OPENSUSE-SU-2026:21737-1
Vulnerability from csaf_opensuse - Published: 2026-09-02 09:40 - Updated: 2026-09-17 17:43Summary
Security update for openexr
Severity
Important
Notes
Title of the patch: Security update for openexr
Description of the patch: This update for openexr fixes the following issues:
- CVE-2026-59183: unmapped memory access leading to crash due to `int32_t` multiplication overflow in
`unpack_sample_table()` when decoding a crafted deep tiled EXR file (bsc#1276428).
- CVE-2026-59184: out-of-bounds or use-after-free writes when processing a crafted EXR with a nonzero `dataWindow.min`
(bsc#1276849).
- CVE-2026-59186: heap out-of-bounds write on 32-bit/ILP32 builds when a crafted tiled EXR is read through the public
`TiledRgbaInputFile` RGBA API (bsc#1276850).
- CVE-2026-59189: heap out-of-bounds read when processing a deep image that has a non-zero `dataWindow` origin
(bsc#1276855).
- CVE-2026-59981: heap out-of-bounds read when procesing a deep image that has a non-zero `dataWindow` origin
(bsc#1276862).
- CVE-2026-59982: out-of-bounds pointer access when processing a crafted deep EXR that has a non-zero `dataWindow`
origin (bsc#1276853).
- CVE-2026-59983: out-of-bounds read in ILP32 builds when processing a crafted uncompressed deep-tile EXR
(bsc#1276856).
- CVE-2026-59984: out-of-bounds write in ILP32 builds when processing a crafted B44-compressed scanline EXR
(bsc#1276857).
- CVE-2026-59985: out-of-bounds read in ILP32 builds when processing a crafted RLE-compressed EXR
(bsc#1276858).
- CVE-2026-61555: undefined behavior when processing a crafted EXR with an empty `multiView` header attribute
(bsc#1276859).
- CVE-2026-68515: heap out-of-bounds write in `exrmultiview` when combining two specially crafted, individually valid
scanline EXR files whose union `dataWindow` is not aligned to one view's channel subsampling (bsc#1276848).
Patchnames: openSUSE-Leap-16.0-1585
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
5.5 (Medium)
Affected products
Recommended
34 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 16.0:libIex-3_2-31-0:3.2.2-160000.10.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libIex-3_2-31-0:3.2.2-160000.10.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libIex-3_2-31-0:3.2.2-160000.10.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libIex-3_2-31-0:3.2.2-160000.10.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libIex-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libIlmThread-3_2-31-0:3.2.2-160000.10.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libIlmThread-3_2-31-0:3.2.2-160000.10.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libIlmThread-3_2-31-0:3.2.2-160000.10.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libIlmThread-3_2-31-0:3.2.2-160000.10.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libIlmThread-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libOpenEXR-3_2-31-0:3.2.2-160000.10.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libOpenEXR-3_2-31-0:3.2.2-160000.10.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libOpenEXR-3_2-31-0:3.2.2-160000.10.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libOpenEXR-3_2-31-0:3.2.2-160000.10.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libOpenEXR-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libOpenEXRCore-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:openexr-0:3.2.2-160000.10.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:openexr-0:3.2.2-160000.10.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:openexr-0:3.2.2-160000.10.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:openexr-0:3.2.2-160000.10.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:openexr-devel-0:3.2.2-160000.10.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:openexr-devel-0:3.2.2-160000.10.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:openexr-devel-0:3.2.2-160000.10.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:openexr-devel-0:3.2.2-160000.10.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:openexr-doc-0:3.2.2-160000.10.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
7.1 (High)
Affected products
Recommended
34 products, the same list as for
CVE-2026-59183
Threats
Impact
important
7.1 (High)
Affected products
Recommended
34 products, the same list as for
CVE-2026-59183
Threats
Impact
important
7.1 (High)
Affected products
Recommended
34 products, the same list as for
CVE-2026-59183
Threats
Impact
important
7.1 (High)
Affected products
Recommended
34 products, the same list as for
CVE-2026-59183
Threats
Impact
important
7.1 (High)
Affected products
Recommended
34 products, the same list as for
CVE-2026-59183
Threats
Impact
important
5.5 (Medium)
Affected products
Recommended
34 products, the same list as for
CVE-2026-59183
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
34 products, the same list as for
CVE-2026-59183
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
34 products, the same list as for
CVE-2026-59183
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
34 products, the same list as for
CVE-2026-59183
Threats
Impact
moderate
7.1 (High)
Affected products
Recommended
34 products, the same list as for
CVE-2026-59183
Threats
Impact
important
References
46 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for openexr",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for openexr fixes the following issues:\n\n- CVE-2026-59183: unmapped memory access leading to crash due to `int32_t` multiplication overflow in\n `unpack_sample_table()` when decoding a crafted deep tiled EXR file (bsc#1276428).\n- CVE-2026-59184: out-of-bounds or use-after-free writes when processing a crafted EXR with a nonzero `dataWindow.min`\n (bsc#1276849).\n- CVE-2026-59186: heap out-of-bounds write on 32-bit/ILP32 builds when a crafted tiled EXR is read through the public\n `TiledRgbaInputFile` RGBA API (bsc#1276850).\n- CVE-2026-59189: heap out-of-bounds read when processing a deep image that has a non-zero `dataWindow` origin\n (bsc#1276855).\n- CVE-2026-59981: heap out-of-bounds read when procesing a deep image that has a non-zero `dataWindow` origin\n (bsc#1276862).\n- CVE-2026-59982: out-of-bounds pointer access when processing a crafted deep EXR that has a non-zero `dataWindow`\n origin (bsc#1276853).\n- CVE-2026-59983: out-of-bounds read in ILP32 builds when processing a crafted uncompressed deep-tile EXR\n (bsc#1276856).\n- CVE-2026-59984: out-of-bounds write in ILP32 builds when processing a crafted B44-compressed scanline EXR\n (bsc#1276857).\n- CVE-2026-59985: out-of-bounds read in ILP32 builds when processing a crafted RLE-compressed EXR\n (bsc#1276858).\n- CVE-2026-61555: undefined behavior when processing a crafted EXR with an empty `multiView` header attribute\n (bsc#1276859).\n- CVE-2026-68515: heap out-of-bounds write in `exrmultiview` when combining two specially crafted, individually valid\n scanline EXR files whose union `dataWindow` is not aligned to one view\u0027s channel subsampling (bsc#1276848).\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-Leap-16.0-1585",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_21737-1.json"
},
{
"category": "self",
"summary": "SUSE Bug 1276428",
"url": "https://bugzilla.suse.com/1276428"
},
{
"category": "self",
"summary": "SUSE Bug 1276848",
"url": "https://bugzilla.suse.com/1276848"
},
{
"category": "self",
"summary": "SUSE Bug 1276849",
"url": "https://bugzilla.suse.com/1276849"
},
{
"category": "self",
"summary": "SUSE Bug 1276850",
"url": "https://bugzilla.suse.com/1276850"
},
{
"category": "self",
"summary": "SUSE Bug 1276853",
"url": "https://bugzilla.suse.com/1276853"
},
{
"category": "self",
"summary": "SUSE Bug 1276855",
"url": "https://bugzilla.suse.com/1276855"
},
{
"category": "self",
"summary": "SUSE Bug 1276856",
"url": "https://bugzilla.suse.com/1276856"
},
{
"category": "self",
"summary": "SUSE Bug 1276857",
"url": "https://bugzilla.suse.com/1276857"
},
{
"category": "self",
"summary": "SUSE Bug 1276858",
"url": "https://bugzilla.suse.com/1276858"
},
{
"category": "self",
"summary": "SUSE Bug 1276859",
"url": "https://bugzilla.suse.com/1276859"
},
{
"category": "self",
"summary": "SUSE Bug 1276862",
"url": "https://bugzilla.suse.com/1276862"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-59183 page",
"url": "https://www.suse.com/security/cve/CVE-2026-59183/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-59184 page",
"url": "https://www.suse.com/security/cve/CVE-2026-59184/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-59186 page",
"url": "https://www.suse.com/security/cve/CVE-2026-59186/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-59189 page",
"url": "https://www.suse.com/security/cve/CVE-2026-59189/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-59981 page",
"url": "https://www.suse.com/security/cve/CVE-2026-59981/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-59982 page",
"url": "https://www.suse.com/security/cve/CVE-2026-59982/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-59983 page",
"url": "https://www.suse.com/security/cve/CVE-2026-59983/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-59984 page",
"url": "https://www.suse.com/security/cve/CVE-2026-59984/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-59985 page",
"url": "https://www.suse.com/security/cve/CVE-2026-59985/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-61555 page",
"url": "https://www.suse.com/security/cve/CVE-2026-61555/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-68515 page",
"url": "https://www.suse.com/security/cve/CVE-2026-68515/"
}
],
"title": "Security update for openexr",
"tracking": {
"current_release_date": "2026-09-17T17:43:21Z",
"generator": {
"date": "2026-09-02T09:40:22Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2026:21737-1",
"initial_release_date": "2026-09-02T09:40:22Z",
"revision_history": [
{
"date": "2026-09-02T09:40:22Z",
"number": "1",
"summary": "Current version"
},
{
"date": "2026-09-16T20:46:58Z",
"number": "2",
"summary": "unknown changes"
},
{
"date": "2026-09-16T21:47:49Z",
"number": "3",
"summary": "unknown changes"
},
{
"date": "2026-09-17T17:43:21Z",
"number": "4",
"summary": "unknown changes"
}
],
"status": "final",
"version": "4"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "libIex-3_2-31-0:3.2.2-160000.10.1.aarch64",
"product": {
"name": "libIex-3_2-31-0:3.2.2-160000.10.1.aarch64",
"product_id": "libIex-3_2-31-0:3.2.2-160000.10.1.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:openexr:openexr:3.2.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libIex-3_2-31@3.2.2-160000.10.1?arch=aarch64\u0026upstream=openexr-0:3.2.2-160000.10.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libIlmThread-3_2-31-0:3.2.2-160000.10.1.aarch64",
