Change log for lcms2 package in Ubuntu

lcms2 (2.14-2build1) noble; urgency=high

  * No change rebuild for 64-bit time_t and frame pointers.

 -- Julian Andres Klode <email address hidden>  Mon, 08 Apr 2024 18:01:07 +0200

Available diffs

• diff from 2.14-2 (in Debian) to 2.14-2build1 (558 bytes)

lcms2 (2.14-2) unstable; urgency=medium

  * New patch: allow-to-read-portions-of-tag.diff.
    Thanks to s3v <email address hidden> (Closes: #1028664)
  * Update copyright information for plugins.
    Thanks to Florian Ernst <email address hidden>
  * Bump standards version to 4.6.2, no changes needed

 -- Thomas Weber <email address hidden>  Sun, 19 Feb 2023 22:32:28 +0100

Available diffs

• diff from 2.14-1 to 2.14-2 (1.8 KiB)
• diff from 2.14-1build1 (in Ubuntu) to 2.14-2 (1.9 KiB)

lcms2 (2.14-1build1) lunar; urgency=medium

  * Rebuild against latest tiff

 -- Jeremy Bicha <email address hidden>  Sat, 04 Feb 2023 07:27:34 -0500

Available diffs

• diff from 2.14-1 (in Debian) to 2.14-1build1 (296 bytes)

lcms2 (2.14-1) unstable; urgency=medium

  [ Thomas Weber ]
  * New upstream version 2.14
    - Refresh patches
    - New patches: 
      + debian/patches/fix-regression-for-CMYK-colours.patch
      + debian/patches/fix-memory-corruption-when-unregistering-plugins.diff
    - Update symbols file for new 2.14 upstream release
    - Update doc-base files for new 2.14 upstream version
  * debian/control: Drop versioned constraint on dpkg-dev

  [ Florian Ernst ]
  * debian/copyright: 
    - update copyright years to reflect recent changes
    - utils/jpgicc/iccjpeg.* is licensed under IJG
    - drop optional License header
  * migrate from debian/compat to Build-Depends: debhelper-compat (= 13)
  * keep updated manpages as provided via upstream (but with minor cleanup)
  * debian/control: declare Rules-Requires-Root: no

 -- Thomas Weber <email address hidden>  Thu, 05 Jan 2023 21:51:23 +0100

Available diffs

• diff from 2.13.1-1 to 2.14-1 (88.3 KiB)

lcms2 (2.13.1-1) unstable; urgency=medium

  * New upstream version 2.13.1 (Closes: #1007752)
    - Refresh patches
    - Remove patch dont-write-uninitialized-memory-for-color-strings.patch
      - applied upstream
    - Update doc-base files for new 2.13 upstream version
    - Update symbols file for 2.13 release
  * Bump standards version to 4.6.1, no changes needed

 -- Thomas Weber <email address hidden>  Fri, 22 Jul 2022 00:52:13 +0200

Available diffs

• diff from 2.12~rc1-2build2 (in ~ci-train-ppa-service/ubuntu/4813-deletedppa) to 2.13.1-1 (300.3 KiB)

lcms2 (2.12~rc1-2build2) jammy; urgency=high

  * No change rebuild for ppc64el baseline bump.

 -- Julian Andres Klode <email address hidden>  Thu, 24 Mar 2022 13:09:28 +0100

Available diffs

• diff from 2.12~rc1-2 (in Debian) to 2.12~rc1-2build2 (664 bytes)
• diff from 2.12~rc1-2build1 (in Ubuntu) to 2.12~rc1-2build2 (600 bytes)

lcms2 (2.12~rc1-2build1) impish; urgency=medium

  * No-change rebuild to build packages with zstd compression.

 -- Matthias Klose <email address hidden>  Thu, 07 Oct 2021 12:13:49 +0200

Available diffs

• diff from 2.12~rc1-2 (in Debian) to 2.12~rc1-2build1 (351 bytes)

lcms2 (2.12~rc1-2) unstable; urgency=medium

  * Brown paperbag release: upload source only to the buildds. 

