Le Sat, Mar 02, 2024 at 08:41:02PM -0500, Brad Smith a écrit :
> On Sat, Mar 02, 2024 at 06:04:23PM -0500, Brad Smith wrote:
> > Here is an update to openjp2 2.5.2.
> > 
> > CVE-2021-3575
> > 
> > 
> > ## OpenJPEG 2.5.2 (Feb 2024)
> > 
> > * Make sure openjpeg.h includes opj_config.h [\#1514](https://github.com/uclouvain/openjpeg/issues/1514)
> > 
> > ## OpenJPEG 2.5.1 (Feb 2024)
> > 
> > * CMake: drop support for cmake < 3.5
> > * Several bugfixes, including [\#1509](https://github.com/uclouvain/openjpeg/pull/1509) for CVE-2021-3575
> > * Significant speed-up rate allocation by rate/distoratio ratio [\#1440](https://github.com/uclouvain/openjpeg/pull/1440)
> 
> An updated diff fixing the big endian patch the way upstream recommended.

thanks, i had a similar diff for 2.5.2 which is in a bulk, i'll
integrate the updated BE patch. do you have a link for 'the way upstream
recommended' ?