autoclass (3.3.6.dfsg.2-4) unstable; urgency=medium
 .
   * QA upload.
   * Ran wrap-and-sort.
   * debian/control:
       - Bumped Standards-Version to 4.7.4.
       - Removed no longer needed "Priority: optional" field.
       - Removed no longer needed "Rules-Requires-Root: no" field.
   * debian/copyright: Updated packaging copyright years.
   * debian/patches/0002-Fix-FTBFS-werror.patch:
       - Added patch to fix FTBFS with -Werror.
   * debian/rules:
       - Improved hardening support.
       - Removed invalid "-format" compiler option.
       - Enabled all hardening flags via DEB_BUILD_MAINT_OPTIONS=hardening=+all.
   * debian/salsa-ci.yml: Added to provide CI tests on Salsa.
   * debian/watch:
       - Added a fake site documenting that the original upstream homepage is no
         longer active.

bti (034-7) unstable; urgency=medium
 .
   * Update Vcs-* fields to salsa.
   * debian/watch: use version 5.
   * Add debian/salsa-ci.yml.
   * Add debian/gbp.conf.
   * Declare compliance with Debian Policy 4.7.4.
   * Remove «Rules-Requires-Root: no», which is the current default.
   * Remove «Priority: optional», which is the current default.
   * Upgrade upstream signing key to new packet format.
   * Update years of packaging copyright.
   * Use dh-sequence-shell-completions.

calceph (4.0.5-4) unstable; urgency=medium
 .
   * Fixed calceph.mod install (Closes: #1133805)
   * Updated standards to 4.7.3
calceph (4.0.5-2) experimental; urgency=medium
 .
   * Added autopkgtest integration tests
calceph (4.0.5-1) experimental; urgency=medium
 .
   * Update to upstream 4.0.5
   * Update debian/libcalceph2.symbols

ccache (4.13.6-1) unstable; urgency=medium
 .
   [ Bastian Germann ]
   * Support the nocheck build option
 .
   [ Joel Rosdahl ]
   * New upstream release 4.13.6
ccache (4.13.2-1) unstable; urgency=medium
 .
   * New upstream release 4.13.2
   * Remove nonstd-span from debian/copyright
   * Update copyright years
   * Update doc patch
   * Include Markdown docs
   * Update to watch file format 5
   * Update Standards-Version to 4.7.3, removing Priority field

cif-tools (2.0.0-1) unstable; urgency=medium
 .
   [ Andreas Tille ]
   * Team upload.
   * d/watch: version=5
   * Standards-Version: 4.7.4 (routine-update)
   * Remove Priority field (cme)
   * Drop default 'Rules-Requires-Root: no' from d/control (routine-
     update)
   * Remove empty debian/patches/series.
   * Replace pkg-config with pkgconf in Build-Depends
 .
   [ Maarten L. Hekkelman ]
   * New upstream

click (0.5.2-10) unstable; urgency=medium
 .
   * Team upload
   * Fix architecture dependent build
   * Remove unused duplicate keyring copies
   * Revert "debian/rules: Create .placeholder file":
     lintian hasn't complained about empty directories since 2.42.0
click (0.5.2-9) unstable; urgency=medium
 .
   * Team upload
 .
   [ Jeremy Bícha ]
   * click-dev: Add Provides: dh-sequence-click
   * Add lintian override for use of get-orig-source
   * Add Built-Using: ${sphinxdoc:Built-Using} to -doc package
   * Run wrap-and-sort -ast
   * Update gir handling (Closes: #1118802)
   * Update Standards Version to 4.7.4
 .
   [ Luca Boccassi ]
   * Stop deleting system user on remove/purge
   * Install and use sysusers.d/tmpfiles.d config files
 .
   [ Thorsten Alteholz ]
   * Use salsa-ci.yml instead of .gitlab-ci.yml

clnkr (0.3.11-1) unstable; urgency=medium
 .
   * Initial release (Closes: #1135616)

cmor (3.15.0-1) unstable; urgency=medium
 .
   * New upstream release

con-duct (0.20.1-1) unstable; urgency=medium
 .
   * Team upload.
   * New upstream version.
   * debian/copyright: Updated.
   * debian/watch: Update to version 5.
   * debian/control: Add new dependency python3-dotenv.
   * debian/control: Use Standards-Version 4.7.4.
   * debian/rules: Fix man page generation and broken VERSION variable.
   * debian/patches: Refresh patches.
     - d/p/0003-Increase-wait-time-on-rerun-for-flakey-tests.patch:
       Dropped, merged upstream.

cowsql (1.15.9-2) unstable; urgency=medium
 .
   * Cherry-pick upstream fix for building with glibc 2.43 (Closes: #1128536)
   * d/control:
     - Update Standards-Version to 4.7.4
     - Drop redundant Priority and Rules-Requires-Root fields

crunch-dxtc (0.56.2-1) unstable; urgency=medium
 .
   * New upstream release

dataproperty (1.1.1-1) unstable; urgency=medium
 .
   * New upstream release.
   * Update Standards-Version.
   * Update copyright year.
   * Simplify debian/rules.

deal.ii (9.7.1-6) unstable; urgency=medium
 .
   * Team upload.
   * Add petsc_3.25_compatibility_PR_19344.patch in preparation of upcoming
     transition to PETSc 3.25.