 -- Thomas Weber <email address hidden>  Wed, 13 Jan 2021 17:50:17 +0100

Available diffs

• diff from 2.9-4 to 2.12~rc1-2 (203.3 KiB)
• diff from 2.12~rc1-1 to 2.12~rc1-2 (330 bytes)

lcms2 (2.12~rc1-1) unstable; urgency=medium

  * New upstream version 2.12~rc1 (Closes: #972925)
  * Update copyright information
  * Bump standards version to 4.5.1, no changes needed
  * Bump debhelper compat level to 13
  * Switch to automatic generation of dbgsym package
  * Remove patch CVE-2018-16435.patch - applied upstream
  * Switch to format 4 of debian/watch

 -- Thomas Weber <email address hidden>  Wed, 13 Jan 2021 03:47:09 +0100

lcms2 (2.9-4) unstable; urgency=medium

  [ Ondřej Nový ]
  * d/changelog: Remove trailing whitespaces
  * d/watch: Use https protocol

  [ Thomas Weber ]
  * Bump standards version to 4.4.0, no changes needed
  * dh_strip_nondeterminism should not normalize src.zip (Closes: #935177)

 -- Thomas Weber <email address hidden>  Mon, 09 Sep 2019 22:40:46 +0200

Available diffs

• diff from 2.9-3 to 2.9-4 (985 bytes)

lcms2 (2.2+git20110628-2ubuntu3.3) precise-security; urgency=medium

  * SECURITY UPDATE: Denial of service
    - debian/patches/CVE-2016-10165.patch: fix in src/cmstypes.c.
    - CVE-2016-10165
  * SECURITY UPDATE: Integer overflow
    - debian/patches/CVE-2018-16435.patch: fix in src/cmscgats.c.
    - CVE-2018-16435
  * Removing broken clean on debian/rules

 -- <email address hidden> (Leonidas S. Barbosa)  Wed, 19 Sep 2018 11:35:11 -0300

Available diffs

• diff from 2.2+git20110628-2ubuntu3.1 (in ~ubuntu-security/ubuntu/ppa) to 2.2+git20110628-2ubuntu3.3 (1.7 KiB)
• diff from 2.2+git20110628-2ubuntu3.2 to 2.2+git20110628-2ubuntu3.3 (469 bytes)

lcms2 (2.9-1ubuntu0.1) bionic-security; urgency=medium

  * SECURITY UPDATE: Integer overflow
    - debian/patches/CVE-2018-16435.patch: fix in src/cmscgats.c.
    - CVE-2018-16435

 -- <email address hidden> (Leonidas S. Barbosa)  Thu, 20 Sep 2018 03:51:52 -0300

Available diffs

• diff from 2.9-1 (in Debian) to 2.9-1ubuntu0.1 (1.3 KiB)

lcms2 (2.6-3ubuntu2.1) xenial-security; urgency=medium

  * SECURITY UPDATE: Denial of service
    - debian/patches/CVE-2016-10165.patch: fix in src/cmstypes.c.
    - CVE-2016-10165
  * SECURITY UPDATE: Integer overflow
    - debian/patches/CVE-2018-16435.patch: fix in src/cmscgats.c.
    - CVE-2018-16435

 -- <email address hidden> (Leonidas S. Barbosa)  Thu, 20 Sep 2018 03:43:39 -0300

Available diffs

• diff from 2.6-3ubuntu2 (in Ubuntu) to 2.6-3ubuntu2.1 (1.5 KiB)

lcms2 (2.5-0ubuntu4.2) trusty-security; urgency=medium

  * SECURITY UPDATE: Denial of service
    - debian/patches/CVE-2016-10165.patch: fix in src/cmstypes.c.
    - CVE-2016-10165
  * SECURITY UPDATE: Integer overflow
    - debian/patches/CVE-2018-16435.patch: fix in src/cmscgats.c.
    - CVE-2018-16435

 -- <email address hidden> (Leonidas S. Barbosa)  Wed, 19 Sep 2018 11:46:00 -0300

Available diffs

• diff from 2.5-0ubuntu4.1 to 2.5-0ubuntu4.2 (1.5 KiB)

lcms2 (2.9-3) unstable; urgency=medium

  * Fix integer overflow in AllocateDataSet() (CVE-2018-16435)
    Thanks to Salvatore Bonaccorso <email address hidden> and 
    Marti Maria <email address hidden>
    (Closes: #907983)

 -- Thomas Weber <email address hidden>  Wed, 05 Sep 2018 17:59:06 +0200

Available diffs

• diff from 2.9-2 to 2.9-3 (1.0 KiB)

lcms2 (2.9-2) unstable; urgency=medium

  * Switch Vcs links to salsa.debian.org
  * Add Build-Depends-Package header to symbols file (see #900819)
    Thanks to Andreas Henriksson <email address hidden>
  * Bump standards version to 4.1.4, no changes needed

