On Sat, Apr 18, 2026 at 04:57:23PM +0200, Volker Schlecht wrote: > tb@ pointed out a number of unreleased fixes to graphics/lcms2: > > https://marc.info/?l=oss-security&m=177646929211758&w=2 > > I looked at the changelog since the 2.18 release, and it contains several > other commits similar to those mentioned in the mail above, and 2.17..2.18 > does as well. > Therefore I'd like to float the idea of updating lcms2 to the latest commit on > github. All jdks, wlroots, chafa, libjxl, poppler build without complaint, so > I *believe* the other consumers will probably be happy with it as well.
I still think this is worth having. >From the source diff, I'm not worried about build failures of consumers. However, since they changed a public enum you should bump the major. With that it's ok tb (you also need an ok from sthen or naddy).