debcraft (0.9.0) unstable; urgency=medium
 .
   [ Otto Kekäläinen ]
   * Add terminal title to indicate Debcraft state
   * Force color output when possible
   * Clean up source directory after build when --copy is used
   * Normalize build log filename to build.log
   * Capture stderr in both build.log and dedicated build.err.log
   * Automate watch file migration to uscan v5 format
   * Convert uscan watch template for GitHub to Dist URL format
   * Add check to ensure binaries used in autopkgtest are from latest commit
   * Save autopkgtest output to test.log alongside build artifacts
   * Emit autopkgtest exit code and don't fail on skipped tests
   * Skip Quilt patch application on gbp patch-queue branches
   * Auto-create local pristine-tar branch on fresh clones
   * Fix duplicate orig tarball error in full builds
   * Support zstd compressed orig tarballs
   * Optimize PPA uploads to skip redundant tarballs on subsequent revisions
   * Add `--yes` option to skip PPA upload confirmation prompt
   * Implement content-based container caching via SOURCE_DATE_EPOCH=0
 .
   [ Roland Mas ]
   * Add --extra-repository to $DEBCRAFT_EXTRA_REPOSITORY
   * Implement --release-to
   * Set nullglob globally
   * Use cp --no-clobber/--update=none according to coreutils version
 .
   [ Luca Soler ]
   * Support custom apt source filenames for Debian derivatives
   * Add support for custom distribution mapping via config files

deepdiff (9.0.0-1) unstable; urgency=medium
 .
   * Team upload.
   * New upstream version
     Closes: #1131472
   * Update Homepage
   * Update Source
   * d/watch: version=5
   * Standards-Version: 4.7.4 (routine-update)
   * Reflow Uploaders field (cme)
   * Remove Priority field (cme)
   * Set upstream metadata fields: Documentation, Repository, Repository-Browse.

dh-make-perl (0.133) unstable; urgency=medium
 .
   * Debian::Upstream::Metadata::Perl convert:
     don't write file if we have no content.
   * Drop add_quilt().
     Thanks to Alexandre Detiste for the bug report.
     (Closes: #1114008)

dupd (1.7.3-4) unstable; urgency=medium
 .
   * Remove built-in manpage (binary size reduction 31% on amd64).
   * d/control: set Architecture to linux-any.
   * Std-ver 4.7.4 (trivial update)

emacs-pg-el (0.66-1) unstable; urgency=medium
 .
   * New upstream release
   * Update my email address

eprosima-idl-parser (4.3.0+dfsg-1) unstable; urgency=medium
 .
   * New upstream version 4.3.0+dfsg
   * Bump Standards-Version to 4.7.4

evdi (1.14.16+dfsg-1) unstable; urgency=medium
 .
   * New upstream version 1.14.16+dfsg (Closes: #1135364)

fondu (0.0.20060102-9) unstable; urgency=medium
 .
   * QA upload.
   * debian/copyright: Update packaging copyright information.
   * debian/salsa-ci.yml: Add to provide CI tests for Salsa.
   * debian/tests/control: Create autopkgtest.

gajim-antispam (1.7.0-4) unstable; urgency=medium
 .
   * Bump Standards-Version, drop Priority: optional
   * Add ${python3:Depends}

gajim-lengthnotifier (1.6.3-1) unstable; urgency=medium
 .
   * New upstream version
   * Bump Standards-Version, drop Priority: optional
   * Add ${python3:Depends}

gajim-openpgp (1.8.1-1) unstable; urgency=medium
 .
   * New upstream version
   * Bump Standards-Version, drop Priority: optional
   * Add ${python3:Depends}

gajim-pgp (1.8.2-1) unstable; urgency=medium
 .
   * New upstream version
   * Bump Standards-Version, drop Priority: optional
   * Add ${python3:Depends}

gajim-triggers (1.6.1-1) unstable; urgency=medium
 .
   * New upstream version
   * Bump Standards-Version, drop Priority: optional
   * Add ${python3:Depends}

gdb-mingw-w64 (13.4) unstable; urgency=medium
 .
   * Disable babeltrace support, it’s deprecated and will be removed
     soon.
   * Standards-Version 4.7.4, no change required.
   * Wrap and sort control files.

gearhead (1.310-4) unstable; urgency=medium
 .
   * Maintain in Debian Games team
     Closes: #1134469
   * Secure URI in Homepage
   * Add watch file
   * d/copyright: DEP5
   * Update lintian-overrides
   * d/rules: Short dh
     Closes: #1105304
   * Use debhelper-compat
   * Standards-Version: 4.7.4 (Removed Priority field)

git-delta (0.19.1+ds-2) unstable; urgency=medium
 .
   * update patch 1001_sysinfo
     to accept newer minor versions of crate sysinfo
   * declare compliance with Debian Policy 4.7.4
   * add patch 1001_rstest
     to accept newer minor versions of crate rstest,
     superseding patch 2002_rstest;
     closes: bug#1135829, thanks to Nadzeya Hutsko

gross (1.0.4-2) unstable; urgency=medium
 .
   * QA upload.
   * Add debian/salsa-ci.yml
   * Drop "Rules-Requires-Root: no": it is the default now
   * Bump Standards-Version to 4.7.4, drop Priority: tag
   * Use dh-cruft to register & purge /var/lib/gross
   * Rename files under debian/ for debhelper 14/15 compatibility
   * Rewrite d/watch in v5 format
   * Use versioned copyright format URI.
   * Update copyright file header to use current field names
     (Upstream-Maintainer ⇒ Upstream-Contact)
   * Update lintian override info format in d/gross.lintian-overrides on line 2.

