OPENSUSE-SU-2026:21336-1
Vulnerability from csaf_opensuse - Published: 2026-07-14 08:47 - Updated: 2026-09-16 21:43Summary
Security update for openexr
Severity
Moderate
Notes
Title of the patch: Security update for openexr
Description of the patch: This update for openexr fixes the following issues
- CVE-2026-54920: unchecked integer overflows in Image::resize() followed by an exception can lead to an invalid delete
via uninitialized pointers (bsc#1269703).
- CVE-2026-55059: row setter utilizing dataWindow.min.x instead of min.y can lead to a heap out-of-bounds write
(bsc#1269702).
- CVE-2026-55373: integer overflow in roundListSizeUp() wrapping a 32-bit unsigned value to zero can lead to an infinite
loop (bsc#1269701).
Patchnames: openSUSE-Leap-16.0-1240
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
5.3 (Medium)
Affected products
Recommended
34 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 16.0:libIex-3_2-31-3.2.2-160000.9.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libIex-3_2-31-3.2.2-160000.9.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libIex-3_2-31-3.2.2-160000.9.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libIex-3_2-31-3.2.2-160000.9.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libIex-3_2-31-x86-64-v3-3.2.2-160000.9.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libIlmThread-3_2-31-3.2.2-160000.9.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libIlmThread-3_2-31-3.2.2-160000.9.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libIlmThread-3_2-31-3.2.2-160000.9.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libIlmThread-3_2-31-3.2.2-160000.9.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libIlmThread-3_2-31-x86-64-v3-3.2.2-160000.9.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libOpenEXR-3_2-31-3.2.2-160000.9.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libOpenEXR-3_2-31-3.2.2-160000.9.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libOpenEXR-3_2-31-3.2.2-160000.9.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libOpenEXR-3_2-31-3.2.2-160000.9.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libOpenEXR-3_2-31-x86-64-v3-3.2.2-160000.9.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libOpenEXRCore-3_2-31-3.2.2-160000.9.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libOpenEXRCore-3_2-31-3.2.2-160000.9.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libOpenEXRCore-3_2-31-3.2.2-160000.9.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libOpenEXRCore-3_2-31-3.2.2-160000.9.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libOpenEXRCore-3_2-31-x86-64-v3-3.2.2-160000.9.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-3.2.2-160000.9.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-3.2.2-160000.9.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-3.2.2-160000.9.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-3.2.2-160000.9.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-x86-64-v3-3.2.2-160000.9.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:openexr-3.2.2-160000.9.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:openexr-3.2.2-160000.9.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:openexr-3.2.2-160000.9.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:openexr-3.2.2-160000.9.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:openexr-devel-3.2.2-160000.9.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:openexr-devel-3.2.2-160000.9.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:openexr-devel-3.2.2-160000.9.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:openexr-devel-3.2.2-160000.9.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:openexr-doc-3.2.2-160000.9.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
6.1 (Medium)
Affected products
Recommended
34 products, the same list as for
CVE-2026-54920
Threats
Impact
moderate
6.2 (Medium)
Affected products
Recommended
34 products, the same list as for
CVE-2026-54920
Threats
Impact
moderate
References
14 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for openexr",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for openexr fixes the following issues\n\n- CVE-2026-54920: unchecked integer overflows in Image::resize() followed by an exception can lead to an invalid delete\n via uninitialized pointers (bsc#1269703).\n- CVE-2026-55059: row setter utilizing dataWindow.min.x instead of min.y can lead to a heap out-of-bounds write\n (bsc#1269702).\n- CVE-2026-55373: integer overflow in roundListSizeUp() wrapping a 32-bit unsigned value to zero can lead to an infinite\n loop (bsc#1269701).\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-Leap-16.0-1240",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_21336-1.json"
},
{
"category": "self",
"summary": "SUSE Bug 1269701",
"url": "https://bugzilla.suse.com/1269701"
},
{
"category": "self",
"summary": "SUSE Bug 1269702",
"url": "https://bugzilla.suse.com/1269702"
},
{
"category": "self",
"summary": "SUSE Bug 1269703",
"url": "https://bugzilla.suse.com/1269703"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-54920 page",
"url": "https://www.suse.com/security/cve/CVE-2026-54920/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-55059 page",
"url": "https://www.suse.com/security/cve/CVE-2026-55059/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-55373 page",
"url": "https://www.suse.com/security/cve/CVE-2026-55373/"
}
],
"title": "Security update for openexr",
"tracking": {
"current_release_date": "2026-09-16T21:43:55Z",
"generator": {
"date": "2026-07-14T08:47:36Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2026:21336-1",
"initial_release_date": "2026-07-14T08:47:36Z",
"revision_history": [
{
"date": "2026-07-14T08:47:36Z",
"number": "1",
"summary": "Current version"
},
{
"date": "2026-09-16T20:42:09Z",
"number": "2",
"summary": "unknown changes"
},
{
"date": "2026-09-16T21:43:55Z",
"number": "3",
"summary": "unknown changes"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "libIex-3_2-31-3.2.2-160000.9.1.aarch64",
"product": {
"name": "libIex-3_2-31-3.2.2-160000.9.1.aarch64",
"product_id": "libIex-3_2-31-3.2.2-160000.9.1.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:openexr:openexr:3.2.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libIex-3_2-31@3.2.2-160000.9.1?arch=aarch64\u0026upstream=openexr-3.2.2-160000.9.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libIlmThread-3_2-31-3.2.2-160000.9.1.aarch64",
"product": {
"name": "libIlmThread-3_2-31-3.2.2-160000.9.1.aarch64",
"product_id": "libIlmThread-3_2-31-3.2.2-160000.9.1.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:openexr:openexr:3.2.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libIlmThread-3_2-31@3.2.2-160000.9.1?arch=aarch64\u0026upstream=openexr-3.2.2-160000.9.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libOpenEXR-3_2-31-3.2.2-160000.9.1.aarch64",
"product": {
"name": "libOpenEXR-3_2-31-3.2.2-160000.9.1.aarch64",
"product_id": "libOpenEXR-3_2-31-3.2.2-160000.9.1.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:openexr:openexr:3.2.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libOpenEXR-3_2-31@3.2.2-160000.9.1?arch=aarch64\u0026upstream=openexr-3.2.2-160000.9.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libOpenEXRCore-3_2-31-3.2.2-160000.9.1.aarch64",
"product": {
"name": "libOpenEXRCore-3_2-31-3.2.2-160000.9.1.aarch64",
"product_id": "libOpenEXRCore-3_2-31-3.2.2-160000.9.1.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:openexr:openexr:3.2.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libOpenEXRCore-3_2-31@3.2.2-160000.9.1?arch=aarch64\u0026upstream=openexr-3.2.2-160000.9.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libOpenEXRUtil-3_2-31-3.2.2-160000.9.1.aarch64",
"product": {
"name": "libOpenEXRUtil-3_2-31-3.2.2-160000.9.1.aarch64",
"product_id": "libOpenEXRUtil-3_2-31-3.2.2-160000.9.1.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:openexr:openexr:3.2.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libOpenEXRUtil-3_2-31@3.2.2-160000.9.1?arch=aarch64\u0026upstream=openexr-3.2.2-160000.9.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "openexr-3.2.2-160000.9.1.aarch64",
"product": {
"name": "openexr-3.2.2-160000.9.1.aarch64",
"product_id": "openexr-3.2.2-160000.9.1.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:openexr:openexr:3.2.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/openexr@3.2.2-160000.9.1?arch=aarch64\u0026upstream=openexr-3.2.2-160000.9.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "openexr-devel-3.2.2-160000.9.1.aarch64",
"product": {
"name": "openexr-devel-3.2.2-160000.9.1.aarch64",
"product_id": "openexr-devel-3.2.2-160000.9.1.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:openexr:openexr:3.2.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/openexr-devel@3.2.2-160000.9.1?arch=aarch64\u0026upstream=openexr-3.2.2-160000.9.1.src.rpm"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "openexr-doc-3.2.2-160000.9.1.noarch",
"product": {
"name": "openexr-doc-3.2.2-160000.9.1.noarch",
"product_id": "openexr-doc-3.2.2-160000.9.1.noarch",
"product_identification_helper": {
"cpe": "cpe:2.3:a:openexr:openexr:3.2.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/openexr-doc@3.2.2-160000.9.1?arch=noarch\u0026upstream=openexr-3.2.2-160000.9.1.src.rpm"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "libIex-3_2-31-3.2.2-160000.9.1.ppc64le",
"product": {
"name": "libIex-3_2-31-3.2.2-160000.9.1.ppc64le",
"product_id": "libIex-3_2-31-3.2.2-160000.9.1.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:a:openexr:openexr:3.2.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libIex-3_2-31@3.2.2-160000.9.1?arch=ppc64le\u0026upstream=openexr-3.2.2-160000.9.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libIlmThread-3_2-31-3.2.2-160000.9.1.ppc64le",
"product": {
"name": "libIlmThread-3_2-31-3.2.2-160000.9.1.ppc64le",
"product_id": "libIlmThread-3_2-31-3.2.2-160000.9.1.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:a:openexr:openexr:3.2.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libIlmThread-3_2-31@3.2.2-160000.9.1?arch=ppc64le\u0026upstream=openexr-3.2.2-160000.9.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libOpenEXR-3_2-31-3.2.2-160000.9.1.ppc64le",
"product": {
"name": "libOpenEXR-3_2-31-3.2.2-160000.9.1.ppc64le",
"product_id": "libOpenEXR-3_2-31-3.2.2-160000.9.1.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:a:openexr:openexr:3.2.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libOpenEXR-3_2-31@3.2.2-160000.9.1?arch=ppc64le\u0026upstream=openexr-3.2.2-160000.9.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libOpenEXRCore-3_2-31-3.2.2-160000.9.1.ppc64le",
"product": {
"name": "libOpenEXRCore-3_2-31-3.2.2-160000.9.1.ppc64le",
"product_id": "libOpenEXRCore-3_2-31-3.2.2-160000.9.1.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:a:openexr:openexr:3.2.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libOpenEXRCore-3_2-31@3.2.2-160000.9.1?arch=ppc64le\u0026upstream=openexr-3.2.2-160000.9.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libOpenEXRUtil-3_2-31-3.2.2-160000.9.1.ppc64le",
"product": {
"name": "libOpenEXRUtil-3_2-31-3.2.2-160000.9.1.ppc64le",
"product_id": "libOpenEXRUtil-3_2-31-3.2.2-160000.9.1.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:a:openexr:openexr:3.2.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libOpenEXRUtil-3_2-31@3.2.2-160000.9.1?arch=ppc64le\u0026upstream=openexr-3.2.2-160000.9.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "openexr-3.2.2-160000.9.1.ppc64le",
"product": {
"name": "openexr-3.2.2-160000.9.1.ppc64le",
"product_id": "openexr-3.2.2-160000.9.1.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:a:openexr:openexr:3.2.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/openexr@3.2.2-160000.9.1?arch=ppc64le\u0026upstream=openexr-3.2.2-160000.9.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "openexr-devel-3.2.2-160000.9.1.ppc64le",
"product": {
"name": "openexr-devel-3.2.2-160000.9.1.ppc64le",
"product_id": "openexr-devel-3.2.2-160000.9.1.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:a:openexr:openexr:3.2.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/openexr-devel@3.2.2-160000.9.1?arch=ppc64le\u0026upstream=openexr-3.2.2-160000.9.1.src.rpm"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "libIex-3_2-31-3.2.2-160000.9.1.s390x",
"product": {
"name": "libIex-3_2-31-3.2.2-160000.9.1.s390x",
"product_id": "libIex-3_2-31-3.2.2-160000.9.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:openexr:openexr:3.2.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libIex-3_2-31@3.2.2-160000.9.1?arch=s390x\u0026upstream=openexr-3.2.2-160000.9.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libIlmThread-3_2-31-3.2.2-160000.9.1.s390x",
"product": {
"name": "libIlmThread-3_2-31-3.2.2-160000.9.1.s390x",
"product_id": "libIlmThread-3_2-31-3.2.2-160000.9.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:openexr:openexr:3.2.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libIlmThread-3_2-31@3.2.2-160000.9.1?arch=s390x\u0026upstream=openexr-3.2.2-160000.9.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libOpenEXR-3_2-31-3.2.2-160000.9.1.s390x",
"product": {
"name": "libOpenEXR-3_2-31-3.2.2-160000.9.1.s390x",
"product_id": "libOpenEXR-3_2-31-3.2.2-160000.9.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:openexr:openexr:3.2.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libOpenEXR-3_2-31@3.2.2-160000.9.1?arch=s390x\u0026upstream=openexr-3.2.2-160000.9.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libOpenEXRCore-3_2-31-3.2.2-160000.9.1.s390x",
