libcaca (0.99.beta19-2.2ubuntu4.2) jammy-security; urgency=medium

  * SECURITY UPDATE: overflow in canvas import functionality
    - debian/patches/CVE-2026-42046.patch: Prevent undefined behaviour in
      overflow check in caca/canvas.c.
    - CVE-2026-42046

 -- Marc Deslauriers <marc.deslauriers@ubuntu.com>  Sat, 23 May 2026 19:10:49 -0400

libcaca (0.99.beta19-2.2ubuntu4.1) jammy-security; urgency=medium

  * SECURITY UPDATE: divide by zero
    - debian/patches/CVE-2022-0856.patch: adds a check to handle images with
      either a width or height of zero in src/img2txt.c.
    - CVE-2022-0856

 -- Ian Constantin <ian.constantin@canonical.com>  Mon, 05 Jan 2026 12:51:45 +0200

libcaca (0.99.beta19-2.2ubuntu4) jammy; urgency=high

  * No change rebuild for ppc64el baseline bump.

 -- Julian Andres Klode <juliank@ubuntu.com>  Thu, 24 Mar 2022 13:10:51 +0100

libcaca (0.99.beta19-2.2ubuntu3) jammy; urgency=medium

  * SECURITY UPDATE: Heap buffer overflow
    - debian/patches/CVE-2021-30498-and-30499.patch: fix buffer overflows in
      TGA and troff exports in caca/codec/export.c.
    - CVE-2021-30498
    - CVE-2021-30499

 -- Leonidas Da Silva Barbosa <leo.barbosa@canonical.com>  Wed, 20 Oct 2021 09:25:41 -0300

libcaca (0.99.beta19-2.2ubuntu2) impish; urgency=medium

  * No-change rebuild to build packages with zstd compression.

 -- Matthias Klose <doko@ubuntu.com>  Thu, 07 Oct 2021 12:14:19 +0200

libcaca (0.99.beta19-2.2ubuntu1) hirsute; urgency=low

  * Merge from Debian unstable. Remaining changes:
    - Use the correct compiler for proposed autopkgtest cross-testing
      support.

 -- Gianfranco Costamagna <locutusofborg@debian.org>  Wed, 24 Mar 2021 15:07:23 +0100

libcaca (0.99.beta19-2.2) unstable; urgency=medium

  * Non-maintainer upload.
  * Illegal write memory access in caca_resize function (CVE-2021-3410)
    - canvas: fix an integer overflow in caca_resize().
    - Fix a problem in the caca_resize() overflow detection and add
      several unit tests
    (Closes: #983686)

 -- Salvatore Bonaccorso <carnil@debian.org>  Wed, 10 Mar 2021 14:59:27 +0100

libcaca (0.99.beta19-2.1ubuntu1) focal; urgency=medium

  * debian/tests/build:
    - Use the correct compiler for proposed autopkgtest cross-testing
      support.

 -- Sebastien Bacher <seb128@ubuntu.com>  Tue, 24 Mar 2020 16:38:08 +0100

libcaca (0.99.beta19-2.1build1) focal; urgency=medium

  * No-change rebuild for libgcc-s1 package name change.

 -- Matthias Klose <doko@ubuntu.com>  Sun, 22 Mar 2020 16:45:36 +0100

libcaca (0.99.beta19-2.1) unstable; urgency=medium

  * Non-maintainer upload.
  * Cherry-Pick fixes from upstream git repository:
    - CVE-2018-20545, CVE-2018-20546, CVE-2018-20547,CVE-2018-20548 and
      CVE-2018-20549 (Closes: #917807)

 -- Tobias Frost <tobi@debian.org>  Sat, 06 Apr 2019 22:18:41 +0200

# For older changelog entries, run 'apt-get changelog libcaca0'
