pixman (0.30.2-2ubuntu1.2) trusty-security; urgency=medium

  * SECURITY UPDATE: general_composite_rect() integer overflow
    - debian/patches/CVE-2015-5297-pre1.patch: ensure that iter buffers are
      aligned to 16 bytes in pixman/pixman-general.c,
      pixman/pixman-private.h, pixman/pixman-utils.c.
    - debian/patches/CVE-2015-5297-pre2.patch: use floating point combiners
      for all operators that involve divisions in pixman/pixman-general.c.
    - debian/patches/CVE-2015-5297-1.patch: fix stack related pointer
      arithmetic overflow in pixman/pixman-general.c.
    - debian/patches/CVE-2015-5297-2.patch: tighten up calculation of
      temporary buffer sizes in pixman/pixman-general.c.
    - debian/patches/disable_test.patch: disable blitters test as the
      correct CRC is unknown.
    - CVE-2015-5297

 -- Marc Deslauriers <marc.deslauriers@ubuntu.com>  Wed, 28 Nov 2018 15:25:56 -0500

pixman (0.30.2-2ubuntu1.1) trusty-security; urgency=medium

  * SECURITY UPDATE: denial of service and possible code execution via
    overflow in create_bits
    - debian/patches/CVE-2014-9766.patch: cast to size_t in
      pixman/pixman-bits-image.c.
    - CVE-2014-9766

 -- Marc Deslauriers <marc.deslauriers@ubuntu.com>  Wed, 02 Mar 2016 15:57:02 -0500

pixman (0.30.2-2ubuntu1) trusty; urgency=medium

  * Pass --disable-vmx on ppc64el to work around testsuite failure.

 -- Adam Conrad <adconrad@ubuntu.com>  Tue, 17 Dec 2013 01:10:00 -0700

pixman (0.30.2-2) sid; urgency=low

  * Cherry-pick upstream bigfixes for fixing a crash when rendering
    invalid trapezoids. (LP: #1197921)

 -- Maarten Lankhorst <maarten.lankhorst@ubuntu.com>  Mon, 18 Nov 2013 15:08:56 +0100

pixman (0.30.2-1) sid; urgency=low

  * New upstream release
    - includes big-endian matrix-test fix
  * Increase alpha-loop test timeout some more.

 -- Julien Cristau <jcristau@debian.org>  Tue, 13 Aug 2013 12:08:18 +0200

pixman (0.30.0-3) sid; urgency=low

  * Increase timeout for the alpha-loop test.  That will hopefully let it pass
    on the mips buildd.

 -- Julien Cristau <jcristau@debian.org>  Sat, 03 Aug 2013 10:24:29 +0200

pixman (0.30.0-2) sid; urgency=low

  * Disable silent Makefile rules.
  * Disable arm iwmmxt fast paths.  It breaks the build.
  * Fix matrix-test on big endian (patch from Siarhei Siamashka).

 -- Julien Cristau <jcristau@debian.org>  Sat, 27 Jul 2013 21:40:48 +0200

pixman (0.30.0-1) sid; urgency=low

  [ Maarten Lankhorst, Cyril Brulebois, Julien Cristau ]
  * New upstream release.

 -- Julien Cristau <jcristau@debian.org>  Fri, 26 Jul 2013 14:58:25 +0200

pixman (0.26.0-4) sid; urgency=high

  * Fix for CVE-2013-1591 (stack-based buffer overflow), cherry-picked from
    0.27.4 (closes: #700308).

 -- Julien Cristau <jcristau@debian.org>  Mon, 18 Feb 2013 19:58:33 +0100

pixman (0.26.0-3) unstable; urgency=low

  * Pass LS_CFLAGS=" " to configure to prevent -march=loongson2f from
    being passed to gcc, which would break on loongson2e (see fdo bug
    #51451). This fixes the test suite failures on mipsel, and should
    avoid any crashes depending on user systems.

 -- Cyril Brulebois <kibi@debian.org>  Wed, 27 Jun 2012 12:11:54 +0200

# For older changelog entries, run 'apt-get changelog libpixman-1-0'
