attr (1:2.6.0-1) unstable; urgency=medium . * New upstream release. - Refresh local patches. - Remove upstream patches included in this release. - Update upstream OpenPGP signing certificates. - Fix symlink traversal vulnerability [CVE-2026-54371]. Closes: #1141107 * Remove build dependency on debhelper (>= 13.10) implied by debhelper-compat (= 13) since Debian bookworm. * Remove build dependencies on automake, autoconf and libtool implied by debhelper-compat (>= 10) since Debian stretch. * Switch to Standards-Version 4.7.4 (no changes needed). * Refactor common synopsis into a source stanza Description field. * Improve and clarify package descriptions. * Switch debian/watch URL to use the one not affected by mirroring, as that has delays of up to a day. audacity (3.7.8+dfsg-1) unstable; urgency=medium . * New upstream version 3.7.8+dfsg * Refresh patchset * Bump dh-compat to 14 * Bump Standards-Version to 4.7.4 * Remove redundant priority optional field * Refresh d/audacity.lintian-overrides * Fix typo in d/changelog blinkpy (0.25.7-1) unstable; urgency=medium . * New upstream release. * Remove debian/gbp.conf, switch to dgit. chemonomatopist (0.11.5-2) unstable; urgency=medium . * Binary package depends on libgetopt-long-descriptive-perl (Closes: #1141143) debian-keyring (2026.06.27) unstable; urgency=medium . * Add new DD key 0x68C287DFC6A80226 (Colin Ian King) (RT #10018) * Add new DD key 0x1AF4A75FE769BC68 (Nadzeya Hutsko) (RT #10019) * Add new DN key 0xFC8247F5D511EC65 (Benjamin Somers) (RT #10020) * Updates from keyring.debian.org HKP interface: * 0x0449405060954F9D Maarten L. Hekkelman sig:1 * 0x05B8F2B072A0E0EB Pieter Lenaerts sig:1 * 0x16B9F687A32466F9 Sahil Dhiman uid:1 sig:1 * 0x2948210746DF73C0 Kurt Kremitzki sig:3 * 0x3054862D2546A180 Joachim Falk sig:2 * 0x38A890B653397A55 Nicolas Schodet sig:5 * 0x46957EC08FD0FE90 Robin Jarry sig:3 * 0x57930DAB0B86B067 Joost van Baal sig:2 * 0x5A8830475F7D1061 Nicholas D Steeves sig:3 * 0x5EE76EE20216D2A5 Lev Lamberov sig:7 * 0x62645EB35F686A8A Mo Zhou sig:6 * 0x69F30763DFEFC134 Steven Chamberlain sub:2 sig:4 * 0x7A6A4F175995A65B Marc Leeman sig:4 * 0x826FADFF59548BFC Alberto Bertogli sig:2 * 0x84E624545A27D942 David da Silva Polverari sig:3 * 0xA199D76BCA4691E3 Joan Lledó sig:3 * 0xA350B991F05A4857 Martin A. Godisch uid:1 sig:1 * 0xA5FF4BB3EA53C5DF Vivek K J uid:1 sig:1 * 0xA81CEA22BC8C7E2E Luca Boccassi sub:1 sig:2 * 0xADF50EDAF8ADD585 Sven Geuer uid:1 sig:18 dhcpcd (1:10.3.2-4) unstable; urgency=medium . * [patches] (Closes: #1140767) + Cherry-pick upstream fix for CVE-2026-56113 (commit 5733d3c). + Cherry-pick upstream fix for CVE-2026-56114 (commit 2f00c7b). + Cherry-pick upstream fix for CVE-2026-56116 (commit 708b4a5). + Cherry-pick upstream fix for CVE-2026-56117 (commit 78ea09e). dimmer-el (0.4.3-1) unstable; urgency=medium . * New upstream version 0.4.3 * Add patch to fix version number * d/copyright: Bump copyright years * d/control: Declare Standards-Version 4.7.4 (no changes needed) * d/control: Drop Priority: optional * d/control: Drop Rules-Requires-Root: no * d/watch: Migrate to version 5 dnsdiag (2.6.0-2) unstable; urgency=medium . * Team upload. * Set Debian Python Team as Maintainer per new team Policy * Mark test build-deps as * Add debian/salsa-ci.yml * Drop "Rules-Requires-Root: no": this is now the default * Bump Standards-Version to 4.7.4, drop Priority: tag * Rewrite d/watch in v5 format dulwich (1.2.7-2) unstable; urgency=medium . * Team Upload * Salsa CI: test the profile * Mark python3-fastimport & python3-gpg as * Use dh-sequence-python3 * Drop "Rules-Requires-Root: no": it is the default now * Remove redundant Priority: optional from source stanza. e-antic (2.1.1+ds-1) unstable; urgency=medium . * New upstream nano release. * Debianization: - d/patches/*: - d/p/sturm-sign-change.patch, integrated; - d/control: - Standards-Version, bump to version 4.7.4 (no change). ecflow (5.17.0-2) unstable; urgency=medium . * Debhelper compat now 14 * pybind.patch: handle new-style init ecflow (5.17.0-1) unstable; urgency=medium . * Standards-Version: 4.7.4 * Set -DCMAKE_BUILD_RPATH_USE_ORIGIN=ON for reprod. builds * New upstream release. Closes: #1138344 * Update build-deps for qt6; b-d on qt6-svg-dev * Build-dep on pybind11-dev elementpath (5.1.3-1) unstable; urgency=medium . * New upstream version 5.1.3 * Bump Standards-Version to 4.7.4 * Migrate to debhelper 14 elpher (3.7.0-1) unstable; urgency=medium . * Team upload * New upstream version * d/gbp.conf improvements - Update upstream-tag to Debian specific format to for better `gbp import-orig --uscan' support. - Add upstream-vcs-tag setting in d/gbp.conf * Migrate d/watch to version 5 format * Remove redundant Priority: optional from source stanza. * Update standards version to 4.7.4, no changes needed. * Drop `Rules-Requires-Root: no'; now default * Upgrade to debhelper-compat level 14; no change needed * Change section lisp -> editors * Add d/salsa-ci.yml with the default template emacs-git-modes (1.5.0-1) unstable; urgency=medium . * New upstream version 1.5.0 * Update patch to fix version number * d/control: Declare Standards-Version 4.7.4 (no changes needed) exec-path-from-shell-el (2.3-1) unstable; urgency=medium . [ Xiyue Deng ] * Fix link in d/upstream/metadata * Improve d/watch with special substitute strings to be more robust * Mark vendored patch as "Forwarded: not-needed" . [ Lev Lamberov ] * New upstream version 2.3 * d/copyright: Update copyright years * d/control: Declare Standards-Version 4.7.4 (no changes needed) * d/control: Drop Rules-Requires-Root: no * d/control: Drop Priority: optional * d/watch: Migrate to version 5 fonts-font-awesome-legacy (6-3) unstable; urgency=medium . * Fix fontnames to match upstream's names fonts-font-awesome-legacy (6-2) unstable; urgency=medium . * Fix fontnames to make them all unique (append subtype to name) fortran-jonquil (0.3.2-1) unstable; urgency=medium . * New upstream release * Debhelper compat now 14 fparser (0.2.4-1) unstable; urgency=medium . * New upstream release * Debhelper compat now 14 game-data-packager (89) unstable; urgency=medium . * New versions: - doom3: Update The Lost Mission to v1.5.7 [Sébastien Noel, Simon McVittie] - doom3: Add .zip version of Classic Doom v1.3.1 [Simon McVittie] * Enhancements and bug fixes: - doom3: Stop building native-code game modules. src:dhewm3 now provides those in additional binary packages [Sébastien Noel] - heretic2: Enable the heretic2-music package [Sébastien Noel] - make-template: Fix a crash if existing files in a template are alternatives groups [Simon McVittie] * Debian packaging: - d/*-server.postrm: Don't lock the system account on purge. usermod isn't guaranteed to be available during purge (it's no longer Essential) and the system account should have been created in a locked state anyway. [Simon McVittie] - d/*-server.postrm: Rely on dh-cruft >= 0.9.81 to remove /var/games when it becomes empty [Alexandre Detiste] - d/*-server.postinst: Ensure system users are locked during upgrade. This makes them consistent with system users newly-created via sysusers.d(5). [Simon McVittie] - d/etc/quake3-server/server.cfg: Make the example server config usable without configuration for both the full game and the demo data, making quick tests easier [Simon McVittie] - d/quake*-server.init: Use /run in preference to /var/run for process ID files [Alexandre Detiste] - d/control: Remove leftover Depends on adduser [Simon McVittie] * Internal changes: - Improve typing annotations [Alexandre Detiste, Simon McVittie] - tests: Make all test scripts independently runnable [Simon McVittie] gereal (0.1.1-1) unstable; urgency=medium . * New upstream version 0.1.1 * improve README.md * improve attribution and program names in screenrc * fix typo in gereal-generator * fix wrong service name in gerealctl * add gerealshell and documentation * Fix gereal.sysusers * add python3-yaml to dependencies gist (6.1.0-1) unstable; urgency=medium . * Team upload. . [ Lucas Nussbaum ] * debian/gbp.conf: Add for DEP-14 * debian/gbp.conf: remove trailing empty lines * debian/.gitattributes: remove * debian/salsa-ci.yml: use team-specific include . [ Simon Quigley ] * New