Sat Apr 1 10:35:16 2023 UTC ()
Pullup ticket #6742 - requested by bsiegert
graphics/openexr: security update

Revisions pulled up:
- graphics/openexr/Makefile                                     1.48
- graphics/openexr/PLIST                                        1.21
- graphics/openexr/distinfo                                     1.46

-------------------------------------------------------------------
   Module Name:    pkgsrc
   Committed By:   bsiegert
   Date:           Thu Mar 30 16:38:14 UTC 2023

   Modified Files:
           pkgsrc/graphics/openexr: Makefile PLIST distinfo

   Log Message:
   openexr: update to 3.1.6 (security)

   Patch release that address various bug/build issues and optimizations:

   - NEON optimizations for ZIP reading
   - Enable fast Huffman & Huffman zig-zag transform for Arm Neon
   - Support relative and absolute libdir/incluedir in pkg-config generation
   - Fix for reading memory mapped files with DWA compression
   - Enable SSE4 support on Windows
   - Fast huf decoder
   - CMake config for generating docs is now BUILD_DOC

   Also, this release includes a major update and reorganization of the repo
   documentation and the https://openexr.com website.

   In addition, numerous typos and misspellings in comments and doxygen content
   have been fixed via codespell.

   Specific OSS-fuzz issues address:

   - OSS-fuzz 52730 Heap-buffer-overflow in fasthuf_initialize
   - OSS-fuzz 49698 Heap-buffer-overflow in fasthuf_decode
   - OSS-fuzz 47517 Integer-overflow in reconstruct_chunk_table
   - OSS-fuzz 47503 Heap-buffer-overflow in uncompress_b44_impl
   - OSS-fuzz 47483 Heap-buffer-overflow in generic_unpack

   To generate a diff of this commit:
   cvs rdiff -u -r1.47 -r1.48 pkgsrc/graphics/openexr/Makefile
   cvs rdiff -u -r1.20 -r1.21 pkgsrc/graphics/openexr/PLIST
   cvs rdiff -u -r1.45 -r1.46 pkgsrc/graphics/openexr/distinfo


(spz)
diff -r1.47 -r1.47.2.1 pkgsrc/graphics/openexr/Makefile
diff -r1.20 -r1.20.8.1 pkgsrc/graphics/openexr/PLIST
diff -r1.45 -r1.45.8.1 pkgsrc/graphics/openexr/distinfo

cvs diff -r1.47 -r1.47.2.1 pkgsrc/graphics/openexr/Makefile (expand / switch to unified diff)

--- pkgsrc/graphics/openexr/Makefile 2023/01/24 18:36:27 1.47
+++ pkgsrc/graphics/openexr/Makefile 2023/04/01 10:35:16 1.47.2.1
@@ -1,16 +1,16 @@ @@ -1,16 +1,16 @@
1# $NetBSD: Makefile,v 1.47 2023/01/24 18:36:27 wiz Exp $ 1# $NetBSD: Makefile,v 1.47.2.1 2023/04/01 10:35:16 spz Exp $
2 2
3DISTNAME= openexr-3.1.5 3DISTNAME= openexr-3.1.6
4CATEGORIES= graphics 4CATEGORIES= graphics
5MASTER_SITES= ${MASTER_SITE_GITHUB:=openexr/} 5MASTER_SITES= ${MASTER_SITE_GITHUB:=openexr/}
6GITHUB_PROJECT= openexr 6GITHUB_PROJECT= openexr
7GITHUB_TAG= v${PKGVERSION_NOREV} 7GITHUB_TAG= v${PKGVERSION_NOREV}
8 8
9MAINTAINER= adam@NetBSD.org 9MAINTAINER= adam@NetBSD.org
10HOMEPAGE= https://www.openexr.com/ 10HOMEPAGE= https://www.openexr.com/
11COMMENT= High dynamic-range (HDR) image file format library and tools 11COMMENT= High dynamic-range (HDR) image file format library and tools
12LICENSE= modified-bsd 12LICENSE= modified-bsd
13 13
14USE_LANGUAGES= c c++14 14USE_LANGUAGES= c c++14
15 15
16# C++14 16# C++14

cvs diff -r1.20 -r1.20.8.1 pkgsrc/graphics/openexr/PLIST (expand / switch to unified diff)

