djvulibre (3.5.30-1) unstable; urgency=medium

  * New upstream version
  * Bump policy version
  * Version-5 debian/watch uscan support file

 -- Barak A. Pearlmutter <bap@debian.org>  Tue, 12 May 2026 08:40:59 +0100

djvulibre (3.5.29-1) unstable; urgency=medium

  * Most patches merged upstream
  * Multiarch hinter suggests marking djvulibre-desktop as Multi-Arch: foreign
  * Bump policy version
  * New upstream version
    - includes 0008-Fix-potential-buffer-overflow-in-MMRDecoder.patch
  * Track upstream bug fixes
  * Remove unnecssary rules-requires-root:no line

 -- Barak A. Pearlmutter <bap@debian.org>  Thu, 25 Sep 2025 15:42:58 +0100

djvulibre (3.5.28-2.1) unstable; urgency=high

  * Non-maintainer upload.
  * Fix potential buffer overflow in MMRDecoder (CVE-2025-53367)
    (Closes: #1108729)

 -- Salvatore Bonaccorso <carnil@debian.org>  Fri, 04 Jul 2025 07:38:58 +0200

djvulibre (3.5.28-2) unstable; urgency=high

  * bump policy version
  * Include Fedora 3.5.27 patches, foward ported, taken from djvulibre.spec in
    https://src.fedoraproject.org/rpms/djvulibre.git
    - Patch0: djvulibre-3.5.22-cdefs.patch                    (forward ported)
    - #Patch1: djvulibre-3.5.25.3-cflags.patch              (disabled in Fedora)
    - Patch2: djvulibre-3.5.27-buffer-overflow.patch        (UPSTREAMED)
    - Patch3: djvulibre-3.5.27-infinite-loop.patch          (UPSTREAMED)
    - Patch4: djvulibre-3.5.27-stack-overflow.patch         (UPSTREAMED)
    - Patch5: djvulibre-3.5.27-zero-bytes-check.patch       (UPSTREAMED)
    - Patch6: djvulibre-3.5.27-export-file.patch              (forward ported)
    - Patch7: djvulibre-3.5.27-null-dereference.patch       (UPSTREAMED)
    - Patch8: djvulibre-3.5.27-check-image-size.patch         (forward ported)
    - Patch9: djvulibre-3.5.27-integer-overflow.patch         (forward ported)
    - Patch10: djvulibre-3.5.27-check-input-pool.patch        (forward ported)
    - Patch11: djvulibre-3.5.27-djvuport-stack-overflow.patch (forward ported)
    - Patch12: djvulibre-3.5.27-unsigned-short-overflow.patch (forward ported)
    These address a number of crashes and security issues, including
    CVE-2021-3500 (closes: #988215)

 -- Barak A. Pearlmutter <bap@debian.org>  Mon, 10 May 2021 18:56:59 +0100

# Older entries have been removed from this changelog.
# To read the complete changelog use `apt changelog djvulibre-desktop`.