"product": {
"name": "libIlmThread-3_2-31-0:3.2.2-160000.10.1.aarch64",
"product_id": "libIlmThread-3_2-31-0:3.2.2-160000.10.1.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:openexr:openexr:3.2.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libIlmThread-3_2-31@3.2.2-160000.10.1?arch=aarch64\u0026upstream=openexr-0:3.2.2-160000.10.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libOpenEXR-3_2-31-0:3.2.2-160000.10.1.aarch64",
"product": {
"name": "libOpenEXR-3_2-31-0:3.2.2-160000.10.1.aarch64",
"product_id": "libOpenEXR-3_2-31-0:3.2.2-160000.10.1.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:openexr:openexr:3.2.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libOpenEXR-3_2-31@3.2.2-160000.10.1?arch=aarch64\u0026upstream=openexr-0:3.2.2-160000.10.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.aarch64",
"product": {
"name": "libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.aarch64",
"product_id": "libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:openexr:openexr:3.2.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libOpenEXRCore-3_2-31@3.2.2-160000.10.1?arch=aarch64\u0026upstream=openexr-0:3.2.2-160000.10.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.aarch64",
"product": {
"name": "libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.aarch64",
"product_id": "libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:openexr:openexr:3.2.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libOpenEXRUtil-3_2-31@3.2.2-160000.10.1?arch=aarch64\u0026upstream=openexr-0:3.2.2-160000.10.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "openexr-0:3.2.2-160000.10.1.aarch64",
"product": {
"name": "openexr-0:3.2.2-160000.10.1.aarch64",
"product_id": "openexr-0:3.2.2-160000.10.1.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:openexr:openexr:3.2.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/openexr@3.2.2-160000.10.1?arch=aarch64\u0026upstream=openexr-0:3.2.2-160000.10.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "openexr-devel-0:3.2.2-160000.10.1.aarch64",
"product": {
"name": "openexr-devel-0:3.2.2-160000.10.1.aarch64",
"product_id": "openexr-devel-0:3.2.2-160000.10.1.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:openexr:openexr:3.2.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/openexr-devel@3.2.2-160000.10.1?arch=aarch64\u0026upstream=openexr-0:3.2.2-160000.10.1.src.rpm"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "openexr-doc-0:3.2.2-160000.10.1.noarch",
"product": {
"name": "openexr-doc-0:3.2.2-160000.10.1.noarch",
"product_id": "openexr-doc-0:3.2.2-160000.10.1.noarch",
"product_identification_helper": {
"cpe": "cpe:2.3:a:openexr:openexr:3.2.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/openexr-doc@3.2.2-160000.10.1?arch=noarch\u0026upstream=openexr-0:3.2.2-160000.10.1.src.rpm"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "libIex-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"product": {
"name": "libIex-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"product_id": "libIex-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:a:openexr:openexr:3.2.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libIex-3_2-31@3.2.2-160000.10.1?arch=ppc64le\u0026upstream=openexr-0:3.2.2-160000.10.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libIlmThread-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"product": {
"name": "libIlmThread-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"product_id": "libIlmThread-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:a:openexr:openexr:3.2.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libIlmThread-3_2-31@3.2.2-160000.10.1?arch=ppc64le\u0026upstream=openexr-0:3.2.2-160000.10.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libOpenEXR-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"product": {
"name": "libOpenEXR-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"product_id": "libOpenEXR-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:a:openexr:openexr:3.2.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libOpenEXR-3_2-31@3.2.2-160000.10.1?arch=ppc64le\u0026upstream=openexr-0:3.2.2-160000.10.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"product": {
"name": "libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"product_id": "libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:a:openexr:openexr:3.2.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libOpenEXRCore-3_2-31@3.2.2-160000.10.1?arch=ppc64le\u0026upstream=openexr-0:3.2.2-160000.10.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"product": {
"name": "libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"product_id": "libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:a:openexr:openexr:3.2.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libOpenEXRUtil-3_2-31@3.2.2-160000.10.1?arch=ppc64le\u0026upstream=openexr-0:3.2.2-160000.10.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "openexr-0:3.2.2-160000.10.1.ppc64le",
"product": {
"name": "openexr-0:3.2.2-160000.10.1.ppc64le",
"product_id": "openexr-0:3.2.2-160000.10.1.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:a:openexr:openexr:3.2.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/openexr@3.2.2-160000.10.1?arch=ppc64le\u0026upstream=openexr-0:3.2.2-160000.10.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "openexr-devel-0:3.2.2-160000.10.1.ppc64le",
"product": {
"name": "openexr-devel-0:3.2.2-160000.10.1.ppc64le",
"product_id": "openexr-devel-0:3.2.2-160000.10.1.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:a:openexr:openexr:3.2.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/openexr-devel@3.2.2-160000.10.1?arch=ppc64le\u0026upstream=openexr-0:3.2.2-160000.10.1.src.rpm"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "libIex-3_2-31-0:3.2.2-160000.10.1.s390x",
"product": {
"name": "libIex-3_2-31-0:3.2.2-160000.10.1.s390x",
"product_id": "libIex-3_2-31-0:3.2.2-160000.10.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:openexr:openexr:3.2.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libIex-3_2-31@3.2.2-160000.10.1?arch=s390x\u0026upstream=openexr-0:3.2.2-160000.10.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libIlmThread-3_2-31-0:3.2.2-160000.10.1.s390x",
"product": {
"name": "libIlmThread-3_2-31-0:3.2.2-160000.10.1.s390x",
"product_id": "libIlmThread-3_2-31-0:3.2.2-160000.10.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:openexr:openexr:3.2.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libIlmThread-3_2-31@3.2.2-160000.10.1?arch=s390x\u0026upstream=openexr-0:3.2.2-160000.10.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libOpenEXR-3_2-31-0:3.2.2-160000.10.1.s390x",
"product": {
"name": "libOpenEXR-3_2-31-0:3.2.2-160000.10.1.s390x",
"product_id": "libOpenEXR-3_2-31-0:3.2.2-160000.10.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:openexr:openexr:3.2.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libOpenEXR-3_2-31@3.2.2-160000.10.1?arch=s390x\u0026upstream=openexr-0:3.2.2-160000.10.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.s390x",
"product": {
"name": "libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.s390x",
"product_id": "libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:openexr:openexr:3.2.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libOpenEXRCore-3_2-31@3.2.2-160000.10.1?arch=s390x\u0026upstream=openexr-0:3.2.2-160000.10.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.s390x",
"product": {
"name": "libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.s390x",
"product_id": "libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:openexr:openexr:3.2.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libOpenEXRUtil-3_2-31@3.2.2-160000.10.1?arch=s390x\u0026upstream=openexr-0:3.2.2-160000.10.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "openexr-0:3.2.2-160000.10.1.s390x",
"product": {
"name": "openexr-0:3.2.2-160000.10.1.s390x",
"product_id": "openexr-0:3.2.2-160000.10.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:openexr:openexr:3.2.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/openexr@3.2.2-160000.10.1?arch=s390x\u0026upstream=openexr-0:3.2.2-160000.10.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "openexr-devel-0:3.2.2-160000.10.1.s390x",
"product": {
"name": "openexr-devel-0:3.2.2-160000.10.1.s390x",
"product_id": "openexr-devel-0:3.2.2-160000.10.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:openexr:openexr:3.2.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/openexr-devel@3.2.2-160000.10.1?arch=s390x\u0026upstream=openexr-0:3.2.2-160000.10.1.src.rpm"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "libIex-3_2-31-0:3.2.2-160000.10.1.x86_64",
"product": {
"name": "libIex-3_2-31-0:3.2.2-160000.10.1.x86_64",
"product_id": "libIex-3_2-31-0:3.2.2-160000.10.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:openexr:openexr:3.2.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libIex-3_2-31@3.2.2-160000.10.1?arch=x86_64\u0026upstream=openexr-0:3.2.2-160000.10.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libIex-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"product": {
"name": "libIex-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"product_id": "libIex-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:openexr:openexr:3.2.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libIex-3_2-31-x86-64-v3@3.2.2-160000.10.1?arch=x86_64\u0026upstream=openexr-0:3.2.2-160000.10.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libIlmThread-3_2-31-0:3.2.2-160000.10.1.x86_64",
"product": {
"name": "libIlmThread-3_2-31-0:3.2.2-160000.10.1.x86_64",
"product_id": "libIlmThread-3_2-31-0:3.2.2-160000.10.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:openexr:openexr:3.2.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libIlmThread-3_2-31@3.2.2-160000.10.1?arch=x86_64\u0026upstream=openexr-0:3.2.2-160000.10.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libIlmThread-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"product": {
"name": "libIlmThread-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"product_id": "libIlmThread-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:openexr:openexr:3.2.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libIlmThread-3_2-31-x86-64-v3@3.2.2-160000.10.1?arch=x86_64\u0026upstream=openexr-0:3.2.2-160000.10.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libOpenEXR-3_2-31-0:3.2.2-160000.10.1.x86_64",
"product": {
"name": "libOpenEXR-3_2-31-0:3.2.2-160000.10.1.x86_64",
