CVE and update status of the FreeBSD ports tree4,826 unaddressed CVEs in 618 portsAll times are CET

Port details

graphics/openimageio3.1.8.0_10

OpenImageIO graphics library

0
unaddressed
0
VuXML only, still affected
0
fixed
Maintainer
FreeBSD@Shaneware.biz
Packages
openimageio 3.1.8.0_10
Upstream
Higher version available: 3.2.1.3
CPE
openimageio_project:openimageio
WWW
https://www.openimageio.org/
Links
cgit · VuXML

Unaddressed (0) · The CVE record lists this version as affected, no VuXML entry names the CVE

None. There is no CVE without a VuXML entry for this version.

VuXML only (0) · listed, port not fixed yet

None. pkg audit reports nothing for this version.

Fixed (0)

No VuXML entries for this package.

Commits (240)

Dima Panov (fluffy) · 3.1.8.0_10
*/*: update boost consumers after boost-1.92
97a84ef467
Yuri Victorovich (yuri) · 3.1.8.0_9
misc/{,py-}openvdb: update 13.0.0 → 13.1.0
be3dc80890
Po-Chuan Hsieh (sunpoet) · 3.1.8.0_8
graphics/openjph: Update to 0.32.0

- Bump PORTREVISION of dependent ports for shlib change

Changes:	https://github.com/aous72/OpenJPH/releases
728e27ab70
Po-Chuan Hsieh (sunpoet) · 3.1.8.0_7
graphics/openjph: Update to 0.31.0

- Bump PORTREVISION of dependent ports for shlib change

Changes:	https://github.com/aous72/OpenJPH/releases
0729b4b837
Dima Panov (fluffy) · 3.1.8.0_6
*/*: bump consumers after devel/boost update
213840c151
Sergey A. Osokin (osa) · 3.1.8.0_5
*/*: Bump more consumers after graphics/libraw update

PR:		296733
Reported by:	vvd

Sponsored by:	tipi.work
78f729627d
Po-Chuan Hsieh (sunpoet) · 3.1.8.0_4
graphics/openjph: Update to 0.30.1

- Bump PORTREVISION of dependent ports for shlib change

Changes:	https://github.com/aous72/OpenJPH/releases
e5d2df7136
Jan Beich (jbeich) · 3.1.8.0_3
graphics/libjxl: update to 0.12

Changes:	https://github.com/libjxl/libjxl/releases/tag/v0.12.0
Reported by:	GitHub (watch releases)
fc57321249
Po-Chuan Hsieh (sunpoet) · 3.1.8.0_2
graphics/openjph: Update to 0.27.0

- Bump PORTREVISION of dependent ports for shlib change

Changes:	https://github.com/aous72/OpenJPH/releases
926bc32d6a
Älven (alven) · 3.1.8.0_1
graphics/dcmtk: Update 3.6.9 => 3.7.0, fix 5 CVEs

Security:
* https://nvd.nist.gov/vuln/detail/CVE-2025-2357
* https://nvd.nist.gov/vuln/detail/CVE-2025-9732
* https://nvd.nist.gov/vuln/detail/CVE-2025-25472
* https://nvd.nist.gov/vuln/detail/CVE-2025-25474
* https://nvd.nist.gov/vuln/detail/CVE-2025-25475

Changelogs:
* https://github.com/DCMTK/dcmtk/compare/DCMTK-3.6.9...DCMTK-3.7.0

* Use dynamic SOVERSION
* Pet portclippy(1) and portfmt(1)
* Version-bump dependent ports

Approved by:		yuri@ (maintainer, Mentor)
MFH:			2026Q1
Differential Revision:	https://reviews.freebsd.org/D54557
f4d75c2303
Fernando Apesteguía (fernape) · 3.1.8.0
graphics/openimageio: Update to v3.1.8.0

ChangeLog:
https://github.com/AcademySoftwareFoundation/OpenImageIO/releases/tag/v3.1.8.0

 * exif: Support EXIF 3.0 tags
 * jpeg: Fix wrong pointers/crashing when decodng CMYK jpeg files
 * openexr: Improve attribute translation rules
 * openexr: ACES container writes colorInteropId instead of colorInteropID
 * color mgmt: Fix some legacy 'Linear' color references
 * imagebuf: Fix ImageBuf::set_pixels() bug, didn't consider roi = All
 * tests: Image_span_test reduce benchmark load for debug and CI renders
 * build: Type warning in assertion in jpeg2000output.cpp
 * build: Disable LERC in libTIFF local build script

