advisories/24759.adv

type: security
subject: Updated openexr packages fix security vulnerabilities
CVE:
 - CVE-2018-18444
src:
  6:
   core:
     - openexr-2.2.0-10.1.mga6
description: |
  Updated openexr package fixes security vulnerabilities:

  It was discovered that makeMultiView.cpp in exrmultiview in OpenEXR
  2.3.0 has an out-of-bounds write, leading to an assertion failure or
  possibly unspecified other impact (CVE-2018-18444).
references:
 - https://bugs.mageia.org/show_bug.cgi?id=24759
 - https://lists.opensuse.org/opensuse-updates/2019-04/msg00178.html
1	type: security
2	subject: Updated openexr packages fix security vulnerabilities
3	CVE:
4	- CVE-2018-18444
5	src:
6	6:
7	core:
8	- openexr-2.2.0-10.1.mga6
9	description: \|
10	Updated openexr package fixes security vulnerabilities:
11
12	It was discovered that makeMultiView.cpp in exrmultiview in OpenEXR
13	2.3.0 has an out-of-bounds write, leading to an assertion failure or
14	possibly unspecified other impact (CVE-2018-18444).
15	references:
16	- https://bugs.mageia.org/show_bug.cgi?id=24759
17	- https://lists.opensuse.org/opensuse-updates/2019-04/msg00178.html