graphite2 (1.3.14-1ubuntu0.1) jammy-security; urgency=medium

  * SECURITY UPDATE: OOB write via Graphite actions
    - debian/patches/CVE-2026-50593.patch: Fix an underflow case that can be
      induced by crafted graphite actions in src/inc/opcodes.h.
    - CVE-2026-50593

 -- Marc Deslauriers <marc.deslauriers@ubuntu.com>  Mon, 15 Jun 2026 18:39:34 -0400

graphite2 (1.3.14-1build2) jammy; urgency=medium

  * No-change rebuild for ppc64el baseline bump.

 -- Łukasz 'sil2100' Zemczak <lukasz.zemczak@ubuntu.com>  Wed, 23 Mar 2022 14:56:07 +0100

graphite2 (1.3.14-1build1) impish; urgency=medium

  * No-change rebuild to build packages with zstd compression.

 -- Matthias Klose <doko@ubuntu.com>  Thu, 07 Oct 2021 12:12:24 +0200

graphite2 (1.3.14-1) unstable; urgency=medium

  * New upstream version 1.3.14

 -- Rene Engelhard <rene@debian.org>  Wed, 01 Apr 2020 11:11:00 +0200

graphite2 (1.3.13-11) unstable; urgency=medium

  * Team upload.
  * d/rules: fix variable name in the previous change.

 -- Mattia Rizzolo <mattia@debian.org>  Tue, 15 Oct 2019 19:56:08 +0200

graphite2 (1.3.13-10) unstable; urgency=medium

  * Team upload.
  * d/rules: export LD_LIBRARY_PATH while testing.
    The build fails consistently on the buildds, but I can't reproduce it no
    matter what.  Lacking a clear solution, let's try explicitly exporting
    this variable, hoping it will work around whatever is going wrong.

 -- Mattia Rizzolo <mattia@debian.org>  Tue, 15 Oct 2019 17:55:43 +0200

graphite2 (1.3.13-9) unstable; urgency=medium

  * Team upload.
  * Simplify and forward d/patches/non-linux.diff
  * Run wrap-and-sort.
  * d/control:
    + Bump Standards-Version to 4.4.1, no changes needed.
    + Annotate python3 build dependency with :native.  Closes: #941647
      Thanks to Helmut Grohne for the patch.

 -- Mattia Rizzolo <mattia@debian.org>  Thu, 03 Oct 2019 12:16:50 +0200

graphite2 (1.3.13-8) unstable; urgency=medium

  * Team upload.

  [ Rene Engelhard ]
  * Apply patch from Helmut Grohne to annotate
    Build-Depends: python3-fonttools with <!nocheck>. (Closes: #928545)

  [ Mattia Rizzolo ]
  * Refresh all the patches.
  * Apply patch from Svante Signell to refresh the non-linux.diff patch.
  * Enable the non-linux.diff patch again (disabled in 1.3.12-1).
  * d/rules: Drop now unneeded override_dh_strip.
  * Drop now unneeded lintian override for embedded-javascript-library.
  * d/control:
    + Bump Standards-Version to 4.4.0, no changes needed.
    + Set Rules-Requires-Root:no.
  * d/rules:
    + Explicitly set --no-parallel to the dh_auto_build building the docs, as
      that's what's preventing the whole thing from being completely parallel.
    + Split the current override_dh_auto_install into multiple targets,
      for better separation of arch/indep builds.
  * Bump debhelper compat level to 12:
    + Drop d/compat, use the new debhelper-compat notation instead.
    + Drop explicit --parallel, default since compat 10.
    + The documentation moved: /usr/share/doc/libgraphite2-{doc -> dev}/html/
      (change from Policy v3.9.7, §12.3)
  * d/libgraphite2-doc.install: drop, the .docs contains it all already.

 -- Mattia Rizzolo <mattia@debian.org>  Sun, 18 Aug 2019 23:15:02 +0200

graphite2 (1.3.13-7) unstable; urgency=medium

  * revert debian/patches/revert-49fce465ae4ee921f81e9fb8270177c16849a3e9.diff
    sice whatever caused this is now apparently not needed anymore in testing
    or unstable; in contrast - the tests fail *with* that patch applied.

 -- Rene Engelhard <rene@debian.org>  Tue, 15 Jan 2019 21:08:22 +0100

graphite2 (1.3.13-6) unstable; urgency=medium

  * upload to unstable

  * add autopkgtest running upstream make test

 -- Rene Engelhard <rene@debian.org>  Wed, 09 Jan 2019 22:23:24 +0000

# For older changelog entries, run 'apt-get changelog libgraphite2-3'
