v2.5.2 release notes in CHANGES.md

Signed-off-by: Cary Phillips <cary@ilm.com>
AcademySoftwareFoundation · Jun 14, 2020 · 24a1bf5 · 24a1bf5
1 parent 99d0f00
commit 24a1bf5
Showing 1 changed file with 104 additions and 27 deletions.
diff --git a/CHANGES.md b/CHANGES.md
@@ -1,43 +1,104 @@
 # OpenEXR Release Notes
 
-* [Version 2.5.0](#version-250-may-6-2020)
-* [Version 2.4.1](#version-241-february-11-2020)
-* [Version 2.4.0](#version-240-september-19-2019)
-* [Version 2.3.0](#version-230-august-13-2018)
-* [Version 2.2.2](#version-222-april-30-2020)
-* [Version 2.2.1](#version-221-november-30-2017)
-* [Version 2.2.0](#version-220-august-10-2014)
-* [Version 2.1.0](#version-210-november-25-2013)
-* [Version 2.0.1](#version-201-july-11-2013)
-* [Version 2.0.0](#version-200-april-9-2013)
-* [Version 1.7.1](#version-171-july-31-2012)
-* [Version 1.7.0](#version-170-july-23-2010)
-* [Version 1.6.1](#version-161-october-22-2007)
-* [Version 1.6.0](#version-160-august-3,2007)
-* [Version 1.5.0](#version-150-december-15-2006)
-* [Version 1.4.0a](#version-140a-august-9-2006)
-* [Version 1.4.0](#version-140-august-2,2006)
-* [Version 1.3.1](#version-131-june-14-2006)
-* [Version 1.3.0](#version-130-june-8,2006)
-* [Version 1.2.2](#version-122-march-15-2005)
-* [Version 1.2.1](#version-121-june-6,2004)
-* [Version 1.2.0](#version-120-may-11-2004)
-* [Version 1.1.1](#version-111-march-27-2004)
-* [Version 1.1.0](#version-110-february-6-2004)
-* [Version 1.0.7](#version-107-january-7-2004)
+* [Version 2.5.2](#version-252-june-15-2020) June 15, 2020
+* [Version 2.5.1](#version-251-may-11-2020) May 11, 2020
+* [Version 2.5.0](#version-250-may-6-2020) May 6, 2020
+* [Version 2.4.2](#version-242-june-15-2020) June 15, 2020
+* [Version 2.4.1](#version-241-february-11-2020) February 11, 2020
+* [Version 2.4.0](#version-240-september-19-2019) September 19, 2019
+* [Version 2.3.0](#version-230-august-13-2018) August 13, 2018
+* [Version 2.2.2](#version-222-april-30-2020) April 30, 2020
+* [Version 2.2.1](#version-221-november-30-2017) November 30, 2017
+* [Version 2.2.0](#version-220-august-10-2014) August 10, 2014
+* [Version 2.1.0](#version-210-november-25-2013) November 25, 2013
+* [Version 2.0.1](#version-201-july-11-2013) July 11, 2013
+* [Version 2.0.0](#version-200-april-9-2013) April 9, 2013
+* [Version 1.7.1](#version-171-july-31-2012) July 31, 2012
+* [Version 1.7.0](#version-170-july-23-2010) July 23, 2010
+* [Version 1.6.1](#version-161-october-22-2007) October 22, 2007
+* [Version 1.6.0](#version-160-august-3,2007) August 3, 2007
+* [Version 1.5.0](#version-150-december-15-2006) December 15, 2006
+* [Version 1.4.0a](#version-140a-august-9-2006) August 9, 2006
+* [Version 1.4.0](#version-140-august-2,2006) August 2, 2006
+* [Version 1.3.1](#version-131-june-14-2006) June 14, 2006
+* [Version 1.3.0](#version-130-june-8,2006) June 8, 2006
+* [Version 1.2.2](#version-122-march-15-2005) March 15, 2005
+* [Version 1.2.1](#version-121-june-6,2004) June 6, 2004
+* [Version 1.2.0](#version-120-may-11-2004) May 11, 2004
+* [Version 1.1.1](#version-111-march-27-2004) March 27, 2004
+* [Version 1.1.0](#version-110-february-6-2004) February 6, 2004
+* [Version 1.0.7](#version-107-january-7-2004) January 7, 2004
 * [Version 1.0.6](#version-106)
-* [Version 1.0.5](#version-105-april-3-2003)
+* [Version 1.0.5](#version-105-april-3-2003) April 3, 2003
 * [Version 1.0.4](#version-104)
 * [Version 1.0.3](#version-103)
 * [Version 1.0.2](#version-102)
 * [Version 1.0.1](#version-101)
 * [Version 1.0](#version-10)
 