"product": {
"name": "libOpenEXRCore-3_2-31-3.2.2-160000.9.1.s390x",
"product_id": "libOpenEXRCore-3_2-31-3.2.2-160000.9.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:openexr:openexr:3.2.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libOpenEXRCore-3_2-31@3.2.2-160000.9.1?arch=s390x\u0026upstream=openexr-3.2.2-160000.9.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libOpenEXRUtil-3_2-31-3.2.2-160000.9.1.s390x",
"product": {
"name": "libOpenEXRUtil-3_2-31-3.2.2-160000.9.1.s390x",
"product_id": "libOpenEXRUtil-3_2-31-3.2.2-160000.9.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:openexr:openexr:3.2.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libOpenEXRUtil-3_2-31@3.2.2-160000.9.1?arch=s390x\u0026upstream=openexr-3.2.2-160000.9.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "openexr-3.2.2-160000.9.1.s390x",
"product": {
"name": "openexr-3.2.2-160000.9.1.s390x",
"product_id": "openexr-3.2.2-160000.9.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:openexr:openexr:3.2.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/openexr@3.2.2-160000.9.1?arch=s390x\u0026upstream=openexr-3.2.2-160000.9.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "openexr-devel-3.2.2-160000.9.1.s390x",
"product": {
"name": "openexr-devel-3.2.2-160000.9.1.s390x",
"product_id": "openexr-devel-3.2.2-160000.9.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:openexr:openexr:3.2.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/openexr-devel@3.2.2-160000.9.1?arch=s390x\u0026upstream=openexr-3.2.2-160000.9.1.src.rpm"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "libIex-3_2-31-3.2.2-160000.9.1.x86_64",
"product": {
"name": "libIex-3_2-31-3.2.2-160000.9.1.x86_64",
"product_id": "libIex-3_2-31-3.2.2-160000.9.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:openexr:openexr:3.2.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libIex-3_2-31@3.2.2-160000.9.1?arch=x86_64\u0026upstream=openexr-3.2.2-160000.9.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libIex-3_2-31-x86-64-v3-3.2.2-160000.9.1.x86_64",
"product": {
"name": "libIex-3_2-31-x86-64-v3-3.2.2-160000.9.1.x86_64",
"product_id": "libIex-3_2-31-x86-64-v3-3.2.2-160000.9.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:openexr:openexr:3.2.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libIex-3_2-31-x86-64-v3@3.2.2-160000.9.1?arch=x86_64\u0026upstream=openexr-3.2.2-160000.9.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libIlmThread-3_2-31-3.2.2-160000.9.1.x86_64",
"product": {
"name": "libIlmThread-3_2-31-3.2.2-160000.9.1.x86_64",
"product_id": "libIlmThread-3_2-31-3.2.2-160000.9.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:openexr:openexr:3.2.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libIlmThread-3_2-31@3.2.2-160000.9.1?arch=x86_64\u0026upstream=openexr-3.2.2-160000.9.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libIlmThread-3_2-31-x86-64-v3-3.2.2-160000.9.1.x86_64",
"product": {
"name": "libIlmThread-3_2-31-x86-64-v3-3.2.2-160000.9.1.x86_64",
"product_id": "libIlmThread-3_2-31-x86-64-v3-3.2.2-160000.9.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:openexr:openexr:3.2.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libIlmThread-3_2-31-x86-64-v3@3.2.2-160000.9.1?arch=x86_64\u0026upstream=openexr-3.2.2-160000.9.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libOpenEXR-3_2-31-3.2.2-160000.9.1.x86_64",
"product": {
"name": "libOpenEXR-3_2-31-3.2.2-160000.9.1.x86_64",
"product_id": "libOpenEXR-3_2-31-3.2.2-160000.9.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:openexr:openexr:3.2.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libOpenEXR-3_2-31@3.2.2-160000.9.1?arch=x86_64\u0026upstream=openexr-3.2.2-160000.9.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libOpenEXR-3_2-31-x86-64-v3-3.2.2-160000.9.1.x86_64",
"product": {
"name": "libOpenEXR-3_2-31-x86-64-v3-3.2.2-160000.9.1.x86_64",
"product_id": "libOpenEXR-3_2-31-x86-64-v3-3.2.2-160000.9.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:openexr:openexr:3.2.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libOpenEXR-3_2-31-x86-64-v3@3.2.2-160000.9.1?arch=x86_64\u0026upstream=openexr-3.2.2-160000.9.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libOpenEXRCore-3_2-31-3.2.2-160000.9.1.x86_64",
"product": {
"name": "libOpenEXRCore-3_2-31-3.2.2-160000.9.1.x86_64",
"product_id": "libOpenEXRCore-3_2-31-3.2.2-160000.9.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:openexr:openexr:3.2.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libOpenEXRCore-3_2-31@3.2.2-160000.9.1?arch=x86_64\u0026upstream=openexr-3.2.2-160000.9.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libOpenEXRCore-3_2-31-x86-64-v3-3.2.2-160000.9.1.x86_64",
"product": {
"name": "libOpenEXRCore-3_2-31-x86-64-v3-3.2.2-160000.9.1.x86_64",
"product_id": "libOpenEXRCore-3_2-31-x86-64-v3-3.2.2-160000.9.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:openexr:openexr:3.2.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libOpenEXRCore-3_2-31-x86-64-v3@3.2.2-160000.9.1?arch=x86_64\u0026upstream=openexr-3.2.2-160000.9.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libOpenEXRUtil-3_2-31-3.2.2-160000.9.1.x86_64",
"product": {
"name": "libOpenEXRUtil-3_2-31-3.2.2-160000.9.1.x86_64",
"product_id": "libOpenEXRUtil-3_2-31-3.2.2-160000.9.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:openexr:openexr:3.2.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libOpenEXRUtil-3_2-31@3.2.2-160000.9.1?arch=x86_64\u0026upstream=openexr-3.2.2-160000.9.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libOpenEXRUtil-3_2-31-x86-64-v3-3.2.2-160000.9.1.x86_64",
"product": {
"name": "libOpenEXRUtil-3_2-31-x86-64-v3-3.2.2-160000.9.1.x86_64",
"product_id": "libOpenEXRUtil-3_2-31-x86-64-v3-3.2.2-160000.9.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:openexr:openexr:3.2.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libOpenEXRUtil-3_2-31-x86-64-v3@3.2.2-160000.9.1?arch=x86_64\u0026upstream=openexr-3.2.2-160000.9.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "openexr-3.2.2-160000.9.1.x86_64",
"product": {
"name": "openexr-3.2.2-160000.9.1.x86_64",
"product_id": "openexr-3.2.2-160000.9.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:openexr:openexr:3.2.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/openexr@3.2.2-160000.9.1?arch=x86_64\u0026upstream=openexr-3.2.2-160000.9.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "openexr-devel-3.2.2-160000.9.1.x86_64",
"product": {
"name": "openexr-devel-3.2.2-160000.9.1.x86_64",
"product_id": "openexr-devel-3.2.2-160000.9.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:openexr:openexr:3.2.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/openexr-devel@3.2.2-160000.9.1?arch=x86_64\u0026upstream=openexr-3.2.2-160000.9.1.src.rpm"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Leap 16.0",
