CVE-2021-3575 OpenJPEG 2.5.1 has been released https://groups.google.com/g/openjpeg/c/othStX49Yc8 and includes a fix https://github.com/uclouvain/openjpeg/pull/1509 for CVE-2021-3575.
OpenJPEG 2.5.2 updates 2.5.1 with a minor bug fix. https://github.com/uclouvain/openjpeg/blob/v2.5.2/NEWS.md -- Andrew C. Aitchison Kendal, UK and...@aitchison.me.uk