+## Version 2.5.2 (June 15, 2020)
+
+Patch release with various bug/security fixes and build/install fixes.
+
+### Summary
+
+* Invalid input could cause a heap-use-after-free error in DeepScanLineInputFile::DeepScanLineInputFile()
+* Invalid chunkCount attributes could cause heap buffer overflow in getChunkOffsetTableSize()
+* Invalid tiled input file could cause invalid memory access TiledInputFile::TiledInputFile()
+* OpenEXRConfig.h now correctly sets OPENEXR_PACKAGE_STRING to "OpenEXR" (rather than "IlmBase")
+* Various Windows build fixes
+
+### Merged Pull Requests
+
+* [755](https://github.com/AcademySoftwareFoundation/openexr/pull/755) Fix OPENEXR_PACKAGE_NAME
+* [747](https://github.com/AcademySoftwareFoundation/openexr/pull/747) Fix the PyIlmBase tests for the autotools build
+* [743](https://github.com/AcademySoftwareFoundation/openexr/pull/743) Applies OPENEXR_DLL only to shared libraries and no longer to static libraries
+* [742](https://github.com/AcademySoftwareFoundation/openexr/pull/742) Removes symlink creation under Windows
+* [738](https://github.com/AcademySoftwareFoundation/openexr/pull/738) always ignore chunkCount attribute unless it cannot be computed
+* [733](https://github.com/AcademySoftwareFoundation/openexr/pull/733) added missing PyImathMatrix22.cpp to Makefile.am, for the autotools build
+* [730](https://github.com/AcademySoftwareFoundation/openexr/pull/730) fix #728 - missing 'throw' in deepscanline error handling
+* [727](https://github.com/AcademySoftwareFoundation/openexr/pull/727) check null pointer in broken tiled file handling
+
+### Commits \[ git log v2.5.1...v2.5.2\]
+
+* [6f0d14d5](https://github.com/AcademySoftwareFoundation/openexr/commit/6f0d14d576b6c2d3931f2c444b994207bc4bbc44) bump version to 2.5.2 ([Cary Phillips](@cary@ilm.com) 2020-06-11)
+* [162fe820](https://github.com/AcademySoftwareFoundation/openexr/commit/162fe82092188fd172cba26af0deec3b0a95a4fa) Fix OPENXR_PACKAGE_NAME ([Cary Phillips](@cary@ilm.com) 2020-06-10)
+* [58e96f53](https://github.com/AcademySoftwareFoundation/openexr/commit/58e96f534cd42bf9ee59725aadbf5d3b25d041fe) removed commented out lines in Makefile.am ([Cary Phillips](@cary@ilm.com) 2020-05-28)
+* [6c82409e](https://github.com/AcademySoftwareFoundation/openexr/commit/6c82409e14f415d460a3318dc9848f0c266f1215) Fix PyImathTest, PyImathNumpyTest, PyIexTest to work in the autotools build. ([Cary Phillips](@cary@ilm.com) 2020-05-28)
+* [248abc23](https://github.com/AcademySoftwareFoundation/openexr/commit/248abc23d134705bc41d167dcc04fafae231409c) Fix OPENEXR_DLL on test applications ([Transporter](@ogre.transporter@gmail.com) 2020-05-29)
+* [ccf91b95](https://github.com/AcademySoftwareFoundation/openexr/commit/ccf91b95b662d97b0cd8b9d87fd3eb4f5d70e880) Applies OPENEXR_DLL only to shared libraries and no longer to static libraries ([Transporter](@ogre.transporter@gmail.com) 2020-05-26)
+* [c8f2463a](https://github.com/AcademySoftwareFoundation/openexr/commit/c8f2463a910da90640d13d325ef689160d17ffe9) Removes symlink creation under Windows ([Transporter](@ogre.transporter@gmail.com) 2020-05-26)
+* [78274436](https://github.com/AcademySoftwareFoundation/openexr/commit/782744364aa92d02add62f38bc29ae2ce2c743e9) added missing PyImathMatrix22.cpp to Makefile.am, for the autotools build. ([Cary Phillips](@cary@ilm.com) 2020-05-19)
+* [30349291](https://github.com/AcademySoftwareFoundation/openexr/commit/303492919aa1cc39fb0c3d34d96b9f0090d3bdac) fix memory leak in deep scanline IlmImfFuzzTest ([Peter Hillman](@peterh@wetafx.co.nz) 2020-05-16)
+* [21014549](https://github.com/AcademySoftwareFoundation/openexr/commit/21014549c2728049abe273a719c3fca074234799) fix memory leak in deep scanline IlmImfFuzzTest ([Peter Hillman](@peterh@wetafx.co.nz) 2020-05-16)
+* [07e93a3d](https://github.com/AcademySoftwareFoundation/openexr/commit/07e93a3de1200355c1c32e2c4cc15ec87e312602) check null pointer in broken tiled file handling ([Peter Hillman](@peterh@wetafx.co.nz) 2020-05-16)
+* [d8741bcc](https://github.com/AcademySoftwareFoundation/openexr/commit/d8741bccbcc5e68cc4fac3cb11f08c655e6553fc) fix #728 - missing 'throw' in deepscanline error handling ([Peter Hillman](@peterh@wetafx.co.nz) 2020-05-19)
+
+## Version 2.5.1 (May 11, 2020)
+
+A patch release that corrects the SO version for the v2.5 release,
+which missed getting bumped in v2.5.0.
+
+This release also fixes an improper failure in IlmImfTest when running
+on ARMv7 and AAarch64.
+
+### Merged Pull Requests
+
+* [717](https://github.com/AcademySoftwareFoundation/openexr/pull/717) Fix #713: cast to unsigned in testHuf checksum
+* [714](https://github.com/AcademySoftwareFoundation/openexr/pull/714) Bump the SO version to 25 for the 2.5 release
+
+### Commits \[ git log v2.5.0...v2.5.1\]
+
+* [e823bf28](https://github.com/AcademySoftwareFoundation/openexr/commit/e823bf282882d02e8ad1c7f6ca867807e1fd6044) Fix #713: cast to unsigned in testHuf checksum (#717) ([peterhillman](@peterh@wetafx.co.nz) 2020-05-10)
+* [5670325e](https://github.com/AcademySoftwareFoundation/openexr/commit/5670325ea2f44c2b4d4764b151b7570181bd280b) Bump the version to 2.5.1 on the RB-2.5 branch ([Cary Phillips](@cary@ilm.com) 2020-05-09)
+* [d944ffac](https://github.com/AcademySoftwareFoundation/openexr/commit/d944fface105c79fc4a34a4aa4bc1be39d5aabbc) set LIBTOOL_REVISION=0 for the 2.5 release. ([Cary Phillips](@cary@ilm.com) 2020-05-09)
+* [3ec82975](https://github.com/AcademySoftwareFoundation/openexr/commit/3ec82975243d83e2732da7b7cbdc08f87f30609c) Bump SO version to 25 for the 2.5 release. ([Cary Phillips](@cary@ilm.com) 2020-05-09)
+
 ## Version 2.5.0 (May 6, 2020)
 
