Packages / Debian 13 (Trixie) / python / python3-openimageio

Package: python3-openimageio (2.5.18.0+dfsg-1+b1)

Library for reading and writing images - Python bindings

Other Packages Related to python3-openimageio:

  • dep: [libopenimageio2.5] (= 2.5.18.0+dfsg-1+b1)

    Library for reading and writing images - runtime

  • dep: [python3] [any]

    interactive high-level object-oriented language (default python3 version)

  • dep: [python3] (<< 3.14)

    interactive high-level object-oriented language (default python3 version)

  • dep: [python3] (>= 3.13~)

    interactive high-level object-oriented language (default python3 version)

  • dep: [libc6] (>= 2.34)

    GNU C Library: Shared libraries

  • dep: [libgcc-s1] (>= 3.3.1)

    GCC support library

  • dep: [libimath-3-1-29t64] (>= 3.1.12)

    Utility libraries from ASF used by OpenEXR - runtime

  • dep: [libstdc++6] (>= 14)

    GNU Standard C++ Library v3

Download python3-openimageio

ArchitecturePackage sizeInstalled sizeFilesPackage
amd64649 KiB2.0 MiBlist of filesDownload
arm64555 KiB1.9 MiBlist of filesDownload

Package file paths (8)

Paths come from the repository package-file index for the observed builds. They describe archive/package associations, not every file that will exist on a running system after maintainer scripts, alternatives, generated state, diversions, or installation choices.

  • /usr/lib/python3/dist-packages/OpenImageIO.cpython-313-aarch64-linux-gnu.so
  • /usr/lib/python3/dist-packages/OpenImageIO.cpython-313-x86_64-linux-gnu.so
  • /usr/share/doc/python3-openimageio/changelog.Debian.amd64.gz
  • /usr/share/doc/python3-openimageio/changelog.Debian.arm64.gz
  • /usr/share/doc/python3-openimageio/changelog.Debian.gz
  • /usr/share/doc/python3-openimageio/changelog.gz
  • /usr/share/doc/python3-openimageio/copyright
  • /usr/share/doc/python3-openimageio/NEWS.Debian.gz

Field source: Debian 13 (Trixie) main amd64

Use this package

OpenFactory can boot this operating system in a browser VM, or start a build that includes the native package name from this record.

Versions, suites, and repositories

Each row is recorded package-index metadata for one version, architecture, suite, and repository. Names, URLs, and sizes are source-reported; a link is a potentially mutable retrieval location, not an OpenFactory redistribution claim or proof that OpenFactory retained the artifact bytes.

VersionReleaseArchitectureRepositoryPackage sizeInstalled sizePublisher repository artifact
2.5.18.0+dfsg-1+b1trixie / mainamd64Debian 13 · main · amd64649 KiB2.0 MiBpool/main/o/openimageio/python3-openimageio_2.5.18.0+dfsg-1+b1_amd64.deb
2.5.18.0+dfsg-1+b1trixie / mainarm64Debian 13 · main · arm64555 KiB1.9 MiBpool/main/o/openimageio/python3-openimageio_2.5.18.0+dfsg-1+b1_arm64.deb

Field source: Debian 13 (Trixie) main amd64

Known vulnerabilities

Matching against OpenFactory catalog package versions is in progress.

CVESeverityVersion impact
[CVE-2026-113681]

Published:

openimageio: CVE-2026-113681

Medium(5.5)Affected
Details (2)
  • 2.5.18.0+dfsg-1+b1 · amd64 · trixie

    Affected

    dsa · openimageio · debian · 13

  • 2.5.18.0+dfsg-1+b1 · arm64 · trixie

    Affected

    dsa · openimageio · debian · 13

[CVE-2026-59181]

Published:

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.0.20.0, 3.1.15.0, and 3.2.0.3-beta1, A crafted cineon file

Medium(6.1)Affected
Details (2)
  • 2.5.18.0+dfsg-1+b1 · amd64 · trixie

    Affected

    nvd · openimageio · debian · 13

  • 2.5.18.0+dfsg-1+b1 · arm64 · trixie

    Affected

    nvd · openimageio · debian · 13

[CVE-2026-59156]

Published:

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.0.20.0, 3.1.15.0, and 3.2.0.3-beta1, A crafted fits stream

Medium(6.5)Affected
Details (2)
  • 2.5.18.0+dfsg-1+b1 · amd64 · trixie

    Affected

    nvd · openimageio · debian · 13

  • 2.5.18.0+dfsg-1+b1 · arm64 · trixie

    Affected

    nvd · openimageio · debian · 13

[CVE-2026-59956]

Published:

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.0.20.0, 3.1.15.0, and 3.2.0.3-beta1, An uncompressed 16-bit

Medium(6.1)Affected
Details (2)
  • 2.5.18.0+dfsg-1+b1 · amd64 · trixie

    Affected

    nvd · openimageio · debian · 13

  • 2.5.18.0+dfsg-1+b1 · arm64 · trixie

    Affected

    nvd · openimageio · debian · 13

[CVE-2026-50291]

Published:

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to versions 3.0.16.0 and 3.1.11.0, processing a crafted BMP file

