On 2024-03-03 7:22 a.m., Landry Breuil wrote:
Le Sat, Mar 02, 2024 at 08:41:02PM -0500, Brad Smith a écrit :
On Sat, Mar 02, 2024 at 06:04:23PM -0500, Brad Smith wrote:
Here is an update to openjp2 2.5.2.
CVE-2021-3575
## OpenJPEG 2.5.2 (Feb 2024)
* Make sure openjpeg.h includes opj_config.h
[\#1514](https://github.com/uclouvain/openjpeg/issues/1514)
## OpenJPEG 2.5.1 (Feb 2024)
* CMake: drop support for cmake < 3.5
* Several bugfixes, including
[\#1509](https://github.com/uclouvain/openjpeg/pull/1509) for CVE-2021-3575
* Significant speed-up rate allocation by rate/distoratio ratio
[\#1440](https://github.com/uclouvain/openjpeg/pull/1440)
An updated diff fixing the big endian patch the way upstream recommended.
thanks, i had a similar diff for 2.5.2 which is in a bulk, i'll
integrate the updated BE patch. do you have a link for 'the way upstream
recommended' ?
https://github.com/uclouvain/openjpeg/pull/1520