Skip to content
OpenAdvisories
High ELSA-2026-8888 1 CVE

Important: openexr security update (Oracle Linux 9)

Published Apr 20, 2026 · Updated Apr 20, 2026

Ecosystem: Oracle Linux

Summary

[3.1.1-3.1]
- fix CVE-2026-27622

Fixed packages 3

ReleasePackageFixed in
Oracle Linux · 9 openexr 0:3.1.1-3.el9_7.1
Oracle Linux · 9 openexr-devel 0:3.1.1-3.el9_7.1
Oracle Linux · 9 openexr-libs 0:3.1.1-3.el9_7.1

Vulnerabilities 1

  • High 8.4
    CVE-2026-27622

    OpenEXR CompositeDeepScanLine integer-overflow leads to heap OOB write

    OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. In CompositeDeepScanLine::readPixels, per-pixel totals are accumulated in vector<unsigned int> total_sizes for att…

    Academy Software Foundation openexr openexr openexr Debian Ubuntu PyPI