Description of the patch:
This update for openexr fixes the following issues
- CVE-2026-54920: unchecked integer overflows in Image::resize() followed by an exception can lead to an invalid delete
via uninitialized pointers (bsc#1269703).
- CVE-2026-55059: row setter utilizing dataWindow.min.x instead of min.y can lead to a heap out-of-bounds write
(bsc#1269702).
- CVE-2026-55373: integer overflow in roundListSizeUp() wrapping a 32-bit unsigned value to zero can lead to an infinite
loop (bsc#1269701).