Skip to content
OpenAdvisories
High ELSA-2026-69608 1 CVE

Important: openexr security update (Oracle Linux 9)

Published Sep 22, 2026 · Updated Sep 22, 2026

Ecosystem: Oracle Linux

Summary

[3.1.1-3.4]
- fix CVE-2026-68515

Fixed packages 3

ReleasePackageFixed in
Oracle Linux · 9 openexr 0:3.1.1-3.el9_8.4
Oracle Linux · 9 openexr-devel 0:3.1.1-3.el9_8.4
Oracle Linux · 9 openexr-libs 0:3.1.1-3.el9_8.4

Vulnerabilities 1

  • High 7.1
    CVE-2026-68515

    OpenEXR: Heap out-of-bounds write in exrmultiview with subsampled channel union

    OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. In versions before 3.2.11, 3.3.0 through 3.3.12, and 3.4.0 through 3.4.13, exrmultiview can write past a heap allocation when it co…

    Academy Software Foundation openexr openexr openexr Debian Ubuntu Azure Linux