Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package openexr for openSUSE:Factory checked in at 2026-07-08 17:34:51 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/openexr (Old) and /work/SRC/openSUSE:Factory/.openexr.new.1982 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "openexr" Wed Jul 8 17:34:51 2026 rev:81 rq:1363981 version:3.4.13 Changes: -------- --- /work/SRC/openSUSE:Factory/openexr/openexr.changes 2026-06-23 17:36:27.221050174 +0200 +++ /work/SRC/openSUSE:Factory/.openexr.new.1982/openexr.changes 2026-07-08 17:36:31.869453503 +0200 @@ -1,0 +2,28 @@ +Mon Jun 29 13:27:32 UTC 2026 - Dirk Müller <[email protected]> + +- update to 3.4.13 ( + bsc#1269562, CVE-2026-55371, + bsc#1269701, CVE-2026-55373, + bsc#1269702, CVE-2026-55059, + bsc#1269703, CVE-2026-54920, + bsc#1269705, CVE-2026-53532): + * Fix a regression introduced in v3.4.11 in decoding of DWAA + compression + * Fix to handling deep images and very large images with the + OpenEXRUtil library + * Fix initiliazation issue in B44A decoding + * Validate HTJ2K chunk header length before decode + * Fix when building statically and using the vendored OpenJPH + library + * Fix CVE-2026-55373 OpenEXRUtil SampleCountChannel endEdit() + can loop forever on UINT_MAX sample counts + * Fix CVE-2026-55371 OpenEXRCore exr_attr_set_bytes() accepts + NULL type_hint with positive hint_length + * Fix CVE-2026-55059 OpenEXRUtil SampleCountChannel row setter + heap out-of-bounds write + * Fix CVE-2026-54920 Integer Overflow and Use of Uninitialized + Pointer leading to Invalid Delete in OpenEXRUtil Image Resize + * Fix CVE-2026-53532 Unhandled assert abort in HTJ2K decoder via + crafted QCD marker (DoS) + +------------------------------------------------------------------- Old: ---- v3.4.12.tar.gz New: ---- v3.4.13.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ openexr.spec ++++++ --- /var/tmp/diff_new_pack.qnfvfG/_old 2026-07-08 17:36:33.313504044 +0200 +++ /var/tmp/diff_new_pack.qnfvfG/_new 2026-07-08 17:36:33.317504183 +0200 @@ -26,7 +26,7 @@ %endif Name: openexr -Version: 3.4.12 +Version: 3.4.13 Release: 0 Summary: Utilities for working with HDR images in OpenEXR format License: BSD-3-Clause ++++++ v3.4.12.tar.gz -> v3.4.13.tar.gz ++++++ /work/SRC/openSUSE:Factory/openexr/v3.4.12.tar.gz /work/SRC/openSUSE:Factory/.openexr.new.1982/v3.4.13.tar.gz differ: char 13, line 1
