exiv2 (0.27.6-1ubuntu0.3) noble-security; urgency=medium

  * SECURITY REGRESSION: Segmentation Fault (LP: #2144731)
   - Remove CVE-2025-55304 patches due to intrusive changes causing
     a segmentation fault
   - CVE-2025-55304

 -- Bruce Cable <bruce.cable@canonical.com>  Thu, 19 Mar 2026 09:54:48 +1100

exiv2 (0.27.6-1ubuntu0.1) noble-security; urgency=medium

  * SECURITY UPDATE: Out of Bounds Read
    - debian/patches/CVE-2026-25884.patch: Fix out-of-bounds read
    - debian/patches/CVE-2026-27596.patch: Check for integer overflow.
    - CVE-2026-25884
    - CVE-2026-27596
  * SECURITY UPDATE: Denial of Service
    - debian/patches/CVE-2025-54080.patch: Better bounds checking
    - debian/patches/CVE-2026-27631.patch: Check for integer overflow
    - debian/patches/CVE-2025-55304-1.patch: Add new method
      appendIccProfile to fix quadratic performance issue
    - debian/patches/CVE-2025-55304-2.patch: Fix docstring
    - CVE-2025-54080
    - CVE-2026-27631
    - CVE-2025-55304

 -- Bruce Cable <bruce.cable@canonical.com>  Fri, 13 Mar 2026 19:21:48 +1100

exiv2 (0.27.6-1build1) noble; urgency=high

  * No change rebuild for 64-bit time_t and frame pointers.

 -- Julian Andres Klode <juliank@ubuntu.com>  Mon, 08 Apr 2024 17:57:19 +0200

exiv2 (0.27.6-1) unstable; urgency=medium

  * Team upload.
  * New upstream release.
  * Update standards version to 4.6.2, no changes needed.
  * Update Vcs-* fields.
  * Use execute_after_dh_* to avoid invoking dh_* manually
  * Execute chrpath right after dh_auto_install, rather than after dh_install.
  * Update the build dependencies according to the upstream build system:
    - bump cmake to 3.7.2
  * Remove non-existing file from copyright.
  * Rename debian/docs to debian/exiv2.docs, to make it clearer (and consistent
    with other files) to which package it refers to.

 -- Pino Toscano <pino@debian.org>  Sat, 28 Jan 2023 11:45:47 +0100

exiv2 (0.27.5-4) unstable; urgency=medium

  * Team upload.

  [ Sandro Knauß ]
  * Update symbol file for gcc-12 (Closes: #1012920).
  * Update Standards-Version to 4.6.1 (No changes needed).
  * Update symbols for link time optimation (Closes: #1015399).

 -- Sandro Knauß <hefee@debian.org>  Mon, 22 Aug 2022 14:33:14 +0200

exiv2 (0.27.5-3) unstable; urgency=medium

  * Team upload.
  * Update symbols from buildds.

 -- Sandro Knauß <hefee@debian.org>  Sat, 26 Mar 2022 18:35:36 +0100

exiv2 (0.27.5-2) unstable; urgency=medium

  * Team upload.
  * Update Multi-Arch information for -dev and -doc.
  * Enable BMFF support (Closes: #1000788)
  * Set upstream metadata fields: Bug-Database, Bug-Submit, Repository,
    Repository-Browse.
  * Fix day-of-week for changelog entry 0.10-1.
  * Enable hardening.
  * Update symbols from buildds.
  * Register documentation via doc-base.
  * Update symbols for BMFF support.

 -- Sandro Knauß <hefee@debian.org>  Fri, 25 Mar 2022 01:00:00 +0100

exiv2 (0.27.5-1) unstable; urgency=medium

  * Team upload.

