[CLSA-2026:1790781324] openexr: Fix of CVE-2026-68515
Type:
security
Severity:
Important
Release date:
2026-09-30 15:15:36 UTC
Description:
- CVE-2026-68515: reject input channels whose xSampling or ySampling is not 1 in makeMultiView(), so exrmultiview no longer allocates sampled channel storage from a truncated union width and then writes past it when the combined dataWindow is misaligned with a view's subsampling
CVEs fixed:
Updated packages:
  • openexr-3.1.1-3.el9.tuxcare.els10.aarch64.rpm
    sha:d9f0611a8eacf72c326f2d6835e217ae8117284b13eed313c90bd254e78deac9
  • openexr-3.1.1-3.el9.tuxcare.els10.i686.rpm
    sha:0601964838e9eb29a37aa25f2c607db6253fb44d7fd8b93b02310f69ab9e23c8
  • openexr-3.1.1-3.el9.tuxcare.els10.x86_64.rpm
    sha:d3dc1dce1330faae0a805fc90f3f13b12028ee41af1f9f98a7aa0ef82a9aee47
  • openexr-devel-3.1.1-3.el9.tuxcare.els10.aarch64.rpm
    sha:b67a79323fb19f00e9e13c1f049ba5257fdaa4104d15a3413e50e032f73a3f76
  • openexr-devel-3.1.1-3.el9.tuxcare.els10.i686.rpm
    sha:31dc3000d73a0be0971dd280906ccff5a6300066be7f578c7cc289a868999af6
  • openexr-devel-3.1.1-3.el9.tuxcare.els10.x86_64.rpm
    sha:0533f7c197291fa858a680507307a72aef381baac61afd5b533c35ff6a64b480
  • openexr-libs-3.1.1-3.el9.tuxcare.els10.aarch64.rpm
    sha:d509eba09261137ca40677abdff114e0f2b410904baa73f7c4413777b95391da
  • openexr-libs-3.1.1-3.el9.tuxcare.els10.i686.rpm
    sha:76f26de3bac68aa9f71ffd1d35249c80639c1b70478a67824199a533c21f8aed
  • openexr-libs-3.1.1-3.el9.tuxcare.els10.x86_64.rpm
    sha:da2f277af0c9a599cd15f5c60b5af85c28039aedc1f239c492444b1e4fc964ab
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.