jpeg-xl (0.7.0-10.2ubuntu6.1) noble-security; urgency=medium

  * SECURITY UPDATE: Out-of-bounds read causes segmentation fault
    - debian/patches/CVE-2023-0645.patch: Add additional checks to
    lib/jxl/exif.h.
    - CVE-2023-0645
  * SECURITY UPDATE: Integer underflow causes denial-of-service
    - debian/patches/CVE-2023-35790.patch: Fix integer underflow bug
    in lib/jxl/dec_patch_dictionary.cc.
    - CVE-2023-35790
  * SECURITY UPDATE: Out-of-bounds write
    - debian/patches/CVE-2024-11403.patch: Fix the Huffman lookup table
    size in lib/jxl/jpeg/enc_jpeg_huffman_decode.h.
    - CVE-2024-11403
  * SECURITY UPDATE: Stack buffer overflow
    - debian/patches/CVE-2024-11498.patch: Check height limit of trees in
    lib/jxl/modular/encoding/dec_ma.cc.
    - CVE-2024-11498

 -- Edwin Jiang <edwin.jiang@canonical.com>  Mon, 07 Jul 2025 19:45:28 +0000

jpeg-xl (0.7.0-10.2ubuntu6) noble; urgency=medium

  * No-change rebuild against libhwy1t64

 -- Steve Langasek <steve.langasek@ubuntu.com>  Fri, 05 Apr 2024 23:51:02 +0000

jpeg-xl (0.7.0-10.2ubuntu5) noble; urgency=medium

  * No-change rebuild for CVE-2024-3094

 -- Steve Langasek <steve.langasek@ubuntu.com>  Sun, 31 Mar 2024 07:40:32 +0000

jpeg-xl (0.7.0-10.2ubuntu4) noble; urgency=high

  * No change rebuild against libtcmalloc-minimal4t64.

 -- Julian Andres Klode <juliank@ubuntu.com>  Sat, 23 Mar 2024 10:09:46 +0100

jpeg-xl (0.7.0-10.2ubuntu3) noble; urgency=medium

  * No-change rebuild against libhwy1t64.

 -- Michael Hudson-Doyle <michael.hudson@ubuntu.com>  Tue, 12 Mar 2024 10:58:33 +1300

jpeg-xl (0.7.0-10.2ubuntu2) noble; urgency=medium

  * No-change rebuild against libpng16-16t64

 -- Steve Langasek <steve.langasek@ubuntu.com>  Thu, 29 Feb 2024 06:59:01 +0000

jpeg-xl (0.7.0-10.2ubuntu1) noble; urgency=low

  * Merge from Debian unstable. Remaining changes:
    - Disable tcmalloc on i386 since google-perftools isn't available there.
      See bug 2011582

 -- Gianfranco Costamagna <locutusofborg@debian.org>  Sat, 28 Oct 2023 15:53:21 +0200

jpeg-xl (0.7.0-10.2) unstable; urgency=medium

  * Non-maintainer upload.
  
  [ Boyuan Yang ]
  * debian/rules: Temporarily enable CXXFLAGS -fexcess-precision=fast
    to avoid test failure for i386, s390x. Patch suggested by Adrian Bunk.
    (See #1053641)
  * debian/patches/:
    + 0009-fast_dct-inl.h-Include-std-headers-to-solve-missing-.patch:
      Add missing headers to avoid FTBFS on arm64 for std::round().

 -- Boyuan Yang <byang@debian.org>  Sat, 07 Oct 2023 20:36:24 -0400

jpeg-xl (0.7.0-10.1) unstable; urgency=medium

  * Non-maintainer upload.

  [ Boyuan Yang ]
  * debian/patches/:
    + 0007-tools-CMakeLists.txt-Fix-compatibility-with-static-l.patch:
      Fix compatibility with libwebp 1.3.x. (Closes: #1052486)
    * 0008-Fix-conformance-test.patch: Fix unit test that was previously
      skipped but now failing. (Closes: #1051560)
  * debian/control: Require libwebp-dev (>= 1.3) due to patch 0007.

 -- Boyuan Yang <byang@debian.org>  Sat, 23 Sep 2023 12:52:43 -0400

jpeg-xl (0.7.0-10ubuntu2) lunar; urgency=medium

  * Disable tcmalloc on i386 since google-perftools isn't available there.
    See bug 2011582

 -- Jeremy Bicha <jbicha@ubuntu.com>  Tue, 14 Mar 2023 09:29:29 -0400

# For older changelog entries, run 'apt-get changelog libjxl0.7'
