clamav (1.4.6+dfsg-1) unstable; urgency=medium . [ Edmund Lodewijks ] * Import 1.4.6 (Closes: #1143939) - CVE-2026-20345 ("Fixed an indexing error while converting GPT partition names") - CVE-2026-20339 ("Fixed an integer overflow in the PESpin unpacker") - CVE-2026-20346 ("Fixed an integer underflow in the PDF parser") - CVE-2026-20347 ("Fixed undefined behavior and integer overflow in the Mach-O parser") - CVE-2026-20348 ("Fixed XAR parser size handling") - Fixed thread-safety issues in the clamd STATS command that could disclose process memory or crash the daemon deepin-util-dfm (1.4.3-1) unstable; urgency=medium . * Initial release. (Closes: #1144151) exim4 (4.100-1) unstable; urgency=medium . * RC3 released without further changes as 4.100. lrzsz (0.12.21rc-5) unstable; urgency=medium . * Fix a series of security-related bugs. Thanks to Daniel Birtwhistle for bringing these to our attention and for his support during patch verification: * 01-rz-reject-absolute-paths.diff: reject sender-supplied absolute paths in rz restricted mode. * 02-rz-terminate-received-strings.diff: reject over-length received file names, fixing an out-of-bounds read and a one-byte heap overwrite on maximum-length ZFILE names; also terminate the receiver buffer. * 03-rz-junk-path-double-free.diff: fix a double-free and a use-after-free when a --junk-path name ends in '/'. * 04-rz-null-flag-use-after-free.diff: fix use-after-free with -D/--null. nginx (1.30.4-5) unstable; urgency=medium . * d/{rules,control}: split architecture-dependent and independent builds * d/control: restore nginx-dev dependencies needed to build third-party modules nginx (1.30.4-4) unstable; urgency=medium . * d/rules: rewrite from the scratch * d/t/generic: test nginx-abi-* dependency for all libnginx-mod-* packages * d/t/control: add libnginx-mod-http-xss dependency for generic tests * d/t/control: add libnginx-mod-http-eval dependency for generic tests * d/t/control: add libnginx-mod-http-auth-jwt dependency for generic tests * d/control: remove ${misc:Depends}, ${perl:Depends}, ${shlibs:Depends} as debhelper 14 adds them automatically node-rollup-plugin-typescript2 (0.37.0+ds+~cs6.0.6-2) unstable; urgency=medium . * Fix build and tests with typescript 6 obs-advanced-scene-switcher (1.36.1-2) unstable; urgency=medium . * debian/rules: added a new override for a false positive from blhc. * debian/watch: added a Custom-Version field to ignore a suffix '-test' from the upstream. obs-advanced-scene-switcher (1.36.1-1) unstable; urgency=medium . * New upstream version 1.36.1. * debian/control: bumped compat level to 14. * debian/patches/010_fix-FTBFS-gcc16-qt6.patch: dropped. The new upstream version is already fixed. Thanks! openssh-gssapi (1:10.4p1-5) unstable; urgency=medium . * Split out openssh-gssapi source package, in preparation for dropping GSS-API authentication and key exchange support from the main openssh source package (closes: #1141274). pyferret (7.6.5-13) unstable; urgency=medium . * Drop obsolete debian/python3-ferret.lintian-overrides * Test mangling in d/watch python-backports.zstd (1.7.0+ds-2) unstable; urgency=medium . [ Maximiliano Curia ] * FTBFS building against python 3.15 (Closes: #1145080) . [ YOKOTA Hiroshi ] * Lintian fix: package-contains-documentation-outside-usr-share-doc * Lintian fix: malformed-python-version X-Python3-Version <= 3.13 * "<<" operator must use with ">=" operator * Lintian fix: unnecessary-team-upload * Lintian