Medium(5.5)Affected
Details (2)
  • 2.5.18.0+dfsg-1+b1 · amd64 · trixie

    Affected

    nvd · openimageio · debian · 13

  • 2.5.18.0+dfsg-1+b1 · arm64 · trixie

    Affected

    nvd · openimageio · debian · 13

[CVE-2026-63419]

Published:

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.0.21.0, 3.1.16.0, and 3.2.0.3-beta1, A zbuffer-only tiled i

High(7.8)Affected
Details (2)
  • 2.5.18.0+dfsg-1+b1 · amd64 · trixie

    Affected

    nvd · openimageio · debian · 13

  • 2.5.18.0+dfsg-1+b1 · arm64 · trixie

    Affected

    nvd · openimageio · debian · 13

[CVE-2026-63420]

Published:

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.0.21.0, 3.1.16.0, and 3.2.0.3-beta1, An indexed psd with tr

Medium(5.5)Affected
Details (2)
  • 2.5.18.0+dfsg-1+b1 · amd64 · trixie

    Affected

    nvd · openimageio · debian · 13

  • 2.5.18.0+dfsg-1+b1 · arm64 · trixie

    Affected

    nvd · openimageio · debian · 13

[CVE-2026-63422]

Published:

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.0.21.0, 3.1.16.0, and 3.2.0.3-beta1, A valid tiled openexr

High(7.8)Affected
Details (2)
  • 2.5.18.0+dfsg-1+b1 · amd64 · trixie

    Affected

    nvd · openimageio · debian · 13

  • 2.5.18.0+dfsg-1+b1 · arm64 · trixie

    Affected

    nvd · openimageio · debian · 13

[CVE-2026-63635]

Published:

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.0.21.0, 3.1.16.0, and 3.2.0.3-beta1, A crafted psd with an

Medium(5.5)Affected
Details (2)
  • 2.5.18.0+dfsg-1+b1 · amd64 · trixie

    Affected

    nvd · openimageio · debian · 13

  • 2.5.18.0+dfsg-1+b1 · arm64 · trixie

    Affected

    nvd · openimageio · debian · 13

[CVE-2026-63638]

Published:

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.0.21.0, 3.1.16.0, and 3.2.0.3-beta1, A crafted cineon image

High(8.3)Affected
Details (2)
  • 2.5.18.0+dfsg-1+b1 · amd64 · trixie

    Affected

    nvd · openimageio · debian · 13

  • 2.5.18.0+dfsg-1+b1 · arm64 · trixie

    Affected

    nvd · openimageio · debian · 13

[CVE-2026-65969]

Published:

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.0.21.0, 3.1.16.0, and 3.2.0.3-beta1, A truncated tga can le

Medium(5.5)Affected
Details (2)
  • 2.5.18.0+dfsg-1+b1 · amd64 · trixie

    Affected

    nvd · openimageio · debian · 13

  • 2.5.18.0+dfsg-1+b1 · arm64 · trixie

    Affected

    nvd · openimageio · debian · 13

[CVE-2026-43903]

Published:

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.0.18.0 and 3.1.13.0, sgiinput.cpp:265,274 use OIIO_DASSERT

High(8.4)Affected
Details (2)
  • 2.5.18.0+dfsg-1+b1 · amd64 · trixie

    Affected

    nvd · openimageio · debian · 13

  • 2.5.18.0+dfsg-1+b1 · arm64 · trixie

    Affected

    nvd · openimageio · debian · 13

[CVE-2026-43904]

Published:

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.0.18.0 and 3.1.13.0, softimageinput.cpp:469 (mixed RLE) and

High(8.4)Affected
Details (2)
  • 2.5.18.0+dfsg-1+b1 · amd64 · trixie

    Affected

    nvd · openimageio · debian · 13

  • 2.5.18.0+dfsg-1+b1 · arm64 · trixie

    Affected

    nvd · openimageio · debian · 13

[CVE-2026-43905]

Published:

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.0.18.0 and 3.1.13.0, jpeg2000input.cpp:395 computes buffer

High(7.8)Affected
Details (2)
  • 2.5.18.0+dfsg-1+b1 · amd64 · trixie

    Affected

    nvd · openimageio · debian · 13

  • 2.5.18.0+dfsg-1+b1 · arm64 · trixie

    Affected

    nvd · openimageio · debian · 13

[CVE-2026-43996]

Published:

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.0.18.0 and 3.1.13.0, the bounds check in TGAInput::decode_p

Medium(5.5)Affected
Details (2)
  • 2.5.18.0+dfsg-1+b1 · amd64 · trixie

    Affected

    nvd · openimageio · debian · 13

  • 2.5.18.0+dfsg-1+b1 · arm64 · trixie

    Affected

    nvd · openimageio · debian · 13

[CVE-2026-43907]

Published:

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.0.18.0 and 3.1.13.0, a signed integer overflow in QueryRGBB

High(8.8)Affected
Details (2)
  • 2.5.18.0+dfsg-1+b1 · amd64 · trixie

    Affected

    nvd · openimageio · debian · 13

  • 2.5.18.0+dfsg-1+b1 · arm64 · trixie

    Affected

    nvd · openimageio · debian · 13

[CVE-2026-43908]

