gdk-pixbuf (2.44.7+dfsg-1) unstable; urgency=medium

  [ Jeremy Bícha ]
  * New upstream release
  * Remove xpm loading patch applied in new release

  [ Alessandro Astone ]
  * d/tests: Do not fail build test on stderr output

 -- Jeremy Bícha <jbicha@ubuntu.com>  Thu, 16 Jul 2026 05:51:14 +0200

gdk-pixbuf (2.44.6+dfsg-2) unstable; urgency=medium

  * Team upload
  * d/patches: Move workarounds for older glycin into a subdirectory.
    This will make it more obvious when we can remove them.
  * d/p/old-glycin/build-Enable-all-builtin-loaders.patch:
    Clarify why we need this patch
  * d/p/old-glycin/Temporarily-disable-glycin-xpm-and-xbm.patch:
    Adjust patch so that when glycin is built-in, but we're not using
    glycin for xbm/xpm, we don't assume that xbm/xpm are part of it
  * d/p/Fix-loading-of-xpm-module-if-built-in.patch:
    Add proposed patch to fix the legacy XPM module when built-in to
    the library, fixing regressions in apps that call the deprecated
    gdk_pixbuf_new_from_xpm_data() (Closes: #1132565)
  * d/rules: Explicitly enable legacy XPM loader.
    We were already enabling this via the builtin_loaders option as a
    workaround for our glycin version not supporting this format, but
    even after we get a version of glycin that can load XBM and XPM files,
    we'll still need this for gdk_pixbuf_new_from_xpm_data().
  * d/tests: Exercise gdk_pixbuf_new_from_xpm_data(), and smoke-test
    support for the most important formats to make sure they don't regress

 -- Simon McVittie <smcv@debian.org>  Sat, 04 Apr 2026 14:55:48 +0100

gdk-pixbuf (2.44.6+dfsg-1) unstable; urgency=high

  * New upstream release
    - CVE-2026-5201 Heap overflow via improper validation of color
      component counts (Closes: #1132501)
  * Remove test patch applied in new release
  * Remove transitional libgdk-pixbuf2.0-0-udeb
  * Update Standards Version to 4.7.4

 -- Jeremy Bícha <jbicha@ubuntu.com>  Thu, 02 Apr 2026 14:04:10 -0400

gdk-pixbuf (2.44.5+dfsg-4) unstable; urgency=medium

  * Add patch to support JPEG2000 (Closes: #815612)
  * Bump minimum glycin to 2.0.8 for this to work

 -- Jeremy Bícha <jbicha@ubuntu.com>  Sat, 14 Feb 2026 10:24:34 -0500

gdk-pixbuf (2.44.5+dfsg-3) unstable; urgency=medium

  * Re-enable glycin for loong64
  * Release to unstable

 -- Jeremy Bícha <jbicha@ubuntu.com>  Mon, 09 Feb 2026 07:00:40 -0500

gdk-pixbuf (2.44.5+dfsg-2) experimental; urgency=medium

  [ Alessandro Astone ]
  * d/control, d/rules: Enable glycin on i386

  [ Carlos Henrique Lima Melara ]
  * d/rules: remove useless if clause in dh_auto_test override

  [ Jeremy Bícha ]
  * Disable glycin for loong64 because it isn't fully bootstrapped yet.
    glycin is now enabled on all other Debian Release Architectures, but not
    enabled on any Debian ports.
  * Bump Standards Version to 4.7.3

  [ Simon McVittie ]
  * Opt into Salsa CI

 -- Jeremy Bícha <jbicha@ubuntu.com>  Thu, 05 Feb 2026 13:50:28 -0500

gdk-pixbuf (2.44.5+dfsg-1) experimental; urgency=medium

  * New upstream release
  * d/rules: Re-enable build test gating
  * d/p: Rebase patches
  * d/patches: Fix tests with older gdk-pixbuf installed in the rootfs
  * d/patches: Use the native xpm and xbm loaders instead of glycin

 -- Alessandro Astone <alessandro.astone@canonical.com>  Thu, 29 Jan 2026 10:56:51 +0100

gdk-pixbuf (2.44.4+dfsg-3) experimental; urgency=medium

  * Enable the legacy non-glycin XPM & XBM loaders for glycin architectures
    (Closes: #1120607)

 -- Jeremy Bícha <jbicha@ubuntu.com>  Wed, 12 Nov 2025 22:37:30 -0500

gdk-pixbuf (2.44.4+dfsg-2) experimental; urgency=medium

  * Switch to glycin for release architectures and loong64 except i386
    (Closes: #1116981, #1071271) (LP: #2122289)
  * Depend on glycin-thumbnailers on those architectures
  * libgdk-pixbuf2.0-bin no longer contains a thumbnailer on those
    architectures, but still contains gdk-pixbuf-pixdata and
    gdk-pixbuf-csource, so stop recommending it on those architectures
  * Use dh-exec to manage architecture-specific install rules
  * Follow Fedora's example and disable auto features

 -- Jeremy Bícha <jbicha@ubuntu.com>  Wed, 12 Nov 2025 07:06:13 -0500

gdk-pixbuf (2.44.4+dfsg-1) unstable; urgency=medium

  * New upstream release
  * Remove bitmap patch applied in new release

 -- Jeremy Bícha <jbicha@ubuntu.com>  Tue, 21 Oct 2025 13:28:37 -0400

gdk-pixbuf (2.44.3+dfsg-3) unstable; urgency=medium

  * Cherry-pick proposed patch to fix bitmap loading, as seen in
    the window buttons feature for the Xfce panel