PR:		292038
Reported by:	FreeBSD@ShaneWare.Biz (maintainer)
75694bfd2d
Yuri Victorovich (yuri) · 2.5.13.1_14
misc/{,py-}openvdb: update 12.0.1 → 13.0.0

Reported by:	portscout
0cebd42d1e
Dima Panov (fluffy) · 2.5.13.1_13
devel/boost: bump consumers after boost upgrade (+)

Get rid of direct dependency ob libbost_system.so, use libboost_thread.so instead
67fb95fb3b
Matthias Andree (mandree) · 2.5.13.1_12
*: Bump PORTREVISION of graphics/openexr users

(including those where openexr is only an option)
d6519311ed
Matthias Andree (mandree) · 2.5.13.1_11
*: Bump PORTREVISION for devel/libfmt  update {fmt.dev}
b7e654fbfe
Matthias Andree (mandree) · 2.5.13.1_10
*: Bump PORTREVISION for math/Imath update
566d74ed6b
Baptiste Daroussin (bapt) · 2.5.13.1_9
libxml2: chase libxml soversion bump
3068854dd0
Charlie Li (vishwin) · 2.5.13.1_8
python.mk: rename PYTHON_EXT_SUFFIX to PYTHON_TAG, document, etc

EXT_SUFFIX, according to PEP 3149, refers to the full tag and
extension for compiled extension module objects, eg .cpython-311.so,
.cpython-313t.so, etc. We do not use the correct semantic meaning,
and this usage becomes ambiguous and confusing when tags do not
match between bytecode and compiled extension module objects.

Rename our PYTHON_EXT_SUFFIX to PYTHON_TAG to align with PEP 3147's
specification of a magic tag, which consists of implementation name
and shorthand version only. This is meant for bytecode and other
files containing this tag in their filename that do not depend on
a specific Python ABI for the same version. Chase all existing
consumers.

Introduce PYTHON_SOABI to align with PEP 3149's specification of a
tag, which consists of implementation name, shorthand version and
any ABI flags present (this and PYTHON_TAG are identical without
ABI flags). This is meant for compiled extension module objects and
other files that depend on a specific Python ABI for the same
version.

Add documentation for these variables that our PYTHON_EXT_SUFFIX
never had.

PR: 274671
Event: Kitchener-Waterloo Hackathon 202506
4f0eba1efd
Dima Panov (fluffy) · 2.5.13.1_8
devel/boost: bump consumers after Boost update
18632db919
Vladimir Druzenko (vvd) · 2.5.13.1_7
graphics/{art,blender,krita,openfx-arena,{,py-}openimageio},multimedia/olive: Bump after update graphics/opencolorio 2.3.2 => 2.4.2

PR:	286622
178b8cabf0
Dima Panov (fluffy) · 2.5.13.1_6
devel/boost: bump consumers after Boost-1.87 update

Sponsored by:	Future Crew, LLC
fa53920e72
Yuri Victorovich (yuri) · 2.5.13.1_5
graphics/dcmtk: update 3.6.8 → 3.6.9
78125d285a
Yuri Victorovich (yuri) · 2.5.13.1_4
misc/openvdb: update 11.0.0 → 12.0.0
3e86ea24ef
Dima Panov (fluffy) · 2.5.13.1_3
devel/boost: bump consu,ers after update Boost to 1.86 release

Sponsored by:	Future Crew, LLC
312ee18b02
Matthias Andree (mandree) · 2.5.13.1_2
graphics/openexr: PORTREVISION bump of openexr users due to ABI change
f3127fabc6
Dima Panov (fluffy) · 2.5.13.1_1
*/*: bump consumers after devel/boost* update

With hat:	office
Sponsored by:	Future Crew, LLC
55cfbcf56c
Vladimir Druzenko (vvd) · 2.5.13.1
graphics/{,py-}openimageio: update 2.5.13.0 → 2.5.13.1 (security advisory)

Changelog:
* fix(heic): Correctly set imagespec size for heif images.
   security advisory (by Gerrard Tai)
https://github.com/AcademySoftwareFoundation/OpenImageIO/security/advisories/GHSA-jjm9-9m4m-c8p2
https://github.com/AcademySoftwareFoundation/OpenImageIO/releases/tag/v2.5.13.1

PR:		280394
Approved by:	Shane <FreeBSD@ShaneWare.Biz> (maintaner)
MFH:		2024Q3
55bd11cd94
Ganael LAPLANCHE (martymac) · 2.5.13.0_1
devel/onetbb: Update to 2021.13.0

and bump dependent ports' revisions.

