Ubuntu
openexr package

openexr 1.6.1-4ubuntu2 source package in Ubuntu

Changelog

openexr (1.6.1-4ubuntu2) karmic; urgency=low

  * SECURITY UPDATE: denial of service and possible code execution via
    multiple integer overflows
    - debian/patches/security_CVE-2009-1720.diff: make sure we don't
      overflow INT_MAX in IlmImf/{ImfPizCompressor,ImfPreviewImage,
      ImfPxr24Compressor,ImfRleCompressor,ImfZipCompressor}.cpp.
    - CVE-2009-1720
  * SECURITY UPDATE: denial of service and possible code execution via
    uninitialized pointer free in Imf::hufUncompress
    - debian/patches/security_CVE-2009-1721.diff: introduce
      hufClearDecTable function and use it to clear out hdec in
      IlmImf/ImfHuf.cpp.
    - CVE-2009-1721

 -- Marc Deslauriers <email address hidden>   Mon, 14 Sep 2009 14:35:41 -0400

Upload details

Uploaded by:
Marc Deslauriers
Sponsored by:
Jamie Strandboge
Uploaded to:
Karmic
Original maintainer:
Ubuntu Development Team
Architectures:
any
Section:
graphics
Urgency:
Low Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
openexr_1.6.1.orig.tar.gz 13.0 MiB c616906ab958de9c37bb86ca7547cfedbdfbad5e1ca2a4ab98983c9afa6a5950
openexr_1.6.1-4ubuntu2.diff.gz 11.1 KiB 987ec596ef44a1d52960c429fd0c3a41d6d23e42058082a913347216c8c00a54
openexr_1.6.1-4ubuntu2.dsc 1.4 KiB 3b61f818d443ce404ddd0964fb870e4bf51ad929ff4b63dd7901d84d64b04fe9

Available diffs

View changes file

Binary packages built by this source

libopenexr-dev: No summary available for libopenexr-dev in ubuntu karmic.

No description available for libopenexr-dev in ubuntu karmic.

libopenexr6: No summary available for libopenexr6 in ubuntu karmic.

No description available for libopenexr6 in ubuntu karmic.

openexr: No summary available for openexr in ubuntu karmic.

No description available for openexr in ubuntu karmic.