upstream release. * Upgrade the watch file to version 5. * Refresh the upstream metadata. * Add patch headers. * Refresh the copyright file. * Update Standards-Version to 4.7.4. * Bump debhelper-compat to 14, dropping ${misc:Depends}, ${shlibs:Depends}, and ${ruby:Depends} from runtime dependencies. * Drop redundant override_dh_auto_install. * Ensure we actually run dh_auto_build. * Add a runtime dependency on ruby:any. golang-github-antithesishq-antithesis-sdk-go (0.7.2-1) unstable; urgency=medium . * New upstream release * Update Standards-Version to 4.7.4 in d/control (no changes needed) golang-github-delthas-go-libnp (0.2.0-1) unstable; urgency=medium . * New upstream release 0.2.0. * d/watch: Update to version 5. * d/gbp.conf: Add upstream-vcs-tag. * d/control: - Use my @d.o mail address. - Add build-dependency on golang-github-go-ole-go-ole-dev. - Drop redundant Priority field. - Bump Standards-Version to 4.7.4. - Drop redundant Rules-Requires-Root field. golang-github-emersion-go-varlink (0.1.0-1) unstable; urgency=medium . * Initial release (Closes: #1140804) gupnp (1.6.10-1) unstable; urgency=medium . * New upstream release * Cherry-pick patch to increase build test timeout * Update minimum gssdp * Update Standards Version to 4.7.4 kf6-kholidays (6.26.0-1) unstable; urgency=medium . [ Aurélien COUDERC ] * New upstream release (6.26.0). * Update build-deps and deps with the info from cmake. * Update symbols from build for 6.26.0. * Refresh copyright information. kwalify (0.7.2-10) unstable; urgency=medium . * Team upload. . [ Lucas Nussbaum ] * debian/gbp.conf: Add for DEP-14 * debian/.gitattributes: remove * debian/salsa-ci.yml: use team-specific include . [ Simon Quigley ] * Fix old-fsf-address-in-copyright-file * Upgrade the watch file to version 5. * Add an upstream metadata file. * Add patch headers to all of the patches. * Refresh the rules file. * Refresh the copyright file. * Drop {XS,XB}-Ruby-Versions from control. * Bump debhelper-compat to 14, dropping ${misc:Depends}, ${shlibs:Depends}, and ${ruby:Depends} from runtime dependencies. * Update Standards-Version to 4.7.4. libcss-minifier-xs-perl (0.14-1) unstable; urgency=medium . * Import upstream version 0.14. - Fixes a memory leak in minify(), when the entire document is minified away. CVE-2026-13593 * Update years of upstream and packaging copyright. * Declare compliance with Debian Policy 4.7.4. * Remove «Rules-Requires-Root: no», which is the current default. * Remove «Priority: optional», which is the current default. libecoli (0.11.7-1) unstable; urgency=medium . * New upstream release. libecoli (0.11.6-1) unstable; urgency=medium . * Initial release. (Closes: #1137331) libjavascript-minifier-xs-perl (0.16-1) unstable; urgency=medium . [ Debian Janitor ] * Update standards version to 4.6.1, no changes needed. . [ gregor herrmann ] * Import upstream version 0.16. - Fixes CVE-2026-56017, which caused Perl to SEGFAULT when calling minify(). Thanks to CPANSec for raising the issue, and providing a prototype fix. - Fixes CVE-2026-56018, caused by a memory leak in minify() where each tokenized Node's "contents" buffer were not properly freed, resulting in a memory leak on every call. * Update years of upstream and packaging copyright. * Declare compliance with Debian Policy 4.7.4. * Remove «Rules-Requires-Root: no», which is the current default. * Remove «Priority: optional», which is the current default. libjs-jush (2.2.0-1) unstable; urgency=medium . * New upstream version 2.2.0 * declare compliance to policy 4.7.4 (remove redondant dctrl fields) * compile asset was removed from source dist: remove lintian-override loki-ecmwf (0.4.0-1) unstable; urgency=medium . * New upstream release loki-ecmwf (0.3.7-1) unstable; urgency=medium . * New upstream release * Drop after.patch; no longer needed. * Standards-Version: 4.7.4 * Debhelper compat now 14 lolcat (100.0.1-5) unstable; urgency=medium . * Team upload. . [ Lucas Nussbaum ] * debian/gbp.conf: Update for DEP-14 * debian/.gitattributes: remove * debian/salsa-ci.yml: use team-specific include . [ Simon Quigley ] * Upgrade