CVS commit: [pkgsrc-2026Q1] pkgsrc/graphics/lcms2

["Benny Siegert" <bsiegert%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   bsiegert
Date:           Tue May 12 19:05:21 UTC 2026

Modified Files:
        pkgsrc/graphics/lcms2 [pkgsrc-2026Q1]: Makefile distinfo

Log Message:
Pullup ticket #7110 - requested by taca
graphics/lcms2: security fix

Revisions pulled up:
- graphics/lcms2/Makefile                                       1.24
- graphics/lcms2/distinfo                                       1.17

---
   Module Name: pkgsrc
   Committed By:        wiz
   Date:                Thu Apr 30 05:13:08 UTC 2026

   Modified Files:
        pkgsrc/graphics/lcms2: Makefile distinfo

   Log Message:
   lcms2: update to 2.19.

   All tests pass.

   -----------------------
   2.19 Featured release
   -----------------------
   CMake build system. Thanks to Vlad Erium for the initial implementation and kmilos for improvements.
   Large files support to use profiles up to 4Gb
   Black point compensation works on multi-channel profiles
   Added more test platforms/architectures in GitHub tests, Cygwin and MSYS are now fully checked.
   jpgicc banner is not shown on normal operation, only when help is requested.
   Added a way to access internal transform pipelines. For read only.
   Add a way to retrieve the CMM signature
   Added extra checks on postscript undocumented functions
   Added guard on integer overflow when reading .cube files
   Added unneeded checks as a try to get rid of spam reports about "vulnerabilities" that are not real.
   Utility program names generated by Visual Studio 2026 are now same as all other platforms.
   Creating an output profile by cmsTransform2DeviceLink does not propagate correctly the colorant table. Fixed.
   Added some profile class definitions from iccMAX
   Deprecated uint16 and uint32 types removed from tifdiff

   -----------------------
   2.18 Maintenance release
   -----------------------
   Add an extra check for completeness only.
   Fix a signed integer overflow which could trigger a FPE_INTOVF
   Fix Microsoft'2 MHC2 private tag
   Added projects for XCode 26 & Visual Studio 2026
   Added documentation for PCS illuminants and chromatic adaptation
   Check for a possible out-of-bounds in softproofing transforms when using cmsCreateExtendedTransform
   Fix for a out-of-bound read,  issue #522
   Add an extra check for out-of-bounds read when misusing a support function
   avoid divide by zero, special case from spec. notes on CAM02
   Fix CGATS parser bug when number has a "+" sign
   Fix a typo when handling a special case for BPC
   Fixed a loss of precision when Lab16 is used as input color space on integer transforms
   Fixes hypotetical corrupted pointer in non-happy path. Cannot happen in real world
   Fix a theoretical memory leak.
   Add support of localized descriptions in v2 profiles for MacOS
   Mark some tables as const
   Make the param of cmsCreateLab4Profile() to refer to the media white instead of the illuminant
   fix a warning in unit tests
   Remove redundant check. Fixes #497
   Update autotools
   fix plugins soname + add oklab to transicc (experimental)
   meson: ability to disable .so.version libraries
   Fix black point detection when using darker colorant.
   testcms2.c: Fix incorrect string comparisons
   Fix CICp tag size.
   Fix broken linkicc
   meson: Bump minimum Meson version to 0.52 for visibility:hidden
   meson: Disable unused fs import
   Add a guard against a wrong use of flags
   Fix for #469 heap buffer overflow on convert_utf16_to_utf32()

   -----------------------
   2.17 Maintenance release
   -----------------------
   Add fuzzers foundation. Many thanks to Amir Montazery and Open Source Technology Improvement Fund (ostif.org), Google, for funding that.
   Add ability to disable building tests in meson
   Fixed gamut warning not working on certain conditions
   Mac sequoia added to test beds
   Add the possibility of duplicating a NULL context for cloning defaults.
   Small cleanup of CGATS parser
   Change computation of profile ID to follow actual ICC spec (yes, they changed the spec!)
   Allow to apply color management on memory blocks > 4Gb
   Get rid of samples on meson compilation
   Increase coverage of premultiplied alpha.
   Bug fixing and cosmetical work on sources.


To generate a diff of this commit:
cvs rdiff -u -r1.23 -r1.23.6.1 pkgsrc/graphics/lcms2/Makefile
cvs rdiff -u -r1.16 -r1.16.20.1 pkgsrc/graphics/lcms2/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/graphics/lcms2/Makefile
diff -u pkgsrc/graphics/lcms2/Makefile:1.23 pkgsrc/graphics/lcms2/Makefile:1.23.6.1
--- pkgsrc/graphics/lcms2/Makefile:1.23 Sat Aug 30 22:45:25 2025
+++ pkgsrc/graphics/lcms2/Makefile      Tue May 12 19:05:21 2026
@@ -1,7 +1,6 @@
-# $NetBSD: Makefile,v 1.23 2025/08/30 22:45:25 wiz Exp $
+# $NetBSD: Makefile,v 1.23.6.1 2026/05/12 19:05:21 bsiegert Exp $
 
-DISTNAME=      lcms2-2.16
-PKGREVISION=   2
+DISTNAME=      lcms2-2.19
 CATEGORIES=    graphics
 MASTER_SITES=  ${MASTER_SITE_SOURCEFORGE:=lcms/}
 

Index: pkgsrc/graphics/lcms2/distinfo
diff -u pkgsrc/graphics/lcms2/distinfo:1.16 pkgsrc/graphics/lcms2/distinfo:1.16.20.1
--- pkgsrc/graphics/lcms2/distinfo:1.16 Mon Dec  4 15:06:10 2023
+++ pkgsrc/graphics/lcms2/distinfo      Tue May 12 19:05:21 2026
@@ -1,5 +1,5 @@
-$NetBSD: distinfo,v 1.16 2023/12/04 15:06:10 gdt Exp $
+$NetBSD: distinfo,v 1.16.20.1 2026/05/12 19:05:21 bsiegert Exp $
 
-BLAKE2s (lcms2-2.16.tar.gz) = 5ea4a695482fec953cc3c148f39304e1a61a4083f212cb26d0f0b20b52d3d879
-SHA512 (lcms2-2.16.tar.gz) = 638dd6ad6787456c8145510d18b2d0727bd0a446a13ac2934aabc9531d1156eca2a2c0fd780a453823fbd35a1895f9d8de5dc4b3cab505459dd3f0535b4e837d
-Size (lcms2-2.16.tar.gz) = 7632822 bytes
+BLAKE2s (lcms2-2.19.tar.gz) = 9adc299bc77781ba450a6101ddf84e0c0868214f662410e681009a4bd24b329b
+SHA512 (lcms2-2.19.tar.gz) = 0d282fae9ca16b9cbc75ef8845d6ad1062aca8c8783e39c09ad294050e0574da8ee437b9ac58771f259e3b2dea702d8d094dcc7dba4eeba8453d82f54d06ab9c
+Size (lcms2-2.19.tar.gz) = 5726199 bytes