Red Hat Product Errata RHSA-2026:38498 - Security Advisory Issued: 2026-07-13 Updated: 2026-07-13 RHSA-2026:38498 - Security Advisory Overview Updated Packages Synopsis Important: openexr security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for openexr is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description OpenEXR is an open-source high-dynamic-range floating-point image file format for high-quality image processing and storage. This document presents a brief overview of OpenEXR and explains concepts that are specific to this format. This package containes the binaries for OpenEXR. Security Fix(es): OpenEXR: OpenEXR: Arbitrary code execution via integer overflow in image resizing (CVE-2026-41142) OpenEXR: OpenEXR: Information disclosure and denial of service via malformed EXR files (CVE-2026-42216) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 9 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.8 x86_64 Red Hat Enterprise Linux for IBM z Systems 9 s390x Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.8 s390x Red Hat Enterprise Linux for Power, little endian 9 ppc64le Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.8 ppc64le Red Hat Enterprise Linux for ARM 64 9 aarch64 Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.8 aarch64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.8 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.8 x86_64 Red Hat CodeReady Linux Builder for x86_64 9 x86_64 Red Hat CodeReady Linux Builder for Power, little endian 9 ppc64le Red Hat CodeReady Linux Builder for ARM 64 9 aarch64 Red Hat CodeReady Linux Builder for IBM z Systems 9 s390x Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 9.8 x86_64 Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 9.8 ppc64le Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 9.8 s390x Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 9.8 aarch64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.8 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.8 s390x Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.8 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.8 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.8 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.8 s390x Fixes BZ - 2467623 - CVE-2026-41142 OpenEXR: OpenEXR: Arbitrary code execution via integer overflow in image resizing BZ - 2467633 - CVE-2026-42216 OpenEXR: OpenEXR: Information disclosure and denial of service via malformed EXR files CVEs CVE-2026-41142 CVE-2026-42216 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 9 SRPM openexr-3.1.1-3.el9_8.3.src.rpm SHA-256: df9414ef180ff12a3ec51e0bb3e24adfefca3bab25e40c2f3b20f336ed444b77 x86_64 openexr-3.1.1-3.el9_8.3.x86_64.rpm SHA-256: 5fa7bcff8ee38d1874ad866bb5b244a4da3549361034caa4dd2b99e36923f50e openexr-debuginfo-3.1.1-3.el9_8.3.i686.rpm SHA-256: 63aab5833f7c6f6913e143594a3f43b3379567f9917f2478d68f64a4789b6456 