the watch file to version 5. * Refresh the upstream metadata. * Refresh the rules file. * Refresh the copyright file. * Update Standards-Version to 4.7.4. * Bump debhelper-compat to 14, dropping ${misc:Depends}, ${shlibs:Depends}, and ${ruby:Depends} from runtime dependencies. * Add missing build dependencies. * Add Forwarded: not-needed to relax-optimist.patch. lomiri-thumbnailer (3.1.2-1) unstable; urgency=medium . * Team upload . [ Jeremy Bícha ] * New upstream release * Remove all patches: applied in new release . [ Grzegorz Szymaszek ] * debian/copyright.in: regenerate * debian/copyright: sort maildir-utils (1.14.2-1) unstable; urgency=medium . * New upstream version 1.14.2 - mu + significant speed-ups in the cleanup process after `mu index` - mu4e + `mu4e-main-hide-personal-addresses` can now also be a number, which is the maximum number of addresses to show. + `mu4e-compose-reply-include-mime-types` specifies the mime-types for message attachments that should be included in replies, with the default set to "text/x-patch" -- i.e., patches are included in replies. + `mu4e-compose-post-hook` only runs once per message (buffer) + One can get icons for MIME-types in the message-view and when using `mu4e-view-mime-part-action`, by configuring `mu4e-file-name-to-icon-function` (see docstring). + The message-view display has been stream-lined in number of ways, removing some of the Gnus-elements. + `mu4e-compose-crypto-policy` now also recognizes `sign-signed-replies`, to automatically sign when replying to signed messages. + For Org-integration, there is a new command `mu4e-org-agenda-links` to pop up a buffer with a tabulated list of the mu4e links in one's `org-agenda-files`. + When replying to message with a region marked, only the marked region is cited. - scm + added new ~--eval~ command-line option. * d/patches - refresh patches * d/control - bump Standards-Version to 4.7.4 * d/maildir-utils.install - remove osbolete Guile bindings * d/NEWS - add entry explaining that the old Guile bindings are no longer installed. meson-python (0.19.0-2) unstable; urgency=medium . * Team Upload * Salsa CI: test & profiles * Mark Sphind build-dependencies as * Update standards version to 4.7.4, no changes needed. * Use dh-sequence-* build dependencies instead of dh --with: sphinxdoc. mwrap (1.3.4-1) unstable; urgency=medium . * New upstream version 1.3.4 . mwrap (1.3.2-2) unstable; urgency=medium . * d/control: Bump Standards-Version to 4.7.4 (no changes needed) * Change Maintainer and Vcs-* paths to octave-team nodejs (24.18.0+dfsg+~cs24.13.2-1) unstable; urgency=medium . * New upstream version 24.18.0+dfsg+~cs24.13.2 oar (2.6.1-1.1) unstable; urgency=medium . * Non-maintainer upload. * Fix FTBFS. (Closes: #1136780) ocaml-ffmpeg (1.3.1-1) unstable; urgency=medium . * Team upload * New upstream release * Use dh_ocamllibinstall, set dune_layout_version to 1 openslide-python (1.4.6-2) unstable; urgency=medium . * d/rules: isolate samples shabang fixup. This change repairs architecture dependent packages building on buildds. openslide-python (1.4.6-1) unstable; urgency=medium . * New upstream version 1.4.6 * d/copyright: freshen copyright information. * d/control: declare compliance to standards version 4.7.4. * d/*lintian-overrides: deleted. The tags that were flagged do not exist anymore and are triggering lintian errors. * d/control: bump to debhelper-compat 14. * d/rules: fix interpreter shebang in sample files. * d/rules: remove top_level.txt from the binary package. openssh (1:10.3p1-5) unstable; urgency=medium . [ Johannes Schauer Marin Rodrigues ] * Support DPKG_ROOT. . [ Colin Watson ] * d/copyright: Significantly rework to be lrc-clean. . [ Roland C. Dowdeswell ] * Fix GSS C25519 server blob bounds check. pangomm2.48 (2.56.2-1) unstable; urgency=medium . * New upstream release * Update debhelper compat to 14 * Update Standards Version to 4.7.4 passwdqc (2.1.0-2) unstable; urgency=medium . * Team upload * Enable autopkgtest : Add necessary files to enable autopkgtest * debian/tests: add autopkgtest exercising pam_passwdqc via PAM