portage-ng / portage / media-libs / openimageio / 3.1.7.0-r1
portage-ng glsa
2 advisories reference media-libs/openimageio · none place version 3.1.7.0-r1 in a vulnerable range
▸ GLSA 202506-09 OpenImageIO: Multiple Vulnerabilities this version unaffected normal local and remote 2025-06-12

Multiple vulnerabilities have been discovered in OpenImageIO, the worst of which can lead to execution of arbitrary code.

Announced
2025-06-12
Revised
2025-06-12
Access
local and remote
Bugs
#903807 #917679
Advisory
https://security.gentoo.org/glsa/202506-09

Affected packages

PackageArchVulnerableUnaffected
media-libs/openimageio*< 2.5.4.0>= 2.5.4.0

Background

OpenImageIO is a library for reading and writing images.

Description

Multiple vulnerabilities have been discovered in OpenImageIO. Please review the CVE identifiers referenced below for details.

Impact

Please review the referenced CVE identifiers for details.

Workaround

There is no known workaround at this time.

Resolution

All OpenImageIO users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=media-libs/openimageio-2.5.4.0"

References

▸ GLSA 202305-33 OpenImageIO: Multiple Vulnerabilities this version unaffected normal remote 2023-05-30

Multiple vulnerabilities have been found in OpenImageIO, the worst of which could result in arbitrary code execution.

Announced
2023-05-30
Revised
2023-05-30
Access
remote
Bugs
#879255 #884085 #888045
Advisory
https://security.gentoo.org/glsa/202305-33

Affected packages

PackageArchVulnerableUnaffected
media-libs/openimageio*< 2.4.6.0>= 2.4.6.0

Background

OpenImageIO is a library for reading and writing images.

Description

Multiple vulnerabilities have been discovered in OpenImageIO. Please review the CVE identifiers referenced below for details.

Impact

Please review the referenced CVE identifiers for details.

Workaround

There is no known workaround at this time.

Resolution

All OpenImageIO users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=media-libs/openimageio-2.4.6.0"

References