Update Info

SUSE-PackageHub-16.0-617


Security update for openexr


Type: security
Severity: important
Issued: 2026-04-22
Description:
This update for openexr fixes the following issues:

- CVE-2026-34379: misaligned memory write during file decoding can cause a denial of service (bsc#1261621).
- CVE-2026-34380: lack of proper check can lead to integer overflow in image decoding (bsc#1261622).
- CVE-2026-34588: crafted EXR file can lead to out of bound read and write (bsc#1261624).
- CVE-2026-34589: crafted scanline DWAA file can lead to arbitrary code execution or denial of service (bsc#1261634).


              

Packages


  • openexr-3.2.2-160000.6.1