# openexr security updates

Patch Radar has 165 security fixes for openexr, closing 84 CVEs. The newest security fix is ELSA-2026-84796 (0:3.1.10-8.el10_2.5), released November 7, 2026.

- Web page: https://patchblox.com/security/product/linux/openexr
- Platform: Linux
- Supported: yes

## Security fixes, newest first

| Fix | Released | Fixed in | Priority | CVEs | Exploited |
|---|---|---|---|---:|---:|
| [ELSA-2026-84796](https://patchblox.com/security/data/fix/linux/elsa-2026-84796.md) | Nov 7, 2026 | ol 10 0:3.1.10-8.el10_2.5 | High | 5 | 0 |
| [ELSA-2026-86983](https://patchblox.com/security/data/fix/linux/elsa-2026-86983.md) | Nov 7, 2026 | ol 9 0:3.1.1-3.el9_8.5 | High | 5 | 0 |
| [SUSE-SU-2026:4828-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-4828-1.md) | Nov 7, 2026 | sles 15.7 2.2.1-150000.3.58.1 | Routine | 1 | 0 |
| [ALSA-2026:84796](https://patchblox.com/security/data/fix/linux/alsa-2026-84796.md) | Nov 7, 2026 | almalinux 10 3.1.10-8.el10_2.5 | High | 5 | 0 |
| [RLSA-2026:86983](https://patchblox.com/security/data/fix/linux/rlsa-2026-86983.md) | Nov 7, 2026 | rocky 9 0:3.1.1-3.el9_8.5 | High | 5 | 0 |
| [RLSA-2026:84796](https://patchblox.com/security/data/fix/linux/rlsa-2026-84796.md) | Nov 7, 2026 | rocky 10 0:3.1.10-8.el10_2.5 | High | 5 | 0 |
| [RHSA-2026:86983](https://patchblox.com/security/data/fix/linux/rhsa-2026-86983.md) | Oct 24, 2026 | RHEL 9 0:3.1.1-3.el9_8.5 | High | 5 | 0 |
| [DEBIAN-CVE-2026-88384](https://patchblox.com/security/data/fix/linux/debian-cve-2026-88384.md) | Oct 24, 2026 | Debian 14 3.4.16+ds-1 | Routine | 1 | 0 |
| [OPENSUSE-SU-2026:22013-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-22013-1.md) | Oct 2, 2026 | opensuse-leap 16.0 3.2.2-160000.11.1 | Routine | 1 | 0 |
| [SUSE-SU-2026:24012-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-24012-1.md) | Oct 2, 2026 | sles 16.0 3.2.2-160000.11.1 | Routine | 1 | 0 |
| [ELSA-2026-69609](https://patchblox.com/security/data/fix/linux/elsa-2026-69609.md) | Sep 24, 2026 | ol 10 0:3.1.10-8.el10_2.4 | High | 1 | 0 |
| [RLSA-2026:69609](https://patchblox.com/security/data/fix/linux/rlsa-2026-69609.md) | Sep 23, 2026 | rocky 10 0:3.1.10-8.el10_2.4 | High | 1 | 0 |
| [RLSA-2026:69608](https://patchblox.com/security/data/fix/linux/rlsa-2026-69608.md) | Sep 23, 2026 | rocky 9 0:3.1.1-3.el9_8.4 | High | 1 | 0 |
| [RHSA-2026:69608](https://patchblox.com/security/data/fix/linux/rhsa-2026-69608.md) | Sep 22, 2026 | RHEL 9 0:3.1.1-3.el9_8.4 | High | 1 | 0 |
| [RHSA-2026:69609](https://patchblox.com/security/data/fix/linux/rhsa-2026-69609.md) | Sep 22, 2026 | RHEL 10 3.1.10-8.el10_2.4 | High | 1 | 0 |
| [ELSA-2026-69608](https://patchblox.com/security/data/fix/linux/elsa-2026-69608.md) | Sep 22, 2026 | ol 9 0:3.1.1-3.el9_8.4 | High | 1 | 0 |
| [ALSA-2026:69608](https://patchblox.com/security/data/fix/linux/alsa-2026-69608.md) | Sep 21, 2026 | almalinux 9 3.1.1-3.el9_8.4 | High | 1 | 0 |
| [ALSA-2026:69609](https://patchblox.com/security/data/fix/linux/alsa-2026-69609.md) | Sep 21, 2026 | almalinux 10 3.1.10-8.el10_2.4 | High | 1 | 0 |
| [ALAS2023-2026-2154](https://patchblox.com/security/data/fix/linux/alas2023-2026-2154.md) | Sep 14, 2026 | amzn 2023 3.1.5-1.amzn2023.0.12 | High | 9 | 0 |
