Skip to content

Commit

Permalink
Add PR 1630 and 1632
Browse files Browse the repository at this point in the history
Signed-off-by: Cary Phillips <cary@ilm.com>
  • Loading branch information
cary-ilm committed Feb 10, 2024
1 parent 00090b4 commit 3b0d18c
Showing 1 changed file with 13 additions and 2 deletions.
15 changes: 13 additions & 2 deletions CHANGES.md
Original file line number Diff line number Diff line change
Expand Up @@ -3,7 +3,7 @@

# OpenEXR Release Notes

* [Version 3.1.12](#version-3112-february-5-2023) February 5, 2024
* [Version 3.1.12](#version-3112-february-11-2023) February 11, 2024
* [Version 3.1.11](#version-3111-august-13-2023) August 13, 2023
* [Version 3.1.10](#version-3110-august-2-2023) August 2, 2023
* [Version 3.1.9](#version-319-june-25-2023) June 25, 2023
Expand Down Expand Up @@ -66,7 +66,7 @@
* [Version 1.0.1](#version-101)
* [Version 1.0](#version-10)

## Version 3.1.12 (February 5, 2024)
## Version 3.1.12 (February 11, 2024)

Patch release that addresses
[CVE-2023-5841](https://takeonme.org/cves/CVE-2023-5841.html).
Expand All @@ -75,8 +75,19 @@ Note that this bug is present in the C++ API (since v3.1.0), although
it is in a routine that is predominantly used for development and
testing. It is not likely to appear in production code.

This release also addresses:

* OSS-fuzz [66491](https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66491)
Out-of-memory in openexr_exrcorecheck_fuzzer
* OSS-fuzz [66489](https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66489)
Null-dereference in `Imf_3_3::realloc_deepdata`

### Merged Pull Requests

* [1632](https://github.com/AcademySoftwareFoundation/openexr/pull/1632)
adjust checks for core to better match c++ checks
* [1630](https://github.com/AcademySoftwareFoundation/openexr/pull/1630)
fix issue with unpacking sample counts
* [1627](https://github.com/AcademySoftwareFoundation/openexr/pull/1627)
Fix CVE 2023 5841

Expand Down

0 comments on commit 3b0d18c

Please sign in to comment.