Skip to content
OpenAdvisories
High ELSA-2026-7682 1 CVE

Important: openexr security update (Oracle Linux 10)

Published Apr 13, 2026 · Updated Apr 13, 2026

Ecosystem: Oracle Linux

Summary

[3.1.10-8.1]
- fix CVE-2026-27622

Fixed packages 3

ReleasePackageFixed in
Oracle Linux · 10 openexr 0:3.1.10-8.el10_1.1
Oracle Linux · 10 openexr-devel 0:3.1.10-8.el10_1.1
Oracle Linux · 10 openexr-libs 0:3.1.10-8.el10_1.1

Vulnerabilities 1

  • High 8.4
    CVE-2026-27622

    OpenEXR CompositeDeepScanLine integer-overflow leads to heap OOB write

    OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. In CompositeDeepScanLine::readPixels, per-pixel totals are accumulated in vector<unsigned int> total_sizes for att…

    Academy Software Foundation openexr openexr openexr Debian Ubuntu PyPI