Security update for openexr SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2021:2793-1 Final 1 1 2021-08-20T08:23:54Z current 2021-08-20T08:23:54Z 2021-08-20T08:23:54Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for openexr This update for openexr fixes the following issues: - CVE-2021-20298 [bsc#1188460]: Fixed Out-of-memory in B44Compressor - CVE-2021-20299 [bsc#1188459]: Fixed Null-dereference READ in Imf_2_5:Header:operator - CVE-2021-20300 [bsc#1188458]: Fixed Integer-overflow in Imf_2_5:hufUncompress - CVE-2021-20302 [bsc#1188462]: Fixed Floating-point-exception in Imf_2_5:precalculateTileInfot - CVE-2021-20303 [bsc#1188457]: Fixed Heap-buffer-overflow in Imf_2_5::copyIntoFrameBuffer - CVE-2021-20304 [bsc#1188461]: Fixed Undefined-shift in Imf_2_5:hufDecode The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-2021-2793,SUSE-SLE-Module-Desktop-Applications-15-SP2-2021-2793,SUSE-SLE-Module-Desktop-Applications-15-SP3-2021-2793,SUSE-SLE-Product-HPC-15-2021-2793,SUSE-SLE-Product-HPC-15-SP1-ESPOS-2021-2793,SUSE-SLE-Product-HPC-15-SP1-LTSS-2021-2793,SUSE-SLE-Product-SLES-15-2021-2793,SUSE-SLE-Product-SLES-15-SP1-BCL-2021-2793,SUSE-SLE-Product-SLES-15-SP1-LTSS-2021-2793,SUSE-SLE-Product-SLES_SAP-15-2021-2793,SUSE-SLE-Product-SLES_SAP-15-SP1-2021-2793,SUSE-SLE-Product-SUSE-Manager-Proxy-4.0-2021-2793,SUSE-SLE-Product-SUSE-Manager-Retail-Branch-Server-4.0-2021-2793,SUSE-SLE-Product-SUSE-Manager-Server-4.0-2021-2793,SUSE-Storage-6-2021-2793 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2021/suse-su-20212793-1/ Link for SUSE-SU-2021:2793-1 https://lists.suse.com/pipermail/sle-security-updates/2021-August/009313.html E-Mail link for SUSE-SU-2021:2793-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1188457 SUSE Bug 1188457 https://bugzilla.suse.com/1188458 SUSE Bug 1188458 https://bugzilla.suse.com/1188459 SUSE Bug 1188459 https://bugzilla.suse.com/1188460 SUSE Bug 1188460 https://bugzilla.suse.com/1188461 SUSE Bug 1188461 https://bugzilla.suse.com/1188462 SUSE Bug 1188462 https://www.suse.com/security/cve/CVE-2021-20298/ SUSE CVE CVE-2021-20298 page https://www.suse.com/security/cve/CVE-2021-20299/ SUSE CVE CVE-2021-20299 page https://www.suse.com/security/cve/CVE-2021-20300/ SUSE CVE CVE-2021-20300 page https://www.suse.com/security/cve/CVE-2021-20302/ SUSE CVE CVE-2021-20302 page https://www.suse.com/security/cve/CVE-2021-20303/ SUSE CVE CVE-2021-20303 page https://www.suse.com/security/cve/CVE-2021-20304/ SUSE CVE CVE-2021-20304 page https://www.suse.com/security/cve/CVE-2021-3476/ SUSE CVE CVE-2021-3476 page SUSE Enterprise Storage 6 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS SUSE Linux Enterprise High Performance Computing 15-ESPOS SUSE Linux Enterprise High Performance Computing 15-LTSS SUSE Linux Enterprise Module for Desktop Applications 15 SP2 SUSE Linux Enterprise Module for Desktop Applications 15 SP3 SUSE Linux Enterprise Server 15 SP1-BCL SUSE Linux Enterprise Server 15 SP1-LTSS SUSE Linux Enterprise Server 15-LTSS SUSE Linux Enterprise Server for SAP Applications 15 SUSE Linux Enterprise Server for SAP Applications 15 SP1 SUSE Manager Proxy 4.0 SUSE Manager Retail Branch Server 4.0 SUSE Manager Server 4.0 libIlmImf-2_2-23-2.2.1-3.35.1 libIlmImf-2_2-23-32bit-2.2.1-3.35.1 libIlmImf-2_2-23-64bit-2.2.1-3.35.1 libIlmImfUtil-2_2-23-2.2.1-3.35.1 libIlmImfUtil-2_2-23-32bit-2.2.1-3.35.1 libIlmImfUtil-2_2-23-64bit-2.2.1-3.35.1 openexr-2.2.1-3.35.1 openexr-devel-2.2.1-3.35.1 openexr-doc-2.2.1-3.35.1 libIlmImf-2_2-23-2.2.1-3.35.1 as a component of SUSE Enterprise Storage 6 libIlmImfUtil-2_2-23-2.2.1-3.35.1 as a component of SUSE Enterprise Storage 6 openexr-devel-2.2.1-3.35.1 as a component of SUSE Enterprise Storage 6 libIlmImf-2_2-23-2.2.1-3.35.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS libIlmImfUtil-2_2-23-2.2.1-3.35.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS openexr-devel-2.2.1-3.35.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS libIlmImf-2_2-23-2.2.1-3.35.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS libIlmImfUtil-2_2-23-2.2.1-3.35.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS openexr-devel-2.2.1-3.35.