arc-kde (20220908-4) unstable; urgency=medium . * Team upload. * debian/control: Remove my name from the uploaders list. * debian/control: Bump debhelper compat to v14. asmc-linux (2.39.07+ds-2) unstable; urgency=medium . * Upgrade debhelper-compat to v14 ayatana-indicator-messages (24.5.2-3) unstable; urgency=medium . * Team upload * Mark -dev package as Multi-Arch: same ayatana-indicator-messages (24.5.2-2) unstable; urgency=medium . * Team upload * Mark gir package as Multi-Arch: same c4core (0.6.0-2) unstable; urgency=medium . * Team upload. * Drop oldlib library, can be decrufted easily * Update symbols file c4core (0.6.0-1) unstable; urgency=medium . * New upstream release (Closes: #1134117). * d/patches: - Drop 0006-Soversion.patch to restore upstream SONAME versioning. - Drop multiarch install-dir patches as they are applied upstream. * d/control: - Rename runtime package to libc4core0.6 to match upstream SONAME. - Add transitional libc4core0 package. - Update libc4core-dev dependency. * Rename libc4core0.install to libc4core0.6.install. * Rename and update symbols file for libc4core0.6. * Remove obsolete lintian override for SONAME mismatch. All changes above are to restore upstream SONAME versioning. * d/control: - Bump Standards-Version to 4.7.4. - Drop redundant Priority and Rules-Requires-Root fields. * d/rules: Remove trailing whitespace. * d/patches: Add headers or update headers to comply with DEP-3 * d/copyright: Refresh d/copyright for the 0.6.0 source tree. c4core (0.2.11-2) unstable; urgency=medium . * debian/patches: - Add patch to allow coinstall (Closes: #1133806) - Set proper soversion (Closes: #1134117) * debian/libc4core0.symbols: add symbols c4core (0.2.11-1) unstable; urgency=medium . * New upstream release. * debian/control: - Bump Standards-Version to 4.7.3. - Add Vcs-Git and Vcs-Browser fields. - Mark Multi-arch same. * debian/copyright: - Update copyright years. * debian/salsa-ci.yml: Add CI configuration for Salsa. * debian/watch: Migrate to version 5 format. * debian/gbp.conf: Add basic git-buildpackage configuration. c4core (0.2.7-1) unstable; urgency=medium . * New upstream release * Adopt package (Closes: #1104864) * Bump Standards-Version to 4.7.2; no changes needed * debian/rules: enable hardening flags (hardening=+all) * debian/upstream/metadata: created * debian/copyright: updated year c4core (0.2.6-2) unstable; urgency=medium . * Let libc4core-dev depend on debugbreak. c4core (0.2.6-1) unstable; urgency=medium . * Initial release. Closes: #1017088 cairocffi (1.7.1-7) unstable; urgency=medium . * Team Upload * Disable useless Salsa CI jobs * Drop unused python3-setuptools build-dependency * d/rules: drop duplicate "--with" params * Update standards version to 4.7.4, no changes needed. * Set upstream metadata fields: Contact, Documentation. cinnamon-desktop (6.6.2-2) unstable; urgency=medium . * d/x-cinnamon-mimeapps.list: make atril the default document viewer * d/control: bump Standards-Version to 4.7.4, no changes needed * update d/copyright cinnamon-desktop-environment (6.6.1) unstable; urgency=medium . * cinnamon-desktop-environment: - add zoitechat as alternative of hexchat - switch the document viewer dependency from evince to atril (Closes: #1128290, #918921) contactsd (1.5.0-2) unstable; urgency=medium . [ Jeremy Bícha ] * Eliminate unnecessary second dh_auto_configure. Thanks to Ratchanan Srirattanamet . [ Mike Gabriel ] * debian/patches: + Update 2003_adjust-service-for-lomiri.patch. Don't wait for lomiri.service to start, contactsd can start independently. Make contactsd also wanted by ubuntu-touch-session.target. cyrus-imapd (3.12.3-4) unstable; urgency=medium . [ Edmund Lodewijks ] * lintian: - testsuite-depends-on-obsolete-package - orig-tarball-missing-upstream-signature - national-encoding - no-manual-page cyrdeliver cyrmaster * Drop unused autopkgtest dependency: texinfo * Bump Standards-Version to 4.7.4 (no changes needed) * Recommend