Review: openexr 3.5.2+ds-1

Package Information

Description	runtime files for the OpenEXR image library OpenEXR is a high dynamic-range (HDR) image file format developed by Industrial Light & Magic for use in computer imaging applications. OpenEXR's features include: * Higher dynamic range and colour precision than existing 8- and 10-bit image file formats. * Support for the "half" 16-bit floating-point pixel format. * Multiple lossless image compression algorithms. Some of the included codecs can achieve 2:1 lossless compression ratios on images with film grain. * Extensibility. New compression codecs and image types can easily be added by extending the C++ classes included in the OpenEXR software distribution. New image attributes (strings, vectors, integers, etc.) can be added to OpenEXR image headers without affecting backward compatibility with existing OpenEXR applications. This package contains the OpenEXR libraries.
Maintainer	Debian PhotoTools Maintainers <pkg-phototools-devel@lists.alioth.debian.org>
Changed By	Sébastien Noel <twolife@debian.org>
Distribution	experimental
Architecture	any all
VCS	git: https://salsa.debian.org/debian-phototools-team/openexr.git (browse)
Popcon Installs	130723
Binary NEW	Yes (new binary packages of a source already in sid)
Tracker	https://tracker.debian.org/pkg/openexr
Uploaded	2 hours ago

New Package Report

.changes◂

Source	openexr
Version	3.5.2+ds-1
Changed-By	Sébastien Noel <twolife@debian.org>
Architecture	source amd64 all
Distribution	experimental
Date	Thu, 22 Oct 2026 08:49:15 +0200

Changelog◂

openexr (3.5.2+ds-1) experimental; urgency=medium
 .
   * Team upload
   * New upstream release
     - Drop merged patches
   * Update package name to match soname bump:
     - libopenexr-3-4-33 → libopenexr-3-5-34
   * d/control: Add multi-arch:same to the dev package

.dsc◂

Package-List	libopenexr-3-5-34 deb libs optional arch=any libopenexr-dev deb libdevel optional arch=any libopenexr-doc deb doc optional arch=all profile=!nodoc profile:v1=!nodoc openexr deb graphics optional arch=any
Section	libs
Priority	optional
Component	main

debian/copyright◂

Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
Upstream-Name: openexr
Upstream-Contact: openexr-devel@nongnu.org
Source: https://www.openexr.com/
Files-Excluded: external
Comment: The external software can also be provided by system libraries.

Files: *
Copyright: 2002-2018, Industrial Light & Magic, a division of Lucas Digital Ltd. LLC
           2019, Academy Software Foundation
           2020, Contributors to the OpenEXR Project
License: openexr

Files: cmake/FindPythonPackage.cmake
Copyright: Contributors to the OpenColorIO Project.
License: BSD-3-clause

Files: src/lib/*
Copyright: 2002-2014, Industrial Light & Magic, a division of Lucas
License: BSD-3-clause

Files: src/lib/OpenEXR/ImfCompositeDeepScanLine.cpp
  src/lib/OpenEXR/ImfCompositeDeepScanLine.h
  src/lib/OpenEXR/ImfDeepCompositing.cpp
  src/lib/OpenEXR/ImfDeepCompositing.h
  src/lib/OpenEXR/ImfFloatVectorAttribute.h
  src/lib/OpenEXR/ImfMultiView.cpp
  src/lib/OpenEXR/ImfMultiView.h
  src/lib/OpenEXR/ImfPartHelper.h
  src/lib/OpenEXR/ImfStringVectorAttribute.cpp
  src/lib/OpenEXR/ImfStringVectorAttribute.h
Copyright: 2007, 2012, 2013, Weta Digital Ltd
License: BSD-3-clause

Files: src/lib/OpenEXR/ImfDwaCompressor.cpp
  src/lib/OpenEXR/ImfDwaCompressor.h
  src/lib/OpenEXR/ImfFastHuf.cpp
  src/lib/OpenEXR/ImfFastHuf.h
  src/lib/OpenEXR/ImfSystemSpecific.cpp
  src/lib/OpenEXR/dwaLookups.cpp
Copyright: 2009-2014, DreamWorks Animation LLC.
License: BSD-3-clause

Files: src/lib/OpenEXR/ImfForward.h
  src/lib/OpenEXR/ImfMultiPartOutputFile.h
Copyright: 2012, Weta Digital Ltd
  2011, Industrial Light & Magic, a division of Lucas
License: BSD-3-clause

Files: src/lib/OpenEXR/ImfOptimizedPixelReading.h
  src/lib/OpenEXR/ImfSimd.h
Copyright: 2012, Autodesk, Inc.
License: BSD-3-clause

Files: src/lib/OpenEXR/ImfPxr24Compressor.cpp
  src/lib/OpenEXR/ImfPxr24Compressor.h
Copyright: 2004, Pixar Animation Studios
License: BSD-3-clause