gst-rtsp-server1.0 (1.28.3-1) unstable; urgency=medium
 .
   * New upstream version 1.28.3

gstreamer-editing-services1.0 (1.28.3-1) unstable; urgency=medium
 .
   * New upstream version 1.28.3

hydrasdr-host (1.1.0+dfsg-1) unstable; urgency=medium
 .
   * Team upload
   * Exclude .github files

jacktrip (3.0.0+ds-1) unstable; urgency=medium
 .
   * New upstream version 3.0.0+ds
     + Refresh patches
   * Update copyright information
     + Update copyrights
     + Add copyright of fonts
     + Re-generate d/copyright_hints
   * Bump standards version to 4.7.4

lavacli (2.8-2) unstable; urgency=medium
 .
   * d/control: bump Standards-Version to 4.7.4

ldap2dns (0.3.1-7) unstable; urgency=medium
 .
   * QA upload.
   * Add debian/salsa-ci.yml
   * Bump Standards-Version to 4.7.4, drop Priority: tag
   * Rewrite d/watch in v5 format
   * Rename files under debian/ for debhelper 14/15 compatibility
   * Create /usr/bin/ldap2dnsd symlink with debhelper instead of open code
   * Use dh-cruft to register & purge /var/lib/svscan/ldap2tinydns*

libglibutil (1.0.81+ds-2) unstable; urgency=medium
 .
   * remove d/libglibutil1.links, not-needed

libnss-mysql (1.6.1-6) unstable; urgency=medium
 .
   * Standards-Version: 4.7.4
   * Drop Rules-Requires-Root: no
   * Drop Priority: optional
   * Bump debian/* copyright years
   * Maintain as Debian Commons
   * Add simplistic Homepage URL
   * Drop alien-tag duplicate-files