Release notes:	https://github.com/oneapi-src/oneTBB/blob/v2021.13.0/RELEASE_NOTES.md
149e2101c3
Vladimir Druzenko (vvd) · 2.5.13.0
graphics/openimageio: update 2.5.12.0 → 2.5.13.0

Changelog:
 * fix: Various PSD files fail to load correctly #4302 (by Jesse Yurkovich)
 * fix: Improve error messages when a font is not found #4284
 * int: In platform.h, define OIIO_DEVICE macro #4290
 * ci: Typo in build_libtiff.bash #4280
 * docs: Update INSTALL.md for windows #4279 (by Mel Massadian)
 * docs: Fixes to formatting and sphinx warnings #4301
https://github.com/AcademySoftwareFoundation/OpenImageIO/releases/tag/v2.5.13.0

PR:		279845
Approved by:	Shane <FreeBSD@ShaneWare.Biz>
MFH:		2024Q3
bbf40ff3c2
Vladimir Druzenko (vvd) · 2.5.12.0
graphics/{,py-}openimageio: update 2.5.8.0 → 2.5.12.0

Changelog:
https://github.com/AcademySoftwareFoundation/OpenImageIO/releases/tag/v2.5.9.0
https://github.com/AcademySoftwareFoundation/OpenImageIO/releases/tag/v2.5.10.1
https://github.com/AcademySoftwareFoundation/OpenImageIO/releases/tag/v2.5.11.0
https://github.com/AcademySoftwareFoundation/OpenImageIO/releases/tag/v2.5.12.0

PR:	279845
738b5f3b51
Vladimir Druzenko (vvd) · 2.5.8.0_1
graphics/{,py-}openimageio: sort out Makefile, remove unnecessary dependencies and pet portclippy

- Add VDB_IMPLIES=TBB: OpenVDB require TBB - build warning:
"Not using OpenVDB -- disabled (because TBB was not found)"
- Remove unused dependencies science/hdf5 and graphics/squish.
- Move devel/libfmt and graphics/libjpeg-turbo to BUILD_DEPENDS and
RUN_DEPENDS: check during configure stage and doesn't link this both.
- Force use devel/libfmt and textproc/pugixml from ports and prevent
use embedded copies.
- Remove GL=glew from IMAGEVIEWER - it doesn't link with libGLEW.
- Remove old and removed by upstream CMAKE options NOTHREADS,
USE_OPENSSL, USE_OPENGL.
- Sort options.

PR:		279454
Approved by:	Shane <FreeBSD@ShaneWare.Biz> (maintainer)
d6b1bdaf04
Vladimir Druzenko (vvd) · 2.5.8.0
graphics/{,py-}openimageio: update to 2.5.8.0

Changelogs:
https://github.com/AcademySoftwareFoundation/OpenImageIO/releases/tag/v2.4.14.0
https://github.com/AcademySoftwareFoundation/OpenImageIO/releases/tag/v2.4.15.0
https://github.com/AcademySoftwareFoundation/OpenImageIO/blob/v2.5.3.0-beta1/CHANGES.md
https://github.com/AcademySoftwareFoundation/OpenImageIO/releases/tag/v2.5.3.0-beta1
https://github.com/AcademySoftwareFoundation/OpenImageIO/releases/tag/v2.5.3.1-beta2
https://github.com/AcademySoftwareFoundation/OpenImageIO/releases/tag/v2.5.3.2-rc1
https://github.com/AcademySoftwareFoundation/OpenImageIO/releases/tag/v2.5.4.0
https://github.com/AcademySoftwareFoundation/OpenImageIO/releases/tag/v2.5.5.0
https://github.com/AcademySoftwareFoundation/OpenImageIO/releases/tag/v2.5.6.0
https://github.com/AcademySoftwareFoundation/OpenImageIO/releases/tag/v2.5.7.0
https://github.com/AcademySoftwareFoundation/OpenImageIO/releases/tag/v2.5.8.0

PR:		275818
Tested by:	fluffy, vvd
46d5b4b581
Yuri Victorovich (yuri) · 2.4.13.0_10
graphics/py-openimageio: Unbreak by using the c++17 flag

Approved by:	portmgr (blanket unbreak)
a00b2df814
Yuri Victorovich (yuri) · 2.4.13.0_10
graphics/dcmtk: update 3.6.7 → 3.6.8