 Minor release with miscellaneous bug fixes and small features
 
-## Summary
+### Summary
 
 * No more build-time header generation: toFloat.h, eLut.h,
   b44ExpLogTable.h, and dwaLookups.h are now ordinary header files, no
@@ -389,6 +450,22 @@ Minor release with miscellaneous bug fixes and small features
 * [8dd91127](https://github.com/AcademySoftwareFoundation/openexr/commit/8dd9112733ae15f1c108b64124e6c77a11f3eb83) removed references to the CVE's that are not specific to OpenEXR ([Cary Phillips](@cary@ilm.com) 2019-09-20)
 * [33d1ac61](https://github.com/AcademySoftwareFoundation/openexr/commit/33d1ac61d46c075171cb37cccc21736ab4cf03d8) CVE listing in SECURITY.md ([Cary Phillips](@cary@ilm.com) 2019-09-19)
 
+## Version 2.4.2 (June 15, 2020)
+
+This is a patch release that includes fixes for the following security vulnerabilities:
+
+* Invalid input could cause a heap-use-after-free error in DeepScanLineInputFile::DeepScanLineInputFile()
+* Invalid chunkCount attributes could cause heap buffer overflow in getChunkOffsetTableSize()
+* Invalid tiled input file could cause invalid memory access TiledInputFile::TiledInputFile()
+* OpenEXRConfig.h now correctly sets OPENEXR_PACKAGE_STRING to "OpenEXR" (rather than "IlmBase")
+
+### Merged Pull Requests
+
+* [755](https://github.com/AcademySoftwareFoundation/openexr/pull/755) Fix OPENEXR_PACKAGE_NAME
+* [738](https://github.com/AcademySoftwareFoundation/openexr/pull/738) always ignore chunkCount attribute unless it cannot be computed
+* [730](https://github.com/AcademySoftwareFoundation/openexr/pull/730) fix #728 - missing 'throw' in deepscanline error handling
+* [727](https://github.com/AcademySoftwareFoundation/openexr/pull/727) check null pointer in broken tiled file handling
+
 ## Version 2.4.1 (February 11, 2020)
 
 Patch release with minor bug fixes.