linux (7.0.7-1) unstable; urgency=high
 .
   * New upstream stable update:
     https://www.kernel.org/pub/linux/kernel/v7.x/ChangeLog-7.0.5
     https://www.kernel.org/pub/linux/kernel/v7.x/ChangeLog-7.0.6
     https://www.kernel.org/pub/linux/kernel/v7.x/ChangeLog-7.0.7
     - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show()
     - ipmi: Add limits to event and receive message requests
     - ipmi: Check event message buffer response for bad data
     - ipmi:si: Return state to normal if message allocation fails
     - fbdev: udlfb: add vm_ops to dlfb_ops_mmap to prevent use-after-free
     - [arm64] ACPI: arm64: cpuidle: Tolerate platforms with no deep PSCI idle
       states
     - ACPI: scan: Use acpi_dev_put() in object add error paths
     - ACPI: video: Add backlight=native quirk for Dell OptiPlex 7770 AIO
     - ACPI: CPPC: Fix related_cpus inconsistency during CPU hotplug
     - ACPI: video: force native backlight on HP OMEN 16 (8A44)
     - tracepoint: balance regfunc() on func_add() failure in
       tracepoint_add_func()
     - iommufd: Fix a race with concurrent allocation and unmap
     - ASoC: SOF: Don't allow pointer operations on unconfigured streams
     - wifi: mt76: mt7925: fix incorrect TLV length in CLC command
     - [arm64,armhf] spi: rockchip: fix controller deregistration
     - ksmbd: rewrite stop_sessions() with restartable iteration
     - [amd64] KVM: x86: Fix shadow paging use-after-free due to unexpected GFN
     - flow_dissector: do not dissect PPPoE PFC frames
     - smb: client/smbdirect: fix MR registration for coalesced SG lists
     - net/sched: sch_red: Replace direct dequeue call with peek and
       qdisc_dequeue_peeked
     - exit: prevent preemption of oopsing TASK_DEAD task
     - wifi: mt76: mt7925: fix AMPDU state handling in mt7925_tx_check_aggr
     - wifi: mt76: mt7925: fix incorrect length field in txpower command
     - wifi: mt76: mt7921: fix a potential clc buffer length underflow
     - wifi: mt76: mt7921: fix ROC abort flow interruption in mt7921_roc_work
     - wifi: b43legacy: enforce bounds check on firmware key index in RX path
     - wifi: mac80211: drop stray 'static' from fast-RX rx_result
     - wifi: rsi: fix kthread lifetime race between self-exit and external-stop
     - wifi: mac80211: use safe list iteration in radar detect work
     - wifi: ath5k: do not access array OOB (Closes: #1119093)
     - wifi: mac80211: remove station if connection prep fails
     - wifi: b43: enforce bounds check on firmware key index in b43_rx()
     - wifi: brcmfmac: Fix potential use-after-free issue when stopping watchdog
       task
     - usb: usblp: fix heap leak in IEEE 1284 device ID via short response
     - usb: usblp: fix uninitialized heap leak via LPGETSTATUS ioctl
     - ALSA: usb-audio: midi2: Restart output URBs on resume
     - ALSA: usb-audio: Avoid potential endless loop in convert_chmap_v3()
     - ALSA: usb-audio: Fix UAC3 cluster descriptor size check
     - usb: dwc3: Move GUID programming after PHY initialization
     - USB: omap_udc: DMA: Don't enable burst 4 mode
     - USB: serial: option: add Telit Cinterion LE910Cx compositions
     - usb: ulpi: fix memory leak on ulpi_register() error paths
     - usb: typec: tcpm: fix debug accessory mode detection for sink ports
     - ALSA: hda: cs35l56: Propagate ASP TX source control errors
     - ALSA: pcm: oss: Fix data race at accessing runtime.oss.trigger
     - ALSA: hda/realtek: Fix speaker silence after S3 resume on Xiaomi Mi Laptop
       Pro 15
     - ALSA: firewire-tascam: Do not drop unread control events
     - ALSA: core: Serialize deferred fasync state checks
     - ALSA: seq: Fix UMP group 16 filtering
     - [amd64] x86/efi: Restore IRQ state in EFI page fault handler
     - sched_ext: Read scx_root under scx_cgroup_ops_rwsem in cgroup setters
     - xfrm: provide message size for XFRM_MSG_MAPPING
     - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete
     - ipv6: xfrm6: release dst on error in xfrm6_rcv_encap()
     - xfrm: ah: account for ESN high bits in async callbacks
     - selinux: fix avdcache auditing
     - selinux: use sk blob accessor in socket permission helpers
     - selinux: don't reserve xattr slot when we won't fill it
     - selinux: shrink critical section in sel_write_load()
     - selinux: prune /sys/fs/selinux/checkreqprot
     - selinux: prune /sys/fs/selinux/disable
     - selinux: prune /sys/fs/selinux/user
     - selinux: allow multiple opens of /sys/fs/selinux/policy
     - io_uring/kbuf: support min length left for incremental buffers
     - io_uring/tw: serialize ctx->retry_llist with ->uring_lock
     - [loong64] KVM: Fix missing EMULATE_FAIL in kvm_emu_mmio_read()
     - Bluetooth: virtio_bt: clamp rx length before skb_put
     - Bluetooth: virtio_bt: validate rx pkt_type header length
     - Bluetooth: btmtk: validate WMT event SKB length before struct access
     - Bluetooth: hci_conn: fix potential UAF in create_big_sync
     - Bluetooth: hci_event: Fix OOB read and infinite loop in
       hci_le_create_big_complete_evt
     - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb()
     - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_state_change_cb()
     - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb()
     - rust: drm: gem: clean up GEM state in init failure case
     - rust: allow `clippy::collapsible_match` globally
     - rust: allow `clippy::collapsible_if` globally
     - rust: pin-init: internal: move alignment check to `make_field_check`
     - [armhf] spi: sun4i: fix controller deregistration
     - [armhf] spi: ti-qspi: fix controller deregistration
     - spi: sun6i: fix controller deregistration
     - [arm64,armhf] spi: tegra114: fix controller deregistration
     - [arm64,armhf] spi: tegra20-sflash: fix controller deregistration
     - staging: rtl8723bs: os_dep: avoid NULL pointer dereference in
       rtw_cbuf_alloc
     - staging: vme_user: fix root device leak on init failure
     - fanotify: fix false positive on permission events
     - [arm64] KVM: arm64: Fix kvm_vcpu_initialized() macro parameter
     - mtd: spi-nor: debugfs: fix out-of-bounds read in spi_nor_params_show()
     - [arm64] signal: Preserve POR_EL0 if poe_context is missing
     - mm/hugetlb_cma: round up per_node before logging it
     - [loong64] Fix SYM_SIGFUNC_START definition for 32BIT
     - [loong64] KVM: Compile switch.S directly into the kernel
