Skip to content
OpenAdvisories
High RHSA-2026:69608 1 CVE

Red Hat Security Advisory: openexr security update

Published Sep 22, 2026 · Updated Oct 14, 2026

Ecosystem: Red Hat

Fixed packages 9

ReleasePackageFixed in
Red Hat · RHEL 9 enterprise_linux:9::appstream openexr 0:3.1.1-3.el9_8.4
Red Hat · RHEL 9 enterprise_linux:9::appstream openexr-debuginfo 0:3.1.1-3.el9_8.4
Red Hat · RHEL 9 enterprise_linux:9::appstream openexr-debugsource 0:3.1.1-3.el9_8.4
Red Hat · RHEL 9 enterprise_linux:9::appstream openexr-libs 0:3.1.1-3.el9_8.4
Red Hat · RHEL 9 enterprise_linux:9::appstream openexr-libs-debuginfo 0:3.1.1-3.el9_8.4
Red Hat · RHEL 9 enterprise_linux:9::crb openexr-debuginfo 0:3.1.1-3.el9_8.4
Red Hat · RHEL 9 enterprise_linux:9::crb openexr-debugsource 0:3.1.1-3.el9_8.4
Red Hat · RHEL 9 enterprise_linux:9::crb openexr-devel 0:3.1.1-3.el9_8.4
Red Hat · RHEL 9 enterprise_linux:9::crb openexr-libs-debuginfo 0:3.1.1-3.el9_8.4

Vulnerabilities 1

  • High 7.1
    CVE-2026-68515

    OpenEXR: Heap out-of-bounds write in exrmultiview with subsampled channel union

    OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. In versions before 3.2.11, 3.3.0 through 3.3.12, and 3.4.0 through 3.4.13, exrmultiview can write past a heap allocation when it co…

    Academy Software Foundation openexr openexr openexr Debian Ubuntu Azure Linux

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2523747
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_69608.json
  • report
    https://access.redhat.com/security/cve/CVE-2026-68515
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-68515
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-68515
  • article
    https://github.com/AcademySoftwareFoundation/openexr/commit/77ee19c021398b1c56f32c3af8347e365dbd4f33
  • article
    https://github.com/AcademySoftwareFoundation/openexr/commit/c644ac2dfeac82939c81a8551d6f4b7859f63add
  • article
    https://github.com/AcademySoftwareFoundation/openexr/commit/e2300a3d54a93d20a36a86b82f3a506c4c91476f
  • article
    https://github.com/AcademySoftwareFoundation/openexr/security/advisories/GHSA-gjf7-wjjw-xq56