 -- Thomas Weber <email address hidden>  Sat, 09 Jun 2018 22:33:22 +0200

Available diffs

• diff from 2.9-1 to 2.9-2 (741 bytes)

lcms2 (2.9-1) unstable; urgency=medium

  * New upstream version 2.9:
    - Drop patch fix-CVE-2016-10165 (applied upstream)
    - Drop patch lcms2-fix-strFrom16-byte-order.patch (applied upstream)
    - Update patch dont-write-uninitialized-memory-for-color-strings.patch
    - Update patch prepare-for-libtoolizing.patch
    - Update symbols file for 2.9 version.
      The 2.9 release no longer exports private symbols.
    - Update doc-base files for new 2.9 upstream version
  * Remove build-depends on dh-autoreconf.
    We depend on debhelper >= 10, so this is automatically enabled
    Thanks to lintian
  * Bump standards version from 3.9.8 to 4.1.2:
    - Use httpS in the "Format" field of debian/copyright. (policy 4.0.0)

 -- Thomas Weber <email address hidden>  Sun, 17 Dec 2017 15:52:01 +0100

Available diffs

• diff from 2.8-4 to 2.9-1 (77.8 KiB)

lcms2 (2.8-4) unstable; urgency=medium

  * New patch: debian/patches/fix-CVE-2016-10165.patch.
    Fix for CVE-2016-10165. (Closes: #852627)
    Thanks to Salvatore Bonaccorso <email address hidden> 

 -- Thomas Weber <email address hidden>  Thu, 26 Jan 2017 11:04:13 +0100

Available diffs

• diff from 2.7-1ubuntu1 (in Ubuntu) to 2.8-4 (124.7 KiB)

lcms2 (2.7-1ubuntu1) yakkety; urgency=low

  * Merge from Debian unstable (LP: #1572112).  Remaining changes:
    - debian/patches/byte-order.patch: Use endian.h to determine
      byte order in use.

Available diffs

• diff from 2.6-3ubuntu2 to 2.7-1ubuntu1 (202.9 KiB)

lcms2 (2.5-0ubuntu4.1) trusty-security; urgency=medium

  * SECURITY UPDATE: double free in DefaultICCintents()
    - debian/patches/CVE-2013-7455.patch: ensure that the variable Lut
      is freed only once.
    - CVE-2013-7455

 -- Steve Beattie <email address hidden>  Mon, 02 May 2016 11:54:40 -0700

Available diffs

• diff from 2.5-0ubuntu4 (in Ubuntu) to 2.5-0ubuntu4.1 (1.2 KiB)

lcms2 (2.6-3ubuntu2) vivid; urgency=medium

  * No change rebuild to get debug symbols on all architectures.
 -- Brian Murray <email address hidden>   Mon, 17 Nov 2014 10:27:54 -0800

Available diffs

• diff from 2.6-3ubuntu1 to 2.6-3ubuntu2 (332 bytes)

lcms2 (2.6-3ubuntu1) utopic; urgency=low

  * Merge with Debian, remaining change:
    - debian/patches/byte-order.patch: Use endian.h to determine byte order in
      use.

Available diffs

• diff from 2.6-1ubuntu1 to 2.6-3ubuntu1 (1.9 KiB)

lcms2 (2.6-1ubuntu1) utopic; urgency=medium

  * Rebase on Debian, remaining change:
    - debian/patches/byte-order.patch: Use endian.h to determine byte order in
      use.

Available diffs

• diff from 2.5-0ubuntu4 to 2.6-1ubuntu1 (117.9 KiB)

lcms2 (2.5-0ubuntu4) trusty; urgency=low

  * fix-floating-point-rounding-in-version-numbers.diff: Fix roundtripping of
    version header field; writing 2.30 in the version field would read as 2.29.
    Fixes the colord autopkgtests. Yay!
 -- Christopher James Halse Rogers <email address hidden>   Thu, 16 Jan 2014 16:45:47 +1100

Available diffs

• diff from 2.5-0ubuntu3 to 2.5-0ubuntu4 (1.4 KiB)

lcms2 (2.5-0ubuntu3) trusty; urgency=low

  * Remove bizarre and unnecessary clean target and use dh_autotools_dev.
  * byte-order.patch: Replace arch-specific tests with __BYTE_ORDER test.
 -- Adam Conrad <email address hidden>   Wed, 11 Dec 2013 04:13:40 -0700

