Skip to content
OpenAdvisories
High ELSA-2026-19146 1 CVE

Important: openexr security update (Oracle Linux 10)

Published Jul 21, 2026 · Updated Jul 21, 2026

Ecosystem: Oracle Linux

Summary

[3.1.10-8.3]
- fix CVE-2026-41142
- fix CVE-2026-42216

[3.1.10-8.2]
- fix CVE-2026-34588

Fixed packages 3

ReleasePackageFixed in
Oracle Linux · 10 openexr 0:3.1.10-8.el10_2.3
Oracle Linux · 10 openexr-devel 0:3.1.10-8.el10_2.3
Oracle Linux · 10 openexr-libs 0:3.1.10-8.el10_2.3

Vulnerabilities 1

  • High 8.6
    CVE-2026-34588

    OpenEXR has a signed 32-bit Overflow in PIZ Decoder Leads to OOB Read/Write

    OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. From 3.1.0 to before 3.2.7, 3.3.9, and 3.4.9, internal_exr_undo_piz() advances the working wavelet pointer with si…

    Academy Software Foundation openexr openexr openexr Debian Ubuntu Alpine PyPI