From c409050184c743ebcf65640cc8eb5c56cc9f570e Mon Sep 17 00:00:00 2001 From: Bernd Kuhls Date: Mon, 27 Apr 2026 08:09:40 +0200 Subject: [PATCH] package/lcms2: security bump version to 2.19 https://littlecms.com/blog/2026/04/17/lcms2-2.19/ https://github.com/mm2/Little-CMS/blob/lcms2.19/ChangeLog Fixes CVE-2026-41254: https://security-tracker.debian.org/tracker/CVE-2026-41254 Signed-off-by: Bernd Kuhls Signed-off-by: Julien Olivain --- package/lcms2/lcms2.hash | 8 ++++---- package/lcms2/lcms2.mk | 2 +- 2 files changed, 5 insertions(+), 5 deletions(-) diff --git a/package/lcms2/lcms2.hash b/package/lcms2/lcms2.hash index e2277ba610..0ff881158f 100644 --- a/package/lcms2/lcms2.hash +++ b/package/lcms2/lcms2.hash @@ -1,6 +1,6 @@ -# From https://sourceforge.net/projects/lcms/files/lcms/2.18 -sha1 3917db04b8d19b62ea6c9d8f4ff0404d145aca4a lcms2-2.18.tar.gz -# From https://github.com/mm2/Little-CMS/releases/tag/lcms2.18 -sha256 ee67be3566f459362c1ee094fde2c159d33fa0390aa4ed5f5af676f9e5004347 lcms2-2.18.tar.gz +# From https://sourceforge.net/projects/lcms/files/lcms/2.19 +sha1 bedb39ede32b76bc2cb24ee531d7433cf787b319 lcms2-2.19.tar.gz +# From https://github.com/mm2/Little-CMS/releases/tag/lcms2.19 +sha256 49e7e134e4299733dd0eda434fa468997a28ab3d33fa397c642b03644f552216 lcms2-2.19.tar.gz # Locally computed: sha256 6dbd60437f8ef91d8de1f08ad75882547fd4931bfcc3566a0735f28db1484d31 LICENSE diff --git a/package/lcms2/lcms2.mk b/package/lcms2/lcms2.mk index 4ffad41014..32a78a4f35 100644 --- a/package/lcms2/lcms2.mk +++ b/package/lcms2/lcms2.mk @@ -4,7 +4,7 @@ # ################################################################################ -LCMS2_VERSION = 2.18 +LCMS2_VERSION = 2.19 LCMS2_SITE = https://downloads.sourceforge.net/project/lcms/lcms/$(LCMS2_VERSION) LCMS2_LICENSE = MIT LCMS2_LICENSE_FILES = LICENSE