openexr-debuginfo-3.1.1-3.el9_8.3.x86_64.rpm SHA-256: 987679213bd85b9ee5bcb671ea79bba3c227f95c446aae21d603c9503e8f1668 openexr-debugsource-3.1.1-3.el9_8.3.i686.rpm SHA-256: c29de8d5fe75e73be70b7d44ae7dd04db6d3dbcc273e6636e12ce23067a7721b openexr-debugsource-3.1.1-3.el9_8.3.x86_64.rpm SHA-256: 0a8f5aa9befd2212d28e6a93a610122275034db11961143603ca312dc9472622 openexr-libs-3.1.1-3.el9_8.3.i686.rpm SHA-256: d0e3c6db07865702ea97c7b9425061769ab1463b6e128f163929602142f36c5f openexr-libs-3.1.1-3.el9_8.3.x86_64.rpm SHA-256: ddb675c9f69967176b0bd62adbcb3b6a11b1a4b6648cca8f9a42b761969254fe openexr-libs-debuginfo-3.1.1-3.el9_8.3.i686.rpm SHA-256: b144fa287afe3be309fbf3cbdbb9d430bf2bdba12eed0090451535e662b19edd openexr-libs-debuginfo-3.1.1-3.el9_8.3.x86_64.rpm SHA-256: 13a8cf63be4b5487bc81a81f08708ab52d389e3ebc3a933cd489f3bd9dba8e1a Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.8 SRPM openexr-3.1.1-3.el9_8.3.src.rpm SHA-256: df9414ef180ff12a3ec51e0bb3e24adfefca3bab25e40c2f3b20f336ed444b77 x86_64 openexr-3.1.1-3.el9_8.3.x86_64.rpm SHA-256: 5fa7bcff8ee38d1874ad866bb5b244a4da3549361034caa4dd2b99e36923f50e openexr-debuginfo-3.1.1-3.el9_8.3.i686.rpm SHA-256: 63aab5833f7c6f6913e143594a3f43b3379567f9917f2478d68f64a4789b6456 openexr-debuginfo-3.1.1-3.el9_8.3.x86_64.rpm SHA-256: 987679213bd85b9ee5bcb671ea79bba3c227f95c446aae21d603c9503e8f1668 openexr-debugsource-3.1.1-3.el9_8.3.i686.rpm SHA-256: c29de8d5fe75e73be70b7d44ae7dd04db6d3dbcc273e6636e12ce23067a7721b openexr-debugsource-3.1.1-3.el9_8.3.x86_64.rpm SHA-256: 0a8f5aa9befd2212d28e6a93a610122275034db11961143603ca312dc9472622 openexr-libs-3.1.1-3.el9_8.3.i686.rpm SHA-256: d0e3c6db07865702ea97c7b9425061769ab1463b6e128f163929602142f36c5f openexr-libs-3.1.1-3.el9_8.3.x86_64.rpm SHA-256: ddb675c9f69967176b0bd62adbcb3b6a11b1a4b6648cca8f9a42b761969254fe openexr-libs-debuginfo-3.1.1-3.el9_8.3.i686.rpm SHA-256: b144fa287afe3be309fbf3cbdbb9d430bf2bdba12eed0090451535e662b19edd openexr-libs-debuginfo-3.1.1-3.el9_8.3.x86_64.rpm SHA-256: 13a8cf63be4b5487bc81a81f08708ab52d389e3ebc3a933cd489f3bd9dba8e1a Red Hat Enterprise Linux for IBM z Systems 9 SRPM openexr-3.1.1-3.el9_8.3.src.rpm SHA-256: df9414ef180ff12a3ec51e0bb3e24adfefca3bab25e40c2f3b20f336ed444b77 s390x openexr-3.1.1-3.el9_8.3.s390x.rpm SHA-256: cb0cf02e67876a3daa7d975b5747bd6db32ddcc3cb0d1b72ccf951f0d4c2eadd openexr-debuginfo-3.1.1-3.el9_8.3.s390x.rpm SHA-256: 1cf03d10eb76a334c3984202d93717f14139dfadf95235ab2bdc1bf8cd2397e8 openexr-debugsource-3.1.1-3.el9_8.3.s390x.rpm SHA-256: 09007d185be13a2c7f93a8ee2ea09c16420ee39bdf9907b96f9ce656ca335fcb openexr-libs-3.1.1-3.el9_8.3.s390x.rpm SHA-256: 401db4d65101adb87b71717b3113edca54f270bb4bb79ed5bb22d97d0c54f489 openexr-libs-debuginfo-3.1.1-3.el9_8.3.s390x.rpm SHA-256: 82667fedc7a3244786a7686d97a291a111284562815102281443ebccb08c8c49 Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.8 SRPM openexr-3.1.1-3.el9_8.3.src.rpm SHA-256: