Fixed packages 6
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · RHEL 10 enterprise_linux:10.2 | openexr | 0:3.1.10-8.el10_2.4 |
| Red Hat · RHEL 10 enterprise_linux:10.2 | openexr-debuginfo | 0:3.1.10-8.el10_2.4 |
| Red Hat · RHEL 10 enterprise_linux:10.2 | openexr-debugsource | 0:3.1.10-8.el10_2.4 |
| Red Hat · RHEL 10 enterprise_linux:10.2 | openexr-devel | 0:3.1.10-8.el10_2.4 |
| Red Hat · RHEL 10 enterprise_linux:10.2 | openexr-libs | 0:3.1.10-8.el10_2.4 |
| Red Hat · RHEL 10 enterprise_linux:10.2 | openexr-libs-debuginfo | 0:3.1.10-8.el10_2.4 |
Vulnerabilities 1
-
High 7.1
OpenEXR: Heap out-of-bounds write in exrmultiview with subsampled channel union
OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. In versions before 3.2.11, 3.3.0 through 3.3.12, and 3.4.0 through 3.4.13, exrmultiview can write past a heap allocation when it co…
References
-
article
https://access.redhat.com/security/updates/classification/#important
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2523747
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_69609.json
-
report
https://access.redhat.com/security/cve/CVE-2026-68515
-
advisory
https://www.cve.org/CVERecord?id=CVE-2026-68515
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-68515
-
article
https://github.com/AcademySoftwareFoundation/openexr/commit/77ee19c021398b1c56f32c3af8347e365dbd4f33
-
article
https://github.com/AcademySoftwareFoundation/openexr/commit/c644ac2dfeac82939c81a8551d6f4b7859f63add
-
article
https://github.com/AcademySoftwareFoundation/openexr/commit/e2300a3d54a93d20a36a86b82f3a506c4c91476f
-
article
https://github.com/AcademySoftwareFoundation/openexr/security/advisories/GHSA-gjf7-wjjw-xq56