| [SUSE-SU-2026:4003-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-4003-1.md) | Sep 7, 2026 | sles 15.6 2.2.1-150000.3.55.1 | High | 7 | 0 |
| [SUSE-SU-2026:4003-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-4003-1.md) | Sep 7, 2026 | sles 15.7 2.2.1-150000.3.55.1 | High | 7 | 0 |
| [SUSE-SU-2026:23604-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-23604-1.md) | Sep 2, 2026 | sles 16.0 3.2.2-160000.10.1 | High | 11 | 0 |
| [OPENSUSE-SU-2026:21737-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-21737-1.md) | Sep 2, 2026 | opensuse-leap 16.0 3.2.2-160000.10.1 | High | 11 | 0 |
| [DEBIAN-CVE-2026-59187](https://patchblox.com/security/data/fix/linux/debian-cve-2026-59187.md) | Aug 28, 2026 | Debian 14 3.4.14-0.1 | High | 1 | 0 |
| [DEBIAN-CVE-2026-59981](https://patchblox.com/security/data/fix/linux/debian-cve-2026-59981.md) | Aug 28, 2026 | Debian 14 3.4.14-0.1 | High | 1 | 0 |
| [DEBIAN-CVE-2026-59982](https://patchblox.com/security/data/fix/linux/debian-cve-2026-59982.md) | Aug 28, 2026 | Debian 14 3.4.14-0.1 | High | 1 | 0 |
| [DEBIAN-CVE-2026-59189](https://patchblox.com/security/data/fix/linux/debian-cve-2026-59189.md) | Aug 28, 2026 | Debian 14 3.4.14-0.1 | High | 1 | 0 |
| [DEBIAN-CVE-2026-59186](https://patchblox.com/security/data/fix/linux/debian-cve-2026-59186.md) | Aug 28, 2026 | Debian 14 3.4.14-0.1 | High | 1 | 0 |
| [DEBIAN-CVE-2026-59184](https://patchblox.com/security/data/fix/linux/debian-cve-2026-59184.md) | Aug 28, 2026 | Debian 14 3.4.14-0.1 | High | 1 | 0 |
| [DEBIAN-CVE-2026-68513](https://patchblox.com/security/data/fix/linux/debian-cve-2026-68513.md) | Aug 28, 2026 | Debian 14 3.4.14-0.1 | High | 1 | 0 |
| [DEBIAN-CVE-2026-68515](https://patchblox.com/security/data/fix/linux/debian-cve-2026-68515.md) | Aug 28, 2026 | Debian 14 3.4.14-0.1 | High | 1 | 0 |
| [DEBIAN-CVE-2026-68516](https://patchblox.com/security/data/fix/linux/debian-cve-2026-68516.md) | Aug 28, 2026 | Debian 14 3.4.14-0.1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2026-53532](https://patchblox.com/security/data/fix/linux/debian-cve-2026-53532.md) | Aug 28, 2026 | Debian 14 3.4.14-0.1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2026-62986](https://patchblox.com/security/data/fix/linux/debian-cve-2026-62986.md) | Aug 28, 2026 | Debian 14 3.4.14-0.1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2026-54920](https://patchblox.com/security/data/fix/linux/debian-cve-2026-54920.md) | Aug 28, 2026 | Debian 14 3.4.14-0.1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2026-68514](https://patchblox.com/security/data/fix/linux/debian-cve-2026-68514.md) | Aug 28, 2026 | Debian 14 3.4.14-0.1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2026-65979](https://patchblox.com/security/data/fix/linux/debian-cve-2026-65979.md) | Aug 28, 2026 | Debian 14 3.4.14-0.1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2026-59183](https://patchblox.com/security/data/fix/linux/debian-cve-2026-59183.md) | Aug 28, 2026 | Debian 14 3.4.14-0.1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2026-59983](https://patchblox.com/security/data/fix/linux/debian-cve-2026-59983.md) | Aug 28, 2026 | Debian 14 