     - net: rtnetlink: zero ifla_vf_broadcast to avoid stack infoleak in
       rtnl_fill_vfinfo
     - mptcp: pm: ADD_ADDR rtx: skip inactive subflows
     - [amd64] perf/x86/intel: Improve validation and configuration of ACR masks
     - rseq: Set rseq::cpu_id_start to 0 on unregistration
     - rseq: Protect rseq_reset() against interrupts
     - rseq: Don't advertise time slice extensions if disabled
     - [amd64] accel/ivpu: Disallow re-exporting imported GEM objects
     - sound: ua101: fix division by zero at probe
     - [ppc64el] pseries/papr-hvpipe: Fix race with interrupt handler
     - [ppc64el] pseries/papr-hvpipe: Prevent kernel stack memory leak to
       userspace
     - [ppc64el] pseries/papr-hvpipe: Fix null ptr deref in
       papr_hvpipe_dev_create_handle()
     - [ppc64el] pseries/papr-hvpipe: Fix & simplify error handling in
       papr_hvpipe_init()
     - [ppc64el] pseries/papr-hvpipe: Fix the usage of copy_to_user()
     - net: libwx: fix VF illegal register access
     - ip6_gre: Use cached t->net in ip6erspan_changelink().
     - net: libwx: use request_irq for VF misc interrupt
     - netpoll: pass buffer size to egress_dev() to avoid MAC truncation
     - net/rds: handle zerocopy send cleanup before the message is queued
     - net: wwan: t7xx: validate port_count against message length in
       t7xx_port_enum_msg_handler
     - ovl: fix verity lazy-load guard broken by fsverity_active() semantic
       change
     - [amd64] x86/efi: Fix graceful fault handling after FPU softirq changes
     - hwmon: (ltc2992) Clamp threshold writes to hardware range
     - hwmon: (ltc2992) Fix u32 overflow in power read path
     - clk: rk808: fix OF node reference imbalance
     - hwmon: (corsair-psu) Close HID device on probe errors
     - af_unix: Reject SIOCATMARK on non-stream sockets
     - [arm64] fpsimd: ptrace: zero target's fpsimd_state, not the tracer's
     - pmdomain: mediatek: fix use-after-free in
       scpsys_get_bus_protection_legacy()
     - block: add pgmap check to biovec_phys_mergeable
     - block: fix zone write plug removal
     - block: only read from sqe on initial invocation of blkdev_uring_cmd()
     - cifs: abort open_cached_dir if we don't request leases
     - cifs: change_conf needs to be called for session setup
     - extcon: ptn5150: handle pending IRQ events during system resume
     - fbcon: Avoid OOB font access if console rotation fails
     - gpio: of: clear OF_POPULATED on hog nodes in remove path
     - hv: Select CONFIG_SYSFB only for CONFIG_HYPERV_VMBUS
     - hv_sock: fix ARM64 support
     - hv_sock: Report EOF instead of -EIO for FIN
     - hv_sock: Return -EIO for malformed/short packets
     - ibmveth: Disable GSO for packets with small MSS
     - ice: fix double free in ice_sf_eth_activate() error path
     - tracefs: Fix default permissions not being applied on initial mount
     - udf: reject descriptors with oversized CRC length
     - [amd64] x86/boot/e820: Re-enable BIOS fallback if e820 table is empty
     - thermal: core: Free thermal zone ID later during removal
     - thermal/drivers/sprd: Fix temperature clamping in sprd_thm_temp_to_rawdata
     - thermal/drivers/sprd: Fix raw temperature clamping in
       sprd_thm_rawdata_to_temp
     - tracing/fprobe: Avoid kcalloc() in rcu_read_lock section
     - tracing/fprobe: Remove fprobe from hash in failure path
     - tracing/fprobe: Unregister fprobe even if memory allocation fails
     - tracing/probes: Limit size of event probe to 3K
     - tracing/fprobe: Check the same type fprobe on table as the unregistered
       one
     - [riscv64] clk: microchip: mpfs-ccc: fix out of bounds access during output
       registration
     - [amd64] ASoC: amd: yc: Add HP OMEN Gaming Laptop 16-ap0xxx product line in
       quirk table
     - [arm64] ASoC: qcom: q6apm-dai: reset queue ptr on trigger stop
     - [arm64] ASoC: qcom: q6apm-lpass-dai: Fix multiple graph opens
     - [arm64] ASoC: qcom: q6apm: remove child devices when apm is removed
     - btrfs: do not mark inode incompressible after inline attempt fails
     - btrfs: fix btrfs_ioctl_space_info() slot_count TOCTOU which can lead to
       info-leak
     - btrfs: fix double free in create_space_info() error path
     - btrfs: fix double free in create_space_info_sub_group() error path
     - btrfs: fix missing last_unlink_trans update when removing a directory
     - dm-thin: fix metadata refcount underflow
     - dm: don't report warning when doing deferred remove
     - dm: fix a buffer overflow in ioctl processing
     - eventfs: Hold eventfs_mutex and SRCU when remount walks events
     - dm-verity-fec: correctly reject too-small FEC devices
     - dm-verity-fec: correctly reject too-small hash devices
     - dm-verity-fec: fix corrected block count stat
     - dm-verity-fec: fix reading parity bytes split across blocks (take 3)
     - dm-verity-fec: fix the size of dm_verity_fec_io::erasures
     - isofs: validate Rock Ridge CE continuation extent against volume size
     - isofs: validate block number from NFS file handle in isofs_export_iget
     - [amd64] iommu/vt-d: Block PASID attachment to nested domain with dirty
       tracking
     - [arm64] iommu/arm-smmu-v3: Add a missing dma_wmb() for hitless STE update
     - lib/crypto: mpi: Fix integer underflow in mpi_read_raw_from_sgl()
     - lib/crc: tests: Make crc_kunit test only the enabled CRC variants
     - lib/scatterlist: fix length calculations in extract_kvec_to_sg
     - lib/scatterlist: fix temp buffer in extract_user_to_sg()
     - libceph: Fix slab-out-of-bounds access in auth message processing
     - md/raid10: fix divide-by-zero in setup_geo() with zero far_copies
     - nvme-apple: drop invalid put of admin queue reference count
     - nvmet-tcp: fix race between ICReq handling and queue teardown
     - nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free
     - openvswitch: vport: fix self-deadlock on release of tunnel ports
     - pmdomain: core: Fix detach procedure for virtual devices in genpd
     - psp: strip variable-length PSP header in psp_dev_rcv()
     - RDMA/hns: Fix unlocked call to hns_roce_qp_remove()
     - [riscv64] kvm: fix vector context allocation leak
     - [s390x] debug: Reject zero-length input in debug_input_flush_fn()
     - [s390x] debug: Reject zero-length input before trimming a newline
     - scsi: mpt3sas: Limit NVMe request size to 2 MiB