  [ Simon Schmeisser ]
  * New upstream release (Closes: #1000788):
    - fixes CVE-2021-29458 (Closes: #987277)
    - fixes CVE-2021-29463 (Closes: #988241)
    - fixes CVE-2021-29464 (Closes: #988242)
    - fixes CVE-2021-29470 (Closes: #987450)
    - fixes CVE-2021-29473 (Closes: #987736)
    - fixes CVE-2021-29623 (Closes: #988481)
    - fixes CVE-2021-32617 (Closes: #988731)
    - fixes CVE-2021-32815 (Closes: #992705)
    - fixes CVE-2021-34334 (Closes: #992706)
    - fixes CVE-2021-34335 (Closes: #992707)
    - fixes CVE-2021-3482 (Closes: #986888)
    - fixes CVE-2021-37615
    - fixes CVE-2021-37616
    - fixes CVE-2021-37618
    - fixes CVE-2021-37619
    - fixes CVE-2021-37620
    - fixes CVE-2021-37621
    - fixes CVE-2021-37622
    - fixes CVE-2021-37623
  * Remove patches that have been fixed upstream:
    - fix-man-page-table-formatting.patch
    - fcf-protection-only-on-x86.diff
  * Update symbols file

  [ Sandro Knauß ]
  * Remove cruft dbg->dbgsym package dependency.
  * Bump Standards-Version to 4.6.0 (No changes needed).
  * Bump compat level to 13.
  * Bring copyright file in line with DEP-5.
  * Remove maxy from Uploaders list.
  * Cleanup copyright file.

 -- Sandro Knauß <hefee@debian.org>  Thu, 10 Feb 2022 20:05:47 +0100

exiv2 (0.27.3-3) unstable; urgency=medium

  * Team upload.
  * Update symbols file from the logs of buildds.

 -- Pino Toscano <pino@debian.org>  Sun, 09 Aug 2020 07:15:23 +0200

exiv2 (0.27.3-2) unstable; urgency=medium

  * Team upload.
  * Limit -fcf-protection only on x86 architectures, as it does not exist
    elsewhere; patch fcf-protection-only-on-x86.diff.

 -- Pino Toscano <pino@debian.org>  Sun, 09 Aug 2020 00:51:27 +0200

exiv2 (0.27.3-1) unstable; urgency=medium

  * Team upload.
  * New upstream release:
    - fixes CVE-2019-17402 (Closes: #946341)
  * Update the patches:
    - fix-man-page-table-formatting.patch: refresh
    - remove-execute-permission-bit-from-ini-test-sample.patch: not needed as
      patch, it will be done with a simpler chmod
    - Fix-issue-712.patch: drop, backported from upstream
    - Add-comment-to-explain-choice-of-cut-off-value.patch: drop, backported
      from upstream
    - Fix-1011-fix_1011_jp2_readmetadata_loop.patch: drop, backported from
      upstream
    - drop debian/source/include-binaries, no more needed now
  * Update symbols file. (Closes: #950631, #957188)
  * Add Rules-Requires-Root: no.
  * Append -Wno-deprecated-declarations to the CXXFLAGS: exiv2 uses
    std::auto_ptr<> a lot, so avoid the lots of deprecation warnings.
  * Remove the executable permissions from all the .ini files in libexiv2-doc.
  * Explicitly add the gettext build dependency.
  * Do not ship TODO in libexiv2-doc, as it is not useful for users.

 -- Pino Toscano <pino@debian.org>  Sat, 08 Aug 2020 23:23:52 +0200

exiv2 (0.27.2-8) unstable; urgency=medium

  * Team upload.
  * Update symbols file from the logs of buildds.
  * Merge useful changes from 0.25-4:
    - add Maximiliano Curia as Uploader
    - adjust version of dbgsym migration
  * Drop the python:native build dependency, as it is not used.
    (Closes: #936496)
  * Sort install files.
  * Move the static libexiv2-xmp.a from libexiv2-27 to libexiv2-dev, as it is
    needed only for development
    - add proper breaks/replaces
  * The current way to build the API documentation is suboptimal: even in
    -indep builds a an -arch build is forced; also the separate doc build
    requires a custom patch, Instead:
    - move the common arguments for cmake to a variable to avoid duplication
    - pass -DEXIV2_BUILD_DOC=ON to enable the documentation build, unless on
      -arch builds
    - pass -DCMAKE_INSTALL_DOCDIR=/usr/share/doc/exiv2/html to cmake to change
      the installation directory of the documentation (mostly for the "html"
      part), and change libexiv2-doc.docs to pick it from that location
    - call the "doc" target in -indep builds
    - drop patch 0001-doc-only-build-target.patch, no more needed now
  * Remove patch numbers from patch files.
  * Backport upstream commits 4c28673b641d7eacb50baafb5c286f6900ce2002, and
    d4d4d766e9ade2376115eb41cc478eb195df1b39 to fix CVE-2019-9143 and
    CVE-2019-9144; patches Fix-issue-712.patch, and
    Add-comment-to-explain-choice-of-cut-off-value.patch.
    (Closes: #923472, #923473)
  * Backport upstream commit 1b917c3f7dd86336a9f6fda4456422c419dfe88c to fix
    CVE-2019-20421; patch Fix-1011-fix_1011_jp2_readmetadata_loop.patch.
    (Closes: #950183)
  * Add debian/source/include-binaries for the patches Fix-issue-712.patch, and
    Fix-1011-fix_1011_jp2_readmetadata_loop.patch, as they contain the binary
    testcases for the fixes.