Available diffs

• diff from 2.5-0ubuntu2 to 2.5-0ubuntu3 (1.2 KiB)

lcms2 (2.5-0ubuntu2) trusty; urgency=low

  * powerpc64le.patch: patch aclocal.m4 for ppc64el and regen configure.
 -- Adam Conrad <email address hidden>   Wed, 11 Dec 2013 03:36:06 -0700

Available diffs

• diff from 2.5-0ubuntu1 to 2.5-0ubuntu2 (735 bytes)

lcms2 (2.5-0ubuntu1) saucy; urgency=low

  * New upstream version (fixes various crashes that could be used by
    attackers to crash (NULL ptr deref) programs using lcms2.
  * Update config.{gues,sub} for Aarch64.
  * Update symbols file.
 -- Matthias Klose <email address hidden>   Tue, 23 Jul 2013 21:39:38 +0200

Available diffs

• diff from 2.4-0ubuntu3 to 2.5-0ubuntu1 (171.1 KiB)

lcms2 (2.2+git20110628-2ubuntu3.1) precise-security; urgency=low

  * SECURITY UPDATE: incorporate IcedTea fixes for lcms (LP: #1196517)
    - debian/patches/ojdk-8007925+8007926.patch: Improve
      cmsStageAllocLabV2ToV4curves. Improve cmsPipelineDup.
    - debian/patches/ojdk-8007927.patch: Improve
      cmsAllocProfileSequenceDescription.
    - debian/patches/ojdk-8007929.patch: Improve CurvesAlloc.
    - debian/patches/ojdk-8009654.patch: Improve stability of cmsnamed.
 -- Jamie Strandboge <email address hidden>   Mon, 01 Jul 2013 11:50:56 -0500

Available diffs

• diff from 2.2+git20110628-2ubuntu3 (in Ubuntu) to 2.2+git20110628-2ubuntu3.1 (2.1 KiB)

lcms2 (2.2+git20110628-2ubuntu4.1) quantal-security; urgency=low

  * SECURITY UPDATE: incorporate IcedTea fixes for lcms (LP: #1196517)
    - debian/patches/ojdk-8007925+8007926.patch: Improve
      cmsStageAllocLabV2ToV4curves. Improve cmsPipelineDup.
    - debian/patches/ojdk-8007927.patch: Improve
      cmsAllocProfileSequenceDescription.
    - debian/patches/ojdk-8007929.patch: Improve CurvesAlloc.
    - debian/patches/ojdk-8009654.patch: Improve stability of cmsnamed.
 -- Jamie Strandboge <email address hidden>   Mon, 01 Jul 2013 11:14:57 -0500

Available diffs

• diff from 2.2+git20110628-2ubuntu4 (in Ubuntu) to 2.2+git20110628-2ubuntu4.1 (1.9 KiB)

lcms2 (2.4-0ubuntu3.1) raring-security; urgency=low

  * SECURITY UPDATE: incorporate IcedTea fixes for lcms (LP: #1196517)
    - debian/patches/ojdk-8007925+8007926.patch: Improve
      cmsStageAllocLabV2ToV4curves. Improve cmsPipelineDup.
    - debian/patches/ojdk-8007927.patch: Improve
      cmsAllocProfileSequenceDescription.
    - debian/patches/ojdk-8007929.patch: Improve CurvesAlloc.
    - debian/patches/ojdk-8009654.patch: Improve stability of cmsnamed.
 -- Jamie Strandboge <email address hidden>   Mon, 01 Jul 2013 10:42:03 -0500

Available diffs

• diff from 2.4-0ubuntu3 (in Ubuntu) to 2.4-0ubuntu3.1 (1.8 KiB)

lcms2 (2.4-0ubuntu3) raring; urgency=low

  * Drop fix-threading-issue-in-plugin-registration.patch. This was added for
    GhostScript 9.07, but gs 9.07 segfaults with only this patch; they need
    more patches from their lcms2 fork. It seems sensible at this point to wait
    until they've upstreamed their fork, rather than trying to pick bits out of
    it or adopt the fork wholesale.
 -- Christopher James Halse Rogers <email address hidden>   Fri, 15 Mar 2013 18:50:41 +1100