"product_id": "libOpenEXR-3_2-31-0:3.2.2-160000.10.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:openexr:openexr:3.2.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libOpenEXR-3_2-31@3.2.2-160000.10.1?arch=x86_64\u0026upstream=openexr-0:3.2.2-160000.10.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libOpenEXR-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"product": {
"name": "libOpenEXR-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"product_id": "libOpenEXR-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:openexr:openexr:3.2.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libOpenEXR-3_2-31-x86-64-v3@3.2.2-160000.10.1?arch=x86_64\u0026upstream=openexr-0:3.2.2-160000.10.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.x86_64",
"product": {
"name": "libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.x86_64",
"product_id": "libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:openexr:openexr:3.2.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libOpenEXRCore-3_2-31@3.2.2-160000.10.1?arch=x86_64\u0026upstream=openexr-0:3.2.2-160000.10.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libOpenEXRCore-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"product": {
"name": "libOpenEXRCore-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"product_id": "libOpenEXRCore-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:openexr:openexr:3.2.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libOpenEXRCore-3_2-31-x86-64-v3@3.2.2-160000.10.1?arch=x86_64\u0026upstream=openexr-0:3.2.2-160000.10.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.x86_64",
"product": {
"name": "libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.x86_64",
"product_id": "libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:openexr:openexr:3.2.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libOpenEXRUtil-3_2-31@3.2.2-160000.10.1?arch=x86_64\u0026upstream=openexr-0:3.2.2-160000.10.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "libOpenEXRUtil-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"product": {
"name": "libOpenEXRUtil-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"product_id": "libOpenEXRUtil-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:openexr:openexr:3.2.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/libOpenEXRUtil-3_2-31-x86-64-v3@3.2.2-160000.10.1?arch=x86_64\u0026upstream=openexr-0:3.2.2-160000.10.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "openexr-0:3.2.2-160000.10.1.x86_64",
"product": {
"name": "openexr-0:3.2.2-160000.10.1.x86_64",
"product_id": "openexr-0:3.2.2-160000.10.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:openexr:openexr:3.2.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/openexr@3.2.2-160000.10.1?arch=x86_64\u0026upstream=openexr-0:3.2.2-160000.10.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "openexr-devel-0:3.2.2-160000.10.1.x86_64",
"product": {
"name": "openexr-devel-0:3.2.2-160000.10.1.x86_64",
"product_id": "openexr-devel-0:3.2.2-160000.10.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:openexr:openexr:3.2.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/openexr-devel@3.2.2-160000.10.1?arch=x86_64\u0026upstream=openexr-0:3.2.2-160000.10.1.src.rpm"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Leap 16.0",
"product": {
"name": "openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0"
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "libIex-3_2-31-0:3.2.2-160000.10.1.aarch64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libIex-3_2-31-0:3.2.2-160000.10.1.aarch64"
},
"product_reference": "libIex-3_2-31-0:3.2.2-160000.10.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libIex-3_2-31-0:3.2.2-160000.10.1.ppc64le as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libIex-3_2-31-0:3.2.2-160000.10.1.ppc64le"
},
"product_reference": "libIex-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libIex-3_2-31-0:3.2.2-160000.10.1.s390x as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libIex-3_2-31-0:3.2.2-160000.10.1.s390x"
},
"product_reference": "libIex-3_2-31-0:3.2.2-160000.10.1.s390x",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libIex-3_2-31-0:3.2.2-160000.10.1.x86_64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libIex-3_2-31-0:3.2.2-160000.10.1.x86_64"
},
"product_reference": "libIex-3_2-31-0:3.2.2-160000.10.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libIex-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libIex-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64"
},
"product_reference": "libIex-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libIlmThread-3_2-31-0:3.2.2-160000.10.1.aarch64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libIlmThread-3_2-31-0:3.2.2-160000.10.1.aarch64"
},
"product_reference": "libIlmThread-3_2-31-0:3.2.2-160000.10.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libIlmThread-3_2-31-0:3.2.2-160000.10.1.ppc64le as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libIlmThread-3_2-31-0:3.2.2-160000.10.1.ppc64le"
},
"product_reference": "libIlmThread-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libIlmThread-3_2-31-0:3.2.2-160000.10.1.s390x as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libIlmThread-3_2-31-0:3.2.2-160000.10.1.s390x"
},
"product_reference": "libIlmThread-3_2-31-0:3.2.2-160000.10.1.s390x",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libIlmThread-3_2-31-0:3.2.2-160000.10.1.x86_64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libIlmThread-3_2-31-0:3.2.2-160000.10.1.x86_64"
},
"product_reference": "libIlmThread-3_2-31-0:3.2.2-160000.10.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libIlmThread-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libIlmThread-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64"
},
"product_reference": "libIlmThread-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libOpenEXR-3_2-31-0:3.2.2-160000.10.1.aarch64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libOpenEXR-3_2-31-0:3.2.2-160000.10.1.aarch64"
},
"product_reference": "libOpenEXR-3_2-31-0:3.2.2-160000.10.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libOpenEXR-3_2-31-0:3.2.2-160000.10.1.ppc64le as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libOpenEXR-3_2-31-0:3.2.2-160000.10.1.ppc64le"
},
"product_reference": "libOpenEXR-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libOpenEXR-3_2-31-0:3.2.2-160000.10.1.s390x as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libOpenEXR-3_2-31-0:3.2.2-160000.10.1.s390x"
},
"product_reference": "libOpenEXR-3_2-31-0:3.2.2-160000.10.1.s390x",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libOpenEXR-3_2-31-0:3.2.2-160000.10.1.x86_64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libOpenEXR-3_2-31-0:3.2.2-160000.10.1.x86_64"
},
"product_reference": "libOpenEXR-3_2-31-0:3.2.2-160000.10.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libOpenEXR-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libOpenEXR-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64"
},
"product_reference": "libOpenEXR-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.aarch64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.aarch64"
},
"product_reference": "libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.ppc64le as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.ppc64le"
},
"product_reference": "libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.s390x as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.s390x"
},
"product_reference": "libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.s390x",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.x86_64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.x86_64"
},
"product_reference": "libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libOpenEXRCore-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libOpenEXRCore-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64"
},
"product_reference": "libOpenEXRCore-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.aarch64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.aarch64"
},
"product_reference": "libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.ppc64le as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.ppc64le"
},
"product_reference": "libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.s390x as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.s390x"
},
"product_reference": "libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.s390x",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.x86_64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.x86_64"
},
"product_reference": "libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libOpenEXRUtil-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64"
},
"product_reference": "libOpenEXRUtil-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openexr-0:3.2.2-160000.10.1.aarch64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:openexr-0:3.2.2-160000.10.1.aarch64"
},
"product_reference": "openexr-0:3.2.2-160000.10.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openexr-0:3.2.2-160000.10.1.ppc64le as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:openexr-0:3.2.2-160000.10.1.ppc64le"
},
"product_reference": "openexr-0:3.2.2-160000.10.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openexr-0:3.2.2-160000.10.1.s390x as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:openexr-0:3.2.2-160000.10.1.s390x"
},
"product_reference": "openexr-0:3.2.2-160000.10.1.s390x",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openexr-0:3.2.2-160000.10.1.x86_64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:openexr-0:3.2.2-160000.10.1.x86_64"
},
"product_reference": "openexr-0:3.2.2-160000.10.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openexr-devel-0:3.2.2-160000.10.1.aarch64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:openexr-devel-0:3.2.2-160000.10.1.aarch64"
},
"product_reference": "openexr-devel-0:3.2.2-160000.10.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openexr-devel-0:3.2.2-160000.10.1.ppc64le as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:openexr-devel-0:3.2.2-160000.10.1.ppc64le"
},
"product_reference": "openexr-devel-0:3.2.2-160000.10.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openexr-devel-0:3.2.2-160000.10.1.s390x as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:openexr-devel-0:3.2.2-160000.10.1.s390x"
},
"product_reference": "openexr-devel-0:3.2.2-160000.10.1.s390x",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openexr-devel-0:3.2.2-160000.10.1.x86_64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:openexr-devel-0:3.2.2-160000.10.1.x86_64"
},
