http://www.ocert.org/advisories/ocert-2015-006.html
Hi Sevan, thanks for the pointer. I am working on it.
A commit references this bug: Author: mandree Date: Sat May 16 00:46:48 UTC 2015 New revision: 386494 URL: https://svnweb.freebsd.org/changeset/ports/386494 Log: Fix CVE-2015-3885. PR: 200198 Security: CVE-2015-3885 Changes: head/graphics/rawtherapee/Makefile head/graphics/rawtherapee/files/patch-CVE-2015-3885