Openexr

Latest version: v3.3.2

Safety actively analyzes 701475 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 6 of 19

3.1.10

Patch release that addresses miscellaneous build issues, test
failures, and performance regressions, as well as:

* OSS-fuzz [59457](https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=59457)
Heap-buffer-overflow in ``LossyDctDecoder_execute``

Merged Pull Requests

* [1490](https://github.com/AcademySoftwareFoundation/openexr/pull/1490) Readdress #1456: disallow NaNs in ``testOptimizedInterleavePatterns``
* [1488](https://github.com/AcademySoftwareFoundation/openexr/pull/1488) Revert pre-computed values
* [1484](https://github.com/AcademySoftwareFoundation/openexr/pull/1484) Fix handling for corrupt number of DC components
* [1482](https://github.com/AcademySoftwareFoundation/openexr/pull/1482) Add ``OPENEXR_MISSING_ARM_VLD1`` workaround to ``internal_dwa_simd.h``
* [1480](https://github.com/AcademySoftwareFoundation/openexr/pull/1480) Fix Huffman performance regression on Linux/clang
* [1472](https://github.com/AcademySoftwareFoundation/openexr/pull/1472) Fix range check in dwa compressor
* [1470](https://github.com/AcademySoftwareFoundation/openexr/pull/1470) Fix build with i386 and musl libc
* [1469](https://github.com/AcademySoftwareFoundation/openexr/pull/1469) Fix the code contains unhandled character
* [1467](https://github.com/AcademySoftwareFoundation/openexr/pull/1467) Fix cpu detection of sse2 on non-64 x86
* [1466](https://github.com/AcademySoftwareFoundation/openexr/pull/1466) Fix the code contains unhandled character
* [1463](https://github.com/AcademySoftwareFoundation/openexr/pull/1463) Fix gcc-11 warnings: signed/unsigned integer comparison, unused variables
* [1462](https://github.com/AcademySoftwareFoundation/openexr/pull/1462) Fix macOS and Windows build failures when threading is disabled
* [1447](https://github.com/AcademySoftwareFoundation/openexr/pull/1447) Fix build error on win_arm64

3.1.9

Patch release that addresses miscelleneous build, doc, test issues, in
particular:

- Build fix for older macOS versions

Also:

* OSS-fuzz [59382](https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=59382)
Heap-buffer-overflow in ``internal_huf_decompress``

Merged Pull Requests

* [1461](https::/github.com/AcademySoftwareFoundation/openexr/pull/1461)
don't use NaNs/infs in testOptimizedInterleavePatterns
* [1457](https::/github.com/AcademySoftwareFoundation/openexr/pull/1457)
Bazel support: Switch back to VS2019 due to a toolchain issue in Bazel
* [1454](https::/github.com/AcademySoftwareFoundation/openexr/pull/1454)
Add ``OPENEXR_IMF_INTERNAL_NAMESPACE`` for ``WidenFilename``
* [1452](https::/github.com/AcademySoftwareFoundation/openexr/pull/1452)
Use ``securityopenexr.com`` for consistency
* [1448](https::/github.com/AcademySoftwareFoundation/openexr/pull/1448)
compression.cpp: fix isnan
* [1443](https::/github.com/AcademySoftwareFoundation/openexr/pull/1443)
Bazel bump imath
* [1439](https::/github.com/AcademySoftwareFoundation/openexr/pull/1439)
Fix scenario where malformed dwa file could read past end of buffer
* [1416](https::/github.com/AcademySoftwareFoundation/openexr/pull/1416)
IlmThread: fix defines for older macOS: do not prefix with ``__``

3.1.8

Patch release that addresses miscellaneous build issues, for macOS in
particular, but also includes:

* Support for DWA compression in OpenEXRCore
* Fix for threadpool deadlocks during shutdown on Windows

This release also addresses:

* OSS-fuzz [59070](https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=59070) Stack-buffer-overflow in DwaCompressor_readChannelRules

Merged Pull Requests

* [1429](https::/github.com/AcademySoftwareFoundation/openexr/pull/1429)
fix out of bounds check with a full channel name vs. byte count
* [1414](https::/github.com/AcademySoftwareFoundation/openexr/pull/1414)
Add include <cmath> for isnan
* [1409](https::/github.com/AcademySoftwareFoundation/openexr/pull/1409)
Use posix compat code for old macOS without libdispatch
* [1408](https::/github.com/AcademySoftwareFoundation/openexr/pull/1408)
internal_xdr.h: fix endian logic for Apple
* [1406](https::/github.com/AcademySoftwareFoundation/openexr/pull/1406)
internal_structs.h: __STDC_FORMAT_MACROS should be defined prior to inttypes.h
* [1402](https::/github.com/AcademySoftwareFoundation/openexr/pull/1402)
Add dwa support to core
* [1389](https::/github.com/AcademySoftwareFoundation/openexr/pull/1389)
fix typo
* [1382](https::/github.com/AcademySoftwareFoundation/openexr/pull/1382)
Update macOS installation instructions
* [1378](https::/github.com/AcademySoftwareFoundation/openexr/pull/1378)
Fix typo in README.md
* [1377](https::/github.com/AcademySoftwareFoundation/openexr/pull/1377)
Only install exrinfo when OPENEXR_INSTALL_TOOLS is on
* [1291](https::/github.com/AcademySoftwareFoundation/openexr/pull/1291)
Change setNumThreads to wait for thread start