3.4.14-0.1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2026-59984](https://patchblox.com/security/data/fix/linux/debian-cve-2026-59984.md) | Aug 28, 2026 | Debian 14 3.4.14-0.1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2026-59985](https://patchblox.com/security/data/fix/linux/debian-cve-2026-59985.md) | Aug 28, 2026 | Debian 14 3.4.14-0.1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2026-61555](https://patchblox.com/security/data/fix/linux/debian-cve-2026-61555.md) | Aug 28, 2026 | Debian 14 3.4.14-0.1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2026-55371](https://patchblox.com/security/data/fix/linux/debian-cve-2026-55371.md) | Aug 28, 2026 | Debian 14 3.4.14-0.1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2026-55373](https://patchblox.com/security/data/fix/linux/debian-cve-2026-55373.md) | Aug 28, 2026 | Debian 14 3.4.14-0.1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2026-55059](https://patchblox.com/security/data/fix/linux/debian-cve-2026-55059.md) | Aug 28, 2026 | Debian 14 3.4.14-0.1 | Routine | 1 | 0 |
| [RHSA-2026:84796](https://patchblox.com/security/data/fix/linux/rhsa-2026-84796.md) | Aug 25, 2026 | RHEL 10 3.1.10-8.el10_2.5 | High | 5 | 0 |
| [SUSE-SU-2026:3169-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-3169-1.md) | Jul 21, 2026 | sles 15.7 2.2.1-150000.3.52.1 | Routine | 3 | 0 |
| [ELSA-2026-38499](https://patchblox.com/security/data/fix/linux/elsa-2026-38499.md) | Jul 16, 2026 | ol 10 0:3.1.10-8.el10_2.3 | Urgent | 2 | 0 |
| [RLSA-2026:38499](https://patchblox.com/security/data/fix/linux/rlsa-2026-38499.md) | Jul 14, 2026 | rocky 10 0:3.1.10-8.el10_2.3 | Urgent | 2 | 0 |
| [RLSA-2026:38498](https://patchblox.com/security/data/fix/linux/rlsa-2026-38498.md) | Jul 14, 2026 | rocky 9 0:3.1.1-3.el9_8.3 | Urgent | 2 | 0 |
| [OPENSUSE-SU-2026:21336-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-21336-1.md) | Jul 14, 2026 | opensuse-leap 16.0 3.2.2-160000.9.1 | Routine | 3 | 0 |
| [SUSE-SU-2026:22653-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-22653-1.md) | Jul 14, 2026 | sles 16.0 3.2.2-160000.9.1 | Routine | 3 | 0 |
| [RHSA-2026:38498](https://patchblox.com/security/data/fix/linux/rhsa-2026-38498.md) | Jul 13, 2026 | RHEL 9 0:3.1.1-3.el9_8.3 | Urgent | 2 | 0 |
| [ALSA-2026:38498](https://patchblox.com/security/data/fix/linux/alsa-2026-38498.md) | Jul 13, 2026 | almalinux 9 3.1.1-3.el9_8.3 | Urgent | 2 | 0 |
| [ALSA-2026:38499](https://patchblox.com/security/data/fix/linux/alsa-2026-38499.md) | Jul 13, 2026 | almalinux 10 3.1.10-8.el10_2.3 | Urgent | 2 | 0 |
| [ELSA-2026-38498](https://patchblox.com/security/data/fix/linux/elsa-2026-38498.md) | Jul 13, 2026 | ol 9 0:3.1.1-3.el9_8.3 | Urgent | 2 | 0 |
| [DEBIAN-CVE-2026-44663](https://patchblox.com/security/data/fix/linux/debian-cve-2026-44663.md) | Jun 18, 2026 | Debian 14 3.4.14-0.1 | High | 1 | 0 |
| [DEBIAN-CVE-2026-45696](https://patchblox.com/security/data/fix/linux/debian-cve-2026-45696.md) | Jun 18, 2026 | Debian 14 3.4.14-0.1 | Routine | 1 | 0 |
| [RLSA-2026:19146](https://patchblox.com/security/data/fix/linux/rlsa-2026-19146.md) | May 29, 2026 | rocky 10 0:3.1.10-8.el10_2.2 | High | 1 | 0 |
| [ALAS2023-2026-1713](https://patchblox.com/security/data/fix/linux/alas2023-2026-1713.md) | May 25, 2026 | amzn 2023 3.1.5-1.amzn2023.0.11 | Urgent | 3 | 0 |
