OpenJPEG 2.5.1 has been released https://groups.google.com/g/openjpeg/c/othStX49Yc8 and includes a fix https://github.com/uclouvain/openjpeg/pull/1509 for CVE-2021-3575. -- Andrew C. Aitchison Kendal, UK andrew at aitchison.me.uk