3.1.7

Patch release that fixes a regression on ARMv7, and fixes a build
issue with zlib.

Merged Pull Requests

* [1368](https://github.com/AcademySoftwareFoundation/openexr/pull/1368)
Fix ARMv7 build for DwaCompressor, too.
* [1366](https://github.com/AcademySoftwareFoundation/openexr/pull/1366)
Fix ARMv7 build by making recent ZIP NEON optimizations be ARMv8 (aarch64) only
* [1361](https://github.com/AcademySoftwareFoundation/openexr/pull/1361)
Fix the zlib build error that was reported in 1360.
* [1358](https://github.com/AcademySoftwareFoundation/openexr/pull/1358)
Detect missing vst1q_f32_x2 and provide replacement if necessary
* [1355](https://github.com/AcademySoftwareFoundation/openexr/pull/1355)
Fix typo in release notes
* [1354](https://github.com/AcademySoftwareFoundation/openexr/pull/1354)
Test for AVX in unpack.c

3.1.6

Patch release that address various bug/build issues and optimizations:

* NEON optimizations for ZIP reading
* Enable fast Huffman & Huffman zig-zag transform for Arm Neon
* Support relative and absolute libdir/includedir in pkg-config generation
* Fix for reading memory mapped files with DWA compression
* Enable SSE4 support on Windows
* Fast huf decoder
* CMake config for generating docs is now BUILD_DOC

Also, this release includes a major update and reorganization of the repo
documentation and website.

In addition, numerous typos and misspellings in comments and doxygen
content have been fixed via
[``codespell``](https://github.com/codespell-project/codespell).

Specific OSS-fuzz issues address:

* OSS-fuzz [52730](https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52730) Heap-buffer-overflow in fasthuf_initialize
* OSS-fuzz [49698](https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49698) Heap-buffer-overflow in fasthuf_decode
* OSS-fuzz [47517](https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47517) Integer-overflow in reconstruct_chunk_table
* OSS-fuzz [47503](https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47503) Heap-buffer-overflow in uncompress_b44_impl
* OSS-fuzz [47483](https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47483) Heap-buffer-overflow in generic_unpack