     - smb/client: fix out-of-bounds read in smb2_compound_op()
     - smb/client: fix out-of-bounds read in symlink_data()
     - smb: client: use kzalloc to zero-initialize security descriptor buffer
     - smb: client: validate dacloffset before building DACL pointers
     - [amd64] KVM: x86: check for nEPT/nNPT in slow flush hypercalls
     - [amd64] KVM: x86: Do IRR scan in __kvm_apic_update_irr even if PIR is
       empty
     - mm/damon/lru_sort: detect and use fresh enabled and kdamond_pid values
     - mm/damon/reclaim: detect and use fresh enabled and kdamond_pid values
     - mm/damon/stat: detect and use fresh enabled value
     - mm/damon/sysfs-schemes: protect memcg_path kfree() with damon_sysfs_lock
     - mm/damon/sysfs-schemes: protect path kfree() with damon_sysfs_lock
     - PCI: Update saved_config_space upon resource assignment (Closes: #1131025)
     - PCI/AER: Clear only error bits in PCIe Device Status
     - PCI/AER: Stop ruling out unbound devices as error source
     - PCI/ASPM: Fix pci_clear_and_set_config_dword() usage
     - power: supply: max17042: avoid overflow when determining health
     - [powerpc*] xive: fix kmemleak caused by incorrect chip_data lookup
     - [amd64] perf/x86/intel: Always reprogram ACR events to prevent stale masks
     - [amd64] perf/x86/intel: Disable PMI for self-reloaded ACR events
     - [amd64] perf/x86/intel: Enable auto counter reload for DMR
     - RDMA/ionic: bound node_desc sysfs read with %.64s
     - RDMA/ionic: Fix typo in format string
     - RDMA/mana: Fix error unwind in mana_ib_create_qp_rss()
     - RDMA/mana: Fix mana_destroy_wq_obj() cleanup in mana_ib_create_qp_rss()
     - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss()
     - RDMA/mana: Validate rx_hash_key_len
     - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event()
     - RDMA/mlx4: Fix resource leak on error in mlx4_ib_create_srq()
     - RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init()
     - RDMA/ocrdma: Don't NULL deref uctx on errors in ocrdma_copy_pd_uresp()
     - RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads
     - RDMA/rxe: Reject unknown opcodes before ICRC processing
     - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path
     - remoteproc: imx_rproc: Fix NULL vs IS_ERR() bug in imx_rproc_addr_init()
     - remoteproc: k3: Fix NULL vs IS_ERR() bug in k3_reserved_mem_init()
     - sched_ext: idle: Recheck prev_cpu after narrowing allowed mask
     - sched_ext: Use dsq->first_task instead of list_empty() in
       dispatch_enqueue() FIFO-tail
     - mptcp: fastclose msk when linger time is 0
     - mptcp: use MPJoinSynAckHMacFailure for SynAck HMAC failure
     - mptcp: use MPTCP_RST_EMPTCP for ACK HMAC validation failure
     - mptcp: sockopt: set timestamp flags on subflow socket, not msk
     - mptcp: sockopt: increase seq in mptcp_setsockopt_all_sf
     - mptcp: fix rx timestamp corruption on fastopen
     - mptcp: fix scheduling with atomic in timestamp sockopt
     - mptcp: pm: prio: skip closed subflows
     - mptcp: pm: kernel: reset fullmesh counter after flush
     - mptcp: pm: kernel: correctly retransmit ADD_ADDR ID 0
     - mptcp: pm: ADD_ADDR rtx: allow ID 0
     - mptcp: pm: ADD_ADDR rtx: fix potential data-race
     - mptcp: pm: ADD_ADDR rtx: always decrease sk refcount
     - mptcp: pm: ADD_ADDR rtx: free sk if last
     - mptcp: pm: ADD_ADDR rtx: resched blocked ADD_ADDR quicker
     - mptcp: pm: ADD_ADDR rtx: return early if no retrans
     - f2fs: add READ_ONCE() for i_blocks in f2fs_update_inode()
     - f2fs: fix false alarm of lockdep on cp_global_sem lock
     - f2fs: fix fiemap boundary handling when read extent cache is incomplete
     - f2fs: fix fsck inconsistency caused by incorrect nat_entry flag usage
     - f2fs: fix incorrect file address mapping when inline inode is unwritten
     - f2fs: fix incorrect multidevice info in trace_f2fs_map_blocks()
     - f2fs: fix node_cnt race between extent node destroy and writeback
     - f2fs: fix uninitialized kobject put in f2fs_init_sysfs()
     - f2fs: refactor f2fs_move_node_folio function
     - f2fs: fix inline data not being written to disk in writeback path
     - f2fs: fix fsck inconsistency caused by FGGC of node block
     - [arm64] KVM: arm64: Wake-up from WFI when iqrchip is in userspace
     - [arm64] KVM: arm64: vgic: Fix IIDR revision field extracted from wrong
       value
     - [arm64] KVM: arm64: Fix initialisation order in __pkvm_init_finalise()
     - [arm64] KVM: arm64: Fix FEAT_SPE_FnE to use PMSIDR_EL1.FnE, not PMSVer
     - [arm64] KVM: arm64: Fix FEAT_Debugv8p9 to check DebugVer, not PMUVer
     - [arm64] KVM: arm64: Fix pin leak and publication ordering in
       __pkvm_init_vcpu()
     - [loong64] Fix potential ADE in loongson_gpu_fixup_dma_hang()
     - [loong64] KVM: Cap KVM_CAP_NR_VCPUS by KVM_CAP_MAX_VCPUS
     - [loong64] KVM: Fix "unreliable stack" for kvm_exc_entry
     - [loong64] KVM: Fix HW timer interrupt lost when inject interrupt by
       software
     - [loong64] KVM: Move unconditional delay into timer clear scenery
     - [loong64] KVM: Use kvm_set_pte() in kvm_flush_pte()
     - [loong64] Use per-root-bridge PCIH flag to skip mem resource fixup
     - bpf: Fix use-after-free in arena_vm_close on fork
     - octeon_ep_vf: add NULL check for napi_build_skb()
     - mmc: core: Adjust MDT beyond 2025
     - mmc: core: Add quirk for incorrect manufacturing date
     - mmc: core: Optimize time for secure erase/trim for some Kingston eMMCs
     - crypto: qat - fix indentation of macros in qat_hal.c
     - crypto: qat - fix firmware loading failure for GEN6 devices
     - hfsplus: fix uninit-value by validating catalog record size
     - hfsplus: fix held lock freed on hfsplus_fill_super()
     - 8021q: use RCU for egress QoS mappings
     - 8021q: delete cleared egress QoS mappings
     - printk: add print_hex_dump_devel()
     - crypto: caam - guard HMAC key hex dumps in hash_digest_key
     - net: stmmac: rename STMMAC_GET_ENTRY() -> STMMAC_NEXT_ENTRY()
     - net: stmmac: Prevent NULL deref when RX memory exhausted
     - rust: pin-init: fix incorrect accessor reference lifetime
     - [amd64] x86/CPU/AMD: Prevent improper isolation of shared resources in
       Zen2's op cache
     - ksmbd: validate inherited ACE SID length
 .
   [ Salvatore Bonaccorso ]
   * ptrace: slightly saner 'get_dumpable()' logic