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS libIlmImf-2_2-23-2.2.1-3.35.1 as a component of SUSE Linux Enterprise High Performance Computing 15-ESPOS libIlmImfUtil-2_2-23-2.2.1-3.35.1 as a component of SUSE Linux Enterprise High Performance Computing 15-ESPOS openexr-devel-2.2.1-3.35.1 as a component of SUSE Linux Enterprise High Performance Computing 15-ESPOS libIlmImf-2_2-23-2.2.1-3.35.1 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS libIlmImfUtil-2_2-23-2.2.1-3.35.1 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS openexr-devel-2.2.1-3.35.1 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS libIlmImf-2_2-23-2.2.1-3.35.1 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP2 libIlmImfUtil-2_2-23-2.2.1-3.35.1 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP2 openexr-devel-2.2.1-3.35.1 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP2 libIlmImf-2_2-23-2.2.1-3.35.1 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP3 libIlmImfUtil-2_2-23-2.2.1-3.35.1 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP3 openexr-devel-2.2.1-3.35.1 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP3 libIlmImf-2_2-23-2.2.1-3.35.1 as a component of SUSE Linux Enterprise Server 15 SP1-BCL libIlmImfUtil-2_2-23-2.2.1-3.35.1 as a component of SUSE Linux Enterprise Server 15 SP1-BCL openexr-devel-2.2.1-3.35.1 as a component of SUSE Linux Enterprise Server 15 SP1-BCL libIlmImf-2_2-23-2.2.1-3.35.1 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS libIlmImfUtil-2_2-23-2.2.1-3.35.1 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS openexr-devel-2.2.1-3.35.1 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS libIlmImf-2_2-23-2.2.1-3.35.1 as a component of SUSE Linux Enterprise Server 15-LTSS libIlmImfUtil-2_2-23-2.2.1-3.35.1 as a component of SUSE Linux Enterprise Server 15-LTSS openexr-devel-2.2.1-3.35.1 as a component of SUSE Linux Enterprise Server 15-LTSS libIlmImf-2_2-23-2.2.1-3.35.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 libIlmImfUtil-2_2-23-2.2.1-3.35.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 openexr-devel-2.2.1-3.35.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 libIlmImf-2_2-23-2.2.1-3.35.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 libIlmImfUtil-2_2-23-2.2.1-3.35.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 openexr-devel-2.2.1-3.35.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 libIlmImf-2_2-23-2.2.1-3.35.1 as a component of SUSE Manager Proxy 4.0 libIlmImfUtil-2_2-23-2.2.1-3.35.1 as a component of SUSE Manager Proxy 4.0 openexr-devel-2.2.1-3.35.1 as a component of SUSE Manager Proxy 4.0 libIlmImf-2_2-23-2.2.1-3.35.1 as a component of SUSE Manager Retail Branch Server 4.0 libIlmImfUtil-2_2-23-2.2.1-3.35.1 as a component of SUSE Manager Retail Branch Server 4.0 openexr-devel-2.2.1-3.35.1 as a component of SUSE Manager Retail Branch Server 4.0 libIlmImf-2_2-23-2.2.1-3.35.1 as a component of SUSE Manager Server 4.0 libIlmImfUtil-2_2-23-2.2.1-3.35.1 as a component of SUSE Manager Server 4.0 openexr-devel-2.2.1-3.35.1 as a component of SUSE Manager Server 4.0 A flaw was found in OpenEXR's B44Compressor. This flaw allows an attacker who can submit a crafted file to be processed by OpenEXR, to exhaust all memory accessible to the application. The highest threat from this vulnerability is to system availability. CVE-2021-20298 SUSE Enterprise Storage 6:libIlmImf-2_2-23-2.2.1-3.35.1 SUSE Enterprise Storage 6:libIlmImfUtil-2_2-23-2.2.1-3.35.1 SUSE Enterprise Storage 6:openexr-devel-2.2.1-3.35.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libIlmImf-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libIlmImfUtil-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:openexr-devel-2.2.1-3.35.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libIlmImf-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libIlmImfUtil-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:openexr-devel-2.2.1-3.35.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:libIlmImf-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:libIlmImfUtil-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:openexr-devel-2.2.1-3.35.