Bugzilla – Bug 1187395
VUL-0: CVE-2021-3605: openexr,OpenEXR: OpenEXR: Heap buffer overflow in the rleUncompress function
Last modified: 2021-09-13 10:02:22 UTC
A heap-buffer overflow was found in the rleUncompress function of OpenEXR in versions before 3.0.3. An attacker could use this flaw to execute arbitrary code with the permissions of the user running the application compiled against OpenEXR. References： https://github.com/AcademySoftwareFoundation/openexr/pull/1036 References: https://bugzilla.redhat.com/show_bug.cgi?id=1970991 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-3605
Affected packages: - SUSE:SLE-15:Update/openexr 2.2.1 - openSUSE:Factory/openexr 2.5.5 Upstream patch [0]. [0] https://github.com/AcademySoftwareFoundation/openexr/commit/25259a84827234a283f6f9db72978198c7a3f268
https://github.com/AcademySoftwareFoundation/openexr/pull/1040/commits/2215da3b9e0c1ee058661ff293d754dd5dbcd5f8 rleUncompress resides in ImfRleCompressor.cpp in older versions. In case I have missed something, let me know. Will submit for TW,15,12/openexr and 11/OpenEXR.
Packages submitted. I believe all fixed.
This is an autogenerated message for OBS integration: This bug (1187395) was mentioned in https://build.opensuse.org/request/show/900381 Factory / openexr
SUSE-SU-2021:14757-1: An update that fixes two vulnerabilities is now available. Category: security (important) Bug References: 1184354,1187395 CVE References: CVE-2021-3479,CVE-2021-3605 JIRA References: Sources used: SUSE Linux Enterprise Server 11-SP4-LTSS (src): OpenEXR-1.6.1-83.17.25.1 SUSE Linux Enterprise Point of Sale 11-SP3 (src): OpenEXR-1.6.1-83.17.25.1 SUSE Linux Enterprise Debuginfo 11-SP4 (src): OpenEXR-1.6.1-83.17.25.1 SUSE Linux Enterprise Debuginfo 11-SP3 (src): OpenEXR-1.6.1-83.17.25.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.
SUSE-SU-2021:2158-1: An update that fixes two vulnerabilities is now available. Category: security (important) Bug References: 1187310,1187395 CVE References: CVE-2021-3598,CVE-2021-3605 JIRA References: Sources used: SUSE Manager Server 4.0 (src): openexr-2.2.1-3.32.1 SUSE Manager Retail Branch Server 4.0 (src): openexr-2.2.1-3.32.1 SUSE Manager Proxy 4.0 (src): openexr-2.2.1-3.32.1 SUSE Linux Enterprise Server for SAP 15-SP1 (src): openexr-2.2.1-3.32.1 SUSE Linux Enterprise Server for SAP 15 (src): openexr-2.2.1-3.32.1 SUSE Linux Enterprise Server 15-SP1-LTSS (src): openexr-2.2.1-3.32.1 SUSE Linux Enterprise Server 15-SP1-BCL (src): openexr-2.2.1-3.32.1 SUSE Linux Enterprise Server 15-LTSS (src): openexr-2.2.1-3.32.1 SUSE Linux Enterprise Module for Desktop Applications 15-SP3 (src): openexr-2.2.1-3.32.1 SUSE Linux Enterprise Module for Desktop Applications 15-SP2 (src): openexr-2.2.1-3.32.1 SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS (src): openexr-2.2.1-3.32.1 SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS (src): openexr-2.2.1-3.32.1 SUSE Linux Enterprise High Performance Computing 15-LTSS (src): openexr-2.2.1-3.32.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS (src): openexr-2.2.1-3.32.1 SUSE Enterprise Storage 6 (src): openexr-2.2.1-3.32.1 SUSE CaaS Platform 4.0 (src): openexr-2.2.1-3.32.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.
SUSE-SU-2021:2159-1: An update that fixes three vulnerabilities is now available. Category: security (important) Bug References: 1184354,1187310,1187395 CVE References: CVE-2021-3479,CVE-2021-3598,CVE-2021-3605 JIRA References: Sources used: SUSE OpenStack Cloud Crowbar 9 (src): openexr-2.1.0-6.34.1 SUSE OpenStack Cloud Crowbar 8 (src): openexr-2.1.0-6.34.1 SUSE OpenStack Cloud 9 (src): openexr-2.1.0-6.34.1 SUSE OpenStack Cloud 8 (src): openexr-2.1.0-6.34.1 SUSE Linux Enterprise Workstation Extension 12-SP5 (src): openexr-2.1.0-6.34.1 SUSE Linux Enterprise Software Development Kit 12-SP5 (src): openexr-2.1.0-6.34.1 SUSE Linux Enterprise Server for SAP 12-SP4 (src): openexr-2.1.0-6.34.1 SUSE Linux Enterprise Server for SAP 12-SP3 (src): openexr-2.1.0-6.34.1 SUSE Linux Enterprise Server 12-SP5 (src): openexr-2.1.0-6.34.1 SUSE Linux Enterprise Server 12-SP4-LTSS (src): openexr-2.1.0-6.34.1 SUSE Linux Enterprise Server 12-SP3-LTSS (src): openexr-2.1.0-6.34.1 SUSE Linux Enterprise Server 12-SP3-BCL (src): openexr-2.1.0-6.34.1 SUSE Linux Enterprise Server 12-SP2-BCL (src): openexr-2.1.0-6.34.1 HPE Helion Openstack 8 (src): openexr-2.1.0-6.34.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.
openSUSE-SU-2021:0925-1: An update that fixes two vulnerabilities is now available. Category: security (important) Bug References: 1187310,1187395 CVE References: CVE-2021-3598,CVE-2021-3605 JIRA References: Sources used: openSUSE Leap 15.2 (src): openexr-2.2.1-lp152.7.17.1
openSUSE-SU-2021:2158-1: An update that fixes two vulnerabilities is now available. Category: security (important) Bug References: 1187310,1187395 CVE References: CVE-2021-3598,CVE-2021-3605 JIRA References: Sources used: openSUSE Leap 15.3 (src): openexr-2.2.1-3.32.1
released