lcms2 (2.17-1ubuntu0.2) resolute-security; urgency=medium

  * SECURITY UPDATE: integer overflow in ParseCube
    - debian/patches/CVE-2026-42798.patch: Fix for ParseCube integer overflow in
      LUT allocation in src/cmscgats.c.
    - CVE-2026-42798

 -- Marc Deslauriers <marc.deslauriers@ubuntu.com>  Wed, 06 May 2026 10:50:34 -0400

lcms2 (2.17-1ubuntu0.1) resolute-security; urgency=medium

  * SECURITY UPDATE: nteger overflow in CubeSize
    - debian/patches/CVE-2026-41254-1.patch: fix integer overflow in
      CubeSize() in src/cmslut.c.
    - debian/patches/CVE-2026-41254-2.patch: check for overflow in
      src/cmslut.c.
    - CVE-2026-41254

 -- Marc Deslauriers <marc.deslauriers@ubuntu.com>  Tue, 21 Apr 2026 08:18:52 -0400

lcms2 (2.17-1) unstable; urgency=medium

  [ Florian Ernst ]
  * add autopkgtest based on upstream utils/samples

  [ Thomas Weber ]
  * New upstream version 2.17
    - Removed patches (applied upstream):
      - manpages-cleanup.patch
      - keep-src-tree-clean.patch
    - Refresh patches
    - Update doc-base files for new 2.17 upstream version
  * Bump standards version to 4.7.2, no changes needed
  * Update debian/watch file to version 5

 -- Thomas Weber <tweber@debian.org>  Wed, 12 Nov 2025 23:08:53 +0100

lcms2 (2.16-2) unstable; urgency=medium

  [ Florian Ernst ]
  * Don't run the tests in parallel and grant them more time each
    This allows tests to pass on slower architures
  * Add metadata to debian/patches/manpages-cleanup.patch

  [ Thomas Weber ]
  * Upload to unstable (Closes: #1082514)
  * Bump standards version to 4.7.0, no changes needed

 -- Thomas Weber <tweber@debian.org>  Sun, 13 Oct 2024 13:49:12 +0200

lcms2 (2.16-1) experimental; urgency=medium

  * New upstream version 2.16
    - Update symbols file for 2.16 release
    - Update doc-base files for new 2.16 upstream version
    - Remove patches (applied upstream):
      - allow-to-read-portions-of-tag.diff
      - fix-memory-corruption-when-unregistering-plugins.diff
      - fix-regression-for-CMYK-colours.patch
    - New patch: unbreak-API-compatibility.patch:
      The patch reintroduces cmsGetToneCurveParams(), which was removed from
      the public API without bumping the SONAME.
    - Switch to Meson build system
  * Build GPL3 plugins "threaded" and "fastfloat" (Closes: #1055502)
  * Build and install static library files (Closes: #1038118)
  * Run tests in the build directory and keep source directory clean
    (Closes: #1045980)

 -- Thomas Weber <tweber@debian.org>  Thu, 28 Dec 2023 18:53:33 +0100

# Older entries have been removed from this changelog.
# To read the complete changelog use `apt changelog liblcms2-2`.