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:libIlmImf-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:libIlmImfUtil-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:openexr-devel-2.2.1-3.35.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libIlmImf-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libIlmImfUtil-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP2:openexr-devel-2.2.1-3.35.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP3:libIlmImf-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP3:libIlmImfUtil-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP3:openexr-devel-2.2.1-3.35.1 SUSE Linux Enterprise Server 15 SP1-BCL:libIlmImf-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise Server 15 SP1-BCL:libIlmImfUtil-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise Server 15 SP1-BCL:openexr-devel-2.2.1-3.35.1 SUSE Linux Enterprise Server 15 SP1-LTSS:libIlmImf-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise Server 15 SP1-LTSS:libIlmImfUtil-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise Server 15 SP1-LTSS:openexr-devel-2.2.1-3.35.1 SUSE Linux Enterprise Server 15-LTSS:libIlmImf-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise Server 15-LTSS:libIlmImfUtil-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise Server 15-LTSS:openexr-devel-2.2.1-3.35.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:libIlmImf-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:libIlmImfUtil-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:openexr-devel-2.2.1-3.35.1 SUSE Linux Enterprise Server for SAP Applications 15:libIlmImf-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise Server for SAP Applications 15:libIlmImfUtil-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise Server for SAP Applications 15:openexr-devel-2.2.1-3.35.1 SUSE Manager Proxy 4.0:libIlmImf-2_2-23-2.2.1-3.35.1 SUSE Manager Proxy 4.0:libIlmImfUtil-2_2-23-2.2.1-3.35.1 SUSE Manager Proxy 4.0:openexr-devel-2.2.1-3.35.1 SUSE Manager Retail Branch Server 4.0:libIlmImf-2_2-23-2.2.1-3.35.1 SUSE Manager Retail Branch Server 4.0:libIlmImfUtil-2_2-23-2.2.1-3.35.1 SUSE Manager Retail Branch Server 4.0:openexr-devel-2.2.1-3.35.1 SUSE Manager Server 4.0:libIlmImf-2_2-23-2.2.1-3.35.1 SUSE Manager Server 4.0:libIlmImfUtil-2_2-23-2.2.1-3.35.1 SUSE Manager Server 4.0:openexr-devel-2.2.1-3.35.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-20212793-1/ https://www.suse.com/security/cve/CVE-2021-20298.html CVE-2021-20298 https://bugzilla.suse.com/1188460 SUSE Bug 1188460 https://bugzilla.suse.com/1191176 SUSE Bug 1191176 A flaw was found in OpenEXR's Multipart input file functionality. A crafted multi-part input file with no actual parts can trigger a NULL pointer dereference. The highest threat from this vulnerability is to system availability. CVE-2021-20299 SUSE Enterprise Storage 6:libIlmImf-2_2-23-2.2.1-3.35.1 SUSE Enterprise Storage 6:libIlmImfUtil-2_2-23-2.2.1-3.35.1 SUSE Enterprise Storage 6:openexr-devel-2.2.1-3.35.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libIlmImf-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libIlmImfUtil-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:openexr-devel-2.2.1-3.35.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libIlmImf-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libIlmImfUtil-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:openexr-devel-2.2.1-3.35.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:libIlmImf-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:libIlmImfUtil-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:openexr-devel-2.2.1-3.35.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:libIlmImf-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:libIlmImfUtil-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:openexr-devel-2.2.1-3.35.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libIlmImf-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libIlmImfUtil-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP2:openexr-devel-2.2.1-3.35.