Skip to content
OpenAdvisories
High ELSA-2026-8863 1 CVE

Important: OpenEXR security update (Oracle Linux 8)

Published Apr 20, 2026 · Updated Apr 20, 2026

Ecosystem: Oracle Linux

Summary

[2.2.0-12.1]
- fix CVE-2026-27622

Fixed packages 2

ReleasePackageFixed in
Oracle Linux · 8 OpenEXR-devel 0:2.2.0-12.el8_10.1
Oracle Linux · 8 OpenEXR-libs 0:2.2.0-12.el8_10.1

Vulnerabilities 1

  • High 8.4
    CVE-2026-27622

    OpenEXR CompositeDeepScanLine integer-overflow leads to heap OOB write

    OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. In CompositeDeepScanLine::readPixels, per-pixel totals are accumulated in vector<unsigned int> total_sizes for att…

    Academy Software Foundation openexr openexr openexr Debian Ubuntu PyPI