"product": {
"name": "openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0"
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "libIex-3_2-31-3.2.2-160000.9.1.aarch64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libIex-3_2-31-3.2.2-160000.9.1.aarch64"
},
"product_reference": "libIex-3_2-31-3.2.2-160000.9.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libIex-3_2-31-3.2.2-160000.9.1.ppc64le as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libIex-3_2-31-3.2.2-160000.9.1.ppc64le"
},
"product_reference": "libIex-3_2-31-3.2.2-160000.9.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libIex-3_2-31-3.2.2-160000.9.1.s390x as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libIex-3_2-31-3.2.2-160000.9.1.s390x"
},
"product_reference": "libIex-3_2-31-3.2.2-160000.9.1.s390x",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libIex-3_2-31-3.2.2-160000.9.1.x86_64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libIex-3_2-31-3.2.2-160000.9.1.x86_64"
},
"product_reference": "libIex-3_2-31-3.2.2-160000.9.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libIex-3_2-31-x86-64-v3-3.2.2-160000.9.1.x86_64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libIex-3_2-31-x86-64-v3-3.2.2-160000.9.1.x86_64"
},
"product_reference": "libIex-3_2-31-x86-64-v3-3.2.2-160000.9.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libIlmThread-3_2-31-3.2.2-160000.9.1.aarch64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libIlmThread-3_2-31-3.2.2-160000.9.1.aarch64"
},
"product_reference": "libIlmThread-3_2-31-3.2.2-160000.9.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libIlmThread-3_2-31-3.2.2-160000.9.1.ppc64le as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libIlmThread-3_2-31-3.2.2-160000.9.1.ppc64le"
},
"product_reference": "libIlmThread-3_2-31-3.2.2-160000.9.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libIlmThread-3_2-31-3.2.2-160000.9.1.s390x as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libIlmThread-3_2-31-3.2.2-160000.9.1.s390x"
},
"product_reference": "libIlmThread-3_2-31-3.2.2-160000.9.1.s390x",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libIlmThread-3_2-31-3.2.2-160000.9.1.x86_64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libIlmThread-3_2-31-3.2.2-160000.9.1.x86_64"
},
"product_reference": "libIlmThread-3_2-31-3.2.2-160000.9.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libIlmThread-3_2-31-x86-64-v3-3.2.2-160000.9.1.x86_64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libIlmThread-3_2-31-x86-64-v3-3.2.2-160000.9.1.x86_64"
},
"product_reference": "libIlmThread-3_2-31-x86-64-v3-3.2.2-160000.9.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libOpenEXR-3_2-31-3.2.2-160000.9.1.aarch64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libOpenEXR-3_2-31-3.2.2-160000.9.1.aarch64"
},
"product_reference": "libOpenEXR-3_2-31-3.2.2-160000.9.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libOpenEXR-3_2-31-3.2.2-160000.9.1.ppc64le as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libOpenEXR-3_2-31-3.2.2-160000.9.1.ppc64le"
},
"product_reference": "libOpenEXR-3_2-31-3.2.2-160000.9.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libOpenEXR-3_2-31-3.2.2-160000.9.1.s390x as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libOpenEXR-3_2-31-3.2.2-160000.9.1.s390x"
},
"product_reference": "libOpenEXR-3_2-31-3.2.2-160000.9.1.s390x",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libOpenEXR-3_2-31-3.2.2-160000.9.1.x86_64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libOpenEXR-3_2-31-3.2.2-160000.9.1.x86_64"
},
"product_reference": "libOpenEXR-3_2-31-3.2.2-160000.9.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libOpenEXR-3_2-31-x86-64-v3-3.2.2-160000.9.1.x86_64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libOpenEXR-3_2-31-x86-64-v3-3.2.2-160000.9.1.x86_64"
},
"product_reference": "libOpenEXR-3_2-31-x86-64-v3-3.2.2-160000.9.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libOpenEXRCore-3_2-31-3.2.2-160000.9.1.aarch64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libOpenEXRCore-3_2-31-3.2.2-160000.9.1.aarch64"
},
"product_reference": "libOpenEXRCore-3_2-31-3.2.2-160000.9.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libOpenEXRCore-3_2-31-3.2.2-160000.9.1.ppc64le as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libOpenEXRCore-3_2-31-3.2.2-160000.9.1.ppc64le"
},
"product_reference": "libOpenEXRCore-3_2-31-3.2.2-160000.9.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libOpenEXRCore-3_2-31-3.2.2-160000.9.1.s390x as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libOpenEXRCore-3_2-31-3.2.2-160000.9.1.s390x"
},
"product_reference": "libOpenEXRCore-3_2-31-3.2.2-160000.9.1.s390x",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libOpenEXRCore-3_2-31-3.2.2-160000.9.1.x86_64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libOpenEXRCore-3_2-31-3.2.2-160000.9.1.x86_64"
},
"product_reference": "libOpenEXRCore-3_2-31-3.2.2-160000.9.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libOpenEXRCore-3_2-31-x86-64-v3-3.2.2-160000.9.1.x86_64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libOpenEXRCore-3_2-31-x86-64-v3-3.2.2-160000.9.1.x86_64"
},
"product_reference": "libOpenEXRCore-3_2-31-x86-64-v3-3.2.2-160000.9.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libOpenEXRUtil-3_2-31-3.2.2-160000.9.1.aarch64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-3.2.2-160000.9.1.aarch64"
},
"product_reference": "libOpenEXRUtil-3_2-31-3.2.2-160000.9.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libOpenEXRUtil-3_2-31-3.2.2-160000.9.1.ppc64le as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-3.2.2-160000.9.1.ppc64le"
},
"product_reference": "libOpenEXRUtil-3_2-31-3.2.2-160000.9.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libOpenEXRUtil-3_2-31-3.2.2-160000.9.1.s390x as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-3.2.2-160000.9.1.s390x"
},
"product_reference": "libOpenEXRUtil-3_2-31-3.2.2-160000.9.1.s390x",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libOpenEXRUtil-3_2-31-3.2.2-160000.9.1.x86_64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-3.2.2-160000.9.1.x86_64"
},
"product_reference": "libOpenEXRUtil-3_2-31-3.2.2-160000.9.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libOpenEXRUtil-3_2-31-x86-64-v3-3.2.2-160000.9.1.x86_64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-x86-64-v3-3.2.2-160000.9.1.x86_64"
},
"product_reference": "libOpenEXRUtil-3_2-31-x86-64-v3-3.2.2-160000.9.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openexr-3.2.2-160000.9.1.aarch64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:openexr-3.2.2-160000.9.1.aarch64"
},
