SUSE-SU-2026:1712-1

Source
https://www.suse.com/support/update/announcement/2026/suse-su-20261712-1/
Import Source
https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:1712-1.json
JSON Data
https://api.osv.dev/v1/vulns/SUSE-SU-2026:1712-1
Upstream
CVE (2)
Related
Published
2026-05-06T12:06:44Z
Modified
2026-05-07T08:46:09Z
Summary
Security update for openexr
Details

This update for openexr fixes the following issues:

  • CVE-2026-40244: Integer overflow in DWA setupChannelData planarUncRle pointer arithmetic (bsc#1262426).
  • CVE-2026-40250: Integer overflow in DWA decoder outBufferEnd pointer arithmetic (bsc#1262425).
References

Affected packages