Files: src/lib/OpenEXR/ImfRgbaYca.cpp
  src/lib/OpenEXR/ImfRgbaYca.h
Copyright: held/ 2004, Industrial Light & Magic, a division of Lucasfilm
License: BSD-3-clause

Files: src/examples/*
Copyright: 2002-2014, Industrial Light & Magic, a division of Lucas
License: BSD-3-clause

Files: src/test/OpenEXRFuzzTest/*
Copyright: 2002-2014, Industrial Light & Magic, a division of Lucas
License: BSD-3-clause

Files: src/test/OpenEXRTest/*
Copyright: 2002-2014, Industrial Light & Magic, a division of Lucas
License: BSD-3-clause

Files: src/test/OpenEXRTest/compareDwa.cpp
  src/test/OpenEXRTest/compareDwa.h
  src/test/OpenEXRTest/testRle.cpp
  src/test/OpenEXRTest/testRle.h
Copyright: 2009-2014, DreamWorks Animation LLC.
License: BSD-3-clause

Files: src/test/OpenEXRTest/compareFloat.cpp
  src/test/OpenEXRTest/compareFloat.h
Copyright: held/ 2004, Industrial Light & Magic, a division of Lucasfilm
License: BSD-3-clause

Files: src/test/OpenEXRTest/testBadTypeAttributes.cpp
  src/test/OpenEXRTest/testBadTypeAttributes.h
  src/test/OpenEXRTest/testCompositeDeepScanLine.cpp
  src/test/OpenEXRTest/testCompositeDeepScanLine.h
  src/test/OpenEXRTest/testDeepScanLineMultipleRead.cpp
  src/test/OpenEXRTest/testDeepScanLineMultipleRead.h
  src/test/OpenEXRTest/testFutureProofing.h
  src/test/OpenEXRTest/testOptimizedInterleavePatterns.cpp
  src/test/OpenEXRTest/testOptimizedInterleavePatterns.h
  src/test/OpenEXRTest/testPartHelper.cpp
  src/test/OpenEXRTest/testPartHelper.h
Copyright: 2007, 2012, 2013, Weta Digital Ltd
License: BSD-3-clause

Files: src/test/OpenEXRTest/testConversion.cpp
Copyright: held/ 2003-2012, Industrial Light & Magic, a division of Lucasfilm
License: BSD-3-clause

Files: src/test/OpenEXRTest/testCopyDeepScanLine.cpp
  src/test/OpenEXRTest/testCopyDeepScanLine.h
  src/test/OpenEXRTest/testCopyMultiPartFile.h
Copyright: 2012, Weta Digital Ltd
  2011, Industrial Light & Magic, a division of Lucas
License: BSD-3-clause

Files: src/test/OpenEXRTest/testCopyMultiPartFile.cpp
  src/test/OpenEXRTest/testFutureProofing.cpp
  src/test/OpenEXRTest/testInputPart.cpp
  src/test/OpenEXRTest/testMultiPartFileMixingBasic.cpp
Copyright: 2012, 2013, Weta Digital Ltd
  2011, Industrial Light & Magic, a division of Lucas
License: BSD-3-clause

Files: src/test/OpenEXRTest/testMultiView.cpp
  src/test/OpenEXRTest/testMultiView.h
Copyright: 2012, Industrial Light & Magic, a division of Lucasfilm
  2007, Weta Digital Ltd
License: BSD-3-clause

Files: src/test/OpenEXRTest/testTiledYa.cpp
  src/test/OpenEXRTest/testTiledYa.h
  src/test/OpenEXRTest/testYca.cpp
  src/test/OpenEXRTest/testYca.h
Copyright: held/ 2004-2012, Industrial Light & Magic, a division of Lucasfilm
License: BSD-3-clause

Files: src/lib/OpenEXRUtil/*
Copyright: 2002-2014, Industrial Light & Magic, a division of Lucas
License: BSD-3-clause

Files: src/test/OpenEXRUtilTest/*
Copyright: 2002-2014, Industrial Light & Magic, a division of Lucas
License: BSD-3-clause

Files: src/wrappers/python/openexr_skbuild_plugin.py
Copyright: Contributors to the MaterialX Project
License: Apache-2.0
 On Debian systems the full text of the Apache-2.0 license can be found in
 /usr/share/common-licenses/Apache-2.0.

