Slackware: 2017-274-01: openexr Security Update
Summary
Here are the details from the Slackware 14.2 ChangeLog: patches/packages/openexr-2.2.0-i586-2_slack14.2.txz: Rebuilt. Patched bugs that may lead to program crashes or possibly execution of arbitrary code. Thanks to Thomas Choi for the patch. For more information, see: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9110 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9111 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9112 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9113 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9114 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9115 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9116 (* Security fix *)
Where Find New Packages
Thanks to the friendly folks at the OSU Open Source Lab
(https://osuosl.org/) for donating FTP and rsync hosting
to the Slackware project! :-)
Also see the "Get Slack" section on http://www.slackware.com/ for
additional mirror sites near you.
Updated package for Slackware 14.2:
ftp://ftp.slackware.com/pub/slackware/slackware-14.2/patches/packages/openexr-2.2.0-i586-2_slack14.2.txz
Updated package for Slackware x86_64 14.2:
ftp://ftp.slackware.com/pub/slackware/slackware64-14.2/patches/packages/openexr-2.2.0-x86_64-2_slack14.2.txz
Updated package for Slackware -current:
Updated package for Slackware x86_64 -current:
MD5 Signatures
Slackware 14.2 package:
7f00592b5f0214f5091d87b355f26672 openexr-2.2.0-i586-2_slack14.2.txz
Slackware x86_64 14.2 package:
f6eb9dc47a20f9a15b982cd73f41d8df openexr-2.2.0-x86_64-2_slack14.2.txz
Slackware -current package:
6248c0bebbb1fe703a45bc8d3392924e l/openexr-2.2.0-i586-2.txz
Slackware x86_64 -current package:
a7fb169236df1ad9efdbcf0ee278d524 l/openexr-2.2.0-x86_64-2.txz
Installation Instructions
Installation instructions: Upgrade the package as root: # upgradepkg openexr-2.2.0-i586-2_slack14.2.txz