Openexr

Patch release that fixes handling of dwa compression in OpenEXRCore library.

This release also removes the unused CMake option
``OPENEXR_INSTALL_EXAMPLES``, and fixes some other compiler warnings.

Merged Pull Requests

* [1684](https://github.com/AcademySoftwareFoundation/openexr/pull/1684)
Fix typo causing prefix len to be wrong
* [1668](https://github.com/AcademySoftwareFoundation/openexr/pull/1668)
Improve workflow filters
* [1666](https://github.com/AcademySoftwareFoundation/openexr/pull/1666)
🐛 Remove the OPENEXR_INSTALL_EXAMPLES CMake option
* [1662](https://github.com/AcademySoftwareFoundation/openexr/pull/1662)
Initialize _ySampling to 0
* [1659](https://github.com/AcademySoftwareFoundation/openexr/pull/1659)
Use size_t as iterator instead of int

Patch release with various build/bug/documentation fixes:

* Fix `bswap` on NetBSD
* Fix issue with decompressing fp32 dwa files
* Support cmake config for `libdeflate`
* updated security policy
* miscelleneous website improvements

This release also addresses:

* OSS-fuzz [66676](https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66676)
Null-dereference in Imf_3_3::realloc_deepdata
* OSS-fuzz [66612](https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66612)
Null-dereference in Imf_3_3::realloc_deepdata

Merged Pull Requests

* [1653](https://github.com/AcademySoftwareFoundation/openexr/pull/1653)
Allow partial chunk tables
* [1652](https://github.com/AcademySoftwareFoundation/openexr/pull/1652)
Fix 0 samples in deep data
* [1651](https://github.com/AcademySoftwareFoundation/openexr/pull/1651)
Add recent releases to website news
* [1650](https://github.com/AcademySoftwareFoundation/openexr/pull/1650)
Fix memory leaks in exrstdattr and example code (1649)
* [1647](https://github.com/AcademySoftwareFoundation/openexr/pull/1647)
Remove -Dsonar.login from sonar-scanner command line
* [1643](https://github.com/AcademySoftwareFoundation/openexr/pull/1643)
Use component for python
* [1640](https://github.com/AcademySoftwareFoundation/openexr/pull/1640)
Fix version tag for python wheel sdist
* [1637](https://github.com/AcademySoftwareFoundation/openexr/pull/1637)
Add instructions for creating signed releases/tags
* [1636](https://github.com/AcademySoftwareFoundation/openexr/pull/1636)
Do synk scans weekly on Sunday mornings
* [1635](https://github.com/AcademySoftwareFoundation/openexr/pull/1635)
check and control reduceMemory and reduceTime in stream mode
* [1634](https://github.com/AcademySoftwareFoundation/openexr/pull/1634)
adds a shortcut to avoid reconstructing every call
* [1633](https://github.com/AcademySoftwareFoundation/openexr/pull/1633)
Fix install of symlink
* [1631](https://github.com/AcademySoftwareFoundation/openexr/pull/1631)
Remove snyk-scan-pr.yml
* [1629](https://github.com/AcademySoftwareFoundation/openexr/pull/1629)
Build python wheels via scikit-build-core
* [1626](https://github.com/AcademySoftwareFoundation/openexr/pull/1626)

Patch release that addresses
[CVE-2023-5841](https://takeonme.org/cves/CVE-2023-5841.html).

Note that this bug is present in the C++ API (since v3.1.0), although
it is in a routine that is predominantly used for development and
testing. It is not likely to appear in production code.

This release also addresses:

* OSS-fuzz [66491](https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66491)
Out-of-memory in openexr_exrcorecheck_fuzzer
* OSS-fuzz [66489](https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66489)
Null-dereference in `Imf_3_3::realloc_deepdata`

Merged Pull Requests

* [1632](https://github.com/AcademySoftwareFoundation/openexr/pull/1632)
adjust checks for core to better match c++ checks
* [1630](https://github.com/AcademySoftwareFoundation/openexr/pull/1630)
fix issue with unpacking sample counts
* [1627](https://github.com/AcademySoftwareFoundation/openexr/pull/1627)
Fix CVE 2023 5841

Patch release with miscellaneous build fixes:

* Fix for linking statically against an external ``libdeflate``
* Fix a compile error with ``OPENEXR_VERSION_HEX``
* Fix various compiler warnings
* Pkg-config generation is now on by default for all systems, including Windows