logtop (0.7-2) unstable; urgency=medium
 .
   * QA upload.
   * debian/copyright: Update packaging copyright information.
   * debian/salsa-ci.yml: Add to provide CI tests for Salsa.
   * debian/tests/control: Create autopkgtest.

lomiri-action-api (1.2.1-4) unstable; urgency=medium
 .
   * Team upload
 .
   [ Oren Klopfer ]
   * Add patch to fix Qt6 tests
   * Enable dh_auto_tests for Qt6.
 .
   [ Jeremy Bícha ]
   * Install NEWS to both library binary packages
lomiri-action-api (1.2.1-3) unstable; urgency=medium
 .
   * Team upload
   * Add Lintian override for use of get-orig-source
   * Mark some Build-Depends as only needed for build tests
   * Run wrap-and-sort -at
   * Don't disable parallel running of dh_auto_install
   * Revert "debian/rules: Silence Qt6 complaints about LANG=C."
   * Remove unnecessary dh_compress override to fix Ubuntu build
   * Support nodoc build profile
   * Update Standards Version to 4.7.4

lomiri-dekko-app (0.5.2+dfsg-2) unstable; urgency=medium
 .
   * Team upload
 .
   [ Jeremy Bícha ]
   * bin/lomiri-dekko-app: Use gio launch when ran outside of Lomiri
   * Add Lintian override for use of get-orig-source
   * Add patch to add Categories and a Comment to the .desktop file
   * Run wrap-and-sort -ast
   * Use OpenStore page for Homepage
   * Update Standards Version to 4.7.4
 .
   [ Thorsten Alteholz ]
   * Enable Salsa CI using default template

lomiri-eartrainer-app (0.4.4-3) unstable; urgency=medium
 .
   * Add patch to add additional fields to the .desktop
   * Add symlink for /usr/bin/lomiri-eartrainer-app
   * Update Depends
   * Update Standards Version to 4.7.4

lomiri-tfamanager-app (1.7.3+dfsg-9) unstable; urgency=medium
 .
   * Team upload
   * bin/lomiri-tfamanager-app: Use lomiri-app-launch for Lomiri
lomiri-tfamanager-app (1.7.3+dfsg-8) unstable; urgency=medium
 .
   * Team upload
   * Fix typo in bin/lomiri-tfamanager-app
lomiri-tfamanager-app (1.7.3+dfsg-7) unstable; urgency=medium
 .
   * Team upload
   * Fix typo in dependency name
lomiri-tfamanager-app (1.7.3+dfsg-6) unstable; urgency=medium
 .
   * Team upload
   * Add AppStream metadata
   * Add Depends: qml-module-qtquick-localstorage, qml-module-qt-labs-settings
   * Add Lintian override for use of get-orig-source
   * Add Lintian override for desktop-command-not-in-package
   * Opt into Salsa CI
   * Run wrap-and-sort -ast
   * Use gio launch for bin/lomiri-tfamanager-app
   * Update Standards Version to 4.7.4

lomiri-weather-app (6.2.0-2) unstable; urgency=medium
 .
   * Team upload
 .
   [ Jeremy Bícha ]
   * Add Lintian override for use of get-orig-source
   * Copy user session migration script from ubports
   * Replace patch with what was committed upstream
   * Run wrap-and-sort -ast
   * Update Depends
   * Update Standards Version to 4.7.4
 .
   [ Thorsten Alteholz ]
   * Enable Salsa CI using default template

manpages-l10n (4.30.2-1) unstable; urgency=medium
 .
   * New upstream version 4.30.2.
   * This version no longer contains the undistributable upstream man pages.
     Additionally, the licenses of the upstream man pages are now determined.
     This is incomplete yet (covering ~ 48%), but will be expanded over the
     coming time. (Closes: #1136135).
   * Update d/copyright

ngrep (1.47+ds1-8) unstable; urgency=medium
 .
   * Team upload.
   * debian/clean: created to remove config.h.in, allowing autoreconf to
     generate a fresh version. (Closes: #1135922)

pd-moonlib (0.8.1-1) unstable; urgency=medium
 .
   * New upstream version 0.8.1
   * d/patches
     + Refresh patches
     + Forward patches to upstream
   * Fix versioned Depends on puredata-core
   * Drop obsolete 'Priority: optional' stanza.
   * Drop obsolete 'Rules-Requires-Root: no' stanza.
   * Update copyright information
     + Bump copyright dates
     + Modernize address of FSF
   * Drop lintian-override for obsolete tag library-not-linked-against-libc
   * Modernize d/watch to version 5
   * Bump standards version to 4.7.4
 .
   * Update git repository layout to follow DEP-14

pokerth (2.0.6-3) unstable; urgency=medium
 .
   * Team upload.
   * Switch to sysusers & tmpfiles to handle /var/games
   * debian/pokerth-server.purge: fix syntax glitch
   * Fix day-of-week for changelog entry 0.5+dfsg-1. Fix day-of-week for changelog entry 0.4-1.
   * Add debian/upstream/metadata

python-grpc-tools (1.14.1-9) unstable; urgency=medium
 .
   * Team upload.
 .
   [ Theodore Tucker ]
   * d/patches: Fix shadowed variable in grpc_tools/command.py (Closes: #1132763)
 .
   [ Agathe Porte ]
   * d/copyright: drop useless copyright symbol
   * d/copyright: use common Apache-2.0 license
   * d/control: remove myself from uploaders
 .
   [ Chris Lamb ]
   * Bump Standards-Version to 4.7.4.

python-hyperion-py (0.7.5-6) unstable; urgency=low
 .
   * Use secure copyright file specification URI.
   * Update standards version to 4.7.4, no changes needed.
   * Set upstream metadata fields: Bug-Submit.

python-orderedattrdict (1.6.0-3) unstable; urgency=medium
 .
   * QA upload.
   * debian/copyright: Update packaging copyright information.
   * debian/salsa-ci.yml: Add to provide CI tests for Salsa.
   * debian/tests/*: Create autopkgtest.