fix: package-uses-old-debhelper-compat-version * debhelper requires "single-binary" addon for single binary package since debhelper-compat=14 python-backports.zstd (1.7.0+ds-1) unstable; urgency=medium . * New upstream version 1.7.0+ds * Rediff patches python-idasen (0.12.0-4) unstable; urgency=medium . * Team Upload * Drop build-dep on python3-setuptools, this uses Poetry * Drop unused python3-mypy build dependency * Use versioned copyright format URI. * Update standards version to 4.7.4, no changes needed. * Add debian/upstream/metadata python-libusb1 (3.4.0+ds-1) unstable; urgency=medium . * New upstream release. * Re-add debian/lintian-overrides to override a package-contains-documentation-outside-usr-share-doc tag. * Remove debian/source/lintian-overrides, as the problem with these tags has been fixed by an update to lintian. * debian/control: - Bump debhelper-compat from 13 to 14, removing the now-unnecessary ${misc:Depends} and ${python3:Depends}. - Add Build-Depends on dh-sequence-single-binary. python-scrapy (2.18.0-1) unstable; urgency=medium . * New upstream version. * Cleanup Uploaders. * Update Build-Depends: - Add python3-backports.zstd (now required on Python 3.13). - Add python3-brotli (now required). - Add python3-cryptography (explicitly, though it was already required). - Add python3-pytest-rerunfailures (new build dep). - Add python3-pytest-timeout (new build dep). - Add python3-sphinx-reredirects (new build dep). - Remove python3-testfixtures (no longer used). - Remove python3-zstandard (no longer used). * Remove python3-brotli from Recommends as it's now in Depends. resource-agents (1:4.18.0-4) unstable; urgency=medium . [ Alexandre Detiste ] * Salsa CI: test nocheck profile * use dh-sequence-python3 . [ Valentin Vidic ] * debian/tests: add missing depends (Closes: #1144831) rust-relative-path (2.0.1-1) unstable; urgency=medium . * Package relative-path 2.0.1 from crates.io using debcargo 2.8.4, Closes: #1125175 * Relax dep on foldhash * Fix test feature gates, only run when std+alloc rust-rstest-macros (0.26.1-4) unstable; urgency=medium . * Team upload. * Package rstest_macros 0.26.1 from crates.io using debcargo 2.8.4 * Relax dep on relative-path * Update to rstest_test 0.14 in replace-path-dev-deps.patch yalexs-ble (4.0.5-1) unstable; urgency=medium . * New upstream release. REMOVED: fcitx-fullwidthchar-enhance 0.0~git20150311-3.1 REMOVED: golang-gopkg-mail.v2 2.3.1-5 REMOVED: planetblupi 1.15.1-2 REMOVED: golang-github-cznic-zappy 0.0~git20160305.0.4f5e6ef-3 REMOVED: libnet-twitter-perl 4.01043-2 REMOVED: libdist-zilla-plugin-twitter-perl 0.026-3 REMOVED: golang-gopkg-redis.v5 5.2.9-4 REMOVED: fcitx-qt5 1.2.7-4 REMOVED: golang-github-kyoh86-xdg 1.2.0-3 REMOVED: golang-github-facebookgo-atomicfile 0.0~git20151019.2de1f20-3 REMOVED: golang-github-facebookgo-structtag 0.0~git20150214.217e25f-4 REMOVED: golang-github-keybase-go-ps 0.0~git20190827.91aafc9-1.1 REMOVED: golang-github-smartystreets-go-aws-auth 1.0.0-1 REMOVED: golang-github-mitchellh-go-vnc 0.0~git20150629.723ed98-2 REMOVED: golang-github-cznic-b 0.0~git20151027.0.01b13d7-2 REMOVED: golang-github-gopasspw-pinentry 0.0.2-2 REMOVED: fcitx-punc-ng 0.1.1~git20161101-2.1 REMOVED: exult 1.12.1-3 REMOVED: golang-github-cznic-bufs 0.0~git20140818.0.3dcccbd-2 REMOVED: songwrite 3-0.2-3 REMOVED: fcitx-autoeng-ng 0.1.1~git20150311-2.1 REMOVED: solfege 3.23.4-14 REMOVED: timidity 2.14.0-8.4 REMOVED: lomiri-eartrainer-app 0.4.4-3