Merged Pull Requests

* [1568](https://github.com/AcademySoftwareFoundation/openexr/pull/1568)
Fix Imf/Iex/IlmThread namespaces in python bindings and website code
* [1565](https://github.com/AcademySoftwareFoundation/openexr/pull/1565)
Update openexr_deps.bzl
* [1562](https://github.com/AcademySoftwareFoundation/openexr/pull/1562)
Bazel: Improve module
* [1561](https://github.com/AcademySoftwareFoundation/openexr/pull/1561)
Clean up handling of libdeflate when linking static
* [1560](https://github.com/AcademySoftwareFoundation/openexr/pull/1560)
Omit OPENEXR_IMAGES_TAG from test image url if empty
* [1557](https://github.com/AcademySoftwareFoundation/openexr/pull/1557)
Set build-shared:OFF for Static build
* [1541](https://github.com/AcademySoftwareFoundation/openexr/pull/1541)
OPENEXR_INSTALL_PKG_CONFIG is on by default, even on Windows
* [1540](https://github.com/AcademySoftwareFoundation/openexr/pull/1540)
Default value for chromaticities attribute constructor in exrstdattr
* [1539](https://github.com/AcademySoftwareFoundation/openexr/pull/1539)
Fix OPENEXR_VERSION_HEX
* [1536](https://github.com/AcademySoftwareFoundation/openexr/pull/1536)
Python wheel setup gets version from OpenEXR.pc/Imath.pc
* [1534](https://github.com/AcademySoftwareFoundation/openexr/pull/1534)
Fix warnings from cross-compiling with x86_64-w64-mingw32-gcc-posix
* [1533](https://github.com/AcademySoftwareFoundation/openexr/pull/1533)
Fix warnings in multipartExamples.cpp
* [1532](https://github.com/AcademySoftwareFoundation/openexr/pull/1532)
Don't trigger ci/bazel/ossfuzz builds on pushes/PRs to src/wrappers
* [1531](https://github.com/AcademySoftwareFoundation/openexr/pull/1531)
Propagate OPENEXR_INSTALL_PKG_CONFIG to internal Imath
* [1530](https://github.com/AcademySoftwareFoundation/openexr/pull/1530)
Set minimal permissions for workflow python-wheels.yml
* [1528](https://github.com/AcademySoftwareFoundation/openexr/pull/1528)
Remove check for _MSC_VER in internal_cpuid.h

* [1257](https://github.com/AcademySoftwareFoundation/openexr/pull/1257)
Refactor ``ImfCheckFile`` and oss-fuzz tests
* [1256](https://github.com/AcademySoftwareFoundation/openexr/pull/1256)
Fix Bazel Imath version defines
* [1243](https://github.com/AcademySoftwareFoundation/openexr/pull/1243)
Update GitHub checkout action from V2 to V3
* [1241](https://github.com/AcademySoftwareFoundation/openexr/pull/1241)
Bump version to 3.2.0 on the main branch
* [1240](https://github.com/AcademySoftwareFoundation/openexr/pull/1240)
prevent double-free of ``RgbaInputFile::_inputPart``
* [1228](https://github.com/AcademySoftwareFoundation/openexr/pull/1228)
Fix build script so auto-build of imath uses the new branch name
* [1226](https://github.com/AcademySoftwareFoundation/openexr/pull/1226)
Merge release notes and SECURITY.md from RB-3.1
* [1221](https://github.com/AcademySoftwareFoundation/openexr/pull/1221)
fix memory leak in ``RgbaInputFile`` constructor
* [1201](https://github.com/AcademySoftwareFoundation/openexr/pull/1201)
Extend multipart ``RgbaInputFile`` API
* [1198](https://github.com/AcademySoftwareFoundation/openexr/pull/1198)
Fix version number of Imath for Bazel build
* [1194](https://github.com/AcademySoftwareFoundation/openexr/pull/1194)
RgbaInputFile: Multipart support
* [1171](https://github.com/AcademySoftwareFoundation/openexr/pull/1171)
Merge v3.1.2 release notes to master
* [1139](https://github.com/AcademySoftwareFoundation/openexr/pull/1139)
Bazel update
* [1127](https://github.com/AcademySoftwareFoundation/openexr/pull/1127)

Minor release with several additions, changes and improvements:

* Zip compression via ``libdeflate``

As of OpenEXR release v3.2, OpenEXR depends on
[libdeflate](https://github.com/ebiggers/libdeflate) for
DEFLATE-based compression. Previous OpenEXR releases relied on
[zlib](https://www.zlib.net). Builds of OpenEXR can choose either an
``libdeflate`` installation, or CMake can auto-fetch the source and
build it internally. The internal build is linked statically, so no
extra shared object is produced.