cron | cron-daemon in cyrus-common (Closes: #1143636) * d/tests: run Cassandane from the source tree (Closes: #1145447) debian-edu-config (2.13.1) unstable; urgency=medium . [ Daniel Teichmann ] * testsuite/ldap-server: Check /var/lib/ldap exists and is owned by openldap:openldap. Regression check for Debian bug #1144741. * debian/debian-edu-config.lintian-overrides: Fix stale reference. (Fixes commit: 63575146) * Drop unused wicd preconnect hook. wicd is no longer in Debian. The hook was the only remaining wicd integration and is not referenced anywhere else in the package. * testsuite/hostname: escape regex dot and exit non-zero on failure. The unescaped dot in the 'tjener.intern' grep matched any character. Escape it so the FQDN check is exact. Both error paths now exit 1 so a broken hostname fails the test instead of silently passing. * share/debian-edu-config/d-i/pre-pkgsel: resolve leftover merge conflict. * debian/control: Depend on iproute2 * testsuite/network: Stop using net-tools, use ip from iproute2 instead * ldap-tools/ldap-debian-edu-install: Get MAC addresses via ip link instead of ifconfig * share/debian-edu-config/testsuite-lib.sh: Use ss instead of netstat * testsuite/ldap-server: Use ss instead of netstat * debian/control: Drop Depends: net-tools * share/debian-edu-config/d-i/pre-pkgsel: Tighten hostname= parsing and sanitization from /proc/cmdline. Handle hostname= as first cmdline token, ignore empty values and strip characters invalid in hostnames. * share/debian-edu-config/d-i/pre-pkgsel: strip hyphens only when present. Use 's/^-+//' / 's/-+$//' instead of '-*' so the substitution only fires when there actually is a leading/trailing hyphen to remove. * tools/create-debian-edu-certs: Switch root CA and server key generation to ECDSA prime256v1. RSA with 2048 bits is the bare minimum with OpenSSL 3. Replace 'openssl genrsa' with 'openssl genpkey -algorithm EC' using the prime256v1 (secp256r1 / NIST P-256) curve. * tools/create-server-cert: Switch key generation to ECDSA prime256v1 and drop keyEncipherment key usage keyEncipherment is only meaningful for RSA keys. For ECDSA server certificates only the digitalSignature key usage is applicable (RFC 5480). * v3.cnf: Drop keyEncipherment from server cert key usage keyEncipherment is not applicable to ECDSA keys (RFC 5480), only digitalSignature is required for TLS server certificates. . [ Mike Gabriel ] * debian/control: Add to D: (debian-edu-config): procps. (Closes: #1136493). * ldap-tools/ldap-debian-edu-install: Make sure interactions with debconf are UTF-8 based. This resolves GECOS field transliteration after having retrieved debian-edu-config/first-user-fullname from the debconf db. (Closes: #939717). * share/debian-edu-config/d-i/pre-pkgsel: white-space cleanup * share/debian-edu-config/d-i/pre-pkgsel: Use 'tjener' in /etc/hostname and derive FQDN from /etc/hosts. (Closes: #893394). * testsuite/hostname: Test that /etc/hostname on installation profile Main-Server is set correctly * cf3/cf.cfengine3: Stop cfengine3 service on all Debian Edu machines. Esp. cf-execd (calling cf-agent command) clobbers the log on all Debian Edu clients (Debian Edu 12 and onwards) and thus on syslog.intern (aka tjener). In Debian Edu, we use cfengine3 for managing configuration adjustments via manual invocation of the cf-agent command, but we don't support (yet?) to use cfengine3 for constant system management. Partially addresses #1051834. * sbin/debian-edu-ltsp-install: Use KERNEL_PARAMETERS variable, if we define it * sbin/debian-edu-ltsp-install: Fix variable interpretation in sed commands ... by using double quotes, not single quotes. * sbin/update-hostname-from-ip: white-space cleanup * sbin/update-hostname-from-ip: Stop using net-tools, use ip command from iproute2 instead * share/debian-edu-config/d-i/pre-pkgsel: Support hostname override via /proc/cmdline. (Closes: #1008597). . [ Wolfgang Schweer ] * share/debian-edu-config/d-i/pre-pkgsel: Cleanup pre-pkgsel from cruft. (Closes: #1055648). . [ Serhii Horichenko ] * ltsp: Add 'quiet splash' to hide boot details on clients. (Closes: #1065564). * etc/nagios3/debian-edu/commands.cfg: Add key -l for check_apt to list packages available for upgrade. dh-clojure (0.4.4) unstable; urgency=medium . * give a cleaned pom to mh_resolve_dependencies * prepare build env more fully on buildsystem init dirgra (0.6-1) unstable; urgency=medium . * Team upload. * New upstream version 0.6 * d/control: build using headless jdk * d/upstream: add metadata * d/watch: update to v5 format * Remove redundant Priority: optional from source stanza. * Update standards version to 4.7.4, no changes needed. * Removed Rules-Requires-Root * run wrap-and-sort -bastk elixir-ex-doc (0.35.1+dfsg1-1) unstable; urgency=medium . * Exclude a non free font remixicon.woff2 from the sources (closes: #1145497). * Use icons from the fonts-materialdesignicons-webfont package. facterdb (4.5.0-1) unstable; urgency=medium . * New upstream version * Patch for removing 'gem' dependency is not needed anymore * Update patch 0004-non-relative_path_for_pending_tests * Update patch 0005-Remove-git-from-gemspec * Update dependencies for new upstream version * fix typo in package description * Remove XB-/XS- ruby fields from control * priority field no longer needed * Bump policy (standards-version) to 4.7.4 * Exclude two dev documentation files * convert watch file to version 5 * Remove unwanted script * Remove bogus double quotes for exclude variable filezilla (3.71.0-1) unstable; urgency=medium . * New upstream release. * d/salsa-ci.yml: Disable uscan tests, upstream untrackable * d/control: Bump libfilezilla-dev to 0.57.0 and libfzssh-dev to 1.4.0 fonts-overpass (4~git20210910.c580d28+ds-1) unstable; urgency=medium . * Initial release (Closes: #1028019) fzssh (1.4.0-1) unstable; urgency=medium . * New upstream release. * d/control: Change Vcs-* fields to debian namespace. * d/control: Depend on libfilezilla-dev in libfzssh-dev * d/control: Bump libfilezilla-dev Build-Depends to 0.57.0 * d/control: Bump SONAME from 13.0.0 to 14.0.0 grout (0.17.1-1) unstable; urgency=medium . * New upstream release * Add debconf boolean to opt-in for /etc/frr/daemons modification * Disable DPDK static linking (Closes: #1144885) grout (0.17.0-1) unstable; urgency=medium . * New upstream release * Preserve original /etc/frr/daemons (Closes: #1144680) grout (0.16.2-2) unstable; urgency=medium . * Only enable grout on supported architectures (Closes: #1142581) grout (0.16.2-1) unstable; urgency=medium . * New upstream release * Fix build error with the nocheck profile (Closes: #1142488) grout (0.16.1-1) unstable; urgency=medium . * New upstream release (Closes: #1141841) * Enable FRR support intel-media-driver (26.2.4+dfsg1-1) unstable; urgency=medium . * New upstream version 26.2.4+dfsg1 * debian/control: Bump debhelper compat to 14 * debian/copyright: Update copyright years * debian/patches: Remove patches (partially) included upstream * debian/rules: - Disable CRI - Force cmake policy to 3.5 invokebinder (1.16-1) unstable; urgency=medium . * Team upload. * New upstream version 1.16 * ignore unwanted maven plugin * d/control: build using headless jdk * d/watch: update to v5 format * Remove redundant Priority: optional from source stanza. * Update standards version to 4.7.4, no changes needed. * Removed Rules-Requires-Root jcodings (1.0.64-1) unstable; urgency=medium . * Team upload. * New upstream release * d/control: switch to headless jdk * ignore unwanted maven plugin * run wrap-and-sort -bastk * d/watch: update to v5 format * Remove redundant Priority: optional from source stanza. * Update standards version to 4.7.4, no changes needed. * Removed Rules-Requires-Root jruby-joni (2.2.7-2) unstable; urgency=medium . * Team upload. * d/control: fix source-only builds jruby-joni (2.2.7-1) unstable; urgency=medium . * Team