pg-permissions (1.4.1-1) unstable; urgency=medium . * New upstream version 1.4.1. pg-pwhash (1.0-2) unstable; urgency=medium . * On trixie and plucky, depend on libscrypt-dev. The library there is missing the SONAME. python-vcsgraph (0.3.2-1) unstable; urgency=medium . * New upstream release. ruby-dirty-memoize (0.0.4-3) unstable; urgency=medium . * Team upload. . [ Lucas Nussbaum ] * debian/gbp.conf: Add for DEP-14 * debian/gbp.conf: remove trailing empty lines * debian/.gitattributes: remove * debian/salsa-ci.yml: use team-specific include . [ Simon Quigley ] * Upgrade the watch file to version 5. * Refresh the upstream metadata. * Modernize ruby-tests.rake. * Refresh the rules file. * Refresh the copyright file. * Drop {XS,XB}-Ruby-Versions from control. * Update Standards-Version to 4.7.4. * Bump debhelper-compat to 14, dropping ${misc:Depends}, ${shlibs:Depends}, and ${ruby:Depends} from runtime dependencies. rust-jql (8.1.2-1) unstable; urgency=medium . * Package jql 8.1.2 from crates.io using debcargo 2.8.2 shutdown-at-night (0.25) unstable; urgency=medium . * Install executables/script to /usr/libexec/ rather than /usr/lib/. * shutdown-at-night: - Filter out sessions running as user lightdm in is_local_user function. - Only call logger command if /dev/log exists, otherwise use echo command. - Swap logic and rename function is_xsession_used() to is_displaymanager_active(). - Hide stderr of xlsclients call (seen when lomiri-greeter is used). - Add support for recognizing Lomiri Greeter. - Add support for recognizing slick-greeter as a LightDM greeter frontend. - Add support for latest GDM3 (current Debian forky state). - Add more logs so the admin can better find out why a shutdown did not happen. * debian/: + Install systemd timers alongside the cron.d config file. * debian/control: + Drop Priority: field in global header, bump Standards-Version: to 4.7.4. * debian/copyright: + Add myself as co-copyright holder where appropriate. squid (7.6-2) unstable; urgency=low . [ Amos Jeffries ] * debian/rules - Sort build flags list for easier maintenance. - Remove obsolete --enable-async-io flag. - Add entries to document available features. . * Add new external ACL helpers. . [ Luigi Gangitano ] * debian/changelog - Added references to security fixes in 7.6 switchsh (0~20070801-5.1) unstable; urgency=medium . * Non-maintainer upload. * Fix FTBFS. (Closes: #1136783) telepathy-ofono (0.4.0-1) unstable; urgency=medium . * Team upload * new upstream version * rebase debian/patches: - 1001_c++17.patch applied upstream * update debian/copyright timescaledb (2.28.2+dfsg-1) unstable; urgency=medium . * New upstream version 2.28.2+dfsg. tone-generator (1.6.2-1) unstable; urgency=medium . * Team upload * New upstream release * Drop debian/patches vdeplug-agno (0.1.3-1) unstable; urgency=medium . * New upstream version 0.1.3 (Closes: #1139635) * d/control update standard to 4.7.4. no changes needed. * d/control update debhelper-compat to 14 * add --without=single-binary to dh call in d/rules vdeplug-agno (0.1.2-1) unstable; urgency=medium . * New upstream version 0.1.2 (Closes: #1113611) * d/control update standard to 4.7.2. no changes needed. vdeplug-agno (0.1.1-1) unstable; urgency=medium . [ Renzo Davoli ] * New upstream version 0.1.1: + Fix ssl dependency detection. * d/control: do not manually Depend on shared libraries. Closes: #1001145 . [ Mattia Rizzolo ] * d/watch: drop unneeded uupdate call, and wrong filenamemange option. * d/rules: delete commented-out options. * d/rules: delete -Wl,--as-needed, default behaviour in bullseye. * d/control: Bump Standards-Version to 4.6.0, no changes needed. * d/control: Mark libvdeplug-agno as Multi-Arch:same (from the M-A hinter). vdeplug-agno (0.1.0-3) unstable; urgency=medium . * d/control: Remove useless dependency vdeplug-agno (0.1.0-2) unstable; urgency=medium . * d/control: Set Maintainer to Debian VirtualSquare Team * d/control: Add VirtualSquare Uploader * d/control: Fix Vcs * Initial Debian release (Closes: #975717) xdg-desktop-portal-wlr (0.8.3-1) unstable; urgency=medium . * New upstream release