See [website/install.rst](website/install.rst) for more details.

* New camdkit/camdkit-enabled standard attributes

These changes bring to OpenEXR new standard optional attributes that
were discussed in the [SMPTE Rapid Industry Solutions On-Set Virtual
Production
Initiative)](https://www.smpte.org/blog/update-on-smptes-rapid-industry-solutions-ris-on-set-virtual-production-osvp-initiative). Additionally,
some useful attributes from the SMPTE ACES Container File Layout
standard, SMPTE ST 2065-4:2023, have been included as well. The new
attributes are:

Support automated editorial workflow:

- ``reelName``
- ``imageCounter``
- ``ascFramingDecisionList``

Support forensics:

- ``cameraMake``
- ``cameraModel``
- ``cameraSerialNumber``
- ``cameraFirmware``
- ``cameraUuid``
- ``cameraLabel``
- ``lensMake``
- ``lensModel``
- ``lensSerialNumber``
- ``lensFirmware``
- ``cameraColorBalance``

Support pickup shots:

- ``shutterAngle``
- ``cameraCCTSetting``
- ``cameraTintSetting``

Support metadata-driven match move:

- ``sensorCenterOffset``
- ``sensorOverallDimensions``
- ``sensorPhotositePitch``
- ``sensorAcquisitionRectangle``
- ``nominalFocalLength``
- ``effectiveFocalLength``
- ``pinholeFocalLength``
- ``entrancePupilOffset``
- ``tStop`` (complementing existing aperture)

Also, ``renderingTransform`` and ``lookTransform`` have been deprecated.

See
[website/StandardAttributes.rst](website/StandardAttributes.rst)
and [PR
1383](https://github.com/AcademySoftwareFoundation/openexr/pull/1383)
for more details.

* Updated SO versioning policy

This change adopts a policy of appending the ``MAJOR.MINOR.PATCH``
software release name to the ``SONAME`` to form the real name of the
shared library.

See [website/install.rst](website/install.rst) and [PR
1498](https://github.com/AcademySoftwareFoundation/openexr/pull/1498)
for more details.

* Python bindings & PyPI wheel

Support for the [OpenEXR python
bindings](https://pypi.org/project/OpenEXR) have been formally
adopted by the OpenEXR project.

* Miscellaneous improvements:

- "docs" renamed to "website" ([PR
1504](https://github.com/AcademySoftwareFoundation/openexr/pull/1504))

- Additional deep & multipart code examples ([PR
1493](https://github.com/AcademySoftwareFoundation/openexr/pull/1493)
and [PR
1502](https://github.com/AcademySoftwareFoundation/openexr/pull/1502))

- Many small build/test fixes

- bin tools man pages

- Expanded test coverage

Specific OSS-fuzz issues addressed:

* OSS-fuzz [46459](https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46459)
Out-of-memory in ``openexr_exrcheck_fuzzer``
* OSS-fuzz [46432](https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46432)
Heap-buffer-overflow in ``generic_unpack``
* OSS-fuzz [46413](https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46413)
Integer-overflow in ``reconstruct_chunk_table``
* OSS-fuzz [45718](https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45718)
Heap-double-free in ``Imf_3_1::RgbaInputFile::~RgbaInputFile``
* OSS-fuzz [45716](https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45716)
Abrt in ``Imf_3_1::RgbaInputFile::~RgbaInputFile``
* OSS-fuzz [43771](https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43771)
Direct-leak in ``Imf_3_1::RgbaInputFile::RgbaInputFile``

