc" id="1040109">VUL-0: CVE-2017-9111: openexr,OpenEXR: invalid write of size 8 in the storeSSE function in ImfOptimizedPixelReading.h</issue>
<issue tracker="bnc" id="1040113">VUL-0: CVE-2017-9113: openexr,OpenEXR: invalid write of size 1 in the bufferedReadPixels function in ImfInputFile.cpp</issue>
<issue tracker="bnc" id="1040115">VUL-0: CVE-2017-9115: openexr,OpenEXR: invalid write of size 2 in the = operator function inhalf.h</issue>
<issue tracker="bnc" id="1113455">VUL-1: CVE-2018-18444: OpenEXR,openexr: Out-of-bounds write in makeMultiView.cpp</issue>
<issue id="1040112" tracker="bnc">VUL-0: CVE-2017-9112: openexr,OpenEXR: invalid read of size 1 in the getBits function in ImfHuf.cpp</issue>
<issue tracker="cve" id="2017-9113"/>
<issue tracker="cve" id="2017-9111"/>
<issue tracker="cve" id="2017-9115"/>
<issue id="2017-9112" tracker="cve" />
<issue tracker="cve" id="2018-18444"/>
<category>security</category>
<rating>moderate</rating>
<packager>pgajdos</packager>
<description>This update for openexr fixes the following issues:
Security issue fixed:
- CVE-2017-9111: Fixed an invalid write of size 8 in the storeSSE function in ImfOptimizedPixelReading.h (bsc#1040109).
- CVE-2017-9113: Fixed an invalid write of size 1 in the bufferedReadPixels function in ImfInputFile.cpp (bsc#1040113).
- CVE-2017-9115: Fixed an invalid write of size 2 in the = operator function inhalf.h (bsc#1040115).
- CVE-2018-18444: Fixed Out-of-bounds write in makeMultiView.cpp (bsc#1113455).
- CVE-2017-9112: Fixed invalid read of size 1 in the getBits function in ImfHuf.cpp (bsc#1040112).
</description>
<summary>Security update for openexr</summary>
</patchinfo>