upload. * New upstream release * implement jar classpath modification using javahelper * d/control: build using headless jdk * drop unwanted maven plugin * run wrap-and-sort -bastk * d/watch: update to v5 format * Remove redundant Priority: optional from source stanza. * Update standards version to 4.7.4, no changes needed. * Removed Rules-Requires-Root keystone (2:29.0.2-2) unstable; urgency=medium . * CVE-2026-80183 / OSSN-2026-0XXX: any authenticated user holding role:reader on any project can list every project-scoped role assignment under any domain by passing a domain ID as scope.project.id with include_subtree to the GET /v3/role_assignments endpoint. The domain's project record has domain_id=null, causing the policy domain_id check to pass for any caller. With include_names, the response discloses the names and home-domain IDs of every user, group, project, and role involved. The literal "default" domain ID works against any deployment created with keystone-manage bootstrap. An attacker can harvest domain IDs from the response and repeat the query to map role assignments across the entire cloud. This is caused by misuse of "None" in list_role_assignments_for_tree. Applied upstream patch (Closes: #1145816): - CVE-2026-80183_Prevent_unauthorized_project-scoped_assignment_list.patch keystone (2:29.0.2-1) unstable; urgency=medium . * New upstream point release. * Removed patches applied upstream: - 0001-Add-tests-for-restricted-app-cred-guard.patch - 0002-Block-restricted-app-creds-from-creating-EC2-credent.patch - 0003-Block-app-credential-token-rescoping.patch - 0004-Include-system-scope-in-rescope-guard.patch - 0005-Enforce-app-cred-project-boundary-on-EC2-credential-.patch - 0006-Block-app-cred-tokens-from-authorizing-OAuth1-reques.patch - CVE-2026-43001_1_Enforce_delegation_project_boundary_for_delegat....patch - CVE-2026-43001_2_Fix_user_impersonation_through_application_cred....patch - CVE-2026-43001_3_Forbid_trust_operations_using_application_crede....patch - CVE-2026-43001_4_Preserve_expires_at_when_rescoping_federated_to....patch - CVE-2026-43001_5_Prevent_RBAC_policy_bypass_via_JSON_body_and_qu....patch * Add new patches (Closes: #1145669): - CVE-2026-80182_CVE-2026-80184_1_Ban_ec2credential_tokens_from_Ke....patch - CVE-2026-80182_CVE-2026-80184_2_trusts_oauth1_app-creds_reject_d....patch - CVE-2026-80182_CVE-2026-80184_3_lp-2158538-2026.1.patch - CVE-2026-80182_CVE-2026-80184_4_auth_encode_ec2credential_and_oa....patch - CVE-2026-80182_CVE-2026-80184_5_fix-unit-test.patch * Really do not run this (non-deterministic) test: - test_bootstrap_is_not_idempotent_when_password_does_change libnginx-mod-http-memc (0.21-4) unstable; urgency=medium . * Team upload. * d/t/generic: update, add ABI dependency check * d/t/control: name the upstream autopkgtest * d/control: debhelper-compat (= 14), remove misc:Depends, shlibs:Depends * d/rules: use the upstream Ragel generation command and fail on errors * d/fix.scanned.copyright remove * d/copyright: update years and upstream copyright holders mkdocs-test (0.6.0-3) unstable; urgency=medium . * Team upload. * Orphan the package. (#1145560) mkosi (27-1) unstable; urgency=medium . * New upstream version 27. For a full list of changes, see: https://github.com/systemd/mkosi/releases/tag/v27 * Skip new test that fails in Salsa CI node-base16 (1.0.0+~cs1.0.2-5) unstable; urgency=medium . * Team upload * Declare compliance with policy 4.7.4 * Apply multiarch hints from UDD * debian/watch version 5 * Adapt to Babel 8 node-expose-loader (5.0.1-5) unstable; urgency=medium . * Team upload * Adapt to Babel 8 node-recast (0.23.4-7) unstable; urgency=medium . * Team upload * Adapt to Babel 8 opentimelineio (0.18.1-2) unstable; urgency=medium . * Bump Standards-Version to 4.7.3 (Remove priority field). * Remove Rules-Requires-Root control field. * Update debian/watch to version 5. * Update debian/copyright. php-cache-integration-tests (1.0.5-1) unstable; urgency=medium . [ Christian Flothmann ] * ensure compatibility with PHPUnit 12 (#119) . [ Marek Štípek ] * Replaced unsupported Medium attributes on methods with Group slow (#118) . [ Aaron Scherer ] * feat!: require PHP 8.2 and PSR cache 3 * fix(composer): allow psr/simple-cache 2 . [ David Prévot ] * Track upstream repository * Remove redundant Priority: optional from source stanza * Update standards version to 4.7.4 * Update watch file format version to 5 * Removed Rules-Requires-Root * Use GitHub template in watch file instead of explicit Source/Matching-Pattern * Use debhelper-compat = 14 * Enable tests * Drop patches not needed anymore poedit (3.9.1-2) unstable; urgency=medium . * Update copyright file * Bump std-version to 4.7.4, no changes pyee (13.0.0-3) unstable; urgency=medium . [ Tianyu Chen ] * Team upload. * Drop typing-extensions * Remove redundant Priority: optional from source stanza. * Update standards version to 4.7.4, no changes needed. * Update watch file format version to 5. * Removed Rules-Requires-Root * Use GitHub template in watch file instead of explicit Source/Matching-Pattern. * Update lintian override info format in d/source/lintian-overrides on line 2-3. * Set upstream metadata fields: Documentation. . [ Colin Watson ] * Stop filtering out .git* from upstream branch pymatgen (2026.5.4+dfsg1-1) unstable; urgency=medium . * New upstream release - update versioned Build-Depends: python3-numpy-dev (>= 2.1.0~), pymatgen-test-files (>= 2026.5.4~) - applies debian patch move_pymatgen-core_9ac43d4.patch * python3-pymatgen Recommends: python3-vtk9 (>= 9.6.0~) without python3-paraview * update manage_tests.patch to read TEST_FILES_DIR from env variable PMG_TEST_FILES_DIR if set * debian patch fix_parallel_angle_comparison_PR4689.patch applies upstream PR#4689 to fix tem is_parallel (tests if crystal planes are parallel) pyproject-metadata (0.11.0-2) unstable; urgency=medium . * Team upload. * Drop build-dependency on python3-setuptools, this uses flit python-adax-local (0.3.0-1) unstable; urgency=medium . * Team Upload * Add minimal debian/gbp.conf * New upstream version 0.3.0 * Rewrite d/watch in v5 format * Bump Standards-Version to 4.7.4, drop Priority: tag * Bump debhelper from old 11 to 13. * Use versioned copyright format URI. python-aiohomekit (3.2.20-3) unstable; urgency=medium . * Team Upload * Use versioned copyright format URI. * Add debian/upstream/metadata * Drop dependency on python3-async-timeout, unused since Python 3.11 python-aiohomekit (3.2.20-2) unstable; urgency=medium . * Team Upload * Drop unused python3-mypy build-dep * Fix bug number in changelog * Disable useless Salsa CI jobs python-aiohomekit (3.2.20-1) unstable; urgency=medium . * New upstream release. * Add my name to Uploaders and copyright. * Add autopkgtest-pkg-pybuild. * Add to test dependencies. * Switch to using dh-sequence-python3. * Remove 'Priority: optional', now the default. * Update Standards-Version. * Update debian/watch to format version 5. * Use 'PYBUILD_AFTER_INSTALL=rm -rf' to remove installed tests data. (Closes: #1103320) * Add debian/salsa-ci.yml. python-aiohomekit (3.2.1-2) unstable; urgency=medium . * Reupload source-only. python-aiohomekit (3.2.1-1) unstable; urgency=medium . * Initial release. (Closes: #1077564) python-aiopulse (0.5.3-1) unstable; urgency=medium . * Team Upload * Add minimal debian/gbp.conf * New upstream version 0.5.3 * Replace python3-setuptools with python3-hatchling * Drop dependency on python3-async-timeout * Add build-dep on python3-psutil, python3-pytest, python3-pytest-asyncio * Use dh-sequence-python3 * Switch to debhelper-compat 14 * Rewrite d/watch in v5 format * Remove redundant Priority: optional from source stanza. * Use versioned copyright format URI. * Update standards version to 4.7.4, no changes needed. * Add debian/upstream/metadata python-django-stubs (5.2.9-3) unstable; urgency=medium . * Team Upload * python3-uv-build