Red Hat Security Advisory

RHSA-2026:82345

OpenEXR security update

Released 2026-10-13 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 8) OpenEXR-2.2.0-12.el8_10.3, OpenEXR-libs-2.2.0-12.el8_10.3
Red Hat Enterprise Linux CRB (v. 8) OpenEXR-devel-2.2.0-12.el8_10.3

TI-2026-48281 CVE-2026-68515

MEDIUM 64

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry.

CVSS 3.1HIGH 7.1 Local No auth User interaction EPSS 0.00191 Published 2026-08-25 Partial fix · 3.3.13, 3.4.14 +1 CWE-122

TI-2026-42768 CVE-2026-59981

MEDIUM 64

OpenEXR is the reference implementation and specification for the EXR image file format, widely used in the motion picture industry.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00317 Published 2026-08-25 Fixed in 3.2.11, 3.3.13 +1 CWE-125

TI-2026-42338 CVE-2026-59189

MEDIUM 64

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.0031 Published 2026-08-25 Fixed in 3.2.11, 3.3.13 +1 CWE-125

TI-2026-42336 CVE-2026-59186

MEDIUM 64

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00272 Published 2026-08-25 Fixed in 3.2.11, 3.3.13 +1 CWE-122

TI-2026-42335 CVE-2026-59184

LOW 31

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00218 Published 2026-08-25 Fixed in 3.2.11, 3.3.13 +1 CWE-416