"product_reference": "openexr-devel-0:3.2.2-160000.10.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openexr-doc-0:3.2.2-160000.10.1.noarch as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:openexr-doc-0:3.2.2-160000.10.1.noarch"
},
"product_reference": "openexr-doc-0:3.2.2-160000.10.1.noarch",
"relates_to_product_reference": "openSUSE Leap 16.0"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-59183",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-59183"
}
],
"notes": [
{
"category": "general",
"text": "OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. In versions 3.1.0 through 3.2.10, 3.3.0 through 3.3.12, and 3.4.0 through 3.4.13, an int32_t multiplication in OpenEXRCore\u0027s unpack_sample_table() can overflow while decoding a crafted deep tiled EXR file, producing an invalid pointer that leads to a read from an unmapped memory address and a crash. Because the overflow occurs in the standard decoding path (exr_decoding_run), any application that decodes deep tiled EXR files is affected. This issue is fixed in versions 3.2.11, 3.3.13, and 3.4.14.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:libIex-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libIex-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libIex-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libIex-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libIex-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libIlmThread-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libIlmThread-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libIlmThread-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libIlmThread-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libIlmThread-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:openexr-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:openexr-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:openexr-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:openexr-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:openexr-devel-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:openexr-devel-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:openexr-devel-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:openexr-devel-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:openexr-doc-0:3.2.2-160000.10.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-59183",
"url": "https://www.suse.com/security/cve/CVE-2026-59183"
},
{
"category": "external",
"summary": "SUSE Bug 1276428 for CVE-2026-59183",
"url": "https://bugzilla.suse.com/1276428"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:libIex-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libIex-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libIex-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libIex-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libIex-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libIlmThread-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libIlmThread-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libIlmThread-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libIlmThread-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libIlmThread-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:openexr-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:openexr-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:openexr-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:openexr-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:openexr-devel-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:openexr-devel-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:openexr-devel-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:openexr-devel-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:openexr-doc-0:3.2.2-160000.10.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:libIex-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libIex-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libIex-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libIex-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libIex-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libIlmThread-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libIlmThread-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libIlmThread-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libIlmThread-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libIlmThread-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:openexr-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:openexr-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:openexr-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:openexr-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:openexr-devel-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:openexr-devel-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:openexr-devel-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:openexr-devel-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:openexr-doc-0:3.2.2-160000.10.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-02T09:40:22Z",
"details": "moderate"
}
],
"title": "CVE-2026-59183"
},
{
"cve": "CVE-2026-59184",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-59184"
}
],
"notes": [
{
"category": "general",
"text": "OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. Versions before 3.2.11, 3.3.0 through 3.3.12, and 3.4.0 through 3.4.13 allow a crafted EXR with a nonzero dataWindow.min to make TypedFlatImageChannel::row() return an invalid heap pointer, causing out-of-bounds or use-after-free writes. This occurs when an application writes rows through FlatHalfChannel::row(). Affected consumers are tools, converters, render pipeline components, or image-processing services that accept untrusted EXR files and use FlatHalfChannel::row() on loaded images. This issue is fixed in versions 3.2.11, 3.3.13, and 3.4.14.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:libIex-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libIex-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libIex-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libIex-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libIex-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libIlmThread-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libIlmThread-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libIlmThread-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libIlmThread-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libIlmThread-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:openexr-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:openexr-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:openexr-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:openexr-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:openexr-devel-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:openexr-devel-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:openexr-devel-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:openexr-devel-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:openexr-doc-0:3.2.2-160000.10.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-59184",
"url": "https://www.suse.com/security/cve/CVE-2026-59184"
},
{
"category": "external",
"summary": "SUSE Bug 1276849 for CVE-2026-59184",
"url": "https://bugzilla.suse.com/1276849"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:libIex-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libIex-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libIex-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libIex-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libIex-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libIlmThread-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libIlmThread-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libIlmThread-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libIlmThread-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libIlmThread-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:openexr-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:openexr-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:openexr-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:openexr-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:openexr-devel-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:openexr-devel-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:openexr-devel-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:openexr-devel-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:openexr-doc-0:3.2.2-160000.10.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:libIex-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libIex-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libIex-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libIex-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libIex-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libIlmThread-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libIlmThread-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libIlmThread-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libIlmThread-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libIlmThread-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:openexr-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:openexr-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:openexr-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:openexr-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:openexr-devel-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:openexr-devel-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:openexr-devel-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:openexr-devel-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:openexr-doc-0:3.2.2-160000.10.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-02T09:40:22Z",
"details": "important"
}
],
"title": "CVE-2026-59184"
},
{
"cve": "CVE-2026-59186",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-59186"
}
],
"notes": [
{
"category": "general",