Merged Pull Requests

* [1527](https://github.com/AcademySoftwareFoundation/openexr/pull/1527)
`OpenEXRConfig.h.in` uses version extracted from `openexr_version.h`
* [1525](https://github.com/AcademySoftwareFoundation/openexr/pull/1525)
Add bzlmod support
* [1523](https://github.com/AcademySoftwareFoundation/openexr/pull/1523)
Add `DEPENDENCIES Imath::Imath` for OpenEXRCore (1523)
* [1522](https://github.com/AcademySoftwareFoundation/openexr/pull/1522)
Rename cifuzz workflow to OSS-Fuzz, and filter out unnecessary triggers
* [1520](https://github.com/AcademySoftwareFoundation/openexr/pull/1520)
fix memory leaks in exrmultipart
* [1519](https://github.com/AcademySoftwareFoundation/openexr/pull/1519)
Remove .bazelrc file
* [1518](https://github.com/AcademySoftwareFoundation/openexr/pull/1518)
Bazel support: Simplify use of libdeflate dependency
* [1517](https://github.com/AcademySoftwareFoundation/openexr/pull/1517)
Streamline Python wheel workflow, and add tests and a CMake setup for bindings
* [1516](https://github.com/AcademySoftwareFoundation/openexr/pull/1516)
Bazel support: Remove Bazel specific example and use same examples as CMake build
* [1513](https://github.com/AcademySoftwareFoundation/openexr/pull/1513)
Separate Actions workflow for the website
* [1511](https://github.com/AcademySoftwareFoundation/openexr/pull/1511)
Website "Attributes" page now describes all attributes
* [1510](https://github.com/AcademySoftwareFoundation/openexr/pull/1510)
Deprecate renderingTransform and lookModTransform
* [1509](https://github.com/AcademySoftwareFoundation/openexr/pull/1509)
Initialize regs[] to 0 in check_for_x86_simd
* [1507](https://github.com/AcademySoftwareFoundation/openexr/pull/1507)
Fix CPUID detection with ``-march=x86-64-v3``
* [1505](https://github.com/AcademySoftwareFoundation/openexr/pull/1505)
Add missing copyright/license specifiers
* [1504](https://github.com/AcademySoftwareFoundation/openexr/pull/1504)
Rename "docs" to "website"
* [1503](https://github.com/AcademySoftwareFoundation/openexr/pull/1503)
Reorganize ``share/util`` and remove unnecessary files
* [1502](https://github.com/AcademySoftwareFoundation/openexr/pull/1502)
multipart code examples
* [1501](https://github.com/AcademySoftwareFoundation/openexr/pull/1501)
Add website example source files to the CMake build for validation
* [1500](https://github.com/AcademySoftwareFoundation/openexr/pull/1500)
Add 2023 Virtual Town Hall to news
* [1498](https://github.com/AcademySoftwareFoundation/openexr/pull/1498)
Update and simplify SO versioning policy
* [1496](https://github.com/AcademySoftwareFoundation/openexr/pull/1496)
Bazel update
* [1495](https://github.com/AcademySoftwareFoundation/openexr/pull/1495)
Rename ``IMATH_REPO/TAG`` to ``OPENEXR_IMATH_REPO/TAG`` and update install docs
* [1494](https://github.com/AcademySoftwareFoundation/openexr/pull/1494)
Reorder attributes in doc to match order in header
* [1493](https://github.com/AcademySoftwareFoundation/openexr/pull/1493)
adds deep examples, fixes the deep examples in docs
* [1490](https://github.com/AcademySoftwareFoundation/openexr/pull/1490)
Readdress 1456: disallow NaNs in ``testOptimizedInterleavePatterns``
* [1489](https://github.com/AcademySoftwareFoundation/openexr/pull/1489)
Add ``sensorCenterOffset``, ``sensorOverallDimensions``, ``sensorPhotositePitch``
* [1488](https://github.com/AcademySoftwareFoundation/openexr/pull/1488)
Revert pre-computed values
* [1487](https://github.com/AcademySoftwareFoundation/openexr/pull/1487)
Python wheels
* [1486](https://github.com/AcademySoftwareFoundation/openexr/pull/1486)
Replace ``ILMBASE_THREADING_ENABLED`` with ``ILMTHREAD_THREADING_ENABLED``
* [1484](https://github.com/AcademySoftwareFoundation/openexr/pull/1484)
Fix handling for corrupt number of DC components
* [1483](https://github.com/AcademySoftwareFoundation/openexr/pull/1483)
Add ``ImfMisc.h`` and ``ImfCompressor.h`` as installed headers
* [1482](https://github.com/AcademySoftwareFoundation/openexr/pull/1482)
Add ``OPENEXR_MISSING_ARM_VLD1`` workaround to ``internal_dwa_simd.h``
* [1475](https://github.com/AcademySoftwareFoundation/openexr/pull/1475)
Update CI with vfx2023 Linux jobs.
* [1473](https://github.com/AcademySoftwareFoundation/openexr/pull/1473)
consolidate project configurations to one place
* [1472](https://github.com/AcademySoftwareFoundation/openexr/pull/1472)
Fix range check in dwa compressor
* [1471](https://github.com/AcademySoftwareFoundation/openexr/pull/1471)
Add detailed instructions for making both patch and major/minor release
* [1468](https://github.com/AcademySoftwareFoundation/openexr/pull/1468)
Remove old zlib reference
* [1464](https://github.com/AcademySoftwareFoundation/openexr/pull/1464)