libxpm (1:3.5.17-1ubuntu0.26.04.1) resolute-security; urgency=medium

  * SECURITY UPDATE: OOB read via crafted XPM file
    - debian/patches/CVE-2026-4367.patch: Fix Out-of-bounds read in
      xpmNextWord() in src/data.c, src/parse.c.
    - CVE-2026-4367

 -- Marc Deslauriers <marc.deslauriers@ubuntu.com>  Fri, 17 Jul 2026 13:35:43 -0400

libxpm (1:3.5.17-1build3) resolute; urgency=medium

  * No-change mass rebuild for Ubuntu 26.04 (LP: #2132257)

 -- Sebastien Bacher <seb128@ubuntu.com>  Mon, 01 Dec 2025 13:52:49 +0100

libxpm (1:3.5.17-1build2) noble; urgency=medium

  * No-change rebuild for CVE-2024-3094

 -- Steve Langasek <steve.langasek@ubuntu.com>  Sun, 31 Mar 2024 08:02:41 +0000

libxpm (1:3.5.17-1build1) noble; urgency=medium

  * No-change rebuild against libxt6t64

 -- Steve Langasek <steve.langasek@ubuntu.com>  Sat, 09 Mar 2024 00:51:05 +0000

libxpm (1:3.5.17-1) unstable; urgency=high

  [ Timo Aaltonen ]
  * New upstream release.
    - CVE-2023-43788: out of bounds read in XpmCreateXpmImageFromBuffer()
    - CVE-2023-43789: out of bounds read on XPM with corrupted colormap
  * control: Migrate to x11proto-dev.
  * Update signing-key.
  * patches: All patches upstream, drop them.

  [ Debian Janitor ]
  * Remove constraints unnecessary since buster:
    + Build-Depends: Drop versioned constraint on libx11-dev, libxext-dev,
      libxt-dev and xutils-dev.

  [ Julien Cristau ]
  * Update Vcs-* control fields.
  * Add ncompress build-dependency for the test suite.
  * Install man pages in libxpm-dev.

 -- Julien Cristau <jcristau@debian.org>  Thu, 05 Oct 2023 14:24:36 +0200

# Older entries have been removed from this changelog.
# To read the complete changelog use `apt changelog libxpm4`.