| [RLSA-2026:19359](https://patchblox.com/security/data/fix/linux/rlsa-2026-19359.md) | May 20, 2026 | rocky 9 0:3.1.1-3.el9_7.2 | High | 1 | 0 |
| [ALSA-2026:19146](https://patchblox.com/security/data/fix/linux/alsa-2026-19146.md) | May 19, 2026 | almalinux 10 3.1.10-8.el10_2.2 | High | 1 | 0 |
| [ALSA-2026:19359](https://patchblox.com/security/data/fix/linux/alsa-2026-19359.md) | May 19, 2026 | almalinux 9 3.1.1-3.el9_8.2 | High | 1 | 0 |
| [RHSA-2026:19359](https://patchblox.com/security/data/fix/linux/rhsa-2026-19359.md) | May 15, 2026 | RHEL 9 0:3.1.1-3.el9_8.2 | High | 1 | 0 |
| [ELSA-2026-15887](https://patchblox.com/security/data/fix/linux/elsa-2026-15887.md) | May 11, 2026 | ol 9 0:3.1.1-3.el9_7.2 | High | 1 | 0 |
| [ELSA-2026-15888](https://patchblox.com/security/data/fix/linux/elsa-2026-15888.md) | May 11, 2026 | ol 10 0:3.1.10-8.el10_1.2 | High | 1 | 0 |
| [DEBIAN-CVE-2026-42216](https://patchblox.com/security/data/fix/linux/debian-cve-2026-42216.md) | May 7, 2026 | Debian 14 3.4.14-0.1 | Urgent | 1 | 0 |
| [DEBIAN-CVE-2026-42217](https://patchblox.com/security/data/fix/linux/debian-cve-2026-42217.md) | May 7, 2026 | Debian 14 3.4.14-0.1 | Urgent | 1 | 0 |
| [DEBIAN-CVE-2026-41142](https://patchblox.com/security/data/fix/linux/debian-cve-2026-41142.md) | May 7, 2026 | Debian 14 3.4.14-0.1 | High | 1 | 0 |
| [RHSA-2026:39024](https://patchblox.com/security/data/fix/linux/rhsa-2026-39024.md) | May 7, 2026 | RHEL 10 3.1.10-8.el10_0.3 | Urgent | 2 | 0 |
| [RHSA-2026:8888](https://patchblox.com/security/data/fix/linux/rhsa-2026-8888.md) | Apr 30, 2026 | RHEL 9 0:3.1.1-3.el9_7.1 | High | 1 | 0 |
| [ALAS2023-2026-1612](https://patchblox.com/security/data/fix/linux/alas2023-2026-1612.md) | Apr 27, 2026 | amzn 2023 3.1.5-1.amzn2023.0.9 | High | 3 | 0 |
| [OPENSUSE-SU-2026:20605-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-20605-1.md) | Apr 22, 2026 | opensuse-leap 16.0 3.2.2-160000.6.1 | High | 4 | 0 |
| [RLSA-2026:8888](https://patchblox.com/security/data/fix/linux/rlsa-2026-8888.md) | Apr 21, 2026 | rocky 9 0:3.1.1-3.el9_7.1 | High | 1 | 0 |
| [DEBIAN-CVE-2026-40250](https://patchblox.com/security/data/fix/linux/debian-cve-2026-40250.md) | Apr 21, 2026 | Debian 14 3.4.14-0.1 | High | 1 | 0 |
| [DEBIAN-CVE-2026-40244](https://patchblox.com/security/data/fix/linux/debian-cve-2026-40244.md) | Apr 21, 2026 | Debian 14 3.4.14-0.1 | High | 1 | 0 |
| [DEBIAN-CVE-2026-39886](https://patchblox.com/security/data/fix/linux/debian-cve-2026-39886.md) | Apr 21, 2026 | Debian 14 3.4.14-0.1 | Routine | 1 | 0 |
| [ALSA-2026:8888](https://patchblox.com/security/data/fix/linux/alsa-2026-8888.md) | Apr 20, 2026 | almalinux 9 3.1.1-3.el9_7.1 | High | 1 | 0 |
| [ELSA-2026-8888](https://patchblox.com/security/data/fix/linux/elsa-2026-8888.md) | Apr 20, 2026 | ol 9 0:3.1.1-3.el9_7.1 | High | 1 | 0 |
| [RLSA-2026:7682](https://patchblox.com/security/data/fix/linux/rlsa-2026-7682.md) | Apr 16, 2026 | rocky 10 0:3.1.10-8.el10_1.1 | High | 1 | 0 |
| [ALAS2023-2026-1561](https://patchblox.com/security/data/fix/linux/alas2023-2026-1561.md) | Apr 13, 2026 | amzn 2023 3.1.5-1.amzn2023.0.8 | High | 1 | 0 |
