From: Brad Smith Subject: Re: UPDATE: openjp2 2.5.2 To: Landry Breuil Cc: ports@openbsd.org Date: Mon, 4 Mar 2024 03:10:04 -0500 On 2024-03-04 2:56 a.m., Landry Breuil wrote: > Le Sun, Mar 03, 2024 at 03:35:12PM -0500, Brad Smith a écrit : >> On 2024-03-03 7:22 a.m., Landry Breuil wrote: >>> Le Sat, Mar 02, 2024 at 08:41:02PM -0500, Brad Smith a écrit : >>>> On Sat, Mar 02, 2024 at 06:04:23PM -0500, Brad Smith wrote: >>>>> Here is an update to openjp2 2.5.2. >>>>> >>>>> CVE-2021-3575 >>>>> >>>>> >>>>> ## OpenJPEG 2.5.2 (Feb 2024) >>>>> >>>>> * Make sure openjpeg.h includes opj_config.h [\#1514](https://github.com/uclouvain/openjpeg/issues/1514) >>>>> >>>>> ## OpenJPEG 2.5.1 (Feb 2024) >>>>> >>>>> * CMake: drop support for cmake < 3.5 >>>>> * Several bugfixes, including [\#1509](https://github.com/uclouvain/openjpeg/pull/1509) for CVE-2021-3575 >>>>> * Significant speed-up rate allocation by rate/distoratio ratio [\#1440](https://github.com/uclouvain/openjpeg/pull/1440) >>>> An updated diff fixing the big endian patch the way upstream recommended. >>> thanks, i had a similar diff for 2.5.2 which is in a bulk, i'll >>> integrate the updated BE patch. do you have a link for 'the way upstream >>> recommended' ? >> https://github.com/uclouvain/openjpeg/pull/1520 > thanks - fwiw in my diff (attached) ive been able to drop > patch-CMakeLists.txt, i dont remember what it was for but it seems now > unneeded. Oh. Ya. That could have been removed as part of.. revision 1.11 date: 2019/01/16 22:29:54;  author: sthen;  state: Exp;  lines: +19 -18;  commitid: zHTzCDYhKbi3xgJr; use upstream default include/cmake path, avoids patches needed in some portsLooks like it was originally passing in a variable to override the directory name in the path. I was wondering what it was for, but had not looked into it, until now.