328a9c9d8e
## Version 2.5.3 (August 12, 2020) Patch release with various bug/security fixes and build/install fixes, plus a performance optimization: ### Summary * Various sanitizer/fuzz-identified issues related to handling of invalid input * Fixes to misc compiler warnings * Cmake fix for building on arm64 macOS (#772) * Read performance optimization (#782) * Fix for building on non-glibc (#798) * Fixes to tests ## Version 2.5.2 (June 15, 2020) Patch release with various bug/security fixes and build/install fixes. ### Summary * [CVE-2020-15305] Invalid input could cause a heap-use-after-free error in DeepScanLineInputFile::DeepScanLineInputFile() * [CVE-2020-15306] Invalid chunkCount attributes could cause heap buffer overflow in getChunkOffsetTableSize() * [CVE-2020-15304] Invalid tiled input file could cause invalid memory access TiledInputFile::TiledInputFile() * OpenEXRConfig.h now correctly sets OPENEXR_PACKAGE_STRING to "OpenEXR" (rather than "IlmBase") * Various Windows build fixes |
||
|---|---|---|
| .. | ||
| patches | ||
| buildlink3.mk | ||
| DESCR | ||
| distinfo | ||
| Makefile | ||
| PLIST | ||