openjpeg2 (2.5.3-2.1~deb13u1) trixie; urgency=medium

  * Non-maintainer upload.
  * Rebuild for trixie.

 -- Adrian Bunk <bunk@debian.org>  Sun, 17 Aug 2025 18:30:07 +0300

openjpeg2 (2.5.3-2.1) unstable; urgency=medium

  * Non-maintainer upload.
  * CVE-2025-54874: Out-of-bounds write in opj_jp2_read_header()
    (Closes: #1110443)

 -- Adrian Bunk <bunk@debian.org>  Sat, 09 Aug 2025 18:19:52 +0300

openjpeg2 (2.5.3-2) unstable; urgency=medium

  * Team upload.
  * Drop libopenjpip-server to make libfcgi a non-key pkg, see: #1092774.

 -- Bastian Germann <bage@debian.org>  Mon, 10 Mar 2025 08:22:54 +0100

openjpeg2 (2.5.3-1) unstable; urgency=medium

  * Team upload.
  * No-change rebuild for unstable.

 -- Santiago Ruano Rincón <santiagorr@riseup.net>  Fri, 31 Jan 2025 15:25:25 -0300

openjpeg2 (2.5.3-1~exp2) experimental; urgency=medium

  * Team upload.
  * Move doxygen from Build-Dep to Build-Depends-Indep
  * Override dh_missing to make it list the missing files

 -- Santiago Ruano Rincón <santiagorr@riseup.net>  Tue, 28 Jan 2025 16:53:29 -0300

openjpeg2 (2.5.3-1~exp1) experimental; urgency=medium

  * Team upload.

  [ Andreas Tille ]
  * New upstream version
    Closes: #1089596
  * Standards-Version: 4.7.0 (routine-update)
  * debhelper-compat 13 (routine-update)
  * d/rules: Do not parse d/changelog
  * Do not parse d/changelog (routine-update)
  * Rules-Requires-Root: no (routine-update)
  * watch file standard 4 (routine-update)
  * Solve openjpeg / apache build-dep loop
    Closes: #1055436

  [ Santiago Ruano Rincón ]
  * Add doxygen as Build-Dep
  * Install doc related files in openjpeg-doc
  * Update d/copyright

 -- Santiago Ruano Rincón <santiagorr@riseup.net>  Mon, 27 Jan 2025 15:05:10 -0300

openjpeg2 (2.5.0-2) unstable; urgency=medium

  * Team upload.
  * Fix broken symlink, actually install jar. Closes: #1036584

 -- Andreas Metzler <ametzler@debian.org>  Fri, 26 May 2023 12:16:24 +0200

openjpeg2 (2.5.0-1) unstable; urgency=medium

  * New upstream version 2.5.0
  * d/control: Upstream has removed JP3D support
  * d/patches: Refresh patches (removed those applied upstream)
  * d/rules: Update rules to 2.5 location
  * d/control: Update Std-Vers to 4.6.1 no changes needed

 -- Mathieu Malaterre <malat@debian.org>  Mon, 20 Jun 2022 16:05:24 +0200

openjpeg2 (2.4.0-6) unstable; urgency=medium

  * d/copyright: Remove lintian error duplicate-globbing-patterns
  * d/rules: Do not install *.so symlinks for jp3d/jpip. Closes: #1003807

 -- Mathieu Malaterre <malat@debian.org>  Mon, 17 Jan 2022 08:07:17 +0100

openjpeg2 (2.4.0-5) unstable; urgency=medium

  * d/patches: Make sure to always install manpages
  * d/control: Incoporate suggestion from Multiarch hinter

 -- Mathieu Malaterre <malat@debian.org>  Fri, 14 Jan 2022 16:18:56 +0100

openjpeg2 (2.4.0-4) unstable; urgency=medium

  * d/patches: Fix integer overflow in num_images. Closes: #987276
  * d/control: Bump Std-Vers to 4.6.0 no changes needed
  * d/control: Add openjpeg-doc package for install HTML documentation

 -- Mathieu Malaterre <malat@debian.org>  Fri, 14 Jan 2022 10:04:50 +0100

openjpeg2 (2.4.0-3) unstable; urgency=medium

  [ Sebastien Bacher ]
  * d/rules: exclude the correct binary on Ubuntu/i386

  [ Debian Janitor ]
  * Use secure copyright file specification URI.
  * Use secure URI in Homepage field.
  * Bump debhelper from deprecated 9 to 12. + debian/rules: Rely on default use of dh_missing rather than using dh_install --list-missing.
  * Set debhelper-compat version in Build-Depends.
  * Set upstream metadata fields: Bug-Database, Bug-Submit, Repository, Repository-Browse.
  * Fix field name typo in debian/copyright (Comments => Comment).
  * Remove listed license files (LICENSE) from copyright.
  * Drop unnecessary dh arguments: --parallel
  * Remove unnecessary get-orig-source-target.

