Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 442
Alerts This Week
Warning Icon 1 442

SUSE Security Advisory 2026-3168-1 openexr Moderate Integer Overflow Issue

suse
Calendar Grey July 22, 2026
Scroller Suse
Update for openexr addresses an important issue with unchecked integer overflows and uninitialized pointers.
SUSE released a security update for openexr addressing CVE-2026-54920, fixing unchecked integer overflows that could lead to invalid deletions via uninitialized pointers in affecte...

Summary

## This update for openexr fixes the following issue * CVE-2026-54920: unchecked integer overflows in Image::resize() followed by an exception can lead to an invalid delete via uninitialized pointers (bsc#1269703). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-3168=1 ## Package List: * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (x86_64) * libIlmImf-Imf_2_1-21-debuginfo-2.1.0-6.48.1 * openexr-2.1.0-6.48.1 * libIlmImf-Imf_2_1-21-2.1.0-6.48.1 * openexr-debuginfo-2.1.0-6.48.1

Topics%20covered

Topics Covered

security advisory moderate SuSE integer overflow OpenEXR uninitialized pointers

References

* bsc#1269703

Cross-

* CVE-2026-54920

CVSS scores:

* CVE-2026-54920 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Affected Products:

* SUSE Linux Enterprise Server 12 SP5

* SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security

* SUSE Linux Enterprise Server for SAP Applications 12 SP5

An update that solves one vulnerability can now be installed.

##

* https://www.suse.com/security/cve/CVE-2026-54920.html

* https://bugzilla.suse.com/show_bug.cgi?id=1269703

Severity
moderate
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2026:3168-1
Release Date: 2026-07-21T18:44:49Z
Rating: moderate

Topics%20covered

Topics Covered

security advisory moderate SuSE integer overflow OpenEXR uninitialized pointers

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.