"text": "OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. In versions before 3.2.11, 3.3.0 through 3.3.12, and 3.4.0 through 3.4.13, a crafted tiled EXR can trigger a heap out-of-bounds write on 32-bit/ILP32 builds when read through the public TiledRgbaInputFile RGBA API. The file uses a small 40x40 dataWindow but a 65537x65537 tile size. On ILP32, the Array2D\u003cRgba\u003e tile-conversion buffer size calculation overflows, allocates a much smaller heap buffer, and tile decode writes past that allocation. This issue is fixed in versions 3.2.11, 3.3.13, and 3.4.14.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:libIex-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libIex-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libIex-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libIex-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libIex-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libIlmThread-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libIlmThread-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libIlmThread-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libIlmThread-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libIlmThread-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:openexr-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:openexr-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:openexr-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:openexr-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:openexr-devel-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:openexr-devel-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:openexr-devel-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:openexr-devel-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:openexr-doc-0:3.2.2-160000.10.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-59186",
"url": "https://www.suse.com/security/cve/CVE-2026-59186"
},
{
"category": "external",
"summary": "SUSE Bug 1276850 for CVE-2026-59186",
"url": "https://bugzilla.suse.com/1276850"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:libIex-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libIex-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libIex-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libIex-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libIex-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libIlmThread-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libIlmThread-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libIlmThread-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libIlmThread-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libIlmThread-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:openexr-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:openexr-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:openexr-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:openexr-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:openexr-devel-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:openexr-devel-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:openexr-devel-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:openexr-devel-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:openexr-doc-0:3.2.2-160000.10.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:libIex-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libIex-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libIex-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libIex-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libIex-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libIlmThread-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libIlmThread-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libIlmThread-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libIlmThread-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libIlmThread-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:openexr-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:openexr-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:openexr-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:openexr-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:openexr-devel-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:openexr-devel-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:openexr-devel-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:openexr-devel-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:openexr-doc-0:3.2.2-160000.10.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-02T09:40:22Z",
"details": "important"
}
],
"title": "CVE-2026-59186"
},
{
"cve": "CVE-2026-59189",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-59189"
}
],
"notes": [
{
"category": "general",
"text": "OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. In OpenEXRUtil versions 3.3.0 through 3.3.12 and 3.4.0 through 3.4.12, the documented TypedDeepImageChannel\u003cT\u003e::row() API can return an out-of-bounds pointer when a deep image has a non-zero dataWindow origin, resulting in a heap out-of-bounds read and crash, with potential information disclosure under a controlled heap layout. The flaw arises because ImfDeepImageChannel uses two conflicting coordinate models: at(x, y) uses absolute coordinates (with _base offset by dataWindow.min), while row(r) is documented as 0-based logical access. For a non-zero dataWindow.min, row(0) therefore points outside the _sampleListPointers allocation instead of at the first logical row. This issue is fixed in versions 3.3.13 and 3.4.13.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:libIex-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libIex-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libIex-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libIex-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libIex-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libIlmThread-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libIlmThread-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libIlmThread-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libIlmThread-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libIlmThread-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:openexr-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:openexr-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:openexr-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:openexr-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:openexr-devel-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:openexr-devel-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:openexr-devel-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:openexr-devel-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:openexr-doc-0:3.2.2-160000.10.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-59189",
"url": "https://www.suse.com/security/cve/CVE-2026-59189"
},
{
"category": "external",
"summary": "SUSE Bug 1276855 for CVE-2026-59189",
"url": "https://bugzilla.suse.com/1276855"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:libIex-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libIex-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libIex-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libIex-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libIex-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libIlmThread-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libIlmThread-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libIlmThread-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libIlmThread-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libIlmThread-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:openexr-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:openexr-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:openexr-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:openexr-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:openexr-devel-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:openexr-devel-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:openexr-devel-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:openexr-devel-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:openexr-doc-0:3.2.2-160000.10.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:libIex-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libIex-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libIex-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libIex-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libIex-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libIlmThread-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libIlmThread-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libIlmThread-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libIlmThread-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libIlmThread-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:openexr-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:openexr-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:openexr-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:openexr-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:openexr-devel-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:openexr-devel-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:openexr-devel-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:openexr-devel-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:openexr-doc-0:3.2.2-160000.10.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-02T09:40:22Z",
"details": "important"
}
],
"title": "CVE-2026-59189"
},
{
"cve": "CVE-2026-59981",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-59981"
}
],
"notes": [
{
"category": "general",
"text": "OpenEXR is the reference implementation and specification for the EXR image file format, widely used in the motion picture industry. In versions through 3.2.10, 3.3.0 through 3.3.12, and 3.4.0 through 3.4.13, the OpenEXRUtil library returns an out-of-bounds pointer from the SampleCountChannel::row() API when a deep image has a non-zero dataWindow origin. The row() accessor is documented as 0-based and computes its address from an internal base that is offset for absolute pixel coordinates, so the two coordinate models conflict whenever dataWindow.min is non-zero. For a deep image whose data window has a large negative vertical origin, row(0) points far outside the allocated sample-count buffer. An application that opens an attacker-controlled deep EXR file and accesses sample counts through row() performs an out-of-bounds read, which can crash the process or, under a controlled heap layout, return adjacent heap memory as sample-count values. This issue is fixed in versions 3.2.11, 3.3.13, and 3.4.14.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:libIex-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libIex-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libIex-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libIex-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libIex-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libIlmThread-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libIlmThread-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libIlmThread-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libIlmThread-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libIlmThread-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:openexr-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:openexr-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:openexr-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:openexr-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:openexr-devel-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:openexr-devel-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:openexr-devel-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:openexr-devel-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:openexr-doc-0:3.2.2-160000.10.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-59981",