Files: PATENTS
Copyright: able works distributedDreamWorks Animation as part of the OpenEXR
License: openexr

Files: debian/*
Copyright: 2014, Matteo F. Vescovi <mfv@debian.org>
  2014, Mathieu Malaterre <malat@debian.org>
  2009, Cyril Brulebois <kibi@debian.org>
  2007, 2008, Adeodato Simó <dato@debian.org>
License: openexr

Files: src/bin/exrenvmap/*
Copyright: 2002-2014, Industrial Light & Magic, a division of Lucas
License: BSD-3-clause

Files: src/bin/exrheader/main.cpp
Copyright: 2002-2014, Industrial Light & Magic, a division of Lucas
License: BSD-3-clause

Files: src/bin/exrmakepreview/*
Copyright: 2002-2014, Industrial Light & Magic, a division of Lucas
License: BSD-3-clause

Files: src/bin/exrmaketiled/*
Copyright: 2002-2014, Industrial Light & Magic, a division of Lucas
License: BSD-3-clause

Files: src/bin/exrmultipart/exrmultipart.cpp
Copyright: heldothers as indicated. / 2012, Industrial Light & Magic, a division of Lucas
License: BSD-3-clause

Files: src/bin/exrmultiview/*
Copyright: 2002-2014, Industrial Light & Magic, a division of Lucas
License: BSD-3-clause

Files: src/bin/exrstdattr/main.cpp
Copyright: 2002-2014, Industrial Light & Magic, a division of Lucas
License: BSD-3-clause

License: BSD-3-clause
 This software is Copyright (c) 2019 by ASWF.
 .
 This is free software, licensed under:
 .
   The (three-clause) BSD License
 .
 The BSD License
 .
 Redistribution and use in source and binary forms, with or without
 modification, are permitted provided that the following conditions are
 met:
 .
   * Redistributions of source code must retain the above copyright
     notice, this list of conditions and the following disclaimer.
 .
   * Redistributions in binary form must reproduce the above copyright
     notice, this list of conditions and the following disclaimer in the
     documentation and/or other materials provided with the distribution.
 .
   * Neither the name of foo nor the names of its
     contributors may be used to endorse or promote products derived from
     this software without specific prior written permission.
 .
 THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS
 IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED
 TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A
 PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR
 CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL,
 EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO,
 PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR
 PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF
 LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING
 NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
 SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.

License: openexr
 All rights reserved.
 .
 Redistribution and use in source and binary forms, with or without
 modification, are permitted provided that the following conditions are
 met:
 *       Redistributions of source code must retain the above copyright
 notice, this list of conditions and the following disclaimer.
 *       Redistributions in binary form must reproduce the above
 copyright notice, this list of conditions and the following disclaimer
 in the documentation and/or other materials provided with the
 distribution.
 *       Neither the name of Industrial Light & Magic nor the names of
 its contributors may be used to endorse or promote products derived
 from this software without specific prior written permission.
 .
 THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
 "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
 LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
 A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
 OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
 SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
 LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
 DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
 THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
 (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
 OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.

DFSG Assistant LLM REVIEW 0 blocker, 0 important, 3 minor

This is an LLM based review using a Debian Inference based workflow. It was not written by a member of the DFSG team and has not been checked by one. It is not a decision on the package: it may be wrong, and it may have missed things.

Reviewed 1 hour ago.

Report◂

DFSG NEW review for openexr version 3.5.2+ds-1

Summary

Licensing is DFSG-compliant and debian/copyright is accurate: Yes
Packaging is of good quality: Yes
Issues: 0 blocker, 0 important, 3 minor
debian/watch: version 5
debian/copyright: machine-readable
Scan before the review: 52 found (11 not listed by the scan, so not checked)

Licensing

The source is uniformly licensed under the project's three-clause BSD licence (SPDX BSD-3-Clause) with two Apache-2.0 files (src/wrappers/python/openexr_skbuild_plugin.py from MaterialX; and the DreamWorks DWA files, which offer a BSD-or-Apache choice recorded in PATENTS). All of this is DFSG-compliant; the DreamWorks patent grant applies only to patent claims and does not restrict redistribution of the BSD/Apache code. debian/copyright is DEP-5 1.0 with the correct Format line, full licence texts included (openexr and BSD-3-clause) and Apache-2.0 pointed at /usr/share/common-licenses. The external/ third-party directory is excluded and absent, and the code links to Debian's system libimath, libdeflate, libopenjph, libzstd and zlib rather than embedding them. Two minor attribution inaccuracies (garbled PATENTS Copyright field; src/lib attributed to ILM where the OpenEXRCore files are actually held by the OpenEXR Project) do not affect DFSG compliance.

Packaging

Packaging is of good quality and follows current practice: debhelper-compat 13 with a clean dh rules (dh $@ -Bbuild -Scmake), hardening, proper binary split with correct Multi-Arch (same on lib/dev; foreign on tools/doc), ABI/Provides handling via Imath libsuffix in override_dh_makeshlibs, autopkgtests, DEP-3 patch, Vcs + upstream metadata, and Standards-Version 4.7.4 matching Policy 4.7.4.1. Only a minor test-coverage nit: the armhf patch disables a test on every architecture.