Merged Pull Requests

* [1348](https://github.com/AcademySoftwareFoundation/openexr/pull/1348)
NEON optimizations for ZIP reading (reconstruct and interleave)
* [1347](https://github.com/AcademySoftwareFoundation/openexr/pull/1347)
Reduce memory in ``testDeepScanLineBasic``
* [1346](https://github.com/AcademySoftwareFoundation/openexr/pull/1346)
Add pointers to installing doxygen/sphinx to the build instructions
* [1345](https://github.com/AcademySoftwareFoundation/openexr/pull/1345)
Add execution of the examples to test suite
* [1344](https://github.com/AcademySoftwareFoundation/openexr/pull/1344)
Sphinx warnings by default now cause doc build to fail
* [1343](https://github.com/AcademySoftwareFoundation/openexr/pull/1343)
Removew tmpDir.h from OpenEXRUtilTest/OpenEXRFuzzTest CMakeLists.txt
* [1341](https://github.com/AcademySoftwareFoundation/openexr/pull/1341)
Update PortingGuide.rst
* [1340](https://github.com/AcademySoftwareFoundation/openexr/pull/1340)
Remove duplicate ``tmpDir.h`` files
* [1339](https://github.com/AcademySoftwareFoundation/openexr/pull/1339)
Build docs in CI, and rename ``DOCS`` CMake config variable to ``BUILD_DOCS``
* [1338](https://github.com/AcademySoftwareFoundation/openexr/pull/1338)
Add header files for IDEs
* [1337](https://github.com/AcademySoftwareFoundation/openexr/pull/1337)
Fix documentation glitches
* [1336](https://github.com/AcademySoftwareFoundation/openexr/pull/1336)
Fix sphinx extensions in conf.py and requirements.txt
* [1335](https://github.com/AcademySoftwareFoundation/openexr/pull/1335)
More doc reorg
* [1333](https://github.com/AcademySoftwareFoundation/openexr/pull/1333)
Fix for reading memory mapped files with DWA compression
* [1332](https://github.com/AcademySoftwareFoundation/openexr/pull/1332)
Reorganize repo/readthedocs documentation
* [1331](https://github.com/AcademySoftwareFoundation/openexr/pull/1331)
Add missing license/copyright
* [1330](https://github.com/AcademySoftwareFoundation/openexr/pull/1330)
Support relative and absolute libdir/incluedir in pkg-config generation
* [1329](https://github.com/AcademySoftwareFoundation/openexr/pull/1329)
Fix missing guard check
* [1323](https://github.com/AcademySoftwareFoundation/openexr/pull/1323)
Enable fast Huffman & Huffman zig-zag transform for Arm Neon
* [1321](https://github.com/AcademySoftwareFoundation/openexr/pull/1321)
Fix MSVC Debug build with internal zlib
* [1317](https://github.com/AcademySoftwareFoundation/openexr/pull/1317)
Add CIFuzz GitHub action
* [1316](https://github.com/AcademySoftwareFoundation/openexr/pull/1316)
Fix compiler warnings from gcc-12
* [1315](https://github.com/AcademySoftwareFoundation/openexr/pull/1315)
Fix Visual Studio on ARM Compilation
* [1312](https://github.com/AcademySoftwareFoundation/openexr/pull/1312)
Problem: warning C4244: initializing: conversion from double to unsigned int, possible loss of data
* [1311](https://github.com/AcademySoftwareFoundation/openexr/pull/1311)
Clean up CONTRIBUTING.md
* [1296](https://github.com/AcademySoftwareFoundation/openexr/pull/1296)
Check for null pointer passed to ``memcpy``
* [1295](https://github.com/AcademySoftwareFoundation/openexr/pull/1295)
Remove TSC meeting notes from repo
* [1294](https://github.com/AcademySoftwareFoundation/openexr/pull/1294)
Change reference to ``IlmBase`` to ``Imath`` in ``README.md``
* [1293](https://github.com/AcademySoftwareFoundation/openexr/pull/1293)
Update Christina's affiliation
* [1292](https://github.com/AcademySoftwareFoundation/openexr/pull/1292)
Fix typo in the documentation's example reading class
* [1290](https://github.com/AcademySoftwareFoundation/openexr/pull/1290)
fix huf memory boundary checks
* [1289](https://github.com/AcademySoftwareFoundation/openexr/pull/1289)
Fix a typo breaking the link to ``Imath`` repository in readme
* [1287](https://github.com/AcademySoftwareFoundation/openexr/pull/1287)
Using ``PRId64`` in place of ``%ld`` in ``chunk.c``
* [1286](https://github.com/AcademySoftwareFoundation/openexr/pull/1286)
Fix NDK compile error
* [1279](https://github.com/AcademySoftwareFoundation/openexr/pull/1279)
Fix for IDE Headers
* [1276](https://github.com/AcademySoftwareFoundation/openexr/pull/1276)
add missed ``include <cstdint>`` statement
* [1274](https://github.com/AcademySoftwareFoundation/openexr/pull/1274)
Enable SSE4 support on Windows 2
* [1272](https://github.com/AcademySoftwareFoundation/openexr/pull/1272)
Fix remaining typos
* [1271](https://github.com/AcademySoftwareFoundation/openexr/pull/1271)
Fix typos in ``src/lib/OpenEXR``
* [1269](https://github.com/AcademySoftwareFoundation/openexr/pull/1269)
Add fast huf decoder
* [1268](https://github.com/AcademySoftwareFoundation/openexr/pull/1268)
Address OSS Fuzz Issues
* [1264](https://github.com/AcademySoftwareFoundation/openexr/pull/1264)
Add missing ``include <cstdint>`` required by gcc-13
* [1261](https://github.com/AcademySoftwareFoundation/openexr/pull/1261)
prevent integer overflow in ``DeepScanlineInputFile`` with huge images
* [1260](https://github.com/AcademySoftwareFoundation/openexr/pull/1260)
prevent integer overflow of lineOffsetSize
* [1259](https://github.com/AcademySoftwareFoundation/openexr/pull/1259)
Add explicit casts around the usage of zlib datatypes to avoid warnings on Windows

3.1.5

* [1246](https://github.com/AcademySoftwareFoundation/openexr/pull/1246)
move out of bounds check inside loop
* [1245](https://github.com/AcademySoftwareFoundation/openexr/pull/1245)
Implement corrupt chunk table reconstruction for Core
* [1244](https://github.com/AcademySoftwareFoundation/openexr/pull/1244)
Match cpp header checks
* [1239](https://github.com/AcademySoftwareFoundation/openexr/pull/1239)
Add include <algorithm> for MSVC14
* [1238](https://github.com/AcademySoftwareFoundation/openexr/pull/1238)

Page 6 of 19

© 2025 Safety CLI Cybersecurity Inc. All Rights Reserved.