CVS commit: pkgsrc/graphics/openexr

["Thomas Klausner" <wiz%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   wiz
Date:           Sun Nov  1 21:26:23 UTC 2026

Modified Files:
        pkgsrc/graphics/openexr: Makefile distinfo

Log Message:
openexr: update to 3.5.3.

## Version 3.5.3 (October 30, 2026)

Patch release that addresses 15 security vulnerabilities, 10 with
pending CVE IDs, primarily heap buffer overflows and out-of-bounds
writes triggered by malformed or malicious EXR files — several capable
of remote code execution. See the Security section below for details.

This release includes no new features or changes in behavior other
than improved error detection and rejection of invalid input, except
for a fix for a regression introduced in v3.4.14 in reading deep
images on big-endian hosts, due to a byte-order bug that returned an
incorrect deep sample count table. Little-endian hosts are unaffected.

As part of this effort, the full test suite now passes cleanly under
the address, undefined-behavior, and thread sanitizers.

Also in this release:

* Add support for Python 3.15
* Several diagnostic/correctness fixes across the utility tools
  (exrmetrics, exrmultipart, exrcheck) and core decompression
  paths (courtesy of @ssoj13/Alex Khal)
* Address several long-standing build errors and test failures on i686
  (32-bit linux) and s390x (big-endian) hosts.
* Fix build issues on macOS < 10.15
* Fix build issues on powerpc
* Fix for absolute paths for `libm` in OpenEXRTargets.cmake
* Fix for running on Windows 7 involving `CreateFile2`


To generate a diff of this commit:
cvs rdiff -u -r1.92 -r1.93 pkgsrc/graphics/openexr/Makefile
cvs rdiff -u -r1.80 -r1.81 pkgsrc/graphics/openexr/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/graphics/openexr/Makefile
diff -u pkgsrc/graphics/openexr/Makefile:1.92 pkgsrc/graphics/openexr/Makefile:1.93
--- pkgsrc/graphics/openexr/Makefile:1.92       Sun Oct  4 15:46:30 2026
+++ pkgsrc/graphics/openexr/Makefile    Sun Nov  1 21:26:23 2026
@@ -1,11 +1,9 @@
-# $NetBSD: Makefile,v 1.92 2026/10/04 15:46:30 wiz Exp $
+# $NetBSD: Makefile,v 1.93 2026/11/01 21:26:23 wiz Exp $
 
-DISTNAME=      openexr-3.5.2
+DISTNAME=      openexr-3.5.3
 CATEGORIES=    graphics
 MASTER_SITES=  ${MASTER_SITE_GITHUB:=AcademySoftwareFoundation/}
 GITHUB_TAG=    v${PKGVERSION_NOREV}
-PATCHFILES+=   925058c4b80aff5db8cf300bba622914f9a4d349.diff
-PATCH_SITES+=  https://github.com/AcademySoftwareFoundation/openexr/commit/
 
 MAINTAINER=    adam%NetBSD.org@localhost
 HOMEPAGE=      https://www.openexr.com/

Index: pkgsrc/graphics/openexr/distinfo
diff -u pkgsrc/graphics/openexr/distinfo:1.80 pkgsrc/graphics/openexr/distinfo:1.81
--- pkgsrc/graphics/openexr/distinfo:1.80       Sun Oct  4 15:46:30 2026
+++ pkgsrc/graphics/openexr/distinfo    Sun Nov  1 21:26:23 2026
@@ -1,8 +1,5 @@
-$NetBSD: distinfo,v 1.80 2026/10/04 15:46:30 wiz Exp $
+$NetBSD: distinfo,v 1.81 2026/11/01 21:26:23 wiz Exp $
 
-BLAKE2s (925058c4b80aff5db8cf300bba622914f9a4d349.diff) = a3b88e5e364b9442f84c85b4b1ff025190eda5048916ed27e436648146f62a62
-SHA512 (925058c4b80aff5db8cf300bba622914f9a4d349.diff) = 60e944f3b1e423315c66cba9d0949fdb50834251b83fe052077a552a1bac28cb279175145a9b29ac8127ce4c592a6d32db7d26be8c7ea5c6a750b3f05e0a4f97
-Size (925058c4b80aff5db8cf300bba622914f9a4d349.diff) = 6056 bytes
-BLAKE2s (openexr-3.5.2.tar.gz) = fd435c7ab03685500c0dfee7082af502ed042cd863c813c475b42991492b30f0
-SHA512 (openexr-3.5.2.tar.gz) = 4dba9cfb65a6bb98c10d9019b3b1e007c6ad751c8faac3df5e8b08e02c8a0ba6355fe35c25d0b175a91a7bdeb125d138cc87ab621f21cbf4050aad9b5391feab
-Size (openexr-3.5.2.tar.gz) = 26403944 bytes
+BLAKE2s (openexr-3.5.3.tar.gz) = f22ea6ad0cc25193eb246f1bd2ec4073a5444ce2a68a7b6e96805b292d1f5369
+SHA512 (openexr-3.5.3.tar.gz) = 6f0a11437d1c33cfff06d6d7c4c32c2b6660c7665e056b6506d3c078f38d7bcc23594e1695caa32f1ce1c0c018c950a282d75d0bf131966adcf768dd0a3cc1f3
+Size (openexr-3.5.3.tar.gz) = 26457608 bytes