 -- Mathieu Malaterre <malat@debian.org>  Tue, 09 Feb 2021 17:10:52 +0100

openjpeg2 (2.4.0-2) unstable; urgency=medium

  [ Mathieu Malaterre ]
  * d/patches: Properly fix opj_free vs free usage
  * d/patches: Fix compilation issue for the viewer
  * d/control: Update Std-Vers to 4.5.1 no changes needed
  * d/control: Run wrap-and-sort for cleanup

  [ Steve Langasek ]
  * d/rules: omit libopenjpip-server on Ubuntu/i386. Closes: #948377

  [ Tom Hughes ]
  * d/rules: Add static library to libopenjp2-7-dev. Closes: #962363

 -- Mathieu Malaterre <malat@debian.org>  Mon, 08 Feb 2021 08:32:32 +0100

openjpeg2 (2.4.0-1) unstable; urgency=medium

  * New upstream version 2.4.0
  * d/patches: Refresh patch for 2.4.0 release
  * d/patches: Prevent a compilation failure about missing opj_free symbol
  * d/symbols: Add new 2.4.0 symbol
  * d/rules: Update build for 2.4.0 release

 -- Mathieu Malaterre <malat@debian.org>  Wed, 27 Jan 2021 15:30:45 +0100

openjpeg2 (2.3.1-1) unstable; urgency=medium

  * New upstream release, addressing following security issues:
    - CVE-2018-20847 (Closes: #931294)
    - CVE-2018-21010 (Closes: #939553)
    - CVE-2018-5727 (Closes: #888532)
  * Remove following patches, applied upstream:
    - CVE-2017-17480.patch
    - CVE-2018-14423.patch
    - CVE-2018-18088.patch
    - CVE-2018-5785.patch
    - CVE-2018-6616.patch
  * Remove debian/patches/multiarch_path.patch:
    - useless since latest upstream changes.
  * Bump Standards-Version to 4.4.1.
  * Refresh and rework manpages.
  * Remove debian/README.source (Closes: #846390).

 -- Hugo Lefeuvre <hle@debian.org>  Mon, 07 Oct 2019 13:46:43 +0200

openjpeg2 (2.3.0-3) unstable; urgency=medium

  [ Helmut Grohne ]
  * Demote java dependencies to Build-Depends-Indep. (Closes: #870644)

  [ Mathieu Malaterre ]
  * debian/control: update URLs to new salsa location

 -- Mathieu Malaterre <malat@debian.org>  Mon, 30 Sep 2019 15:17:58 +0200

openjpeg2 (2.3.0-2) unstable; urgency=high

  [ Hugo Lefeuvre ]
  * CVE-2017-17480: stack-based buffer overflow in the pgxtovolume function in
    jp3d/convert.c (Closes: #884738).
  * CVE-2018-14423: division-by-zero in pi_next_pcrl, pi_next_cprl, and
    pi_next_rpcl in lib/openjp3d/pi.c (Closes: #904873).
  * CVE-2018-18088: null pointer dereference in imagetopnm in jp2/convert.c
    (Closes: #910763).
  * CVE-2018-5785: integer overflow caused by an out-of-bounds left shift in the
    opj_j2k_setup_encoder function (openjp2/j2k.c) (Closes: #888533).
  * CVE-2018-6616: excessive iteration in the opj_t1_encode_cblks function of
    openjp2/t1.c (Closes: #889683).

  [ Mathieu Malaterre ]
  * Add Hugo as Uploader

 -- Mathieu Malaterre <malat@debian.org>  Sun, 10 Mar 2019 18:34:51 +0100

openjpeg2 (2.3.0-1.1) unstable; urgency=medium

  * Non-maintainer upload.
  * Fix "FTBFS with Java 9 due to -source/-target only":
    apply patch by Markus Koschany to build with Java 9 or later.
    (Closes: #873997)

 -- gregor herrmann <gregoa@debian.org>  Sun, 02 Dec 2018 18:18:22 +0100

openjpeg2 (2.3.0-1) unstable; urgency=medium

  * New upstream release. Closes: #877758
  * Drop explicit -dbg package. Closes: #877676
  * Fix CVE-2017-14041. Closes: #874115
  * Fix CVE-2017-14151. Closes: #874430
  * Fix CVE-2017-14152. Closes: #874431

 -- Mathieu Malaterre <malat@debian.org>  Mon, 16 Oct 2017 07:43:41 +0200

openjpeg2 (2.2.0-2) unstable; urgency=medium

  * Fix changelog. Closes: #876535
  * Provide openjpeg-2.1 compat symlinks:
    + usr/include/openjpeg-2.1
    + usr/lib/$(DEB_HOST_MULTIARCH)/openjpeg-2.1