"product_reference": "openexr-3.2.2-160000.9.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openexr-3.2.2-160000.9.1.ppc64le as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:openexr-3.2.2-160000.9.1.ppc64le"
},
"product_reference": "openexr-3.2.2-160000.9.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openexr-3.2.2-160000.9.1.s390x as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:openexr-3.2.2-160000.9.1.s390x"
},
"product_reference": "openexr-3.2.2-160000.9.1.s390x",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openexr-3.2.2-160000.9.1.x86_64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:openexr-3.2.2-160000.9.1.x86_64"
},
"product_reference": "openexr-3.2.2-160000.9.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openexr-devel-3.2.2-160000.9.1.aarch64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:openexr-devel-3.2.2-160000.9.1.aarch64"
},
"product_reference": "openexr-devel-3.2.2-160000.9.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openexr-devel-3.2.2-160000.9.1.ppc64le as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:openexr-devel-3.2.2-160000.9.1.ppc64le"
},
"product_reference": "openexr-devel-3.2.2-160000.9.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openexr-devel-3.2.2-160000.9.1.s390x as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:openexr-devel-3.2.2-160000.9.1.s390x"
},
"product_reference": "openexr-devel-3.2.2-160000.9.1.s390x",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openexr-devel-3.2.2-160000.9.1.x86_64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:openexr-devel-3.2.2-160000.9.1.x86_64"
},
"product_reference": "openexr-devel-3.2.2-160000.9.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openexr-doc-3.2.2-160000.9.1.noarch as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:openexr-doc-3.2.2-160000.9.1.noarch"
},
"product_reference": "openexr-doc-3.2.2-160000.9.1.noarch",
"relates_to_product_reference": "openSUSE Leap 16.0"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-54920",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-54920"
}
],
"notes": [
{
"category": "general",
"text": "OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. In versions 3.4.0 through 3.4.12, a reachable assertion failure in the HTJ2K decode path allows a crafted HTJ2K-compressed EXR file to cause an unconditional process abort in any application that calls exr_start_read() on untrusted input, resulting in denial of service. The crash is triggered by a QCD marker whose lower five bits are zero, which OpenEXR passes into the vendored OpenJPH library while constructing the codestream and evaluating its quantization delta parameters. OpenJPH uses an assertion rather than a recoverable error to validate those bits, so any invalid value calls abort() directly and cannot be intercepted by surrounding error handling, a problem compounded by OpenEXR wrapping only its internal HT header parser in error handling while leaving the later codestream read and construction calls unprotected. This issue has been resolved in version 3.4.13.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:libIex-3_2-31-3.2.2-160000.9.1.aarch64",
"openSUSE Leap 16.0:libIex-3_2-31-3.2.2-160000.9.1.ppc64le",
"openSUSE Leap 16.0:libIex-3_2-31-3.2.2-160000.9.1.s390x",
"openSUSE Leap 16.0:libIex-3_2-31-3.2.2-160000.9.1.x86_64",
"openSUSE Leap 16.0:libIex-3_2-31-x86-64-v3-3.2.2-160000.9.1.x86_64",
"openSUSE Leap 16.0:libIlmThread-3_2-31-3.2.2-160000.9.1.aarch64",
"openSUSE Leap 16.0:libIlmThread-3_2-31-3.2.2-160000.9.1.ppc64le",
"openSUSE Leap 16.0:libIlmThread-3_2-31-3.2.2-160000.9.1.s390x",
"openSUSE Leap 16.0:libIlmThread-3_2-31-3.2.2-160000.9.1.x86_64",
"openSUSE Leap 16.0:libIlmThread-3_2-31-x86-64-v3-3.2.2-160000.9.1.x86_64",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-3.2.2-160000.9.1.aarch64",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-3.2.2-160000.9.1.ppc64le",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-3.2.2-160000.9.1.s390x",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-3.2.2-160000.9.1.x86_64",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-x86-64-v3-3.2.2-160000.9.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-3.2.2-160000.9.1.aarch64",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-3.2.2-160000.9.1.ppc64le",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-3.2.2-160000.9.1.s390x",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-3.2.2-160000.9.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-x86-64-v3-3.2.2-160000.9.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-3.2.2-160000.9.1.aarch64",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-3.2.2-160000.9.1.ppc64le",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-3.2.2-160000.9.1.s390x",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-3.2.2-160000.9.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-x86-64-v3-3.2.2-160000.9.1.x86_64",
"openSUSE Leap 16.0:openexr-3.2.2-160000.9.1.aarch64",
"openSUSE Leap 16.0:openexr-3.2.2-160000.9.1.ppc64le",
"openSUSE Leap 16.0:openexr-3.2.2-160000.9.1.s390x",
"openSUSE Leap 16.0:openexr-3.2.2-160000.9.1.x86_64",
"openSUSE Leap 16.0:openexr-devel-3.2.2-160000.9.1.aarch64",
"openSUSE Leap 16.0:openexr-devel-3.2.2-160000.9.1.ppc64le",
"openSUSE Leap 16.0:openexr-devel-3.2.2-160000.9.1.s390x",
"openSUSE Leap 16.0:openexr-devel-3.2.2-160000.9.1.x86_64",
"openSUSE Leap 16.0:openexr-doc-3.2.2-160000.9.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-54920",
"url": "https://www.suse.com/security/cve/CVE-2026-54920"
},
{
"category": "external",
"summary": "SUSE Bug 1269703 for CVE-2026-54920",
"url": "https://bugzilla.suse.com/1269703"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:libIex-3_2-31-3.2.2-160000.9.1.aarch64",
"openSUSE Leap 16.0:libIex-3_2-31-3.2.2-160000.9.1.ppc64le",
"openSUSE Leap 16.0:libIex-3_2-31-3.2.2-160000.9.1.s390x",
"openSUSE Leap 16.0:libIex-3_2-31-3.2.2-160000.9.1.x86_64",
"openSUSE Leap 16.0:libIex-3_2-31-x86-64-v3-3.2.2-160000.9.1.x86_64",
"openSUSE Leap 16.0:libIlmThread-3_2-31-3.2.2-160000.9.1.aarch64",
"openSUSE Leap 16.0:libIlmThread-3_2-31-3.2.2-160000.9.1.ppc64le",
"openSUSE Leap 16.0:libIlmThread-3_2-31-3.2.2-160000.9.1.s390x",
"openSUSE Leap 16.0:libIlmThread-3_2-31-3.2.2-160000.9.1.x86_64",
