Security update for openexr
This update for openexr fixes the following issues: - CVE-2026-59184: invalid heap pointer, causing out-of-bounds or use-after-free writes (bsc#1276849). - CVE-2026-59186: On ILP32, the Array2D<Rgba> tile-conversion buffer size calculation overflows, allocates a much smaller heap buffer, and tile decode writes past that allocation (bsc#1276850). - CVE-2026-59189: API can return an out-of-bounds pointer when a deep image has a non-zero dataWindow origin, resulting in a heap out-of-bounds read and crash, with potential information disclosure under a controlled heap layout (bsc#1276855). - CVE-2026-59981: an attacker-controlled deep EXR f
- Обновитесь до 2.2.1-150000.3.55.1
Опубликовано Обновлено