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP3:libIlmImf-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP3:libIlmImfUtil-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP3:openexr-devel-2.2.1-3.35.1 SUSE Linux Enterprise Server 15 SP1-BCL:libIlmImf-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise Server 15 SP1-BCL:libIlmImfUtil-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise Server 15 SP1-BCL:openexr-devel-2.2.1-3.35.1 SUSE Linux Enterprise Server 15 SP1-LTSS:libIlmImf-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise Server 15 SP1-LTSS:libIlmImfUtil-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise Server 15 SP1-LTSS:openexr-devel-2.2.1-3.35.1 SUSE Linux Enterprise Server 15-LTSS:libIlmImf-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise Server 15-LTSS:libIlmImfUtil-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise Server 15-LTSS:openexr-devel-2.2.1-3.35.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:libIlmImf-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:libIlmImfUtil-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:openexr-devel-2.2.1-3.35.1 SUSE Linux Enterprise Server for SAP Applications 15:libIlmImf-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise Server for SAP Applications 15:libIlmImfUtil-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise Server for SAP Applications 15:openexr-devel-2.2.1-3.35.1 SUSE Manager Proxy 4.0:libIlmImf-2_2-23-2.2.1-3.35.1 SUSE Manager Proxy 4.0:libIlmImfUtil-2_2-23-2.2.1-3.35.1 SUSE Manager Proxy 4.0:openexr-devel-2.2.1-3.35.1 SUSE Manager Retail Branch Server 4.0:libIlmImf-2_2-23-2.2.1-3.35.1 SUSE Manager Retail Branch Server 4.0:libIlmImfUtil-2_2-23-2.2.1-3.35.1 SUSE Manager Retail Branch Server 4.0:openexr-devel-2.2.1-3.35.1 SUSE Manager Server 4.0:libIlmImf-2_2-23-2.2.1-3.35.1 SUSE Manager Server 4.0:libIlmImfUtil-2_2-23-2.2.1-3.35.1 SUSE Manager Server 4.0:openexr-devel-2.2.1-3.35.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-20212793-1/ https://www.suse.com/security/cve/CVE-2021-20299.html CVE-2021-20299 https://bugzilla.suse.com/1188459 SUSE Bug 1188459 https://bugzilla.suse.com/1191176 SUSE Bug 1191176 A flaw was found in OpenEXR's hufUncompress functionality in OpenEXR/IlmImf/ImfHuf.cpp. This flaw allows an attacker who can submit a crafted file that is processed by OpenEXR, to trigger an integer overflow. The highest threat from this vulnerability is to system availability. CVE-2021-20300 SUSE Enterprise Storage 6:libIlmImf-2_2-23-2.2.1-3.35.1 SUSE Enterprise Storage 6:libIlmImfUtil-2_2-23-2.2.1-3.35.1 SUSE Enterprise Storage 6:openexr-devel-2.2.1-3.35.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libIlmImf-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libIlmImfUtil-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:openexr-devel-2.2.1-3.35.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libIlmImf-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libIlmImfUtil-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:openexr-devel-2.2.1-3.35.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:libIlmImf-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:libIlmImfUtil-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:openexr-devel-2.2.1-3.35.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:libIlmImf-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:libIlmImfUtil-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:openexr-devel-2.2.1-3.35.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libIlmImf-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libIlmImfUtil-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP2:openexr-devel-2.2.1-3.35.