[ALSA-2026:86983] Important: openexr security update
Type:
security
Severity:
important
Release date:
2026-10-22
Description:
OpenEXR is an open-source high-dynamic-range floating-point image file format for high-quality image processing and storage. This document presents a brief overview of OpenEXR and explains concepts that are specific to this format. This package containes the binaries for OpenEXR. Security Fix(es): * openexr: OpenEXR: Memory corruption and Denial of Service via crafted EXR file processing (CVE-2026-34544) * openexr: OpenEXR: Denial of Service or Information Disclosure via crafted EXR image file (CVE-2026-59982) * openexr: OpenEXR: Out-of-bounds write vulnerability via crafted EXR files (CVE-2026-59184) * openexr: OpenEXR: Information disclosure and denial of service due to out-of-bounds read (CVE-2026-59189) * openexr: OpenEXR: Information disclosure and denial of service via out-of-bounds read (CVE-2026-59981) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Updated packages listed below:
Architecture Package Checksum
aarch64 openexr-devel-3.1.1-3.el9_8.5.aarch64.rpm 0f842b9b6ca2e811866e0e8d0b223edcad16fc4dc376ca57303e31e8f9d843a7
i686 openexr-devel-3.1.1-3.el9_8.5.i686.rpm 3c738f02f2062c87bf5418cfb28d71cd6096f9c48fdbec18831a960529e8cc46
ppc64le openexr-devel-3.1.1-3.el9_8.5.ppc64le.rpm 635640756ba6d7afbc56c06974b051a297dd3ece309e8114567e17efb7dc5e60
s390x openexr-devel-3.1.1-3.el9_8.5.s390x.rpm 20e1b4842e5ae5d60ac4bef563871b681224f919cb9638b4f423e08c6613f421
x86_64 openexr-devel-3.1.1-3.el9_8.5.x86_64.rpm d9a74a3be447883ef1030a98bb2592b212f9bba045d0036d2d46f1074825e526
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.