Security update for openexr (important)

An update that fixes 7 vulnerabilities is now available.

Description:

This update for openexr fixes the following issues:

• CVE-2021-20298 [bsc#1188460]: Fixed Out-of-memory in B44Compressor
• CVE-2021-20299 [bsc#1188459]: Fixed Null-dereference READ in
  Imf_2_5:Header:operator
• CVE-2021-20300 [bsc#1188458]: Fixed Integer-overflow in
  Imf_2_5:hufUncompress
• CVE-2021-20302 [bsc#1188462]: Fixed Floating-point-exception in
  Imf_2_5:precalculateTileInfot
• CVE-2021-20303 [bsc#1188457]: Fixed Heap-buffer-overflow in
  Imf_2_5::copyIntoFrameBuffer
• CVE-2021-20304 [bsc#1188461]: Fixed Undefined-shift in Imf_2_5:hufDecode

Patch Instructions:

To install this openSUSE Security Update use the SUSE recommended installation methods
like YaST online_update or “zypper patch”.

Alternatively you can run the command listed for your product:

• openSUSE Leap 15.3:

  zypper in -t patch openSUSE-SLE-15.3-2021-2793=1