bmake (20200710-18) unstable; urgency=medium . * Don’t ship /usr/share/bmake/mk-netbsd/Makefile (Closes: #1149803). * Remove unit-tests/Makefile.config on clean (Closes: #1043887). * When invoked as pmake, prefer BSDmakefile (Closes: #1139341). breathe (5.1.0-1) unstable; urgency=medium . * Team upload. * New upstream version 5.1.0 * Call GENERATED_MOD somehow * Add build-dep on six python3-sphinxcontrib.* extensions * Salsa CI: test the nodoc profile * Drop "Rules-Requires-Root: no": it is the default now * Bump Standards-Version to 4.7.4, drop Priority: tag * Drop duplicated dependency on dh-python * Build-depends on python3-flit instead of the whole 'flit' toolbox * Rewrite d/watch in v5 format * Split-out Build-Depends-Indep * Set upstream metadata fields: Documentation. crmsh (5.1.0-3) unstable; urgency=medium . * d/tests: fix node status test crmsh (5.1.0-2) unstable; urgency=medium . * d/patches: fix python build crmsh (5.1.0-1) unstable; urgency=medium . * New upstream version 5.1.0 * d/patches: refresh for new version * d/control: update Standards-Version to 4.7.4 * d/crmsh.lintian-overrides: ignore groff warning * d/rules: update build for new version * d/patches: fix build and tests for new version flask-compress (1.25-1) unstable; urgency=medium . * Team Upload * Add debian/salsa-ci.yml * Use dh-sequence-python3 * New upstream version 1.25 . [ Dominik George ] * Update watch file to version 5. * New upstream version 1.23. (Closes: #1110986 ) + Refresh patches. + Add new build-deps brotlii and setuptools-scm. * Bump Standards-Version. * Enable PEP-517 pybuild plugin. frozenlist (1.8.0-4) unstable; urgency=medium . * Team upload. * Work around https://github.com/pytest-dev/pytest-cov/issues/755 (closes: #1149419). golang-github-google-cel-go (0.27.0+ds-7) unstable; urgency=medium . * Team upload * d/copyright: Drop stanza for removed debian/missing-sources * d/gitlab-ci.yml: Remove auto-generated pkg-go CI config * d/missing-sources: Drop embedded genproto copy * d/rules: Stop vendoring genproto expr/v1alpha1 from missing-sources * d/salsa-ci.yml: Add Salsa CI pipeline grub2 (2.14-4) unstable; urgency=medium . [ Trupti Shirsat ] * debian/patches: Fix grub-emu FTBFS on 32-bit powerpc due to PKS support (Closes: #1127348) . [ youwan Wang ] * debian/rules: serialize package build targets . [ Steve McIntyre ] * Backport fix for serial-MMIO secure boot bypass (Closes: #1148741) * Backport fixes for compilation with gcc-16 (Closes: #1128574) * Backport fix for boot failure when shim validation is disabled under secure boot (Closes: #1148719) jinja2 (3.1.6-4) unstable; urgency=medium . * Team upload. * Rewrite d/watch in v5 format * Make Python Team the Maintainer per new Team policy * Build-depends on python3-flit engine instead of the whole flit toolbox * Trim autopkgtest dependencies, avoid pulling in Flit mariadb-connector-java (3.5.10-1) unstable; urgency=medium . * New upstream release - Refreshed the patches - Updated the ignored plugins and dependencies - New patch to declare the JNA dependencies explicitly - New build dependency on Bouncy Castle - Removed the build dependency on the maven-replacer-plugin - Updated debian/copyright for the new source layout - Updated the package description, the driver is now JDBC 4.5 * Excluded the prebuilt class file from the upstream tarball * New patch to accept the jdbc:mysql: URLs mariadb-connector-java (2.7.15-1) unstable; urgency=medium . * New upstream release - Ignore the new Maven Central publication plugin * Removed the obsolete *.iml exclusion in debian/copyright * Removed the redundant Priority field * Standards-Version updated to 4.7.4 * Updated the watch file to track the intermediate upstream versions maxima (5.49.0+dsfg-6) unstable; urgency=high . * Bug fix: "maxima must recommend or depend on gcc as load maxima load command depends on gcc", thanks to Jerome BENOIT (Closes: #1143473). * Bug fix: "fails to load draw on loong64 arch", thanks to Jerome