 -- Jeremy Bícha <jbicha@ubuntu.com>  Wed, 01 Oct 2025 14:37:38 -0400

gdk-pixbuf (2.44.3+dfsg-2) unstable; urgency=medium

  * Release to unstable

 -- Jeremy Bícha <jbicha@ubuntu.com>  Wed, 01 Oct 2025 06:45:40 -0400

gdk-pixbuf (2.44.3+dfsg-1) experimental; urgency=medium

  * New upstream release
  * Update configure options
    - Don't switch to glycin yet
    - Explicitly disable native Android loader
    - Disable tiff for udeb
    - Disable thumbnailer for udeb
    - Keep jpeg & png as "built-in" loaders since that was the previous default
  * Remove 3 patches applied in new release

 -- Jeremy Bícha <jbicha@ubuntu.com>  Tue, 30 Sep 2025 13:45:03 -0400

gdk-pixbuf (2.42.12+dfsg-5) unstable; urgency=medium

  * Team upload

  [ Sebastien Bacher ]
  * Fix dh_fixperms override

  [ Simon McVittie ]
  * Fix dh_fixperms override more: don't make subdirectories non-executable
  * Build-depend on gobject-introspection instead of libgirepository1.0-dev
  * Build-depend on required gir1.2-*-dev packages
  * Edit previous changelog entry to mention #1109262
  * d/copyright: Don't quote the FSF's former postal address
  * Standards-Version: 4.7.2 (no changes required)

 -- Simon McVittie <smcv@debian.org>  Fri, 15 Aug 2025 10:57:12 +0100

gdk-pixbuf (2.42.12+dfsg-4) unstable; urgency=high

  * Team upload
  * Add patch from upstream fixing an out of bounds read for crafted
    JPEGs. (CVE-2025-7345, Closes: #1109262)

 -- Simon McVittie <smcv@debian.org>  Sat, 12 Jul 2025 16:56:46 +0100

gdk-pixbuf (2.42.12+dfsg-3) unstable; urgency=high

  * Team upload
  * d/p/lzw-Fix-reporting-of-bytes-written-in-decoder.patch:
    Add patch from upstream to fix LZW error reporting.
    Setting the reported output size to the full buffer length rather than
    the actual number of written bytes can cause uninitialized memory
    contents to be disclosed. (CVE-2025-6199; Closes: #1107994)
  * Set high urgency for security fix

 -- Simon McVittie <smcv@debian.org>  Fri, 20 Jun 2025 09:52:41 +0100

gdk-pixbuf (2.42.12+dfsg-2) unstable; urgency=medium

  [ Simon McVittie ]
  * d/control: Remove some redundant dependencies
  * Standards-Version: 4.7.0 (no changes required)
  * libgdk-pixbuf2.0-doc: Register the reference manuals with doc-base

  [ Jeremy Bícha ]
  * Drop obsolete Pre-Depends
  * Run wrap-and-sort

 -- Jeremy Bícha <jbicha@ubuntu.com>  Wed, 22 Jan 2025 08:21:30 -0500

gdk-pixbuf (2.42.12+dfsg-1) unstable; urgency=high

  * Team upload
  * New upstream release
    - Reject malformed .ani files, including one category that can cause
      memory corruption (CVE-2022-48622)
  * d/rules: Keep .ani, .bmp, .icns, .ico, .pnm, .qtif, .tga, .xbm, .xpm
    loaders enabled for now. They are weakly maintained, and no longer
    enabled by default upstream to reduce security exposure, but disabling
    them would be a feature regression, which we shouldn't do in the same
    upload as a security fix.
  * d/rules: Disable miscellaneous loaders for the udeb, which as far as
    we know only needs PNG support
  * d/copyright: Pre-generated HTML documentation no longer needs excluding
  * Set high urgency for security fix

 -- Simon McVittie <smcv@debian.org>  Thu, 16 May 2024 15:25:37 +0100

gdk-pixbuf (2.42.10+dfsg-3) unstable; urgency=medium

  * Team upload
  * d/control, d/rules: Reinstate dh-sequence-gnome, but disable
    control.in.
    Ubuntu uses this sequence to pull in the Ubuntu-specific
    dh_translations.
  * d/control: Add ${gir:Depends} to -dev package
  * d/control: Use ${gir:Provides} instead of hard-coding it.
    gobject-introspection (>= 1.78.1-5~) generates this for us.

 -- Simon McVittie <smcv@debian.org>  Tue, 14 Nov 2023 10:02:24 +0000

gdk-pixbuf (2.42.10+dfsg-2) unstable; urgency=medium

  * Team upload

  [ Amin Bandali ]
  * Change packaging branch to debian/latest

  [ Simon McVittie ]
  * d/clean: Clean up debian/tmp-udeb/, obj-udeb/ (Closes: #1045013)
  * d/rules: Fix escaped newline.
    No functional change, because the options after the incorrect newline
    were explicitly setting default behaviour anyway.
  * d/.gitignore: Add
  * d/control: Stop generating from a template.
    We don't use any of the other dh-sequence-gnome features (there are no
    libtool archives, and we don't use the gnome:Foo family of substvars)
    so drop the build-dependency on dh-sequence-gnome.
  * d/control: Add Provides on gir1.2-*-dev package names.
    Adding versioned Provides on gir1.2-*-dev corresponding to each GIR XML
    file is a small step towards being able to exclude GObject-Introspection
    with a build-profile when cross-compiling.
    (Helps: #1030223)
  * Remove version constraints unnecessary since bullseye (oldstable)
  * Update standards version to 4.6.2, no changes needed.

 -- Simon McVittie <smcv@debian.org>  Wed, 01 Nov 2023 23:29:20 +0000

# Older entries have been removed from this changelog.
# To read the complete changelog use `apt changelog libgdk-pixbuf-2.0-0`.
