[CLSA-2026:1792631198] openexr: Fix of CVE-2026-55059
Type:
security
Severity:
Critical
Release date:
2026-10-22 01:06:47 UTC
Description:
- CVE-2026-55059: use dataWindow().min.y when mapping the row index in SampleCountChannel::set(int, unsigned int[]) and bounds-check the row and pixel setters to prevent a heap out-of-bounds write
CVEs fixed:
Updated packages:
  • openexr-3.1.1-3.el9_8.4.tuxcare.els4.aarch64.rpm
    sha:23f0e2da854190f8b5534f78ae0061c7cdd424e0856b8e975dd4f762811677e7
  • openexr-3.1.1-3.el9_8.4.tuxcare.els4.i686.rpm
    sha:bb213f68cb59e1446340ae4ef13fe3ac915a68a3dc501d5ef9f87270f1c8fde9
  • openexr-3.1.1-3.el9_8.4.tuxcare.els4.x86_64.rpm
    sha:c17bb876f2761665d3dd4f96ad0f1bb483b9c5973c1e70665b0211c8f2cc5706
  • openexr-devel-3.1.1-3.el9_8.4.tuxcare.els4.aarch64.rpm
    sha:b6147dd79602657bfd25d7f41a8eeb8e15923a259bd32d44a0532ef1677a30eb
  • openexr-devel-3.1.1-3.el9_8.4.tuxcare.els4.i686.rpm
    sha:80d0ea83022bfd415626fa7d3223af6de56552b99d24c43ef58cb9130d2f8754
  • openexr-devel-3.1.1-3.el9_8.4.tuxcare.els4.x86_64.rpm
    sha:93114632a5e59576f05d6f1aff4b08bb599e55aaab4dc066b1b79db8f670654a
  • openexr-libs-3.1.1-3.el9_8.4.tuxcare.els4.aarch64.rpm
    sha:c8b6ece45cd5b50914c95c7e80491c17e3e32fc2f03e00cf40e7877f1dcc411f
  • openexr-libs-3.1.1-3.el9_8.4.tuxcare.els4.i686.rpm
    sha:0f5d78be8d8328df3d9cc0d1142e4be334f8174f50f268b257a050585d84bf41
  • openexr-libs-3.1.1-3.el9_8.4.tuxcare.els4.x86_64.rpm
    sha:97fe991cb9167651e380c4424c5c89421b94ab9695418598c35df346bf6c9c20
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.