Page MenuHome

deps: Update tiff and openexr
ClosedPublic

Authored by Ray Molenkamp (LazyDodo) on Jul 17 2022, 7:58 PM.

Details

Summary

OpenEXR 3.1.4 -> 3.1.5 this fixes several issues
OSS fuzz found [1]

libtiff 4.3.0 -> 4.4.0 this fixes several CVE's [2]

This also converts the harvest of libtiff on windows
to a post install handler, there's a few left but windows
is getting close to being harvest free.

as far as i can tell there are no ABI changes (tiff hid some
private symbols that previously were available) so no rebuild
of openimageio should be needed.

[1] https://github.com/AcademySoftwareFoundation/openexr/releases/tag/v3.1.5
[2] https://www.asmail.be/msg0055226377.html

Diff Detail

Repository
rB Blender
Branch
arcpatch-D15478 (branched from master)
Build Status
Buildable 23137
Build 23137: arc lint + arc unit

Event Timeline

Ray Molenkamp (LazyDodo) requested review of this revision.Jul 17 2022, 7:58 PM
Ray Molenkamp (LazyDodo) created this revision.
This revision is now accepted and ready to land.Jul 18 2022, 3:27 PM

I ran into the issue where TIFF got linked to homebrew JPEG.

I'm not sure if we intended to disable JPEG or if we shipped with support for
this before, but might as well make it work.

This revision was automatically updated to reflect the committed changes.