lcms2 (2.14-2ubuntu0.1) noble-security; urgency=medium

  * SECURITY UPDATE: nteger overflow in CubeSize
    - debian/patches/CVE-2026-41254-pre1.patch: prevent allocating a big
      chunk of memory on corrupted LUT in src/cmslut.c.
    - debian/patches/CVE-2026-41254-1.patch: fix integer overflow in
      CubeSize() in src/cmslut.c.
    - debian/patches/CVE-2026-41254-2.patch: check for overflow in
      src/cmslut.c.
    - CVE-2026-41254

 -- Marc Deslauriers <marc.deslauriers@ubuntu.com>  Tue, 21 Apr 2026 08:42:50 -0400

lcms2 (2.14-2build1) noble; urgency=high

  * No change rebuild for 64-bit time_t and frame pointers.

 -- Julian Andres Klode <juliank@ubuntu.com>  Mon, 08 Apr 2024 18:01:07 +0200

lcms2 (2.14-2) unstable; urgency=medium

  * New patch: allow-to-read-portions-of-tag.diff.
    Thanks to s3v <c0llapsed@yahoo.it> (Closes: #1028664)
  * Update copyright information for plugins.
    Thanks to Florian Ernst <florian_ernst@gmx.net>
  * Bump standards version to 4.6.2, no changes needed

 -- Thomas Weber <tweber@debian.org>  Sun, 19 Feb 2023 22:32:28 +0100

lcms2 (2.14-1) unstable; urgency=medium

  [ Thomas Weber ]
  * New upstream version 2.14
    - Refresh patches
    - New patches:
      + debian/patches/fix-regression-for-CMYK-colours.patch
      + debian/patches/fix-memory-corruption-when-unregistering-plugins.diff
    - Update symbols file for new 2.14 upstream release
    - Update doc-base files for new 2.14 upstream version
  * debian/control: Drop versioned constraint on dpkg-dev

  [ Florian Ernst ]
  * debian/copyright:
    - update copyright years to reflect recent changes
    - utils/jpgicc/iccjpeg.* is licensed under IJG
    - drop optional License header
  * migrate from debian/compat to Build-Depends: debhelper-compat (= 13)
  * keep updated manpages as provided via upstream (but with minor cleanup)
  * debian/control: declare Rules-Requires-Root: no

 -- Thomas Weber <tweber@debian.org>  Thu, 05 Jan 2023 21:51:23 +0100

lcms2 (2.13.1-1) unstable; urgency=medium

  * New upstream version 2.13.1 (Closes: #1007752)
    - Refresh patches
    - Remove patch dont-write-uninitialized-memory-for-color-strings.patch
      - applied upstream
    - Update doc-base files for new 2.13 upstream version
    - Update symbols file for 2.13 release
  * Bump standards version to 4.6.1, no changes needed

 -- Thomas Weber <tweber@debian.org>  Fri, 22 Jul 2022 00:52:13 +0200

lcms2 (2.12~rc1-2) unstable; urgency=medium

  * Brown paperbag release: upload source only to the buildds.

 -- Thomas Weber <tweber@debian.org>  Wed, 13 Jan 2021 17:50:17 +0100

lcms2 (2.12~rc1-1) unstable; urgency=medium

  * New upstream version 2.12~rc1 (Closes: #972925)
  * Update copyright information
  * Bump standards version to 4.5.1, no changes needed
  * Bump debhelper compat level to 13
  * Switch to automatic generation of dbgsym package
  * Remove patch CVE-2018-16435.patch - applied upstream
  * Switch to format 4 of debian/watch

 -- Thomas Weber <tweber@debian.org>  Wed, 13 Jan 2021 03:47:09 +0100

lcms2 (2.9-4) unstable; urgency=medium

  [ Ondřej Nový ]
  * d/changelog: Remove trailing whitespaces
  * d/watch: Use https protocol

  [ Thomas Weber ]
  * Bump standards version to 4.4.0, no changes needed
  * dh_strip_nondeterminism should not normalize src.zip (Closes: #935177)

 -- Thomas Weber <tweber@debian.org>  Mon, 09 Sep 2019 22:40:46 +0200

# Older entries have been removed from this changelog.
# To read the complete changelog use `apt changelog liblcms2-2`.
