[CLSA-2026:1790780350] openexr: Fix of CVE-2026-68515
Type:
security
Severity:
Important
Release date:
2026-09-30 14:59:22 UTC
Description:
- CVE-2026-68515: reject input channels whose xSampling or ySampling is not 1 in makeMultiView(), so exrmultiview no longer allocates sampled channel storage from a truncated union width and then writes past it when the combined dataWindow is misaligned with a view's subsampling
CVEs fixed:
Updated packages:
  • openexr-3.1.1-3.el9.tuxcare.els10.aarch64.rpm
    sha:2dcc2c9a05ac7cd4eea79dfbc00bbec9ca3b36c52fbc98ef2240a939fe48f0af
  • openexr-3.1.1-3.el9.tuxcare.els10.i686.rpm
    sha:95b0c6e5b3ed497ca39e8bc75ae57039a4bc26914a49ff28511a0a322de06185
  • openexr-3.1.1-3.el9.tuxcare.els10.x86_64.rpm
    sha:2b68f3d2253111890e5f0fb9cbd33011e4a90622a89a3aa1ad48a21f28af062f
  • openexr-devel-3.1.1-3.el9.tuxcare.els10.aarch64.rpm
    sha:38006e1b30051857edda4e3249de7417c74b63351cb212507b9791f8009042db
  • openexr-devel-3.1.1-3.el9.tuxcare.els10.i686.rpm
    sha:d34619c9f86b25e47288c8bc785f7041db1e7df1736352cb00818b5d1b49991e
  • openexr-devel-3.1.1-3.el9.tuxcare.els10.x86_64.rpm
    sha:5eea1ca46fd2189fddaecfcfb4cc4d2852f20513d91f4597892f1e3ced228e22
  • openexr-libs-3.1.1-3.el9.tuxcare.els10.aarch64.rpm
    sha:a0994a77b0dfb8de9be1278a6fc27fa750010915f40100a133f9a912115ef238
  • openexr-libs-3.1.1-3.el9.tuxcare.els10.i686.rpm
    sha:b37c9fb9d3e18cedbfdc49b9c62a831b2693c95f10115232c2605cab9e9320f9
  • openexr-libs-3.1.1-3.el9.tuxcare.els10.x86_64.rpm
    sha:920f13c505244777b8c7d0b18bd2f7cc529561bcc894cb3137729294cfe4bb46
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.