Linux · Security advisory · November 7, 2026

ALSA-2026:82345: Security update for 2 packages

ALSA-2026:82345, released November 7, 2026, fixes 5 CVEs across 2 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
5
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0032
24th percentile

Priority of the 5 CVEs

Patch now 0 Urgent 0 High 5 Routine 0

Fixed package versions

ProductReleaseFixed in
OpenEXR-develalmalinux 82.2.0-12.el8_10.3
OpenEXR-libsalmalinux 82.2.0-12.el8_10.3

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2026-59981 openexr: OpenEXR is the reference implementation and specification for the EXR image file format, widely used in the motion pi... 7.1 0.0032 None reported
High CVE-2026-59189 openexr: OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture... 7.1 0.0031 None reported
High CVE-2026-59186 openexr: OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture... 7.1 0.0027 None reported
High CVE-2026-59184 openexr: OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture... 7.1 0.0022 None reported
High CVE-2026-68515 openexr: OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture... 7.1 0.0019 None reported
Showing 1 to 5 of 5 1