 -- Pino Toscano <pino@debian.org>  Thu, 30 Jan 2020 09:39:44 +0100

exiv2 (0.27.2-7) unstable; urgency=medium

  * Team upload.
  * Update symbols file.
  * Remove the dh_missing --list-missing invocation, as it is done by default
    in debhelper compatibility 12.
  * Switch from the debhelper build dependency to debhelper-compat
    - remove debian/compat
  * Bump Standards-Version to 4.5.0, no changes required.
  * Remove trailing whitespaces in changelog.
  * Update lintian overrides.
  * Pass -DEXIV2_BUILD_SAMPLES=OFF to cmake to disable the build of samples,
    as we do not ship them anyway.
  * Remove debian/not-installed, no more needed now.
  * Drop removal of .la files, as they are not shipped anymore.
  * Add the configuration for the CI on salsa.
  * Use https for Homepage.
  * Tweak watch file to consider only digits and dots for versions.
  * Move translations from libexiv2-dev to the main library package, as they
    contain messages for the library and the exiv2 tool
    - add proper breaks/replaces

 -- Pino Toscano <pino@debian.org>  Tue, 28 Jan 2020 09:32:57 +0100

exiv2 (0.27.2-6) unstable; urgency=medium

  [ Steve Robbins ]
  * Source upload to unstable.  Closes: #914006, #926880.
  * Update symbols.

 -- Steve M. Robbins <smr@debian.org>  Mon, 27 Jan 2020 22:50:41 -0600

exiv2 (0.27.2-5) experimental; urgency=medium

  [ Steve Robbins ]
  * Update symbols

 -- Steve M. Robbins <smr@debian.org>  Sun, 26 Jan 2020 09:57:00 -0600

exiv2 (0.27.2-4) experimental; urgency=medium

  [ Steve Robbins ]
  * Add myself to uploaders
  * Fix SOVERSION in symbols file.

 -- Steve M. Robbins <smr@debian.org>  Sat, 25 Jan 2020 22:42:34 -0600

exiv2 (0.27.2-3) experimental; urgency=medium

  [ Steve Robbins ]
  * Updated symbol file from build server logs.

 -- Steve M. Robbins <smr@debian.org>  Wed, 06 Nov 2019 19:36:27 -0600

exiv2 (0.27.2-2) experimental; urgency=medium

  [ Jelmer Vernooĳ ]
  * Fix Vcs-Git and Vcs-Browser URLs.

  [ Steven Robbins ]
  * Revert symbols file to 0.25, in order to get diffs from build servers.

 -- Steve M. Robbins <smr@debian.org>  Mon, 04 Nov 2019 23:54:08 -0600

exiv2 (0.27.2-1) experimental; urgency=medium

  * Team upload.

  [ Maximiliano Curia ]
  * New revision
  * Update uploaders list as requested by MIA team (Closes: #879288)

  [ Simon Frei ]
  * New upstream release (0.27.2)
  * Drop upstream patches
  * Follow upstream soversion bump
  * Update build dependencies
  * Reenable XMP support
  * Bump debhelper from 9 to 12
  * Bump Standards-Version to 4.4.0 (no changes)
  * Various fixes due to lintian

 -- Steve M. Robbins <smr@debian.org>  Tue, 10 Sep 2019 00:05:18 -0500

# Older entries have been removed from this changelog.
# To read the complete changelog use `apt changelog libexiv2-doc`.
