Several of you have contacted us recently with concerns about potential security vulnerabilities (CVEs) in OpenEXR. We wanted to let the community know that we are aware of the seriousness of the reported vulnerabilities and the implications for OpenEXR, and are hoping to have them resolved as soon as possible. Please look forward to an announcement soon.
Francois.