--- pkgsrc/graphics/openexr/PLIST 2022/04/20 20:29:54 1.20
+++ pkgsrc/graphics/openexr/PLIST 2023/04/01 10:35:16 1.20.8.1
@@ -1,14 +1,14 @@ @@ -1,14 +1,14 @@
1@comment $NetBSD: PLIST,v 1.20 2022/04/20 20:29:54 wiz Exp $ 1@comment $NetBSD: PLIST,v 1.20.8.1 2023/04/01 10:35:16 spz Exp $
2bin/exr2aces 2bin/exr2aces
3bin/exrenvmap 3bin/exrenvmap
4bin/exrheader 4bin/exrheader
5bin/exrinfo 5bin/exrinfo
6bin/exrmakepreview 6bin/exrmakepreview
7bin/exrmaketiled 7bin/exrmaketiled
8bin/exrmultipart 8bin/exrmultipart
9bin/exrmultiview 9bin/exrmultiview
10bin/exrstdattr 10bin/exrstdattr
11include/OpenEXR/Iex.h 11include/OpenEXR/Iex.h
12include/OpenEXR/IexBaseExc.h 12include/OpenEXR/IexBaseExc.h
13include/OpenEXR/IexConfig.h 13include/OpenEXR/IexConfig.h
14include/OpenEXR/IexErrnoExc.h 14include/OpenEXR/IexErrnoExc.h
@@ -143,43 +143,43 @@ include/OpenEXR/openexr_conf.h @@ -143,43 +143,43 @@ include/OpenEXR/openexr_conf.h
143include/OpenEXR/openexr_context.h 143include/OpenEXR/openexr_context.h
144include/OpenEXR/openexr_debug.h 144include/OpenEXR/openexr_debug.h
145include/OpenEXR/openexr_decode.h 145include/OpenEXR/openexr_decode.h
146include/OpenEXR/openexr_encode.h 146include/OpenEXR/openexr_encode.h
147include/OpenEXR/openexr_errors.h 147include/OpenEXR/openexr_errors.h
148include/OpenEXR/openexr_part.h 148include/OpenEXR/openexr_part.h
149include/OpenEXR/openexr_std_attr.h 149include/OpenEXR/openexr_std_attr.h
150lib/cmake/OpenEXR/OpenEXRConfig.cmake 150lib/cmake/OpenEXR/OpenEXRConfig.cmake
151lib/cmake/OpenEXR/OpenEXRConfigVersion.cmake 151lib/cmake/OpenEXR/OpenEXRConfigVersion.cmake
152lib/cmake/OpenEXR/OpenEXRTargets-release.cmake 152lib/cmake/OpenEXR/OpenEXRTargets-release.cmake
153lib/cmake/OpenEXR/OpenEXRTargets.cmake 153lib/cmake/OpenEXR/OpenEXRTargets.cmake
154lib/libIex-3_1.so 154lib/libIex-3_1.so
155lib/libIex-3_1.so.30 155lib/libIex-3_1.so.30
156lib/libIex-3_1.so.30.5.1 156lib/libIex-3_1.so.30.6.1
157lib/libIex.so 157lib/libIex.so
158lib/libIlmThread-3_1.so 158lib/libIlmThread-3_1.so
159lib/libIlmThread-3_1.so.30 159lib/libIlmThread-3_1.so.30
160lib/libIlmThread-3_1.so.30.5.1 160lib/libIlmThread-3_1.so.30.6.1
161lib/libIlmThread.so 161lib/libIlmThread.so
162lib/libOpenEXR-3_1.so 162lib/libOpenEXR-3_1.so
163lib/libOpenEXR-3_1.so.30 163lib/libOpenEXR-3_1.so.30
164lib/libOpenEXR-3_1.so.30.5.1 164lib/libOpenEXR-3_1.so.30.6.1
165lib/libOpenEXR.so 165lib/libOpenEXR.so
166lib/libOpenEXRCore-3_1.so 166lib/libOpenEXRCore-3_1.so
167lib/libOpenEXRCore-3_1.so.30 167lib/libOpenEXRCore-3_1.so.30
168lib/libOpenEXRCore-3_1.so.30.5.1 168lib/libOpenEXRCore-3_1.so.30.6.1
169lib/libOpenEXRCore.so 169lib/libOpenEXRCore.so
170lib/libOpenEXRUtil-3_1.so 170lib/libOpenEXRUtil-3_1.so
171lib/libOpenEXRUtil-3_1.so.30 171lib/libOpenEXRUtil-3_1.so.30
172lib/libOpenEXRUtil-3_1.so.30.5.1 172lib/libOpenEXRUtil-3_1.so.30.6.1
173lib/libOpenEXRUtil.so 173lib/libOpenEXRUtil.so
174lib/pkgconfig/OpenEXR.pc 174lib/pkgconfig/OpenEXR.pc
175share/doc/OpenEXR/examples/drawImage.cpp 175share/doc/OpenEXR/examples/drawImage.cpp
176share/doc/OpenEXR/examples/drawImage.h 176share/doc/OpenEXR/examples/drawImage.h
177share/doc/OpenEXR/examples/generalInterfaceExamples.cpp 177share/doc/OpenEXR/examples/generalInterfaceExamples.cpp
178share/doc/OpenEXR/examples/generalInterfaceExamples.h 178share/doc/OpenEXR/examples/generalInterfaceExamples.h
179share/doc/OpenEXR/examples/generalInterfaceTiledExamples.cpp 179share/doc/OpenEXR/examples/generalInterfaceTiledExamples.cpp
180share/doc/OpenEXR/examples/generalInterfaceTiledExamples.h 180share/doc/OpenEXR/examples/generalInterfaceTiledExamples.h
181share/doc/OpenEXR/examples/lowLevelIoExamples.cpp 181share/doc/OpenEXR/examples/lowLevelIoExamples.cpp
182share/doc/OpenEXR/examples/lowLevelIoExamples.h 182share/doc/OpenEXR/examples/lowLevelIoExamples.h
183share/doc/OpenEXR/examples/main.cpp 183share/doc/OpenEXR/examples/main.cpp
184share/doc/OpenEXR/examples/namespaceAlias.h 184share/doc/OpenEXR/examples/namespaceAlias.h
185share/doc/OpenEXR/examples/previewImageExamples.cpp 185share/doc/OpenEXR/examples/previewImageExamples.cpp

