v2.5.9

Patch release that fixes a compile failure with gcc 13 and a problem with PyIlmBase's pkgconfig.

v3.1.9

Patch release that addresses miscellaneous build, doc, and test issues, in particular:

• Build fix for older macOS versions

Also:

• OSS-fuzz 59382 Heap-buffer-overflow in internal_huf_decompress

See CHANGES.md for details.

v3.1.8

Patch release that addresses miscellaneous build issues, for macOS in particular, but also includes:

• Support for DWA compression in OpenEXRCore
• Fix for threadpool deadlocks during shutdown on Windows

This release also addresses:

• OSS-fuzz 59070 Stack-buffer-overflow in DwaCompressor_readChannelRules

v3.1.7

Patch release that fixes a build regression on ARMv7, and fixes a build issue with zlib.

v3.1.6

Patch release that addresses various bug/build issues and includes several optimizations:

• NEON optimizations for ZIP reading
• Enable fast Huffman & Huffman zig-zag transform for Arm Neon
• Support relative and absolute libdir/includedir in pkg-config generation
• Fix for reading memory mapped files with DWA compression
• Enable SSE4 support on Windows
• Fast huf decoder
• CMake config for generating docs is now BUILD_DOC

Also, this release includes a major update and reorganization of the repo documentation and the https://openexr.com website.

In addition, numerous typos and misspellings in comments and doxygen content have been fixed via codespell.

Specific OSS-fuzz issues address:

• OSS-fuzz 52730 Heap-buffer-overflow in fasthuf_initialize
• OSS-fuzz 49698 Heap-buffer-overflow in fasthuf_decode
• OSS-fuzz 47517 Integer-overflow in reconstruct_chunk_table
• OSS-fuzz 47503 Heap-buffer-overflow in uncompress_b44_impl
• OSS-fuzz 47483 Heap-buffer-overflow in generic_unpack

v3.1.5

Patch release that address various bug/build/doc issues:

• Add backwards-compatibilty flags to the core library to match original behavior of the the c++ library. Fixes reading of certain files by the new core.
• Fix build failures on MSVC14 and MSVC 2022
• Fix build failure on latest 64-bit Ubuntu
• Documentation refers to primary branch as "main"
• Update the CI workflow matrix to VFX-CY2022
• Update auto-fetch Imath version to v3.1.5

Specific OSS-fuzz issues addressed:

• OSS-fuzz 46309 Heap-buffer-overflow in Imf_3_1::memstream_read
• OSS-fuzz 46083 Out-of-memory in openexr_exrcheck_fuzzer
• OSS-fuzz 45899 Integer-overflow in internal_exr_compute_chunk_offset_size
• OSS-fuzz 44084 Out-of-memory in openexr_exrcheck_fuzzer

v2.5.8

Patch release that backports two fixes:

• Fix MinGW build by dropping export on defaulted KeyCode::~KeyCode
• Use CMAKE_INSTALL_FULL_LIBDIR/INCLUDEDIR in pkgconfig

v3.1.4

Patch release that addresses various issues:

• Several bug fixes to properly reject invalid input upon read
• A check to enable SSE2 when building with Visual Studio
• A check to fix building with VisualStudio on ARM64
• Update the automatically-downloaded version of Imath to v3.1.4
• Miscellaneous documentation improvements

This addresses one public security vulnerability:

• CVE-2021-45942 Heap-buffer-overflow in Imf_3_1::LineCompositeTask::execute

See CHANGES.md for more details.

v3.1.3

Patch release with a change to default zip compression level:

• Default zip compression level is now 4 (instead of 6), which in our tests improves compression times by 2x with only a tiny drop in compression ratio.
• setDefaultZipCompression() and setDefaultDwaCompression() now set default compression levels for writing.
• The Header now has zipCompressionLevel() and dwaCompressionLevel() to get/set the levels used for writing.

Also, various bug fixes, build improvements, and documentation updates. In particular:

• Fixes a build failure with Imath prior to v3.1
• Fixes a bug in detecting invalid chromaticity values

v3.1.2

Patch release with various bug fixes, build improvements, and documentation updates. In particular:

• Fixes a test failure on arm7
• Proper handling of pthread with glibc 2.34+
• miscellaneous fixes for handling of invalid input by the new OpenEXRCore library

With this version, the OpenEXR technical documentation formerly
distributed exclusively as pdf's is now published online at
https://openexr.readthedocs.io, with the document source now
maintained as .rst files in the repo's docs subfolder.

• OSS-fuzz 39196 Stack-buffer-overflow in dispatch_print_error
• OSS-fuzz 39198 Direct-leak in exr_attr_chlist_add_with_length
• OSS-fuzz 39206 Direct-leak in extract_attr_string_vector
• OSS-fuzz 39212 Heap-use-after-free in dispatch_print_error
• OSS-fuzz 39205 Timeout in openexr_exrcheck_fuzzer
• OSS-fuzz 38912 Integer-overflow in Imf_3_1::bytesPerDeepLineTable
• OSS-fuzz 39084 Divide-by-zero in Imf_3_1::RGBtoXYZ