Issues

1. [minor] [licensing] Garbled Copyright field for the PATENTS file

Files: debian/copyright (Files: PATENTS)
Basis: checked, in the package or with a reference tool
Evidence: Copyright: able works distributedDreamWorks Animation as part of the OpenEXR
Problem: The Copyright field is a broken fragment of the PATENTS text and names no actual holder, so debian/copyright does not accurately describe who holds the PATENTS notice (DreamWorks Animation).
Fix: Replace with the real holder, e.g. Copyright: DreamWorks Animation LLC.

2. [minor] [licensing] src/lib stanza under-attributes OpenEXRCore to ILM

Files: debian/copyright (Files: src/lib/*)
Basis: checked, in the package or with a reference tool
Evidence: src/lib/OpenEXRCore/* headers say Copyright Contributors to the OpenEXR Project (some DreamWorks Animation LLC and Contributors), but the src/lib/* stanza says Copyright: 2002-2014, Industrial Light & Magic.
Problem: Because the Files: src/lib/* stanza (License: BSD-3-clause) overrides the Files: * catch-all for every file under src/lib, the substantial OpenEXRCore C library is attributed to ILM even though its own notices name the OpenEXR Project/ASWF as holder. Licence coverage is correct, but the holder attribution is inaccurate.
Fix: Assign the OpenEXRCore files (src/lib/OpenEXRCore/) to Contributors to the OpenEXR Project (with a separate DreamWorks stanza for internal_b44_table), or fold that attribution in.

3. [minor] [packaging] armhf test-disable patch applied on all architectures

Files: debian/patches/hack-test-armhf.patch, src/test/OpenEXRTest/main.cpp:186
Basis: checked, in the package or with a reference tool
Evidence: The patch comments out TEST (testLargeDataWindowOffsets, "basic") in main.cpp; the patch set applies on every Debian architecture.
Problem: The patch's stated purpose is an armhf failure (bugs.debian.org, upstream issue 2134), but since quilt patches are arch-independent the test is silently disabled on all architectures, reducing test coverage on x86/arm64 rather than only armhf.
Fix: Gate the skip by architecture (e.g. only skip/ignore on armhf in CMake or via dh_auto_test), or document that the global disable is intended.

Verified

Every binary file the prescan listed is test/sample image data (.exr) under src/test/OpenEXRTest/, src/test/bin/test_images/, src/wrappers/python/tests/ and website/downloads/sample.exr, or the project's own documentation images/logos (ASWF/images/, website/images/). They are data inputs for tests/docs released under the project's BSD licence, not built artifacts without source, and the html docs/images are not shipped in the binary.
The one 'rare licence wording' hit (website/news.rst:846, a beta branch 'provided for evaluation purposes only') is release-note prose about an upstream htj2k-beta branch, not a licence term; it does not restrict this distribution.
The one copyright-holder risk flagged (Industrial Light & Magic in website/test_images/ScanLines/CandleGlass.rst and PrismsLenses.rst metadata) is matched by the ILM holder already in debian/copyright (Files: *); the .rst files themselves carry SPDX-License-Identifier: BSD-3-Clause, Copyright Contributors to the OpenEXR Project.
Sampled src/, src/bin/, src/lib/, src/wrappers, cmake/, docs/, Contrib/, ASWF/ and share/: all files carry BSD-3-Clause (SPDX) or the project 3-clause BSD; only strings openexr_skbuild_plugin.py and the DWA files are Apache-2.0, both covered by their own licences/stanzas.
All .exr test/sample files present in the tree; no external/ directory remains, consistent with Files-Excluded and the changelog note that the source is repacked.
debian/copyright Format line is exactly the 1.0 URL; openexr and BSD-3-clause full texts are included; Apache-2.0 points to /usr/share/common-licenses/Apache-2.0 (a valid common-licenses file).
Packaging reviewed: control, rules, changelog, patches/series, source/format, tests/control and CMakeLists, upstream/metadata, install/examples/manpages files read in full.
uscan found the packaged version as the newest upstream release (upstream 3.5.2, packaged 3.5.2+ds).
Every pointer of debian/copyright to /usr/share/common-licenses names a file that is there (Apache-2.0).

Not confirmed

None.

Proposed changes

None.

Uploader's response to the LLM review

The uploader rejected this upload in response to the review.

Review Information

rejected — allocated to dfsg-uploader 0 hours ago, started 0 hours ago, completed 0 hours ago.

Final Comment

The uploader rejected this upload in response to the automated (LLM) review of it, so that they can fix the problems it found and upload again.

Other Reviews of this Package

Version	Hash	Allocated	Completed	Reviewer	Status	Details
3.4.6+ds-3	d5129a19…	2026-03-14 20:24	2026-03-14 20:27	mechtilde	accepted	VIEW

Back to Dashboard | View all reviews for this package