lcms2 (2.19.1-1) unstable; urgency=medium

  * New upstream version 2.19.1
    - CVE-2026-41254: integer overflow in CubeSize() (Closes: #1134335)
    - CVE-2026-42798: integer overflow in ParseCube() (Closes: #1135320)
  * Refresh patches
  * Remove patches (applied upstream):
    - 0001-Fix-integer-overflow-in-CubeSize.patch
    - 0002-check-for-overflow.patch
  * Update doc-base files for new 2.19 upstream version
  * Bump standards version to 4.7.4, no changes needed
  * Update symbols file
  * Move from pkg-config to pkgconf in the testsuite.
    Thanks to Lintian
  * Acknowledge NMU
    Thanks to Adrian Bunk <bunk@debian.org>

 -- Thomas Weber <tweber@debian.org>  Thu, 07 May 2026 23:33:40 +0200

lcms2 (2.17-1.1) unstable; urgency=medium

  * Non-maintainer upload.
  * CVE-2026-41254: integer overflow in CubeSize() (Closes: #1134335)

 -- Adrian Bunk <bunk@debian.org>  Wed, 29 Apr 2026 15:50:16 +0300

lcms2 (2.17-1) unstable; urgency=medium

  [ Florian Ernst ]
  * add autopkgtest based on upstream utils/samples

  [ Thomas Weber ]
  * New upstream version 2.17
    - Removed patches (applied upstream):
      - manpages-cleanup.patch
      - keep-src-tree-clean.patch
    - Refresh patches
    - Update doc-base files for new 2.17 upstream version
  * Bump standards version to 4.7.2, no changes needed
  * Update debian/watch file to version 5

 -- Thomas Weber <tweber@debian.org>  Wed, 12 Nov 2025 23:08:53 +0100

lcms2 (2.16-2) unstable; urgency=medium

  [ Florian Ernst ]
  * Don't run the tests in parallel and grant them more time each
    This allows tests to pass on slower architures
  * Add metadata to debian/patches/manpages-cleanup.patch

  [ Thomas Weber ]
  * Upload to unstable (Closes: #1082514)
  * Bump standards version to 4.7.0, no changes needed

 -- Thomas Weber <tweber@debian.org>  Sun, 13 Oct 2024 13:49:12 +0200

lcms2 (2.16-1) experimental; urgency=medium

  * New upstream version 2.16
    - Update symbols file for 2.16 release
    - Update doc-base files for new 2.16 upstream version
    - Remove patches (applied upstream):
      - allow-to-read-portions-of-tag.diff
      - fix-memory-corruption-when-unregistering-plugins.diff
      - fix-regression-for-CMYK-colours.patch
    - New patch: unbreak-API-compatibility.patch:
      The patch reintroduces cmsGetToneCurveParams(), which was removed from
      the public API without bumping the SONAME.
    - Switch to Meson build system
  * Build GPL3 plugins "threaded" and "fastfloat" (Closes: #1055502)
  * Build and install static library files (Closes: #1038118)
  * Run tests in the build directory and keep source directory clean
    (Closes: #1045980)

 -- Thomas Weber <tweber@debian.org>  Thu, 28 Dec 2023 18:53:33 +0100

# Older entries have been removed from this changelog.
# To read the complete changelog use `apt changelog liblcms2-2`.
