openSUSE-SU-2026:20433-1
See a problem?- Import Source
- https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:20433-1.json
- JSON Data
- https://api.osv.dev/v1/vulns/openSUSE-SU-2026:20433-1
- Upstream
- Related
- Published
- 2026-03-26T10:03:06Z
- Modified
- 2026-04-03T17:25:51Z
- Summary
- Security update for openexr
- Details
-
This update for openexr fixes the following issue:
- CVE-2026-27622: crafted multipart deep EXR can cause an heap out-of-bound write (bsc#1259177).
- References
Affected packages
openSUSE:Leap 16.0 / openexr
Package
- Name
- openexr
- Purl
- pkg:rpm/opensuse/openexr&distro=openSUSE%20Leap%2016.0
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0 Unknown introduced version / All previous versions are affectedFixed3.2.2-160000.5.1
Ecosystem specific
{
"binaries": [
{
"libIex-3_2-31": "3.2.2-160000.5.1",
"libIex-3_2-31-x86-64-v3": "3.2.2-160000.5.1",
"libIlmThread-3_2-31": "3.2.2-160000.5.1",
"libIlmThread-3_2-31-x86-64-v3": "3.2.2-160000.5.1",
"libOpenEXR-3_2-31": "3.2.2-160000.5.1",
"libOpenEXR-3_2-31-x86-64-v3": "3.2.2-160000.5.1",
"libOpenEXRCore-3_2-31": "3.2.2-160000.5.1",
"libOpenEXRCore-3_2-31-x86-64-v3": "3.2.2-160000.5.1",
"libOpenEXRUtil-3_2-31": "3.2.2-160000.5.1",
"libOpenEXRUtil-3_2-31-x86-64-v3": "3.2.2-160000.5.1",
"openexr": "3.2.2-160000.5.1",
"openexr-devel": "3.2.2-160000.5.1",
"openexr-doc": "3.2.2-160000.5.1"
}
]
}