Skip to content

Refuse to coalesce RGB channels when there's a conflicting channel name#2529

Open
cary-ilm wants to merge 1 commit into
AcademySoftwareFoundation:mainfrom
cary-ilm:GHSA-rw5h-3q4v-c3vc.2
Open

Refuse to coalesce RGB channels when there's a conflicting channel name#2529
cary-ilm wants to merge 1 commit into
AcademySoftwareFoundation:mainfrom
cary-ilm:GHSA-rw5h-3q4v-c3vc.2

Conversation

@cary-ilm

@cary-ilm cary-ilm commented Jul 6, 2026

Copy link
Copy Markdown
Member

When separate_channels=False, a literal channel such as "left" must not share a Python dict key with coalesced left.R/G/B channels.

It is now an error to attempt to read a file with channels named "left.R", "left.G", "left.B", and also a raw "left" with separate_channels=False.

Addresses https://github.com/AcademySoftwareFoundation/openexr/security/advisories/GHSA-rw5h-3q4v-c3vc
Addresses https://github.com/AcademySoftwareFoundation/openexr/security/advisories/GHSA-mw28-66qc-c883

When separate_channels=False, a literal channel such as "left" must
not share a Python dict key with coalesced left.R/G/B channels.

It is now an error to attempt to read a file with channels named
"left.R", "left.G", "left.B", and also a raw "left" with
separate_channels=False.

Addresses https://github.com/AcademySoftwareFoundation/openexr/security/advisories/GHSA-rw5h-3q4v-c3vc
Addresses https://github.com/AcademySoftwareFoundation/openexr/security/advisories/GHSA-mw28-66qc-c883

Co-authored-by: Cursor <cursoragent@cursor.com>
Signed-off-by: Cary Phillips <cary@ilm.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant