3
3
4
4
# OpenEXR Release Notes
5
5
6
- * [ Version 3.1.12] ( #version-3112-february-5 -2023 ) February 5 , 2024
6
+ * [ Version 3.1.12] ( #version-3112-february-11 -2023 ) February 11 , 2024
7
7
* [ Version 3.1.11] ( #version-3111-august-13-2023 ) August 13, 2023
8
8
* [ Version 3.1.10] ( #version-3110-august-2-2023 ) August 2, 2023
9
9
* [ Version 3.1.9] ( #version-319-june-25-2023 ) June 25, 2023
66
66
* [ Version 1.0.1] ( #version-101 )
67
67
* [ Version 1.0] ( #version-10 )
68
68
69
- ## Version 3.1.12 (February 5 , 2024)
69
+ ## Version 3.1.12 (February 11 , 2024)
70
70
71
71
Patch release that addresses
72
72
[ CVE-2023 -5841] ( https://takeonme.org/cves/CVE-2023-5841.html ) .
@@ -75,8 +75,19 @@ Note that this bug is present in the C++ API (since v3.1.0), although
75
75
it is in a routine that is predominantly used for development and
76
76
testing. It is not likely to appear in production code.
77
77
78
+ This release also addresses:
79
+
80
+ * OSS-fuzz [ 66491] ( https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66491 )
81
+ Out-of-memory in openexr_exrcorecheck_fuzzer
82
+ * OSS-fuzz [ 66489] ( https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66489 )
83
+ Null-dereference in ` Imf_3_3::realloc_deepdata `
84
+
78
85
### Merged Pull Requests
79
86
87
+ * [ 1632] ( https://github.com/AcademySoftwareFoundation/openexr/pull/1632 )
88
+ adjust checks for core to better match c++ checks
89
+ * [ 1630] ( https://github.com/AcademySoftwareFoundation/openexr/pull/1630 )
90
+ fix issue with unpacking sample counts
80
91
* [ 1627] ( https://github.com/AcademySoftwareFoundation/openexr/pull/1627 )
81
92
Fix CVE 2023 5841
82
93
0 commit comments