cvs diff -r1.45 -r1.45.8.1 pkgsrc/graphics/openexr/distinfo (expand / switch to unified diff)

--- pkgsrc/graphics/openexr/distinfo 2022/04/20 20:29:54 1.45
+++ pkgsrc/graphics/openexr/distinfo 2023/04/01 10:35:16 1.45.8.1
@@ -1,6 +1,6 @@ @@ -1,6 +1,6 @@
1$NetBSD: distinfo,v 1.45 2022/04/20 20:29:54 wiz Exp $ 1$NetBSD: distinfo,v 1.45.8.1 2023/04/01 10:35:16 spz Exp $
2 2
3BLAKE2s (openexr-3.1.5.tar.gz) = d48858f2a546e88bfa682415076337b73e656b3e9314eccf1f77ad20b3d2bcb3 3BLAKE2s (openexr-3.1.6.tar.gz) = bfef564b6236cb2903edb852465c799510c9446a1843a7c4b2c41e653f3106dc
4SHA512 (openexr-3.1.5.tar.gz) = 01ef16eacd2dde83c67b81522bae87f47ba272a41ce7d4e35d865dbdcaa03093e7ac504b95d2c1b3a19535f2364a4f937b0e0570c74243bb1c6e021fce7b620c 4SHA512 (openexr-3.1.6.tar.gz) = 310b6e0de0f7b6bc6b8b325a24dd948f8251e6abb2971005e9b44e206db0aa2ffbe85ee55a26c575fd57e274d160b9098b8f7da618a72e679547fe863f99865a
5Size (openexr-3.1.5.tar.gz) = 20327926 bytes 5Size (openexr-3.1.6.tar.gz) = 20494002 bytes
6SHA1 (patch-src_lib_OpenEXR_ImfSystemSpecific.h) = 87c234bc497cd1fe34d38dfcdaa943486f8971e5 6SHA1 (patch-src_lib_OpenEXR_ImfSystemSpecific.h) = 87c234bc497cd1fe34d38dfcdaa943486f8971e5