is available now, use it * Add debian/salsa-ci.yml * Update standards version to 4.7.4, no more changes needed. * Add debian/upstream/metadata * Drop "Rules-Requires-Root: no": it is the default now * Switch to debhelper-compat 14 . [ Jakob Haufe ] * Add watchfile * Update Standards-Version python-pathspec (1.1.1-2) unstable; urgency=medium . * Team upload. * Drop unused python3-setuptools build-dependency python-steamodd (5.0-2) unstable; urgency=medium . * Team Upload * Apply multi-arch hints. + python3-steamodd: Add Multi-Arch: foreign. * Bump Standards-Version: to 4.7.4, drop Priority: tag python-zopfli (0.4.3-2) unstable; urgency=medium . * Team upload. * Orphan the package. (See #1145566) qcom-firmware-extract (21) unstable; urgency=medium . * Update devices and paths for Linux 7.2 rst2pdf (0.105-1) unstable; urgency=medium . * New upstream release. * Re-enable tests, with less excluded ones. * Bump debhelper-compat to 14. * Bump Standards-Version to 4.7.4 (no changes needed). rust-hpke (0.13.0+ds-5) unstable; urgency=medium . * provide virtual package for minor-versioned crate * update watch file: capitalize file format field label * autopkgtest-check non-default-features tests only on amd64 * reorganize patch naming and numbering rust-hpke-dispatch (0.8.0+ds-7) unstable; urgency=medium . * provide virtual package for minor-versioned crate * update watch file: + capitalize file format field label + stop set auto-mangling of upstream version (now done by default) + limit to STABLE_VERSION * use debhelper compatibility level 14 (not 13) * reorganize patch naming and numbering * tighten (build-, autopkgtest-)dependencies for all crates rust-human-panic (2.0.8+ds-1) unstable; urgency=medium . [ upstream ] * new release . [ Jonas Smedegaard ] * update watch file: + capitalize file format field label + stop set auto-mangling of upstream version (now done by default) + limit to STABLE_VERSION * bump project versions in virtual packages and autopkgtests * reorganize patch naming and numbering * drop patch 2002_older_backtrace, obsoleted by Debian package changes * update DEP-3 patch headers * tighten (build-)dependencies for all crates * relax autopkgtest-dependencies * use debhelper compatibility level 14 (not 13) * autopkgtest-check non-default-features tests only on amd64 rust-select (0.6.1+ds-1) unstable; urgency=medium . * Team upload. * Package select 0.6.1 from crates.io using debcargo 2.8.4 sabnzbdplus (5.1.2+dfsg-1) unstable; urgency=medium . * New upstream release: + fixes two vulnerabilities. (Closes: #1145563) * Patches: refresh 02, 08, and 10. scenefx (0.5+ds-1) unstable; urgency=medium . * Initial release. (Closes: #1143103) scikit-build (0.18.1-6) unstable; urgency=medium . * Team upload. * Mark more build-dependencies as : - cmake - cython3 - python3-distro - python3-requests - python3-setuptools scikit-build-core (0.11.6-4) unstable; urgency=medium . * Team upload. * Mark python3-setuptools build-dependency as scikit-build-core (0.11.6-3) unstable; urgency=medium . * Team upload. * tests: stop using deprecated build.util.project_wheel_metadata (closes: #1143418). * Drop "Priority: optional", default as of dpkg-dev 1.22.13. * Standards-Version: 4.7.4. tin (1:2.6.6-1) unstable; urgency=medium . * New upstream release. viking (1.11+git20260816.2a242096-1) unstable; urgency=medium . * New upstream version 1.11+git20260816.2a242096 warzone2100 (4.7.0-3) unstable; urgency=medium . * Team upload * Add upstream patch to fix FTBFS with libvulkan-dev >= 1.4.350 (Closes: #1145503) * Rework d/p/datadir.patch (Closes: #1000302) * Rework the startup script a little bit (mitigates: #1084152, Closes: #1060158) * d/watch: convert to v5 wbxml2 (0.11.10+dfsg-4) unstable; urgency=medium . * Team upload * Add Lintian override for use of get-orig-source * Mark libwxml2-private-dev as Multi-Arch: same * Opt into Salsa CI * Run wrap-and-sort -ast * Update patch to use what was applied upstream