[SECURITY] Fedora 36 Update: OpenImageIO-2.3.21.0-1.fc36

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2022-e63bc3eca2 2022-12-31 01:16:00.044425 -------------------------------------------------------------------------------- Name : OpenImageIO Product : Fedora 36 Version : 2.3.21.0 Release : 1.fc36 URL : https://sites.google.com/site/openimageio/home Summary : Library for reading and writing images Description : OpenImageIO is a library for reading and writing images, and a bunch of related classes, utilities, and applications. Main features include: - Extremely simple but powerful ImageInput and ImageOutput APIs for reading and writing 2D images that is format agnostic. - Format plugins for TIFF, JPEG/JFIF, OpenEXR, PNG, HDR/RGBE, Targa, JPEG-2000, DPX, Cineon, FITS, BMP, ICO, RMan Zfile, Softimage PIC, DDS, SGI, PNM/PPM/PGM/PBM. - An ImageCache class that transparently manages a cache so that it can access truly vast amounts of image data. -------------------------------------------------------------------------------- Update Information: * Update to 2.3.21.0. * Security fix for CVE-2022-36354 CVE-2022-38143 CVE-2022-41639 CVE-2022-41684 CVE-2022-41794 CVE-2022-41838 CVE-2022-41977 CVE-2022-4198 CVE-2022-41988 CVE-2022-4199. -------------------------------------------------------------------------------- ChangeLog: * Thu Dec 22 2022 Richard Shaw <hobbes1069(a)gmail.com&gt; - 2.3.21.0-1 - Update to 2.3.21.0. -------------------------------------------------------------------------------- References: [ 1 ] Bug #2139800 - CVE-2022-36354 CVE-2022-38143 CVE-2022-41639 CVE-2022-41684 CVE-2022-41794 CVE-2022-41838 CVE-2022-41977 CVE-2022-4198 CVE-2022-41988 CVE-2022-41999 OpenImageIO: Multiple Vulnerabilities [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2139800 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2022-e63bc3eca2' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------