Skip to content
New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

#

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

Jump to bottom

[build_usd.py] Update OpenEXR dependency to 3.1.13 #3077

Closed
wants to merge 1 commit into from
Closed

[build_usd.py] Update OpenEXR dependency to 3.1.13 #3077

wants to merge 1 commit into from

Conversation

nvidia-jomiller
Copy link
Collaborator

Description of Change(s)

Updates OpenEXR dependency from v3.1.11 -> v3.1.13

Fixes Issue(s)

  • I have verified that all unit tests pass with the proposed changes
  • I have submitted a signed Contributor License Agreement

@jesschimein
Copy link
Collaborator

Filed as internal issue #USD-9650

@jesschimein
Copy link
Collaborator

/AzurePipelines run

@azure-pipelines Azure Pipelines
Copy link

Azure Pipelines successfully started running 1 pipeline(s).

@dgovil
Copy link
Collaborator

dgovil commented Oct 23, 2024

@meshula As I understand it, this would only affect USD's dependencies that depend on EXR right? Since you have your own EXR reader inside USD?

That said, 3.1.12 fixes a CVE so it would probably be good to update just to protect folks who transitively use the dependency.

@dgovil dgovil added needs review Issue needing input/review by the repo maintainer (Pixar) build Build-related issue/PR labels Oct 23, 2024
@meshula
Copy link
Member

meshula commented Oct 24, 2024

Yes, that's right. Updating OpenEXR won't affect OpenUSD directly.

@pixar-oss pixar-oss closed this in 1fd32c9 Jan 21, 2025
# for free to join this conversation on GitHub. Already have an account? # to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
build Build-related issue/PR needs review Issue needing input/review by the repo maintainer (Pixar)
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
4 participants
@nvidia-jomiller @jesschimein @dgovil @meshula