Reported by:	portscout
686f9af640
Tijl Coosemans (tijl) · 2.4.13.0_9
graphics/tiff: Update to 4.6.0

PR:		278577
Exp-run by:	antoine
98bf25875a
Yuri Victorovich (yuri) · 2.4.13.0_8
misc/{,py-}openvdb: update 10.0.1 → 11.0.0
d1127d0657
Dima Panov (fluffy) · 2.4.13.0_7
devel/boost: bump consumers after library update
db616534ff
Po-Chuan Hsieh (sunpoet) · 2.4.13.0_6
devel/libfmt: Update to 10.1.1

- Bump PORTREVISION of dependent ports for shlib change

Changes:	https://github.com/fmtlib/fmt/releases
ec5f6e2261
Dima Panov (fluffy) · 2.4.13.0_5
devel/boost*: bump all consumers after 1.83.0
21d8008e86
Adriaan de Groot (adridg) · 2.4.13.0_4
graphics/opencolorio: &others, bump PORTREVISION

Bump PORTREVISION to force a rebuild so that they pick up
the fixed CMake find_package(ZLIB) which is needed on 14-

PR:		273915
Reported by:	Rolf Halme
2fb0e9426f
Matthias Andree (mandree) · 2.4.13.0_3
*: Bump PORTREVISION for OpenEXR users

Because OpenEXR's SONAME has changed with the 3.2.0 update.
New SONAME: libOpenEXR-3_2.so.31
1b4453302b
Ganael LAPLANCHE (martymac) · 2.4.13.0_2
devel/onetbb: Update to 2021.10.0

and bump dependent ports' revisions.

Release notes: https://github.com/oneapi-src/oneTBB/releases/tag/v2021.10.0
22e222cbce
Daniel Engberg (diizzy) · 2.4.13.0_1
*/*: Bump jpeg-turbo users treewide

New major version 3.0.0
664a2fa1e5
Dima Panov (fluffy) · 2.4.13.0
graphics/openimageio: update to 2.4.13.0 release (+)

Release notes:	https://github.com/OpenImageIO/oiio/releases/tag/v2.4.13.0
		https://github.com/OpenImageIO/oiio/releases/tag/v2.4.12.0

Approved by:	maintainer (implicit)
Sponsored by:	Serenity Cybersecurity, LLC
1c9c144137
Matthias Andree (mandree) · 2.4.11.1_2
*: bump PORTREVISION of Imath users

...because math/Imath 3.1.9 reset the major version of
libImath to 29 from 31. See math/Imath 3.1.9 for details.
a5fbd2fa98
Matthias Andree (mandree) · 2.4.11.1_1
*: Bump revision of ports using math/Imath

...after its major revision update.
e434b50017
Dima Panov (fluffy) · 2.4.11.1
graphics/openimageio: update to 2.4.11.1 release (+)

Changelog:	https://github.com/OpenImageIO/oiio/releases/tag/v2.4.11.1
Approved by:	maintainer (implicit)

Sponsored by:	Serenity Cybersecurity, LLC
4b09beb8c0
Ganael LAPLANCHE (martymac) · 2.4.10.0_1
devel/onetbb: Update to 2021.9.0

and bump dependent ports' revisions.

Release notes: https://github.com/oneapi-src/oneTBB/releases/tag/v2021.9.0
8f947d908a
Dima Panov (fluffy) · 2.4.10.0
graphics/openimageio:	update to 2.4.10.0 release (+)

Changelog:	https://github.com/OpenImageIO/oiio/releases/tag/v2.4.10.0 \
		https://github.com/OpenImageIO/oiio/releases/tag/v2.4.9.0 \
		https://github.com/OpenImageIO/oiio/releases/tag/v2.4.8.1 \
		https://github.com/OpenImageIO/oiio/releases/tag/v2.4.8.0 \
		https://github.com/OpenImageIO/oiio/releases/tag/v2.4.7.1 \
		https://github.com/OpenImageIO/oiio/releases/tag/v2.4.7.0 \
		https://github.com/OpenImageIO/oiio/releases/tag/v2.4.6.0 \
		https://github.com/OpenImageIO/oiio/releases/tag/v2.4.5.0

Approved by:	maintainer (implicit)
65104b4adb
Dima Panov (fluffy) · 2.4.4.2_10
*/*: bump all direct Boost cunsumers
3e45e8e244
page 1 of 5older →oldest »