 -- Mathieu Malaterre <malat@debian.org>  Tue, 03 Oct 2017 07:20:44 +0200

openjpeg2 (2.2.0-1) unstable; urgency=medium

  * New upstream release. Closes: #872041
  * Fix CVE-2016-9113. Closes: #844552
  * Fix CVE-2016-9114. Closes: #844553
  * Fix CVE-2016-9115. Closes: #844554
  * Fix CVE-2016-9116. Closes: #844555
  * Fix CVE-2016-9117. Closes: #844556

 -- Mathieu Malaterre <malat@debian.org>  Fri, 22 Sep 2017 21:51:36 +0200

openjpeg2 (2.1.2-1.3) unstable; urgency=medium

  * Fix FTFBS (Closes: #871905)

 -- Moritz Muehlenhoff <jmm@debian.org>  Sat, 12 Aug 2017 15:54:38 +0200

openjpeg2 (2.1.2-1.2) unstable; urgency=medium

  * Non-maintainer upload
  * Fix CVE-2016-1626, CVE-2016-1628, CVE-2016-5152, CVE-2016-9112 and
    CVE-2016-9118.patch

 -- Moritz Muehlenhoff <jmm@debian.org>  Fri, 11 Aug 2017 22:17:07 +0200

openjpeg2 (2.1.2-1.1) unstable; urgency=medium

  * Non-maintainer upload.
  * Add CVE-2016-9572_CVE-2016-9573.patch patch.
    CVE-2016-9572: NULL pointer dereference in input decoding
    CVE-2016-9573: Heap out-of-bounds read due to insufficient check in
    imagetopnm(). (Closes: #851422)

 -- Salvatore Bonaccorso <carnil@debian.org>  Sun, 22 Jan 2017 14:18:13 +0100

openjpeg2 (2.1.2-1) unstable; urgency=medium

  * New upstream. Closes: #839120
  * Fix CVE-2016-7163. Closes: #837604
  * Fix CVE-2016-7445. Closes: #838690
  * Remove patches applied upstream:

 -- Mathieu Malaterre <malat@debian.org>  Thu, 29 Sep 2016 08:11:30 +0200

openjpeg2 (2.1.1-1) unstable; urgency=medium

  * New upstream. Closes: #829734
    + d/watch points toward github now
    + Fix man page typos. Closes: #772889, #784377
    + Raise priority to optional. Closes: #822577
    + Fix multiple CVEs: Closes: #800453, #800149, #818399
  * Fix pc file. Closes: #787383
  * Remove reference to contrib. Closes: #820190
  * Bump Std-Vers to 3.9.8, no changes needed

 -- Mathieu Malaterre <malat@debian.org>  Mon, 11 Jul 2016 09:28:19 +0200

openjpeg2 (2.1.0-2.1) unstable; urgency=high

  * Non-maintainer upload.
  * Apache 2.4 transition: (Closes: #786333)
    + d/rules: Added --with apache2.
    + Drop d/libopenjpip-server.install.
    + Drop d/libopenjpip-server.prerm.
    + d/control: Add build-depends on dh-apache2, replace depends on
      apache2.2-bin by ${misc:Recommends}, add recommends on
      libapache2-mod-fastcgi.
    + New d/libopenjpip-server.conf for apache2 fastcgi setup.
    + Drop d/libopenjpip-server.load.
    + New d/libopenjpip-server.apache2 to set up the configuration.

 -- Jean-Michel Vourgère <nirgal@debian.org>  Thu, 21 May 2015 23:05:40 +0200

openjpeg2 (2.1.0-2) unstable; urgency=low

  * Install *.pc files. Closes: #762251
  * Remove cmake-fatal-error export stuff
  * Fix warnings in d/copyright
  * Bump Std-Vers to 3.9.6, no changes needed
  * Fix include path in export file to handle multi-arch install
    + debian/patches/multiarch_path.patch

 -- Mathieu Malaterre <malat@debian.org>  Tue, 07 Oct 2014 13:14:43 +0200

openjpeg2 (2.1.0-1) unstable; urgency=low

  * New upstream. Closes: #761154, #761155
  * Rename binary packages to prevent conflicts. Closes: #760874
  * Remove "Multi-Arch: same" for -dev package. Closes: #760421

 -- Mathieu Malaterre <malat@debian.org>  Thu, 11 Sep 2014 17:40:46 +0200

openjpeg2 (2.0.0-1) unstable; urgency=low

  * New upstream. Closes: #738655.

 -- Mathieu Malaterre <malat@debian.org>  Fri, 23 May 2014 18:23:37 +0200