Published:

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.0.18.0 and 3.1.13.0, a signed 32-bit integer overflow in th

High(8.8)Affected
Details (2)
  • 2.5.18.0+dfsg-1+b1 · amd64 · trixie

    Affected

    nvd · openimageio · debian · 13

  • 2.5.18.0+dfsg-1+b1 · arm64 · trixie

    Affected

    nvd · openimageio · debian · 13

[CVE-2026-43909]

Published:

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.0.18.0 and 3.1.13.0, a signed 32-bit integer overflow in th

High(8.8)Affected
Details (2)
  • 2.5.18.0+dfsg-1+b1 · amd64 · trixie

    Affected

    nvd · openimageio · debian · 13

  • 2.5.18.0+dfsg-1+b1 · arm64 · trixie

    Affected

    nvd · openimageio · debian · 13

[CVE-2026-43906]

Published:

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.0.18.0 and 3.1.13.0, a heap-based buffer overflow in the HE

High(8.8)Affected
Details (2)
  • 2.5.18.0+dfsg-1+b1 · amd64 · trixie

    Affected

    nvd · openimageio · debian · 13

  • 2.5.18.0+dfsg-1+b1 · arm64 · trixie

    Affected

    nvd · openimageio · debian · 13

[CVE-2026-7582]

Published:

A vulnerability was detected in AcademySoftwareFoundation OpenImageIO up to 3.2.0.1-dev. This vulnerability affects unknown code of the file src/dds.imageio/ddsinput.cpp of the component DDS Image Han

Medium(4.8)Affected
Details (2)
  • 2.5.18.0+dfsg-1+b1 · amd64 · trixie

    Affected

    nvd · openimageio · debian · 13

  • 2.5.18.0+dfsg-1+b1 · arm64 · trixie

    Affected

    nvd · openimageio · debian · 13

[Next results]

Last synced:

[CVE catalog]

Checksums

Repository signatures authenticate metadata. Artifact hashing is recorded separately. Neither establishes package safety.

2.5.18.0+dfsg-1+b1 / amd64Observed Sep 1, 2026sha256 a6a1eeee3c0d…9bd7547fSource-reported digest

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported digest (sha256): a6a1eeee3c0d679fff9fa7c0bfe40df70f32e68964dac09da3e573309bd7547f

Verify download

printf '%s %s\n' 'a6a1eeee3c0d679fff9fa7c0bfe40df70f32e68964dac09da3e573309bd7547f' 'python3-openimageio_2.5.18.0+dfsg-1+b1_amd64.deb' | sha256sum --check --strict -

Field source: Debian 13 (Trixie) main amd64

2.5.18.0+dfsg-1+b1 / arm64Observed Sep 1, 2026sha256 e5bfaf7d482e…475e31f6Source-reported digest

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported digest (sha256): e5bfaf7d482e0261f471febf866bdceacef3c46af76c5163789cca51475e31f6

Verify download

printf '%s %s\n' 'e5bfaf7d482e0261f471febf866bdceacef3c46af76c5163789cca51475e31f6' 'python3-openimageio_2.5.18.0+dfsg-1+b1_arm64.deb' | sha256sum --check --strict -

Field source: Debian 13 (Trixie) main arm64

Sources

  • Authoritative source; repository metadata signature verified

    Signature evidence

    trixie-main-amd64:3ab4e811cf4f3e5a335d382c58cc19d85f1abe7a4ef4689160ca1f637fa0e9b3

    Repository-signature verification record
    Signed-object SHA-256
    98b25b5cd185c59d34aa6e4c3e9b5b8f01bbe9d104fe2dcfbcd30dc0a14a59ed
    Signer fingerprint
    4CB50190207B4758A3F73A796ED0E7B82643E131
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Repository metadata hash linkage
    Path
    main/binary-amd64/Packages.xz
    Expected SHA-256
    3ab4e811cf4f3e5a335d382c58cc19d85f1abe7a4ef4689160ca1f637fa0e9b3
    Observed SHA-256
    3ab4e811cf4f3e5a335d382c58cc19d85f1abe7a4ef4689160ca1f637fa0e9b3
    Result
    match verified
  • Authoritative source; repository metadata signature verified

    Signature evidence

    trixie-main-arm64:753da751bbc7a679f48bd1b623ffd4479cb6861c426118284c76eb82909e4908

    Repository-signature verification record
    Signed-object SHA-256
    98b25b5cd185c59d34aa6e4c3e9b5b8f01bbe9d104fe2dcfbcd30dc0a14a59ed
    Signer fingerprint
    4CB50190207B4758A3F73A796ED0E7B82643E131
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Repository metadata hash linkage
    Path
    main/binary-arm64/Packages.xz
    Expected SHA-256
    753da751bbc7a679f48bd1b623ffd4479cb6861c426118284c76eb82909e4908
    Observed SHA-256
    753da751bbc7a679f48bd1b623ffd4479cb6861c426118284c76eb82909e4908
    Result
    match verified