BENOIT (Closes: #1143982). Build depend on latest gcl27 node-gyp (13.1.0+~7.0.0-1) unstable; urgency=medium . * New upstream version 13.1.0+~7.0.0 * Update git repository layout to follow DEP-14 passenger (6.2.0+ds-1) unstable; urgency=medium . * Team upload. * Upgrade the watch file to version 5. * New upstream release. * Add an upstream metadata file. * Update Standards-Version to 4.7.4. * Bump debhelper-compat to 14, dropping ${misc:Depends} and ${shlibs:Depends} from runtime dependencies. protobuf (3.21.12-17) unstable; urgency=medium . [ Maximiliano Curia ] * Fix FTBFS due to deprecated enum-enum conversion (closes: #1145000). * Fix FTBFS due to the use of pkg_resources (closes: #1148466). pytest-qt (4.5.0-2) unstable; urgency=medium . * Upload to unstable. * Brings Qt 6.11 compatibility (for PySide6) (Closes: #1149293). . pytest-qt (4.5.0-1) experimental; urgency=medium . * New upstream release. * Remove Ghislain Vaillant from Uploaders, with thanks for previous contribution to maintenance of this package (Closes: #1138115). * Add myself to Uploaders. * Add additional egg-parts to d/clean (Closes: #1048340). * Update Standards-Version to 4.7.4 (no changes required). * Drop unneeded Priority:optional and R3:no fields. * Update d/watch to v5 format. * Run more of the test suite with different Qt bindings. * Add patch to permit test suite to run with multiple Qt bindings installed. * Run the tests without using Xvfb, using QT_QPA_PLATFORM=offscreen instead. pytest-qt (4.5.0-1) experimental; urgency=medium . * New upstream release. * Remove Ghislain Vaillant from Uploaders, with thanks for previous contribution to maintenance of this package (Closes: #1138115). * Add myself to Uploaders. * Add additional egg-parts to d/clean (Closes: #1048340). * Update Standards-Version to 4.7.4 (no changes required). * Drop unneeded Priority:optional and R3:no fields. * Update d/watch to v5 format. * Run more of the test suite with different Qt bindings. * Add patch to permit test suite to run with multiple Qt bindings installed. * Run the tests without using Xvfb, using QT_QPA_PLATFORM=offscreen instead. qemu (1:11.1.2+ds-1) unstable; urgency=medium . * new upstream stable/bugfix release: - Update version for 11.1.2 release - target/sh4: Replace TB_FLAG_GUSA_EXCLUSIVE with CF_STEP_ATOMIC - accel/tcg: Set CF_NOIRQ during cpu_exec_step_atomic - linux-user/sh4: align the vdso sigreturn trampolines - linux-user/sh4: fix vdso CFA for rt_sigreturn frames - linux-user/sh4: use the kernel's sigreturn trampoline sequence in the vdso - target/i386: Mark MOVNTI as not valid with prefixes 0x66, 0xF2, 0xF3 - target/i386: Update FPU tag word for FXCH - target/i386: Update FPU tag word for FSTP - target/i386: Update FPU tag word for FXTRACT's old ST(0) - target/i386: Fix FXCH to unconditionally clear C1 - target/ppc: Stop vCPU thread before calling parent_unrealize - tests/qtest/usb-hcd-xhci: test isoch endpoint type mismatch - tests/qtest/usb-hcd-xhci: test isoch pacing with MFINDEX above 2^32 - hw/usb/hcd-xhci: don't assert on NAK when retrying an isoch transfer - hw/usb/hcd-xhci: fix interval alignment after MFINDEX passes 2^32 - hw/usb/hcd-xhci: Set reentrancy guard in timer functions (Closes: CVE-2026-17588) - tcg/riscv64: Set vtype before whole-register vector loads - tests/tcg/s390x: Add regression test for #4449 - tcg/optimize: Fix expansion/simplification of deposit - tests/tcg/arm: Add regression test for #4448 - tcg/optimize: Fix fold_multiply2 vs 1 - accel/tcg: Fix TLB_MMIO check in tlb_plugin_lookup() - accel/tcg: Use TLB_FORCE_SLOW not TLB_MMIO for system plugins - hw/9pfs: mutate FID path from main thread only (Closes: #1149064, CVE-2026-93834) - s390x/pci: fix DMA slot leak on I/O TLB entry replacement - hw/s390x/ipl: Fix incorrect PCI IPL block lengths - linux-user/loongarch64: Detect vector stores in host_signal_write() - linux-user: implement mlock2(2) syscall - linux-user/riscv: honor zicntr=false for base counterCSRs - system/ram-discard-manager: fix offset_within_address_space in replay_by_populated_state() - igvm: mark qigvm_find_param_entry as static - igvm: validate and honor byte_offset in parameter directives - hw/uefi: add missing uefi_str_is_valid check to uefi_vars_mm_lock_variable - target/loongarch: Fix data race in CSR_ESTAT - hw/riscv/virt.c: fix aclint soc/mtimer nodename - target/arm/hvf: implement MDCCSR_EL0 as RAZ - target/arm/whpx: fix whpx-arm post-reset CPU state - target/arm/whpx: incorrect ENCODE_AA64_CP_REG parameter order - target/arm/whpx: Don't try to sync ARM_CP_CONST registers - hw/intc/bcm2835_ic: reject out-of-range FIQ source values - qga: Change effective user/group ID in guest-ssh-* commands (Closes: CVE-2026-12080) - vhost-user-gpu: validate command buffer size in submit_3d - ui/cursor: make the cursor refcount atomic - hw/display/qxl: hold ssd.lock while replacing ssd.cursor - hw/cxl: fix the CDAT DOE overlapping the Flex Bus DVSEC when sn= is set - virtio-scsi: set dataplane_started to false upon failure - virtio-balloon: fix free-page BH teardown on unrealize (Closes: CVE-2026-66899) - hw/virtio: reject inverted virtio-iommu IOVA ranges - hw/net/virtio-net: strip trailing padding when caching RSC segment (Closes: CVE-2026-66900) - hw/net/virtio-net: check packet size before VLAN tag access in receive_filter() - qapi/misc: Fix missed query-iothreads items - hw/cxl: Fix guest-triggerable QEMU exit on reserved interleave ways - virtio-gpu: clear res->blob on mapping cleanup - tests/unit: cover blocked IO during the websock handshake - io/channel-websock: do not lose QIO_CHANNEL_ERR_BLOCK while reading - tests/unit: add websock handshake test - io/channel-websock: handle a blocked write during the handshake - io/channel-websock: send an HTTP 400 when the greeting has no space - io/channel-socket: do not treat a zero length write as an error (the 5 changes above: Closes: CVE-2026-84788) - target/loongarch: Fix SWI interrupt delivery via CSR_ESTAT - hw/cxl: fix timer leak in cxl_destroy_cci() - hw/sd/sdcard: Register device ops in drives without media - hw/sd: sdhci: Accept version 4 enable without UHS-I - target/arm: Make Thumb T1 hint space UNDEF before v6T2 - target/arm: Make IT insn undef when not present - target/arm: Make CBZ/CBNZ UNDEF before v6T2 - target/arm: Correct reset value of SCTLR for arm926, arm1026 - target/arm: fix TTA instruction S bit for IDAU-exempt addresses - ppc/xive: Trigger the pending interrupt for a guest after migration - i386/vapic: unref MemoryRegion if vapic_map_rom_writable fails - vapic: confine the VAPIC region to 0xc0000..0xe0000 (Closes: #1148473, CVE-2026-81627) - scsi: hide MODE SELECT block size change behind a quirk - scsi-disk: fix out-of-bound read in WRITE SAME - target/riscv/kvm: Preserve MP state across migration - target/riscv/kvm: Synchronize privilege mode - hw/ide: report the default CHS translation in IDENTIFY DEVICE - tests/qtest/ide-test: cover a CHS translation with zero sectors - hw/ide: reject an unsupported CHS translation - s390x/sclp: pv: only copy the original SCCB buffer - dirty-bitmap: fix integer overflow in serialization coverage - block/monitor: allow dropping a bitmap never stored on disk - migration/block-dirty-bitmap: reject bitmap load onto ro node - block/monitor: reject persistent bitmap add on a read-only node - tests/unit/test-blockjob: cover keeping a job paused while a pause is pending - job: keep job paused across overlapping pause requests - hw/input/ps2: answer unknown mouse commands with a resend - hw/display/vga: fix text-mode OOB write after a graphics surface switch (Closes: CVE-2026-77913) - chardev: Don't unregister yank upon async path connection failure - crypto: fix build against nettle >= 4 - virtio-gpu: use g_try_malloc to avoid guest-triggered abort - hw/display/qxl: validate primary surface stride against width (Closes: CVE-2026-16271) * d/control: libjack-dev => libjack-jackd2-dev (Closes: #1146606)