"url": "https://www.suse.com/security/cve/CVE-2026-59981"
},
{
"category": "external",
"summary": "SUSE Bug 1276862 for CVE-2026-59981",
"url": "https://bugzilla.suse.com/1276862"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:libIex-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libIex-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libIex-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libIex-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libIex-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libIlmThread-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libIlmThread-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libIlmThread-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libIlmThread-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libIlmThread-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:openexr-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:openexr-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:openexr-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:openexr-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:openexr-devel-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:openexr-devel-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:openexr-devel-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:openexr-devel-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:openexr-doc-0:3.2.2-160000.10.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:libIex-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libIex-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libIex-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libIex-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libIex-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libIlmThread-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libIlmThread-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libIlmThread-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libIlmThread-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libIlmThread-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:openexr-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:openexr-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:openexr-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:openexr-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:openexr-devel-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:openexr-devel-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:openexr-devel-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:openexr-devel-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:openexr-doc-0:3.2.2-160000.10.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-02T09:40:22Z",
"details": "important"
}
],
"title": "CVE-2026-59981"
},
{
"cve": "CVE-2026-59982",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-59982"
}
],
"notes": [
{
"category": "general",
"text": "OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. OpenEXR versions before 3.2.11, 3.3.0 through 3.3.12, and 3.4.0 through 3.4.13 can return an out-of-bounds pointer from TypedDeepImageChannel::row() when a crafted deep EXR has a nonzero dataWindow origin. This vulnerability occurs because the API combines zero-based row access with an absolute-coordinate-adjusted base pointer, allowing a crash or limited information disclosure. This issue is fixed in versions 3.2.11, 3.3.13, and 3.4.14.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:libIex-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libIex-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libIex-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libIex-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libIex-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libIlmThread-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libIlmThread-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libIlmThread-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libIlmThread-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libIlmThread-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:openexr-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:openexr-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:openexr-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:openexr-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:openexr-devel-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:openexr-devel-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:openexr-devel-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:openexr-devel-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:openexr-doc-0:3.2.2-160000.10.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-59982",
"url": "https://www.suse.com/security/cve/CVE-2026-59982"
},
{
"category": "external",
"summary": "SUSE Bug 1276853 for CVE-2026-59982",
"url": "https://bugzilla.suse.com/1276853"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:libIex-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libIex-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libIex-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libIex-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libIex-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libIlmThread-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libIlmThread-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libIlmThread-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libIlmThread-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libIlmThread-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:openexr-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:openexr-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:openexr-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:openexr-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:openexr-devel-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:openexr-devel-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:openexr-devel-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:openexr-devel-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:openexr-doc-0:3.2.2-160000.10.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:libIex-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libIex-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libIex-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libIex-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libIex-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libIlmThread-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libIlmThread-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libIlmThread-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libIlmThread-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libIlmThread-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:openexr-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:openexr-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:openexr-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:openexr-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:openexr-devel-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:openexr-devel-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:openexr-devel-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:openexr-devel-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:openexr-doc-0:3.2.2-160000.10.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-02T09:40:22Z",
"details": "important"
}
],
"title": "CVE-2026-59982"
},
{
"cve": "CVE-2026-59983",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-59983"
}
],
"notes": [
{
"category": "general",
"text": "OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. OpenEXR versions before 3.2.11, 3.3.0 through 3.3.12, and 3.4.0 through 3.4.13 are vulnerable on ILP32 builds to an out-of-bounds read. The vulnerability is reached when a crafted uncompressed deep-tile EXR causes the sample-count table size calculation in OpenEXRCore decoding.c to wrap before unpack_sample_table() iterates over the full attacker-controlled tile dimensions, allowing denial of service. This issue is fixed in versions 3.2.11, 3.3.13, and 3.4.14.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:libIex-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libIex-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libIex-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libIex-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libIex-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libIlmThread-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libIlmThread-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libIlmThread-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libIlmThread-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libIlmThread-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:openexr-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:openexr-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:openexr-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:openexr-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:openexr-devel-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:openexr-devel-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:openexr-devel-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:openexr-devel-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:openexr-doc-0:3.2.2-160000.10.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-59983",
"url": "https://www.suse.com/security/cve/CVE-2026-59983"
},
{
"category": "external",
"summary": "SUSE Bug 1276856 for CVE-2026-59983",