df9414ef180ff12a3ec51e0bb3e24adfefca3bab25e40c2f3b20f336ed444b77 s390x openexr-3.1.1-3.el9_8.3.s390x.rpm SHA-256: cb0cf02e67876a3daa7d975b5747bd6db32ddcc3cb0d1b72ccf951f0d4c2eadd openexr-debuginfo-3.1.1-3.el9_8.3.s390x.rpm SHA-256: 1cf03d10eb76a334c3984202d93717f14139dfadf95235ab2bdc1bf8cd2397e8 openexr-debugsource-3.1.1-3.el9_8.3.s390x.rpm SHA-256: 09007d185be13a2c7f93a8ee2ea09c16420ee39bdf9907b96f9ce656ca335fcb openexr-libs-3.1.1-3.el9_8.3.s390x.rpm SHA-256: 401db4d65101adb87b71717b3113edca54f270bb4bb79ed5bb22d97d0c54f489 openexr-libs-debuginfo-3.1.1-3.el9_8.3.s390x.rpm SHA-256: 82667fedc7a3244786a7686d97a291a111284562815102281443ebccb08c8c49 Red Hat Enterprise Linux for Power, little endian 9 SRPM openexr-3.1.1-3.el9_8.3.src.rpm SHA-256: df9414ef180ff12a3ec51e0bb3e24adfefca3bab25e40c2f3b20f336ed444b77 ppc64le openexr-3.1.1-3.el9_8.3.ppc64le.rpm SHA-256: df2b99ca79e3b35c1d3d97363686997892b9c95aa2707da82948f5e75aae003a openexr-debuginfo-3.1.1-3.el9_8.3.ppc64le.rpm SHA-256: 1df9e3dd195b8a55b6ef804812a3eed567af5c4493a328dee1299ce3426cc681 openexr-debugsource-3.1.1-3.el9_8.3.ppc64le.rpm SHA-256: 656dcf5054a51caf589b8424f0ab1c7209850d408bb94005a4797cd879d1b1cb openexr-libs-3.1.1-3.el9_8.3.ppc64le.rpm SHA-256: 4207dfce9e576f2f733bdf4496f45e070bb83476b118adc504abdc3a220851de openexr-libs-debuginfo-3.1.1-3.el9_8.3.ppc64le.rpm SHA-256: 237120fdce7dffef3699ca468fa4ec9ab4803e4a584334ed49dc4fbcf892f848 Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.8 SRPM openexr-3.1.1-3.el9_8.3.src.rpm SHA-256: df9414ef180ff12a3ec51e0bb3e24adfefca3bab25e40c2f3b20f336ed444b77 ppc64le openexr-3.1.1-3.el9_8.3.ppc64le.rpm SHA-256: df2b99ca79e3b35c1d3d97363686997892b9c95aa2707da82948f5e75aae003a openexr-debuginfo-3.1.1-3.el9_8.3.ppc64le.rpm SHA-256: 1df9e3dd195b8a55b6ef804812a3eed567af5c4493a328dee1299ce3426cc681 openexr-debugsource-3.1.1-3.el9_8.3.ppc64le.rpm SHA-256: 656dcf5054a51caf589b8424f0ab1c7209850d408bb94005a4797cd879d1b1cb openexr-libs-3.1.1-3.el9_8.3.ppc64le.rpm SHA-256: 4207dfce9e576f2f733bdf4496f45e070bb83476b118adc504abdc3a220851de openexr-libs-debuginfo-3.1.1-3.el9_8.3.ppc64le.rpm SHA-256: 237120fdce7dffef3699ca468fa4ec9ab4803e4a584334ed49dc4fbcf892f848 Red Hat Enterprise Linux for ARM 64 9 SRPM openexr-3.1.1-3.el9_8.3.src.rpm SHA-256: df9414ef180ff12a3ec51e0bb3e24adfefca3bab25e40c2f3b20f336ed444b77 aarch64 openexr-3.1.1-3.el9_8.3.aarch64.rpm SHA-256: 67f68117501aee8b8842b14ca50c926297aabc51e191d0902412c1fe78b7708c openexr-debuginfo-3.1.1-3.el9_8.3.aarch64.rpm SHA-256: 36f723bd0afd771fce557f20fa949c88378f8c23f5f95552f5c24afc8dbbde4f openexr-debugsource-3.1.1-3.el9_8.3.aarch64.rpm SHA-256: d19688a69b076005ec2d8316bebb3580b40afa6ef5751bfe85136febcf8ee50e openexr-libs-3.1.1-3.el9_8.3.aarch64.rpm SHA-256: d560b36619269ce831a0c45032d7f251eff21e8da4d6de079fd5093451338801 openexr-libs-debuginfo-3.1.1-3.el9_8.3.aarch64.rpm SHA-256: 7d49896c6fe445ccee0b20b32303dcf8eae01cff24999c95d0