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP3:libIlmImf-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP3:libIlmImfUtil-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP3:openexr-devel-2.2.1-3.35.1 SUSE Linux Enterprise Server 15 SP1-BCL:libIlmImf-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise Server 15 SP1-BCL:libIlmImfUtil-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise Server 15 SP1-BCL:openexr-devel-2.2.1-3.35.1 SUSE Linux Enterprise Server 15 SP1-LTSS:libIlmImf-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise Server 15 SP1-LTSS:libIlmImfUtil-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise Server 15 SP1-LTSS:openexr-devel-2.2.1-3.35.1 SUSE Linux Enterprise Server 15-LTSS:libIlmImf-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise Server 15-LTSS:libIlmImfUtil-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise Server 15-LTSS:openexr-devel-2.2.1-3.35.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:libIlmImf-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:libIlmImfUtil-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:openexr-devel-2.2.1-3.35.1 SUSE Linux Enterprise Server for SAP Applications 15:libIlmImf-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise Server for SAP Applications 15:libIlmImfUtil-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise Server for SAP Applications 15:openexr-devel-2.2.1-3.35.1 SUSE Manager Proxy 4.0:libIlmImf-2_2-23-2.2.1-3.35.1 SUSE Manager Proxy 4.0:libIlmImfUtil-2_2-23-2.2.1-3.35.1 SUSE Manager Proxy 4.0:openexr-devel-2.2.1-3.35.1 SUSE Manager Retail Branch Server 4.0:libIlmImf-2_2-23-2.2.1-3.35.1 SUSE Manager Retail Branch Server 4.0:libIlmImfUtil-2_2-23-2.2.1-3.35.1 SUSE Manager Retail Branch Server 4.0:openexr-devel-2.2.1-3.35.1 SUSE Manager Server 4.0:libIlmImf-2_2-23-2.2.1-3.35.1 SUSE Manager Server 4.0:libIlmImfUtil-2_2-23-2.2.1-3.35.1 SUSE Manager Server 4.0:openexr-devel-2.2.1-3.35.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-20212793-1/ https://www.suse.com/security/cve/CVE-2021-20300.html CVE-2021-20300 https://bugzilla.suse.com/1188458 SUSE Bug 1188458 https://bugzilla.suse.com/1191176 SUSE Bug 1191176 A flaw was found in OpenEXR's TiledInputFile functionality. This flaw allows an attacker who can submit a crafted single-part non-image to be processed by OpenEXR, to trigger a floating-point exception error. The highest threat from this vulnerability is to system availability. CVE-2021-20302 SUSE Enterprise Storage 6:libIlmImf-2_2-23-2.2.1-3.35.1 SUSE Enterprise Storage 6:libIlmImfUtil-2_2-23-2.2.1-3.35.1 SUSE Enterprise Storage 6:openexr-devel-2.2.1-3.35.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libIlmImf-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libIlmImfUtil-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:openexr-devel-2.2.1-3.35.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libIlmImf-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libIlmImfUtil-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:openexr-devel-2.2.1-3.35.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:libIlmImf-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:libIlmImfUtil-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:openexr-devel-2.2.1-3.35.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:libIlmImf-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:libIlmImfUtil-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:openexr-devel-2.2.1-3.35.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libIlmImf-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libIlmImfUtil-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP2:openexr-devel-2.2.1-3.35.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP3:libIlmImf-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP3:libIlmImfUtil-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP3:openexr-devel-2.2.1-3.35.1 SUSE Linux Enterprise Server 15 SP1-BCL:libIlmImf-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise Server 15 SP1-BCL:libIlmImfUtil-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise Server 15 SP1-BCL:openexr-devel-2.2.1-3.35.1 SUSE Linux Enterprise Server 15 SP1-LTSS:libIlmImf-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise Server 15 SP1-LTSS:libIlmImfUtil-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise Server 15 SP1-LTSS:openexr-devel-2.2.1-3.35.1 SUSE Linux Enterprise Server 15-LTSS:libIlmImf-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise Server 15-LTSS:libIlmImfUtil-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise Server 15-LTSS:openexr-devel-2.2.1-3.35.