python-os-refresh-config (14.0.1-4.1) unstable; urgency=medium
 .
   * Non-maintainer upload.
   * Source-only upload.
python-os-refresh-config (14.0.1-4) unstable; urgency=medium
 .
   * Add missing python3-dib-utils runtime depends and stop packaging
     /usr/bin/dib-run-parts (Closes: #1133200).
python-os-refresh-config (14.0.1-3) unstable; urgency=medium
 .
   * Cleans better (Closes: #1046156).
python-os-refresh-config (14.0.1-2) unstable; urgency=medium
 .
   * Uploading to unstable.
python-os-refresh-config (14.0.1-1) experimental; urgency=medium
 .
   * New upstream release.
   * Fixed (build-)depends for this release.
python-os-refresh-config (13.1.0-3) unstable; urgency=medium
 .
   * Switch to pybuild (Closes: #1090553).
python-os-refresh-config (13.1.0-2) unstable; urgency=medium
 .
   * Uploading to unstable.
python-os-refresh-config (13.1.0-1) experimental; urgency=medium
 .
   * New upstream release.
   * Cleans better.
python-os-refresh-config (13.0.1-1) unstable; urgency=medium
 .
   [ Mickael Asseline ]
   * New upstream release.
   * Added myself in copyright and uploaders.
 .
   [ Thomas Goirand ]
   * Cleans better (Closes: #1046156).
python-os-refresh-config (12.0.0-1) unstable; urgency=medium
 .
   * New upstream release.
   * Removed python3-mock from build-depends.
python-os-refresh-config (10.1.0-4) unstable; urgency=medium
 .
   * Add missing override_dh_python3 to fix shebang.
   * Switch to debhelper 11 and Standards-Version: 4.5.0.
python-os-refresh-config (10.1.0-3) unstable; urgency=medium
 .
   [ Ondřej Nový ]
   * Run wrap-and-sort -bastk.
 .
   [ Thomas Goirand ]
   * Uploading to unstable.
python-os-refresh-config (10.1.0-2) experimental; urgency=medium
 .
   * Add Breaks+Replaces python-os-refresh-config (Closes: #941028).
python-os-refresh-config (10.1.0-1) experimental; urgency=medium
 .
   [ Ondřej Nový ]
   * d/control: Set Vcs-* to salsa.debian.org
   * d/rules: Changed UPSTREAM_GIT protocol to https
   * d/copyright: Changed source URL to https protocol
   * d/control: Use team+openstack@tracker.debian.org as maintainer
   * Use debhelper-compat instead of debian/compat.
 .
   [ Daniel Baumann ]
   * Updating copyright format url.
   * Running wrap-and-sort -bast.
   * Removing gbp.conf, not used anymore or should be specified in the
     developers dotfiles.
   * Updating standards version to 4.1.0.
 .
   [ Thomas Goirand ]
   * Remove Julien and Mehdi from uploaders (Closes: #928591).
   * New upstream release.
   * Switch the package to Python 3 (Closes: #0937989).
   * Blacklist all of os_refresh_config.tests.test_cmd.TestCmd.* tests.
   * Add missing dh-python build-depends.
   * Fixed d/coyright ordering and years.
python-os-refresh-config (0.1.2-1) unstable; urgency=medium
 .
   * New upstream release.
python-os-refresh-config (0.1.1-1) experimental; urgency=low
 .
   * Initial release. (Closes: #732177)

r-cran-parameters (0.29.0-1) unstable; urgency=medium
 .
   * Team upload.
   * New upstream version
   * Standards-Version: 4.7.4 (routine-update)
   * Reflow Uploaders field (cme)
   * Remove Priority field (cme)
   * Drop 'Rules-Requires-Root: no' from d/control (routine-update)

ros-pluginlib (6.0.0-2) unstable; urgency=medium
 .
   * Fix ROS 1 API
ros-pluginlib (6.0.0-1) unstable; urgency=medium
 .
   * New upstream version 6.0.0
   * Refresh patches (no functional changes)
   * Bump Standards-Version to 4.7.4
   * Depend on ros-class-loader >= 3

ros2-ament-index (1.14.0-1) unstable; urgency=medium
 .
   * New upstream version 1.14.0
   * Update patches
     - Merged: Stop-depending-on-setuptools-at-runtime.patch
   * Update standards version to 4.7.4, no changes needed.

ruby-aruba (2.4.0-1) unstable; urgency=medium
 .
   * Team upload.
   * New upstream release.
   * Update Standards-Version to 4.7.4, no changes needed.
   * Refresh the upstream metadata.
   * Refresh the rules file.
   * Add lower-irb-dependency.patch to lower the irb runtime dependency.

secnet (0.6.10) unstable; urgency=medium
 .
   Packaging:
   * Fix logrotate snippet, adding `missingok`.  Hopefully fixes #1136304.
secnet (0.6.9) unstable; urgency=medium
 .
   * Upstream release of changes since 0.6.7.  (0.6.8 was Debian-only.)
 .
   Packaging:
   * Arrange for log rotation.  Closes: #1053571.
     Users may need to set USER in /etc/default/secnet.  See NEWS.Debian.
   * Prebuilt binaries are now built for current Debian stable ("trixie").
 .
   Build fixes:
   * Remove a spurious const; fixes build with new glibc.
     [Report from Aurelien Jarno]  Closes: #1128749.
   * Fixes and workarounds for building with Clang (21).
     [Richard Kettlewell]

simint (0.7-1) unstable; urgency=medium
 .
   * Initial upload.

sogo (5.12.8-1) unstable; urgency=medium
 .
   * New upstream release, with 4 security fixes:
     - require that a UID exists before adding it to a folder's ACL
     - XSS mitigations for mail Subject rendering
     - strip dangerous HTML event attributes from ICS invitations
     - OpenId: verify the user's email domain and ensure the account exists in
       the local source before granting access
   * Update test after XSS sanitization changes.

sope (5.12.8-1) unstable; urgency=medium
 .
   * New upstream release.

v-sim (3.9.1-2) unstable; urgency=medium
 .
   * Team upload.
 .
   [ Damien Caliste ]
   * Fix migration from gir1.2-v-sim-1.0.
     (Closes: #1134170)
   * Standards-Version: 4.7.4 (remove the priority from control file).
   * Fix changelog day error for 3.9.1-1.
   * Remove old lintian overrides from v-sim-common.
   * Add keywords in desktop files and remove the Education main category.
   * Fix spelling mistake in v-sim.lintian-overrides.
   * Rename the desktop file to correspond to the program name.
v-sim (3.9.1-1) unstable; urgency=medium
 .
   * Team upload.
 .
   [ Damien Caliste ]
   * New upstream version 3.9.1.
   * Rename gir1.2-v-sim-1.0 to gir1.2-v-sim-3.9.
   * Provides ${gir:Provides}, fixing lintian gir-package-name-does-not-match.
   * Remove fix-offset-declaration.patch, now upstream.
 .
   [ Andreas Tille ]
   * d/watch: version=5