"openSUSE Leap 16.0:libIlmThread-3_2-31-x86-64-v3-3.2.2-160000.9.1.x86_64",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-3.2.2-160000.9.1.aarch64",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-3.2.2-160000.9.1.ppc64le",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-3.2.2-160000.9.1.s390x",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-3.2.2-160000.9.1.x86_64",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-x86-64-v3-3.2.2-160000.9.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-3.2.2-160000.9.1.aarch64",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-3.2.2-160000.9.1.ppc64le",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-3.2.2-160000.9.1.s390x",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-3.2.2-160000.9.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-x86-64-v3-3.2.2-160000.9.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-3.2.2-160000.9.1.aarch64",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-3.2.2-160000.9.1.ppc64le",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-3.2.2-160000.9.1.s390x",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-3.2.2-160000.9.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-x86-64-v3-3.2.2-160000.9.1.x86_64",
"openSUSE Leap 16.0:openexr-3.2.2-160000.9.1.aarch64",
"openSUSE Leap 16.0:openexr-3.2.2-160000.9.1.ppc64le",
"openSUSE Leap 16.0:openexr-3.2.2-160000.9.1.s390x",
"openSUSE Leap 16.0:openexr-3.2.2-160000.9.1.x86_64",
"openSUSE Leap 16.0:openexr-devel-3.2.2-160000.9.1.aarch64",
"openSUSE Leap 16.0:openexr-devel-3.2.2-160000.9.1.ppc64le",
"openSUSE Leap 16.0:openexr-devel-3.2.2-160000.9.1.s390x",
"openSUSE Leap 16.0:openexr-devel-3.2.2-160000.9.1.x86_64",
"openSUSE Leap 16.0:openexr-doc-3.2.2-160000.9.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:libIex-3_2-31-3.2.2-160000.9.1.aarch64",
"openSUSE Leap 16.0:libIex-3_2-31-3.2.2-160000.9.1.ppc64le",
"openSUSE Leap 16.0:libIex-3_2-31-3.2.2-160000.9.1.s390x",
"openSUSE Leap 16.0:libIex-3_2-31-3.2.2-160000.9.1.x86_64",
"openSUSE Leap 16.0:libIex-3_2-31-x86-64-v3-3.2.2-160000.9.1.x86_64",
"openSUSE Leap 16.0:libIlmThread-3_2-31-3.2.2-160000.9.1.aarch64",
"openSUSE Leap 16.0:libIlmThread-3_2-31-3.2.2-160000.9.1.ppc64le",
"openSUSE Leap 16.0:libIlmThread-3_2-31-3.2.2-160000.9.1.s390x",
"openSUSE Leap 16.0:libIlmThread-3_2-31-3.2.2-160000.9.1.x86_64",
"openSUSE Leap 16.0:libIlmThread-3_2-31-x86-64-v3-3.2.2-160000.9.1.x86_64",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-3.2.2-160000.9.1.aarch64",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-3.2.2-160000.9.1.ppc64le",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-3.2.2-160000.9.1.s390x",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-3.2.2-160000.9.1.x86_64",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-x86-64-v3-3.2.2-160000.9.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-3.2.2-160000.9.1.aarch64",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-3.2.2-160000.9.1.ppc64le",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-3.2.2-160000.9.1.s390x",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-3.2.2-160000.9.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-x86-64-v3-3.2.2-160000.9.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-3.2.2-160000.9.1.aarch64",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-3.2.2-160000.9.1.ppc64le",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-3.2.2-160000.9.1.s390x",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-3.2.2-160000.9.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-x86-64-v3-3.2.2-160000.9.1.x86_64",
"openSUSE Leap 16.0:openexr-3.2.2-160000.9.1.aarch64",
"openSUSE Leap 16.0:openexr-3.2.2-160000.9.1.ppc64le",
"openSUSE Leap 16.0:openexr-3.2.2-160000.9.1.s390x",
"openSUSE Leap 16.0:openexr-3.2.2-160000.9.1.x86_64",
"openSUSE Leap 16.0:openexr-devel-3.2.2-160000.9.1.aarch64",
"openSUSE Leap 16.0:openexr-devel-3.2.2-160000.9.1.ppc64le",
"openSUSE Leap 16.0:openexr-devel-3.2.2-160000.9.1.s390x",
"openSUSE Leap 16.0:openexr-devel-3.2.2-160000.9.1.x86_64",
"openSUSE Leap 16.0:openexr-doc-3.2.2-160000.9.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-14T08:47:36Z",
"details": "moderate"
}
],
"title": "CVE-2026-54920"
},
{
"cve": "CVE-2026-55059",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-55059"
}
],
"notes": [
{
"category": "general",
"text": "OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. Versions prior to 3.2.10, 3.3.12 and 3.4.13 contain a heap out-of-bounds write in Imf_4_0::SampleCountChannel::set(int r, unsigned int newNumSamples[]). The row-based sample-count setter computes the target Y coordinate with dataWindow.min.x instead of dataWindow.min.y. For a valid deep image data window where min.x != min.y, a valid row index can be translated into an invalid Y coordinate, causing writes before the allocated _numSamples buffer. The vulnerability is reachable through the public OpenEXRUtil DeepImage API and can lead to heap corruption and process crashes. This issue has been fixed in versions 3.2.10, 3.3.12 and 3.4.13.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:libIex-3_2-31-3.2.2-160000.9.1.aarch64",
"openSUSE Leap 16.0:libIex-3_2-31-3.2.2-160000.9.1.ppc64le",
"openSUSE Leap 16.0:libIex-3_2-31-3.2.2-160000.9.1.s390x",
"openSUSE Leap 16.0:libIex-3_2-31-3.2.2-160000.9.1.x86_64",
"openSUSE Leap 16.0:libIex-3_2-31-x86-64-v3-3.2.2-160000.9.1.x86_64",
"openSUSE Leap 16.0:libIlmThread-3_2-31-3.2.2-160000.9.1.aarch64",
"openSUSE Leap 16.0:libIlmThread-3_2-31-3.2.2-160000.9.1.ppc64le",
"openSUSE Leap 16.0:libIlmThread-3_2-31-3.2.2-160000.9.1.s390x",
"openSUSE Leap 16.0:libIlmThread-3_2-31-3.2.2-160000.9.1.x86_64",
"openSUSE Leap 16.0:libIlmThread-3_2-31-x86-64-v3-3.2.2-160000.9.1.x86_64",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-3.2.2-160000.9.1.aarch64",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-3.2.2-160000.9.1.ppc64le",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-3.2.2-160000.9.1.s390x",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-3.2.2-160000.9.1.x86_64",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-x86-64-v3-3.2.2-160000.9.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-3.2.2-160000.9.1.aarch64",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-3.2.2-160000.9.1.ppc64le",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-3.2.2-160000.9.1.s390x",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-3.2.2-160000.9.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-x86-64-v3-3.2.2-160000.9.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-3.2.2-160000.9.1.aarch64",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-3.2.2-160000.9.1.ppc64le",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-3.2.2-160000.9.1.s390x",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-3.2.2-160000.9.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-x86-64-v3-3.2.2-160000.9.1.x86_64",
"openSUSE Leap 16.0:openexr-3.2.2-160000.9.1.aarch64",
"openSUSE Leap 16.0:openexr-3.2.2-160000.9.1.ppc64le",
"openSUSE Leap 16.0:openexr-3.2.2-160000.9.1.s390x",
"openSUSE Leap 16.0:openexr-3.2.2-160000.9.1.x86_64",
"openSUSE Leap 16.0:openexr-devel-3.2.2-160000.9.1.aarch64",
"openSUSE Leap 16.0:openexr-devel-3.2.2-160000.9.1.ppc64le",
"openSUSE Leap 16.0:openexr-devel-3.2.2-160000.9.1.s390x",
"openSUSE Leap 16.0:openexr-devel-3.2.2-160000.9.1.x86_64",