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:libIlmImf-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:libIlmImfUtil-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:openexr-devel-2.2.1-3.35.1 SUSE Linux Enterprise Server for SAP Applications 15:libIlmImf-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise Server for SAP Applications 15:libIlmImfUtil-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise Server for SAP Applications 15:openexr-devel-2.2.1-3.35.1 SUSE Manager Proxy 4.0:libIlmImf-2_2-23-2.2.1-3.35.1 SUSE Manager Proxy 4.0:libIlmImfUtil-2_2-23-2.2.1-3.35.1 SUSE Manager Proxy 4.0:openexr-devel-2.2.1-3.35.1 SUSE Manager Retail Branch Server 4.0:libIlmImf-2_2-23-2.2.1-3.35.1 SUSE Manager Retail Branch Server 4.0:libIlmImfUtil-2_2-23-2.2.1-3.35.1 SUSE Manager Retail Branch Server 4.0:openexr-devel-2.2.1-3.35.1 SUSE Manager Server 4.0:libIlmImf-2_2-23-2.2.1-3.35.1 SUSE Manager Server 4.0:libIlmImfUtil-2_2-23-2.2.1-3.35.1 SUSE Manager Server 4.0:openexr-devel-2.2.1-3.35.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-20212793-1/ https://www.suse.com/security/cve/CVE-2021-20302.html CVE-2021-20302 https://bugzilla.suse.com/1188462 SUSE Bug 1188462 https://bugzilla.suse.com/1191176 SUSE Bug 1191176 A flaw found in function dataWindowForTile() of IlmImf/ImfTiledMisc.cpp. An attacker who is able to submit a crafted file to be processed by OpenEXR could trigger an integer overflow, leading to an out-of-bounds write on the heap. The greatest impact of this flaw is to application availability, with some potential impact to data integrity as well. CVE-2021-20303 SUSE Enterprise Storage 6:libIlmImf-2_2-23-2.2.1-3.35.1 SUSE Enterprise Storage 6:libIlmImfUtil-2_2-23-2.2.1-3.35.1 SUSE Enterprise Storage 6:openexr-devel-2.2.1-3.35.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libIlmImf-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libIlmImfUtil-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:openexr-devel-2.2.1-3.35.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libIlmImf-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libIlmImfUtil-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:openexr-devel-2.2.1-3.35.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:libIlmImf-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:libIlmImfUtil-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:openexr-devel-2.2.1-3.35.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:libIlmImf-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:libIlmImfUtil-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:openexr-devel-2.2.1-3.35.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libIlmImf-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libIlmImfUtil-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP2:openexr-devel-2.2.1-3.35.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP3:libIlmImf-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP3:libIlmImfUtil-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP3:openexr-devel-2.2.1-3.35.1 SUSE Linux Enterprise Server 15 SP1-BCL:libIlmImf-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise Server 15 SP1-BCL:libIlmImfUtil-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise Server 15 SP1-BCL:openexr-devel-2.2.1-3.35.1 SUSE Linux Enterprise Server 15 SP1-LTSS:libIlmImf-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise Server 15 SP1-LTSS:libIlmImfUtil-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise Server 15 SP1-LTSS:openexr-devel-2.2.1-3.35.1 SUSE Linux Enterprise Server 15-LTSS:libIlmImf-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise Server 15-LTSS:libIlmImfUtil-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise Server 15-LTSS:openexr-devel-2.2.1-3.35.