[Bug 1572112] Re: Sync maintenance release lcms2 2.7-1 (main) from Debian testing (main)

[Launchpad Bug Tracker]

This bug was fixed in the package lcms2 - 2.7-1ubuntu1

---------------
lcms2 (2.7-1ubuntu1) yakkety; urgency=low

  * Merge from Debian unstable (LP: #1572112).  Remaining changes:
    - debian/patches/byte-order.patch: Use endian.h to determine
      byte order in use.

lcms2 (2.7-1) unstable; urgency=medium

  * Imported Upstream version 2.7 (Closes: 819718)
  * No longer ship own copy of documentation source files
  * Removed patches (applied upstream)
    + update-manpages.patch
    + sanity-check-profiles-CVE-2014-0459.patch
    + endianness-verification-fix-powerpc.patch
  * Move to automatic dbgsym packages
  * Use secure URLs for Version Control System repository
  * Bump Standards version to 3.9.7, no changes needed
  * New patch: dont-write-uninitialized-memory-for-color-strings.patch
    Thanks to Jérémy Bobbio <lunar at debian.org> (Closes: 815248)
  * Update maintainers field (Closes: 820138)

 -- Michael Terry <mterry at ubuntu.com>  Wed, 11 May 2016 14:04:29 -0400

** Changed in: lcms2 (Ubuntu)
       Status: New => Fix Released

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2014-0459

-- 
You received this bug notification because you are a member of Ubuntu
Sponsors Team, which is subscribed to the bug report.
https://bugs.launchpad.net/bugs/1572112

Title:
  Sync maintenance release lcms2 2.7-1 (main) from Debian testing (main)

Status in lcms2 package in Ubuntu:
  Fix Released

Bug description:
  Please Merge lcms2 2.7-1 (main) from Debian unstable (main)

  Explanation of the Ubuntu delta:
    * No change rebuild to get debug symbols on all architectures.
    * Merge with Debian, remaining change:
      - debian/patches/byte-order.patch: Use endian.h to determine byte order in use.
  --------------------------------------------------------

  https://github.com/mm2/Little-CMS/blob/master/ChangeLog

  Fixed a possible segmentation fault in a non-happy path
  Fixed a macro clash on SNONE.
  Added a safety check on named color lists
  Added a function to retrieve the iohandler of a given profile object
  Remove unused vcproj files
  Some maintenance fixes
  utils/jpgicc/iccjpeg.c: Fix check if unsigned variable 'total_length'… …
  Add missing comma in CGATS parser
  Remove dead code.
  Move unused var suppresor before the `return` statements.
  Added a flag to clip negative values in unbounded transforms (only gray, rgb, cmyk)
  Added a global optimization that merges consecutive matrices in pipelines. Fixes loss of precision in some transforms
  New project for mac
  Added license for iccjpeg.c
  Added a project for VS2013
  Fixed wrong handling of extra channels in some formatters.
  Added an option in transicc for working in bounded mode
  Added a version retrieval function
  ------------------------------------------------------------

  Changelog entries since current xenial version 2.6-3ubuntu2:

  lcms2 (2.7-1) unstable; urgency=medium

    * Imported Upstream version 2.7 (Closes: 819718)
    * No longer ship own copy of documentation source files
    * Removed patches (applied upstream)
      + update-manpages.patch
      + sanity-check-profiles-CVE-2014-0459.patch
      + endianness-verification-fix-powerpc.patch
    * Move to automatic dbgsym packages
    * Use secure URLs for Version Control System repository
    * Bump Standards version to 3.9.7, no changes needed
    * New patch: dont-write-uninitialized-memory-for-color-strings.patch
      Thanks to Jérémy Bobbio <lunar at debian.org> (Closes: 815248)
    * Update maintainers field (Closes: 820138)

   -- Thomas Weber <tweber at debian.org>  Mon, 18 Apr 2016 15:53:10 +0200

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/lcms2/+bug/1572112/+subscriptions