openSUSE-SU-2026:20652-1

See a problem?
Import Source
https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:20652-1.json
JSON Data
https://api.osv.dev/v1/vulns/openSUSE-SU-2026:20652-1
Upstream
CVE (2)
Related
Published
2026-04-29T14:35:24Z
Modified
2026-05-01T18:27:09Z
Summary
Security update for openexr
Details

This update for openexr fixes the following issues:

  • CVE-2026-40244: integer overflow in DWA setupChannelData planarUncRle pointer arithmetic (bsc#1262426).
  • CVE-2026-40250: integer overflow in DWA decoder outBufferEnd pointer arithmetic (bsc#1262425).
References

Affected packages