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:libIlmImf-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:libIlmImfUtil-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:openexr-devel-2.2.1-3.35.1 SUSE Linux Enterprise Server for SAP Applications 15:libIlmImf-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise Server for SAP Applications 15:libIlmImfUtil-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise Server for SAP Applications 15:openexr-devel-2.2.1-3.35.1 SUSE Manager Proxy 4.0:libIlmImf-2_2-23-2.2.1-3.35.1 SUSE Manager Proxy 4.0:libIlmImfUtil-2_2-23-2.2.1-3.35.1 SUSE Manager Proxy 4.0:openexr-devel-2.2.1-3.35.1 SUSE Manager Retail Branch Server 4.0:libIlmImf-2_2-23-2.2.1-3.35.1 SUSE Manager Retail Branch Server 4.0:libIlmImfUtil-2_2-23-2.2.1-3.35.1 SUSE Manager Retail Branch Server 4.0:openexr-devel-2.2.1-3.35.1 SUSE Manager Server 4.0:libIlmImf-2_2-23-2.2.1-3.35.1 SUSE Manager Server 4.0:libIlmImfUtil-2_2-23-2.2.1-3.35.1 SUSE Manager Server 4.0:openexr-devel-2.2.1-3.35.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-20212793-1/ https://www.suse.com/security/cve/CVE-2021-20303.html CVE-2021-20303 https://bugzilla.suse.com/1188457 SUSE Bug 1188457 https://bugzilla.suse.com/1191176 SUSE Bug 1191176 A flaw was found in OpenEXR's hufDecode functionality. This flaw allows an attacker who can pass a crafted file to be processed by OpenEXR, to trigger an undefined right shift error. The highest threat from this vulnerability is to system availability. CVE-2021-20304 SUSE Enterprise Storage 6:libIlmImf-2_2-23-2.2.1-3.35.1 SUSE Enterprise Storage 6:libIlmImfUtil-2_2-23-2.2.1-3.35.1 SUSE Enterprise Storage 6:openexr-devel-2.2.1-3.35.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libIlmImf-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libIlmImfUtil-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:openexr-devel-2.2.1-3.35.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libIlmImf-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libIlmImfUtil-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:openexr-devel-2.2.1-3.35.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:libIlmImf-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:libIlmImfUtil-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:openexr-devel-2.2.1-3.35.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:libIlmImf-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:libIlmImfUtil-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:openexr-devel-2.2.1-3.35.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libIlmImf-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libIlmImfUtil-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP2:openexr-devel-2.2.1-3.35.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP3:libIlmImf-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP3:libIlmImfUtil-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP3:openexr-devel-2.2.1-3.35.1 SUSE Linux Enterprise Server 15 SP1-BCL:libIlmImf-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise Server 15 SP1-BCL:libIlmImfUtil-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise Server 15 SP1-BCL:openexr-devel-2.2.1-3.35.1 SUSE Linux Enterprise Server 15 SP1-LTSS:libIlmImf-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise Server 15 SP1-LTSS:libIlmImfUtil-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise Server 15 SP1-LTSS:openexr-devel-2.2.1-3.35.1 SUSE Linux Enterprise Server 15-LTSS:libIlmImf-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise Server 15-LTSS:libIlmImfUtil-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise Server 15-LTSS:openexr-devel-2.2.1-3.35.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:libIlmImf-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:libIlmImfUtil-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:openexr-devel-2.2.1-3.35.1 SUSE Linux Enterprise Server for SAP Applications 15:libIlmImf-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise Server for SAP Applications 15:libIlmImfUtil-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise Server for SAP Applications 15:openexr-devel-2.2.1-3.35.1 SUSE Manager Proxy 4.0:libIlmImf-2_2-23-2.2.1-3.35.1 SUSE Manager Proxy 4.0:libIlmImfUtil-2_2-23-2.2.1-3.35.1 SUSE Manager Proxy 4.0:openexr-devel-2.2.1-3.35.1 SUSE Manager Retail Branch Server 4.0:libIlmImf-2_2-23-2.2.1-3.35.1 SUSE Manager Retail Branch Server 4.0:libIlmImfUtil-2_2-23-2.2.1-3.35.1 SUSE Manager Retail Branch Server 4.0:openexr-devel-2.2.1-3.35.1 SUSE Manager Server 4.0:libIlmImf-2_2-23-2.2.1-3.35.1 SUSE Manager Server 4.0:libIlmImfUtil-2_2-23-2.2.1-3.35.1 SUSE Manager Server 4.0:openexr-devel-2.2.1-3.35.