FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

OpenEXR/ilmbase 2.5.2 -- patch release with various bug/security fixes

Affected packages
	ilmbase	<	2.5.2
	openexr	<	2.5.2

Details

VuXML ID	714e6c35-c75b-11ea-aa29-d74973d1f9f3
Discovery	2020-05-18
Entry	2020-07-16

Cary Phillips reports:

openexr 2.5.2 [is a p]atch release with various bug/security and build/install fixes:

Invalid input could cause a heap-use-after-free error in DeepScanLineInputFile::DeepScanLineInputFile()

Invalid chunkCount attributes could cause heap buffer overflow in getChunkOffsetTableSize()

Invalid tiled input file could cause invalid memory access TiledInputFile::TiledInputFile()

[source]

References

URL	https://github.com/AcademySoftwareFoundation/openexr/releases/tag/v2.5.2