On Sat, Apr 18, 2026 at 04:57:23PM +0200, Volker Schlecht wrote:
> tb@ pointed out a number of unreleased fixes to graphics/lcms2:
> 
> https://marc.info/?l=oss-security&m=177646929211758&w=2
> 
> I looked at the changelog since the 2.18 release, and it contains several
> other commits similar to those mentioned in the mail above, and 2.17..2.18
> does as well.
> Therefore I'd like to float the idea of updating lcms2 to the latest commit on
> github. All jdks, wlroots, chafa, libjxl, poppler build without complaint, so
> I *believe* the other consumers will probably be happy with it as well.

I still think this is worth having.

From the source diff, I'm not worried about build failures of consumers.
However, since they changed a public enum you should bump the major.

With that it's ok tb (you also need an ok from sthen or naddy).