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-20212793-1/ https://www.suse.com/security/cve/CVE-2021-20304.html CVE-2021-20304 https://bugzilla.suse.com/1188461 SUSE Bug 1188461 https://bugzilla.suse.com/1191176 SUSE Bug 1191176 A flaw was found in OpenEXR's B44 uncompression functionality in versions before 3.0.0-beta. An attacker who is able to submit a crafted file to OpenEXR could trigger shift overflows, potentially affecting application availability. CVE-2021-3476 SUSE Enterprise Storage 6:libIlmImf-2_2-23-2.2.1-3.35.1 SUSE Enterprise Storage 6:libIlmImfUtil-2_2-23-2.2.1-3.35.1 SUSE Enterprise Storage 6:openexr-devel-2.2.1-3.35.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libIlmImf-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libIlmImfUtil-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:openexr-devel-2.2.1-3.35.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libIlmImf-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libIlmImfUtil-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:openexr-devel-2.2.1-3.35.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:libIlmImf-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:libIlmImfUtil-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:openexr-devel-2.2.1-3.35.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:libIlmImf-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:libIlmImfUtil-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:openexr-devel-2.2.1-3.35.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libIlmImf-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP2:libIlmImfUtil-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP2:openexr-devel-2.2.1-3.35.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP3:libIlmImf-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP3:libIlmImfUtil-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP3:openexr-devel-2.2.1-3.35.1 SUSE Linux Enterprise Server 15 SP1-BCL:libIlmImf-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise Server 15 SP1-BCL:libIlmImfUtil-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise Server 15 SP1-BCL:openexr-devel-2.2.1-3.35.1 SUSE Linux Enterprise Server 15 SP1-LTSS:libIlmImf-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise Server 15 SP1-LTSS:libIlmImfUtil-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise Server 15 SP1-LTSS:openexr-devel-2.2.1-3.35.1 SUSE Linux Enterprise Server 15-LTSS:libIlmImf-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise Server 15-LTSS:libIlmImfUtil-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise Server 15-LTSS:openexr-devel-2.2.1-3.35.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:libIlmImf-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:libIlmImfUtil-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise Server for SAP Applications 15 SP1:openexr-devel-2.2.1-3.35.1 SUSE Linux Enterprise Server for SAP Applications 15:libIlmImf-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise Server for SAP Applications 15:libIlmImfUtil-2_2-23-2.2.1-3.35.1 SUSE Linux Enterprise Server for SAP Applications 15:openexr-devel-2.2.1-3.35.1 SUSE Manager Proxy 4.0:libIlmImf-2_2-23-2.2.1-3.35.1 SUSE Manager Proxy 4.0:libIlmImfUtil-2_2-23-2.2.1-3.35.1 SUSE Manager Proxy 4.0:openexr-devel-2.2.1-3.35.1 SUSE Manager Retail Branch Server 4.0:libIlmImf-2_2-23-2.2.1-3.35.1 SUSE Manager Retail Branch Server 4.0:libIlmImfUtil-2_2-23-2.2.1-3.35.1 SUSE Manager Retail Branch Server 4.0:openexr-devel-2.2.1-3.35.1 SUSE Manager Server 4.0:libIlmImf-2_2-23-2.2.1-3.35.1 SUSE Manager Server 4.0:libIlmImfUtil-2_2-23-2.2.1-3.35.1 SUSE Manager Server 4.0:openexr-devel-2.2.1-3.35.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-20212793-1/ https://www.suse.com/security/cve/CVE-2021-3476.html CVE-2021-3476 https://bugzilla.suse.com/1184172 SUSE Bug 1184172