On 2024-03-03 7:22 a.m., Landry Breuil wrote:
> Le Sat, Mar 02, 2024 at 08:41:02PM -0500, Brad Smith a écrit :
>> On Sat, Mar 02, 2024 at 06:04:23PM -0500, Brad Smith wrote:
>>> Here is an update to openjp2 2.5.2.
>>>
>>> CVE-2021-3575
>>>
>>>
>>> ## OpenJPEG 2.5.2 (Feb 2024)
>>>
>>> * Make sure openjpeg.h includes opj_config.h [\#1514](https://github.com/uclouvain/openjpeg/issues/1514)
>>>
>>> ## OpenJPEG 2.5.1 (Feb 2024)
>>>
>>> * CMake: drop support for cmake < 3.5
>>> * Several bugfixes, including [\#1509](https://github.com/uclouvain/openjpeg/pull/1509) for CVE-2021-3575
>>> * Significant speed-up rate allocation by rate/distoratio ratio [\#1440](https://github.com/uclouvain/openjpeg/pull/1440)
>> An updated diff fixing the big endian patch the way upstream recommended.
> thanks, i had a similar diff for 2.5.2 which is in a bulk, i'll
> integrate the updated BE patch. do you have a link for 'the way upstream
> recommended' ?

https://github.com/uclouvain/openjpeg/pull/1520