Upstream patch to fix CVE-2022-34300 Fixes rhbz#2233636

Source: Fedora 38: tinyexr 2023-3e092b3938