Skip to content
OpenAdvisories
High ELSA-2026-19359 1 CVE

Important: openexr security update (Oracle Linux 9)

Published Jun 23, 2026 · Updated Jun 23, 2026

Ecosystem: Oracle Linux

Summary

[3.1.1-3.2]
- fix CVE-2026-34588

Fixed packages 3

ReleasePackageFixed in
Oracle Linux · 9 openexr 0:3.1.1-3.el9_8.2
Oracle Linux · 9 openexr-devel 0:3.1.1-3.el9_8.2
Oracle Linux · 9 openexr-libs 0:3.1.1-3.el9_8.2

Vulnerabilities 1

  • High 8.6
    CVE-2026-34588

    OpenEXR has a signed 32-bit Overflow in PIZ Decoder Leads to OOB Read/Write

    OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. From 3.1.0 to before 3.2.7, 3.3.9, and 3.4.9, internal_exr_undo_piz() advances the working wavelet pointer with si…

    Academy Software Foundation openexr openexr openexr Debian Ubuntu Alpine PyPI