Описание
Security update for openexr
This update for openexr fixes the following issues
- CVE-2026-54920: unchecked integer overflows in Image::resize() followed by an exception can lead to an invalid delete via uninitialized pointers (bsc#1269703).
- CVE-2026-55059: row setter utilizing dataWindow.min.x instead of min.y can lead to a heap out-of-bounds write (bsc#1269702).
- CVE-2026-55373: integer overflow in roundListSizeUp() wrapping a 32-bit unsigned value to zero can lead to an infinite loop (bsc#1269701).
Список пакетов
openSUSE Leap 16.0
libIex-3_2-31-3.2.2-160000.9.1
libIex-3_2-31-x86-64-v3-3.2.2-160000.9.1
libIlmThread-3_2-31-3.2.2-160000.9.1
libIlmThread-3_2-31-x86-64-v3-3.2.2-160000.9.1
libOpenEXR-3_2-31-3.2.2-160000.9.1
libOpenEXR-3_2-31-x86-64-v3-3.2.2-160000.9.1
libOpenEXRCore-3_2-31-3.2.2-160000.9.1
libOpenEXRCore-3_2-31-x86-64-v3-3.2.2-160000.9.1
libOpenEXRUtil-3_2-31-3.2.2-160000.9.1
libOpenEXRUtil-3_2-31-x86-64-v3-3.2.2-160000.9.1
openexr-3.2.2-160000.9.1
openexr-devel-3.2.2-160000.9.1
openexr-doc-3.2.2-160000.9.1
Ссылки
- SUSE Security Ratings
- SUSE Bug 1269701
- SUSE Bug 1269702
- SUSE Bug 1269703
- SUSE CVE CVE-2026-54920 page
- SUSE CVE CVE-2026-55059 page
- SUSE CVE CVE-2026-55373 page
Описание
unknown
Затронутые продукты
openSUSE Leap 16.0:libIex-3_2-31-3.2.2-160000.9.1
openSUSE Leap 16.0:libIex-3_2-31-x86-64-v3-3.2.2-160000.9.1
openSUSE Leap 16.0:libIlmThread-3_2-31-3.2.2-160000.9.1
openSUSE Leap 16.0:libIlmThread-3_2-31-x86-64-v3-3.2.2-160000.9.1
Ссылки
- CVE-2026-54920
- SUSE Bug 1269703
Описание
unknown
Затронутые продукты
openSUSE Leap 16.0:libIex-3_2-31-3.2.2-160000.9.1
openSUSE Leap 16.0:libIex-3_2-31-x86-64-v3-3.2.2-160000.9.1
openSUSE Leap 16.0:libIlmThread-3_2-31-3.2.2-160000.9.1
openSUSE Leap 16.0:libIlmThread-3_2-31-x86-64-v3-3.2.2-160000.9.1
Ссылки
- CVE-2026-55059
- SUSE Bug 1269702
Описание
unknown
Затронутые продукты
openSUSE Leap 16.0:libIex-3_2-31-3.2.2-160000.9.1
openSUSE Leap 16.0:libIex-3_2-31-x86-64-v3-3.2.2-160000.9.1
openSUSE Leap 16.0:libIlmThread-3_2-31-3.2.2-160000.9.1
openSUSE Leap 16.0:libIlmThread-3_2-31-x86-64-v3-3.2.2-160000.9.1
Ссылки
- CVE-2026-55373
- SUSE Bug 1269701