Fedora 42 mingw-openexr Critical Denial of Service Fix 2026-d939698c2e
fedora
April 16, 2026
Update to openexr-3.3.9.
Summary
MinGW Windows openexr library.
Update Information:
Update to openexr-3.3.9.
Change Log
* Tue Apr 7 2026 Sandro Mani
References
[ 1 ] Bug #2455494 - CVE-2026-34379 mingw-openexr: OpenEXR: Denial of Service due to misaligned memory write during EXR file decoding [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2455494
[ 2 ] Bug #2455498 - CVE-2026-34589 mingw-openexr: OpenEXR: Memory corruption leading to arbitrary code execution or denial of service [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2455498
[ 3 ] Bug #2455502 - CVE-2026-34588 mingw-openexr: OpenEXR: Arbitrary code execution and information disclosure via crafted EXR file [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2455502
[ 4 ] Bug #2455531 - CVE-2026-34380 mingw-openexr: OpenEXR: Denial of Service due to signed integer overflow in image decoding [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2455531
Update Instructions
This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-d939698c2e' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
PREVIOUS
NEXT
Severity
critical
Lowest
Low
Medium
High
Critical
Name: mingw-openexr
Product: Fedora 42
Version: 3.3.9
Release: 1.fc42
Summary: MinGW Windows openexr library
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Related News
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!