"url": "https://bugzilla.suse.com/1276856"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:libIex-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libIex-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libIex-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libIex-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libIex-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libIlmThread-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libIlmThread-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libIlmThread-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libIlmThread-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libIlmThread-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:openexr-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:openexr-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:openexr-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:openexr-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:openexr-devel-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:openexr-devel-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:openexr-devel-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:openexr-devel-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:openexr-doc-0:3.2.2-160000.10.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:libIex-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libIex-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libIex-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libIex-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libIex-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libIlmThread-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libIlmThread-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libIlmThread-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libIlmThread-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libIlmThread-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:openexr-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:openexr-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:openexr-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:openexr-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:openexr-devel-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:openexr-devel-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:openexr-devel-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:openexr-devel-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:openexr-doc-0:3.2.2-160000.10.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-02T09:40:22Z",
"details": "moderate"
}
],
"title": "CVE-2026-59983"
},
{
"cve": "CVE-2026-59984",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-59984"
}
],
"notes": [
{
"category": "general",
"text": "OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. OpenEXR versions 3.1.0 through 3.2.10, 3.3.0 through 3.3.12, and 3.4.0 through 3.4.13 are vulnerable on ILP32 builds to an out-of-bounds write. When a crafted B44-compressed scanline EXR causes the logical scratch size to truncate before allocation and uncompress_b44_impl() writes using the attacker-controlled channel width, allowing denial of service and memory corruption. This issue is fixed in versions 3.2.11, 3.3.13, and 3.4.14.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:libIex-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libIex-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libIex-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libIex-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libIex-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libIlmThread-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libIlmThread-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libIlmThread-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libIlmThread-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libIlmThread-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:openexr-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:openexr-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:openexr-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:openexr-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:openexr-devel-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:openexr-devel-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:openexr-devel-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:openexr-devel-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:openexr-doc-0:3.2.2-160000.10.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-59984",
"url": "https://www.suse.com/security/cve/CVE-2026-59984"
},
{
"category": "external",
"summary": "SUSE Bug 1276857 for CVE-2026-59984",
"url": "https://bugzilla.suse.com/1276857"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:libIex-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libIex-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libIex-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libIex-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libIex-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libIlmThread-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libIlmThread-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libIlmThread-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libIlmThread-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libIlmThread-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:openexr-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:openexr-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:openexr-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:openexr-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:openexr-devel-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:openexr-devel-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:openexr-devel-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:openexr-devel-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:openexr-doc-0:3.2.2-160000.10.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:libIex-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libIex-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libIex-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libIex-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libIex-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libIlmThread-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libIlmThread-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libIlmThread-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libIlmThread-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libIlmThread-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:openexr-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:openexr-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:openexr-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:openexr-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:openexr-devel-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:openexr-devel-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:openexr-devel-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:openexr-devel-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:openexr-doc-0:3.2.2-160000.10.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-02T09:40:22Z",
"details": "moderate"
}
],
"title": "CVE-2026-59984"
},
{
"cve": "CVE-2026-59985",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-59985"
}
],
"notes": [
{
"category": "general",
"text": "OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. OpenEXR versions 3.2.0 through 3.2.10, 3.3.0 through 3.3.12, and 3.4.0 through 3.4.13 are vulnerable on ILP32 builds to a heap out-of-bounds read. The issue occurs when a crafted RLE-compressed EXR causes the 64-bit unpacked size to truncate before allocation in OpenEXRCore decoding.c and unpack_32bit() reads beyond the resulting buffer, allowing denial of service. This issue is fixed in versions 3.2.11, 3.3.13, and 3.4.14.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:libIex-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libIex-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libIex-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libIex-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libIex-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libIlmThread-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libIlmThread-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libIlmThread-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libIlmThread-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libIlmThread-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:openexr-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:openexr-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:openexr-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:openexr-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:openexr-devel-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:openexr-devel-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:openexr-devel-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:openexr-devel-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:openexr-doc-0:3.2.2-160000.10.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-59985",
"url": "https://www.suse.com/security/cve/CVE-2026-59985"
},
{
"category": "external",
"summary": "SUSE Bug 1276858 for CVE-2026-59985",
"url": "https://bugzilla.suse.com/1276858"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:libIex-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libIex-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libIex-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libIex-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libIex-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libIlmThread-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libIlmThread-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libIlmThread-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libIlmThread-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libIlmThread-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:openexr-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:openexr-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:openexr-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:openexr-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:openexr-devel-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:openexr-devel-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:openexr-devel-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:openexr-devel-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:openexr-doc-0:3.2.2-160000.10.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:libIex-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libIex-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libIex-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libIex-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libIex-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libIlmThread-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libIlmThread-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libIlmThread-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libIlmThread-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libIlmThread-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:openexr-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:openexr-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:openexr-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:openexr-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:openexr-devel-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:openexr-devel-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:openexr-devel-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:openexr-devel-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:openexr-doc-0:3.2.2-160000.10.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-02T09:40:22Z",
