Patch release that addresses a regression introduced in v3.3.0 that leads to excessive memory usage during write, especially with DWA compression (Issue #2791).
This release also addresses the following security vulnerabilities:
- CVE Pending (GHSA-PP92-4RV3-WFQ6) OpenEXR: a signed-int data-window-origin overflow in the OpenEXRUtil Image API turns
Imf::loadImageinto an attacker-steered out-of-bounds write - CVE Pending (GHSA-2V77-PVHX-25C3) Integer overflow in legacy
OpenEXR.OutputFile.writePixels()causes heap over-read