| [ALSA-2026:7682](https://patchblox.com/security/data/fix/linux/alsa-2026-7682.md) | Apr 13, 2026 | almalinux 10 3.1.10-8.el10_1.1 | High | 1 | 0 |
| [ELSA-2026-7682](https://patchblox.com/security/data/fix/linux/elsa-2026-7682.md) | Apr 13, 2026 | ol 10 0:3.1.10-8.el10_1.1 | High | 1 | 0 |
| [DEBIAN-CVE-2026-34589](https://patchblox.com/security/data/fix/linux/debian-cve-2026-34589.md) | Apr 6, 2026 | Debian 14 3.4.14-0.1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2026-34588](https://patchblox.com/security/data/fix/linux/debian-cve-2026-34588.md) | Apr 6, 2026 | Debian 14 3.4.14-0.1 | High | 1 | 0 |
| [DEBIAN-CVE-2026-34379](https://patchblox.com/security/data/fix/linux/debian-cve-2026-34379.md) | Apr 6, 2026 | Debian 14 3.4.14-0.1 | High | 1 | 0 |
| [DEBIAN-CVE-2026-34378](https://patchblox.com/security/data/fix/linux/debian-cve-2026-34378.md) | Apr 6, 2026 | Debian 14 3.4.14-0.1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2026-34380](https://patchblox.com/security/data/fix/linux/debian-cve-2026-34380.md) | Apr 6, 2026 | Debian 14 3.4.14-0.1 | Routine | 1 | 0 |
| [RHSA-2026:17656](https://patchblox.com/security/data/fix/linux/rhsa-2026-17656.md) | Apr 6, 2026 | RHEL 10 3.1.10-8.el10_0.2 | High | 1 | 0 |
| [openexr 3.1.13-2ubuntu0.26.04.1~esm1](https://patchblox.com/security/data/fix/linux/ubuntu-resolute-openexr-3.1.13-2ubuntu0.26.04.1-esm1.md) | Apr 6, 2026 | Ubuntu 26.04.1 LTS (resolute) 3.1.13-2ubuntu0.26.04.1~esm1 | High | 3 | 0 |
| [openexr 3.1.5-5.1ubuntu0.1~esm1](https://patchblox.com/security/data/fix/linux/ubuntu-noble-openexr-3.1.5-5.1ubuntu0.1-esm1.md) | Apr 6, 2026 | Ubuntu 24.04.5 LTS (noble) 3.1.5-5.1ubuntu0.1~esm1 | High | 3 | 0 |
| [DEBIAN-CVE-2026-34545](https://patchblox.com/security/data/fix/linux/debian-cve-2026-34545.md) | Apr 1, 2026 | Debian 14 3.4.14-0.1 | High | 1 | 0 |
| [DEBIAN-CVE-2026-34543](https://patchblox.com/security/data/fix/linux/debian-cve-2026-34543.md) | Apr 1, 2026 | Debian 14 3.4.14-0.1 | High | 1 | 0 |
| [DEBIAN-CVE-2026-34544](https://patchblox.com/security/data/fix/linux/debian-cve-2026-34544.md) | Apr 1, 2026 | Debian 14 3.4.14-0.1 | High | 1 | 0 |
| [OPENSUSE-SU-2026:20433-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-20433-1.md) | Mar 26, 2026 | opensuse-leap 16.0 3.2.2-160000.5.1 | High | 1 | 0 |
| [SUSE-SU-2026:20936-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-20936-1.md) | Mar 26, 2026 | sles 16.0 3.2.2-160000.5.1 | High | 1 | 0 |
| [ALAS2023-2026-1481](https://patchblox.com/security/data/fix/linux/alas2023-2026-1481.md) | Mar 16, 2026 | amzn 2023 3.1.5-1.amzn2023.0.7 | High | 1 | 0 |
| [DEBIAN-CVE-2026-27622](https://patchblox.com/security/data/fix/linux/debian-cve-2026-27622.md) | Mar 3, 2026 | Debian 14 3.4.6+ds-1 | High | 1 | 0 |
| [RHSA-2026:7678](https://patchblox.com/security/data/fix/linux/rhsa-2026-7678.md) | Mar 3, 2026 | RHEL 10 3.1.10-8.el10_0.1 | High | 1 | 0 |
| [openexr 2.2.0-11.1ubuntu1.9+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-openexr-2.2.0-11.1ubuntu1.9-esm1.md) | Mar 3, 2026 | Ubuntu 18.04.6 LTS (bionic) 2.2.0-11.1ubuntu1.9+esm1 | High | 1 | 0 |

Showing the newest 100 of 165 fixes.

---

Data as of 2026-11-07T12:40:37Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.