Available diffs

• diff from 2.4-0ubuntu2 to 2.4-0ubuntu3 (3.4 KiB)

lcms2 (2.4-0ubuntu2) raring; urgency=low

  * debian/patches/fix-threading-issue-in-plugin-registration.patch:
    - Provide a thread-safe way for plugins to register; needed for new
      ghostscript 9.07 (LP: #1126427)
 -- Christopher James Halse Rogers <email address hidden>   Wed, 13 Mar 2013 12:13:21 +1100

Available diffs

• diff from 2.4-0ubuntu1 to 2.4-0ubuntu2 (3.3 KiB)

lcms2 (2.4-0ubuntu1) raring; urgency=low

  * New upstream release
    - Update debian/liblcms2-2.symbols
      - Add new symbols for 2.4
      - Drop lost symbol cmsGetStockOutputFormatter after verifying it is not
        used in any packaged reverse build-depends
      - Corrected previous symbol entries to not inclue package revision
 -- Scott Kitterman <email address hidden>   Thu, 29 Nov 2012 16:24:47 -0500

Available diffs

• diff from 2.2+git20110628-2.2ubuntu1 to 2.4-0ubuntu1 (254.3 KiB)

lcms2 (2.2+git20110628-2.2ubuntu1) raring; urgency=low

  * Merge from Debian unstable.  Remaining changes:
    - debian/control: Use unversioned libtiff-dev instead of libtiff4-dev
    - debian/liblcms2-2.symbols: Add symbols file for the shared library

Available diffs

• diff from 2.2+git20110628-2ubuntu4 to 2.2+git20110628-2.2ubuntu1 (102.7 KiB)

lcms2 (2.2+git20110628-2ubuntu4) quantal; urgency=low

  * debian/control:
    - Use unversioned libtiff-dev instead of libtiff4-dev
 -- Michael Terry <email address hidden>   Tue, 17 Jul 2012 11:49:39 -0400

Available diffs

• diff from 2.2+git20110628-2ubuntu3 to 2.2+git20110628-2ubuntu4 (681 bytes)

lcms2 (2.2+git20110628-2ubuntu3) precise; urgency=low

  * Rebuild for libjpeg8.
 -- Colin Watson <email address hidden>   Tue, 18 Oct 2011 17:22:44 +0100

Available diffs

• diff from 2.2+git20110628-2ubuntu2 to 2.2+git20110628-2ubuntu3 (373 bytes)

lcms2 (2.2+git20110628-2ubuntu2) oneiric; urgency=low

  * Convert library packages to multiarch. LP: #836004.
 -- Matthias Klose <email address hidden>   Sun, 28 Aug 2011 13:40:38 +0200

Available diffs

• diff from 2.2+git20110628-2ubuntu1 to 2.2+git20110628-2ubuntu2 (3.7 KiB)

lcms2 (2.2+git20110628-2ubuntu1) oneiric; urgency=low

  * debian/liblcms2-2.symbols: Added symbols file for the shared library,
    generated with "dpkg-gensymbols -pliblcms2-2".
 -- Till Kamppeter <email address hidden>   Tue, 09 Aug 2011 17:05:31 +0200

Available diffs

• diff from 2.2+git20110628-2 (in Debian) to 2.2+git20110628-2ubuntu1 (5.8 KiB)

lcms2 (2.2+git20110628-2) unstable; urgency=low
  * debian/control:    - Updated libjpeg dependency for the transition.    - Updated package descriptions for better search results. -- Oleksandr Moskalenko <email address hidden>  Mon, 18 Jul 2011 23:39:39 -0500

lcms2 (2.2+git20110628-1) unstable; urgency=low

  * Upstream git update (Closes: #631598).

Available diffs

• diff from 2.2-1 to 2.2+git20110628-1 (192.4 KiB)

lcms2 (2.2-1) unstable; urgency=low

  * New upstream release.
  * debian/control: Updated standards version to 3.9.2.
 -- Ubuntu Archive Auto-Sync <email address hidden>   Mon,  13 Jun 2011 09:07:48 +0000

Available diffs

• diff from 2.1.dfsg-1 to 2.2-1 (568.4 KiB)

lcms2 (2.1.dfsg-1) unstable; urgency=low

  * Remove non-free bits identified by the FTP masters for reupload to NEW.
  * debian/rules: change clean stanza to run dh_autoreconf to update configure
    and Makefule.in.
  * debian/patches/Makefile.am: remove testbed dir from the build.
  * debian/patches/configure.ac.patch: 
    - use add_ldconfig to correctly link the math library to prevent a FTBFS.
    - remove testbed dir from the build.