Import Debian changes 2.5.4-2+deb11u1

openexr (2.5.4-2+deb11u1) bullseye-security; urgency=high
.
  * Non-maintainer upload.
  * Fix CVE-2021-3598, CVE-2021-3605, CVE-2021-3933, CVE-2021-3941,
    CVE-2021-23215, CVE-2021-26260 and CVE-2021-45942.
    Multiple security vulnerabilities have been found in OpenEXR, command-line
    tools and a library for the OpenEXR image format. Buffer overflows or
    out-of-bound reads could lead to a denial of service (application crash) if
    a malformed image file is processed.
    (Closes: #992703, #990450, #990899, #1014828, #1014828)