Red Hat Security Advisory

RHSA-2026:84796

openexr security update

Released 2026-10-19 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 10) openexr-3.1.10-8.el10_2.5, openexr-libs-3.1.10-8.el10_2.5
Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) openexr-devel-3.1.10-8.el10_2.5

TI-2026-26793 CVE-2026-34544 · GHSA-h762-rhv3-h25v

HIGH 72

OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry.

CVSS 4.0HIGH 8.4 Local No auth User interaction EPSS 0.00254 Published 2026-04-01 Partial fix · 3.4.8 CWE-190

TI-2026-42768 CVE-2026-59981

MEDIUM 64

OpenEXR is the reference implementation and specification for the EXR image file format, widely used in the motion picture industry.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00317 Published 2026-08-25 Fixed in 3.2.11, 3.3.13 +1 CWE-125

TI-2026-42338 CVE-2026-59189

MEDIUM 64

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.0031 Published 2026-08-25 Fixed in 3.2.11, 3.3.13 +1 CWE-125

TI-2026-42769 CVE-2026-59982

LOW 31

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00314 Published 2026-08-25 Fixed in 3.2.11, 3.3.13 +1 CWE-190

TI-2026-42335 CVE-2026-59184

LOW 31

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00218 Published 2026-08-25 Fixed in 3.2.11, 3.3.13 +1 CWE-416