"openSUSE Leap 16.0:openexr-doc-3.2.2-160000.9.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-55059",
"url": "https://www.suse.com/security/cve/CVE-2026-55059"
},
{
"category": "external",
"summary": "SUSE Bug 1269702 for CVE-2026-55059",
"url": "https://bugzilla.suse.com/1269702"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:libIex-3_2-31-3.2.2-160000.9.1.aarch64",
"openSUSE Leap 16.0:libIex-3_2-31-3.2.2-160000.9.1.ppc64le",
"openSUSE Leap 16.0:libIex-3_2-31-3.2.2-160000.9.1.s390x",
"openSUSE Leap 16.0:libIex-3_2-31-3.2.2-160000.9.1.x86_64",
"openSUSE Leap 16.0:libIex-3_2-31-x86-64-v3-3.2.2-160000.9.1.x86_64",
"openSUSE Leap 16.0:libIlmThread-3_2-31-3.2.2-160000.9.1.aarch64",
"openSUSE Leap 16.0:libIlmThread-3_2-31-3.2.2-160000.9.1.ppc64le",
"openSUSE Leap 16.0:libIlmThread-3_2-31-3.2.2-160000.9.1.s390x",
"openSUSE Leap 16.0:libIlmThread-3_2-31-3.2.2-160000.9.1.x86_64",
"openSUSE Leap 16.0:libIlmThread-3_2-31-x86-64-v3-3.2.2-160000.9.1.x86_64",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-3.2.2-160000.9.1.aarch64",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-3.2.2-160000.9.1.ppc64le",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-3.2.2-160000.9.1.s390x",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-3.2.2-160000.9.1.x86_64",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-x86-64-v3-3.2.2-160000.9.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-3.2.2-160000.9.1.aarch64",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-3.2.2-160000.9.1.ppc64le",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-3.2.2-160000.9.1.s390x",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-3.2.2-160000.9.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-x86-64-v3-3.2.2-160000.9.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-3.2.2-160000.9.1.aarch64",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-3.2.2-160000.9.1.ppc64le",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-3.2.2-160000.9.1.s390x",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-3.2.2-160000.9.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-x86-64-v3-3.2.2-160000.9.1.x86_64",
"openSUSE Leap 16.0:openexr-3.2.2-160000.9.1.aarch64",
"openSUSE Leap 16.0:openexr-3.2.2-160000.9.1.ppc64le",
"openSUSE Leap 16.0:openexr-3.2.2-160000.9.1.s390x",
"openSUSE Leap 16.0:openexr-3.2.2-160000.9.1.x86_64",
"openSUSE Leap 16.0:openexr-devel-3.2.2-160000.9.1.aarch64",
"openSUSE Leap 16.0:openexr-devel-3.2.2-160000.9.1.ppc64le",
"openSUSE Leap 16.0:openexr-devel-3.2.2-160000.9.1.s390x",
"openSUSE Leap 16.0:openexr-devel-3.2.2-160000.9.1.x86_64",
"openSUSE Leap 16.0:openexr-doc-3.2.2-160000.9.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:libIex-3_2-31-3.2.2-160000.9.1.aarch64",
"openSUSE Leap 16.0:libIex-3_2-31-3.2.2-160000.9.1.ppc64le",
"openSUSE Leap 16.0:libIex-3_2-31-3.2.2-160000.9.1.s390x",
"openSUSE Leap 16.0:libIex-3_2-31-3.2.2-160000.9.1.x86_64",
"openSUSE Leap 16.0:libIex-3_2-31-x86-64-v3-3.2.2-160000.9.1.x86_64",
"openSUSE Leap 16.0:libIlmThread-3_2-31-3.2.2-160000.9.1.aarch64",
"openSUSE Leap 16.0:libIlmThread-3_2-31-3.2.2-160000.9.1.ppc64le",
"openSUSE Leap 16.0:libIlmThread-3_2-31-3.2.2-160000.9.1.s390x",
"openSUSE Leap 16.0:libIlmThread-3_2-31-3.2.2-160000.9.1.x86_64",
"openSUSE Leap 16.0:libIlmThread-3_2-31-x86-64-v3-3.2.2-160000.9.1.x86_64",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-3.2.2-160000.9.1.aarch64",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-3.2.2-160000.9.1.ppc64le",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-3.2.2-160000.9.1.s390x",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-3.2.2-160000.9.1.x86_64",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-x86-64-v3-3.2.2-160000.9.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-3.2.2-160000.9.1.aarch64",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-3.2.2-160000.9.1.ppc64le",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-3.2.2-160000.9.1.s390x",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-3.2.2-160000.9.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-x86-64-v3-3.2.2-160000.9.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-3.2.2-160000.9.1.aarch64",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-3.2.2-160000.9.1.ppc64le",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-3.2.2-160000.9.1.s390x",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-3.2.2-160000.9.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-x86-64-v3-3.2.2-160000.9.1.x86_64",
"openSUSE Leap 16.0:openexr-3.2.2-160000.9.1.aarch64",
"openSUSE Leap 16.0:openexr-3.2.2-160000.9.1.ppc64le",
"openSUSE Leap 16.0:openexr-3.2.2-160000.9.1.s390x",
"openSUSE Leap 16.0:openexr-3.2.2-160000.9.1.x86_64",
"openSUSE Leap 16.0:openexr-devel-3.2.2-160000.9.1.aarch64",
"openSUSE Leap 16.0:openexr-devel-3.2.2-160000.9.1.ppc64le",
"openSUSE Leap 16.0:openexr-devel-3.2.2-160000.9.1.s390x",
"openSUSE Leap 16.0:openexr-devel-3.2.2-160000.9.1.x86_64",
"openSUSE Leap 16.0:openexr-doc-3.2.2-160000.9.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-14T08:47:36Z",
"details": "moderate"
}
],
"title": "CVE-2026-55059"
},
{
"cve": "CVE-2026-55373",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-55373"
}
],
"notes": [
{
"category": "general",
"text": "OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. Versions prior to 3.2.10, 3.3.12, and 3.4.13 contain an infinite-loop vulnerability in SampleCountChannel. The helper roundListSizeUp() rounds a sample-list size up to the next power of two using repeated unsigned left shifts, which terminates for normal values but fails for UINT_MAX: the sequence reaches 0x80000000, and the next left shift wraps the 32-bit value to 0. Because 0 remains less than UINT_MAX, the loop never progresses and never exits. The bug is reachable through public OpenEXRUtil APIs, either by editing the sample-count buffer through SampleCountChannel::Edit (whose destructor calls endEdit()) or by calling SampleCountChannel::set(x, y, UINT_MAX) on a valid pixel. This issue has been fixed in versions 3.2.10, 3.3.12, and 3.4.13.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:libIex-3_2-31-3.2.2-160000.9.1.aarch64",
"openSUSE Leap 16.0:libIex-3_2-31-3.2.2-160000.9.1.ppc64le",
"openSUSE Leap 16.0:libIex-3_2-31-3.2.2-160000.9.1.s390x",
"openSUSE Leap 16.0:libIex-3_2-31-3.2.2-160000.9.1.x86_64",
"openSUSE Leap 16.0:libIex-3_2-31-x86-64-v3-3.2.2-160000.9.1.x86_64",
"openSUSE Leap 16.0:libIlmThread-3_2-31-3.2.2-160000.9.1.aarch64",
"openSUSE Leap 16.0:libIlmThread-3_2-31-3.2.2-160000.9.1.ppc64le",
"openSUSE Leap 16.0:libIlmThread-3_2-31-3.2.2-160000.9.1.s390x",
"openSUSE Leap 16.0:libIlmThread-3_2-31-3.2.2-160000.9.1.x86_64",