"details": "moderate"
}
],
"title": "CVE-2026-59985"
},
{
"cve": "CVE-2026-61555",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-61555"
}
],
"notes": [
{
"category": "general",
"text": "OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. OpenEXR versions before 3.2.11, 3.3.0 through 3.3.12, and 3.4.0 through 3.4.13 are vulnerable to crashing. This occurs when Imf::GetChannelsInMultiPartFile() processes a crafted EXR with an empty multiView header attribute and Imf::viewFromChannelName() indexes the empty vector for a dotless channel name. This issue is fixed in versions 3.2.11, 3.3.13, and 3.4.14.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:libIex-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libIex-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libIex-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libIex-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libIex-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libIlmThread-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libIlmThread-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libIlmThread-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libIlmThread-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libIlmThread-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:openexr-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:openexr-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:openexr-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:openexr-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:openexr-devel-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:openexr-devel-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:openexr-devel-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:openexr-devel-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:openexr-doc-0:3.2.2-160000.10.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-61555",
"url": "https://www.suse.com/security/cve/CVE-2026-61555"
},
{
"category": "external",
"summary": "SUSE Bug 1276859 for CVE-2026-61555",
"url": "https://bugzilla.suse.com/1276859"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:libIex-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libIex-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libIex-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libIex-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libIex-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libIlmThread-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libIlmThread-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libIlmThread-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libIlmThread-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libIlmThread-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:openexr-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:openexr-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:openexr-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:openexr-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:openexr-devel-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:openexr-devel-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:openexr-devel-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:openexr-devel-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:openexr-doc-0:3.2.2-160000.10.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:libIex-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libIex-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libIex-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libIex-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libIex-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libIlmThread-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libIlmThread-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libIlmThread-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libIlmThread-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libIlmThread-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:openexr-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:openexr-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:openexr-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:openexr-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:openexr-devel-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:openexr-devel-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:openexr-devel-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:openexr-devel-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:openexr-doc-0:3.2.2-160000.10.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-02T09:40:22Z",
"details": "moderate"
}
],
"title": "CVE-2026-61555"
},
{
"cve": "CVE-2026-68515",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-68515"
}
],
"notes": [
{
"category": "general",
"text": "OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. In versions before 3.2.11, 3.3.0 through 3.3.12, and 3.4.0 through 3.4.13, exrmultiview can write past a heap allocation when it combines two attacker-supplied, individually valid scanline EXR files whose union dataWindow is not aligned to one view\u0027s channel subsampling. The utility allocates sampled channel storage using a truncated union_width / xSampling, then reads the sampled input through a Slice based on the misaligned union window, producing a heap out-of-bounds write. The trigger is normal public-tool processing, such as exrmultiview left A.exr right B.exr out.exr with crafted but valid inputs, so this is not solely an API or caller-precondition issue. This issue is fixed in versions 3.2.11, 3.3.13, and 3.4.14.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:libIex-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libIex-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libIex-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libIex-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libIex-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libIlmThread-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libIlmThread-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libIlmThread-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libIlmThread-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libIlmThread-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:openexr-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:openexr-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:openexr-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:openexr-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:openexr-devel-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:openexr-devel-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:openexr-devel-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:openexr-devel-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:openexr-doc-0:3.2.2-160000.10.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-68515",
"url": "https://www.suse.com/security/cve/CVE-2026-68515"
},
{
"category": "external",
"summary": "SUSE Bug 1276848 for CVE-2026-68515",
"url": "https://bugzilla.suse.com/1276848"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:libIex-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libIex-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libIex-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libIex-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libIex-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libIlmThread-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libIlmThread-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libIlmThread-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libIlmThread-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libIlmThread-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:openexr-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:openexr-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:openexr-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:openexr-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:openexr-devel-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:openexr-devel-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:openexr-devel-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:openexr-devel-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:openexr-doc-0:3.2.2-160000.10.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:libIex-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libIex-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libIex-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libIex-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libIex-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libIlmThread-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libIlmThread-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libIlmThread-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libIlmThread-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libIlmThread-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXR-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRCore-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:libOpenEXRUtil-3_2-31-x86-64-v3-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:openexr-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:openexr-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:openexr-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:openexr-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:openexr-devel-0:3.2.2-160000.10.1.aarch64",
"openSUSE Leap 16.0:openexr-devel-0:3.2.2-160000.10.1.ppc64le",
"openSUSE Leap 16.0:openexr-devel-0:3.2.2-160000.10.1.s390x",
"openSUSE Leap 16.0:openexr-devel-0:3.2.2-160000.10.1.x86_64",
"openSUSE Leap 16.0:openexr-doc-0:3.2.2-160000.10.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-02T09:40:22Z",
"details": "important"
}
],
"title": "CVE-2026-68515"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…