[Bug 296159] graphics/openexr: update to 3.4.13 to fix security vulnerabilities

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=296159

--- Comment #3 from commit-hook@FreeBSD.org ---
A commit in branch 2026Q2 references this bug:

URL:
https://cgit.FreeBSD.org/ports/commit/?id=3b8c85f75bfe8a025e2c63f93885439fce950ff5

commit 3b8c85f75bfe8a025e2c63f93885439fce950ff5
Author:     Matthias Andree <mandree@FreeBSD.org>
AuthorDate: 2026-06-20 07:53:26 +0000
Commit:     Gleb Popov <arrowd@FreeBSD.org>
CommitDate: 2026-06-20 08:29:31 +0000

    graphics/openexr*: security update to 3.4.13

    Changelog:     
https://github.com/AcademySoftwareFoundation/openexr/releases/tag/v3.4.13
    MFH:            2026Q2
    PR:             296159

    Security:       CVE-2026-55373
    OpenEXRUtil SampleCountChannel endEdit() can loop forever on UINT_MAX
sample counts

    Security:       CVE-2026-55371
    OpenEXRCore exr_attr_set_bytes() accepts NULL type_hint with positive
hint_length

    Security:       CVE-2026-55059
    OpenEXRUtil SampleCountChannel row setter heap out-of-bounds

    Security:       CVE-2026-54920
    Integer Overflow and Use of Uninitialized Pointer leading to Invalid Delete
in OpenEXRUtil Image Resize

    Security:       CVE-2026-53532
    Unhandled assert abort in HTJ2K decoder via crafted QCD marker (DoS)

    Pull Request:   https://github.com/freebsd/freebsd-ports/pull/543

    (cherry picked from commit 4b576f06bb0e6f8a936e003b9c74b2742d64d16a)

 graphics/openexr-website-docs/Makefile | 2 +-
 graphics/openexr-website-docs/distinfo | 6 +++---
 graphics/openexr/Makefile              | 2 +-
 graphics/openexr/distinfo              | 6 +++---
 4 files changed, 8 insertions(+), 8 deletions(-)

-- 
You are receiving this mail because:
You are the assignee for the bug.