"openSUSE Leap 16.0:libIlmThread-3_2-31-x86-64-v3-3.2.2-160000.9.1.x86_64",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-3.2.2-160000.9.1.aarch64",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-3.2.2-160000.9.1.ppc64le",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-3.2.2-160000.9.1.s390x",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-3.2.2-160000.9.1.x86_64",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-x86-64-v3-3.2.2-160000.9.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-3.2.2-160000.9.1.aarch64",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-3.2.2-160000.9.1.ppc64le",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-3.2.2-160000.9.1.s390x",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-3.2.2-160000.9.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-x86-64-v3-3.2.2-160000.9.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-3.2.2-160000.9.1.aarch64",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-3.2.2-160000.9.1.ppc64le",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-3.2.2-160000.9.1.s390x",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-3.2.2-160000.9.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-x86-64-v3-3.2.2-160000.9.1.x86_64",
"openSUSE Leap 16.0:openexr-3.2.2-160000.9.1.aarch64",
"openSUSE Leap 16.0:openexr-3.2.2-160000.9.1.ppc64le",
"openSUSE Leap 16.0:openexr-3.2.2-160000.9.1.s390x",
"openSUSE Leap 16.0:openexr-3.2.2-160000.9.1.x86_64",
"openSUSE Leap 16.0:openexr-devel-3.2.2-160000.9.1.aarch64",
"openSUSE Leap 16.0:openexr-devel-3.2.2-160000.9.1.ppc64le",
"openSUSE Leap 16.0:openexr-devel-3.2.2-160000.9.1.s390x",
"openSUSE Leap 16.0:openexr-devel-3.2.2-160000.9.1.x86_64",
"openSUSE Leap 16.0:openexr-doc-3.2.2-160000.9.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-55373",
"url": "https://www.suse.com/security/cve/CVE-2026-55373"
},
{
"category": "external",
"summary": "SUSE Bug 1269701 for CVE-2026-55373",
"url": "https://bugzilla.suse.com/1269701"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:libIex-3_2-31-3.2.2-160000.9.1.aarch64",
"openSUSE Leap 16.0:libIex-3_2-31-3.2.2-160000.9.1.ppc64le",
"openSUSE Leap 16.0:libIex-3_2-31-3.2.2-160000.9.1.s390x",
"openSUSE Leap 16.0:libIex-3_2-31-3.2.2-160000.9.1.x86_64",
"openSUSE Leap 16.0:libIex-3_2-31-x86-64-v3-3.2.2-160000.9.1.x86_64",
"openSUSE Leap 16.0:libIlmThread-3_2-31-3.2.2-160000.9.1.aarch64",
"openSUSE Leap 16.0:libIlmThread-3_2-31-3.2.2-160000.9.1.ppc64le",
"openSUSE Leap 16.0:libIlmThread-3_2-31-3.2.2-160000.9.1.s390x",
"openSUSE Leap 16.0:libIlmThread-3_2-31-3.2.2-160000.9.1.x86_64",
"openSUSE Leap 16.0:libIlmThread-3_2-31-x86-64-v3-3.2.2-160000.9.1.x86_64",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-3.2.2-160000.9.1.aarch64",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-3.2.2-160000.9.1.ppc64le",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-3.2.2-160000.9.1.s390x",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-3.2.2-160000.9.1.x86_64",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-x86-64-v3-3.2.2-160000.9.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-3.2.2-160000.9.1.aarch64",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-3.2.2-160000.9.1.ppc64le",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-3.2.2-160000.9.1.s390x",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-3.2.2-160000.9.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-x86-64-v3-3.2.2-160000.9.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-3.2.2-160000.9.1.aarch64",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-3.2.2-160000.9.1.ppc64le",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-3.2.2-160000.9.1.s390x",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-3.2.2-160000.9.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-x86-64-v3-3.2.2-160000.9.1.x86_64",
"openSUSE Leap 16.0:openexr-3.2.2-160000.9.1.aarch64",
"openSUSE Leap 16.0:openexr-3.2.2-160000.9.1.ppc64le",
"openSUSE Leap 16.0:openexr-3.2.2-160000.9.1.s390x",
"openSUSE Leap 16.0:openexr-3.2.2-160000.9.1.x86_64",
"openSUSE Leap 16.0:openexr-devel-3.2.2-160000.9.1.aarch64",
"openSUSE Leap 16.0:openexr-devel-3.2.2-160000.9.1.ppc64le",
"openSUSE Leap 16.0:openexr-devel-3.2.2-160000.9.1.s390x",
"openSUSE Leap 16.0:openexr-devel-3.2.2-160000.9.1.x86_64",
"openSUSE Leap 16.0:openexr-doc-3.2.2-160000.9.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.2,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:libIex-3_2-31-3.2.2-160000.9.1.aarch64",
"openSUSE Leap 16.0:libIex-3_2-31-3.2.2-160000.9.1.ppc64le",
"openSUSE Leap 16.0:libIex-3_2-31-3.2.2-160000.9.1.s390x",
"openSUSE Leap 16.0:libIex-3_2-31-3.2.2-160000.9.1.x86_64",
"openSUSE Leap 16.0:libIex-3_2-31-x86-64-v3-3.2.2-160000.9.1.x86_64",
"openSUSE Leap 16.0:libIlmThread-3_2-31-3.2.2-160000.9.1.aarch64",
"openSUSE Leap 16.0:libIlmThread-3_2-31-3.2.2-160000.9.1.ppc64le",
"openSUSE Leap 16.0:libIlmThread-3_2-31-3.2.2-160000.9.1.s390x",
"openSUSE Leap 16.0:libIlmThread-3_2-31-3.2.2-160000.9.1.x86_64",
"openSUSE Leap 16.0:libIlmThread-3_2-31-x86-64-v3-3.2.2-160000.9.1.x86_64",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-3.2.2-160000.9.1.aarch64",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-3.2.2-160000.9.1.ppc64le",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-3.2.2-160000.9.1.s390x",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-3.2.2-160000.9.1.x86_64",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-x86-64-v3-3.2.2-160000.9.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-3.2.2-160000.9.1.aarch64",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-3.2.2-160000.9.1.ppc64le",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-3.2.2-160000.9.1.s390x",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-3.2.2-160000.9.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-x86-64-v3-3.2.2-160000.9.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-3.2.2-160000.9.1.aarch64",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-3.2.2-160000.9.1.ppc64le",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-3.2.2-160000.9.1.s390x",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-3.2.2-160000.9.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-x86-64-v3-3.2.2-160000.9.1.x86_64",
"openSUSE Leap 16.0:openexr-3.2.2-160000.9.1.aarch64",
"openSUSE Leap 16.0:openexr-3.2.2-160000.9.1.ppc64le",
"openSUSE Leap 16.0:openexr-3.2.2-160000.9.1.s390x",
"openSUSE Leap 16.0:openexr-3.2.2-160000.9.1.x86_64",
"openSUSE Leap 16.0:openexr-devel-3.2.2-160000.9.1.aarch64",
"openSUSE Leap 16.0:openexr-devel-3.2.2-160000.9.1.ppc64le",
"openSUSE Leap 16.0:openexr-devel-3.2.2-160000.9.1.s390x",
"openSUSE Leap 16.0:openexr-devel-3.2.2-160000.9.1.x86_64",
"openSUSE Leap 16.0:openexr-doc-3.2.2-160000.9.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-14T08:47:36Z",
"details": "moderate"
}
],
"title": "CVE-2026-55373"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…