golang-github-insomniacslk-dhcp (0.0~git20261014.c6bb46a-1) unstable; urgency=medium . * New upstream snapshot imagemagick (8:7.1.2.34+dfsg1-1) unstable; urgency=high . * New upstream version * Regression fix (Closes: #1151153) imagemagick (8:7.1.2.33+dfsg1-1) unstable; urgency=high . * New upstream version (Closes: #1150337, #1150802) * Fix CVE-2026-102635: ImageMagick contain uninitialized heap memory disclosure in the GIF decoder's application extension handler in coders/gif.c. Attackers can craft malicious GIF files that cause the number parser to read uninitialized heap memory and store contents as image metadata, disclosing sensitive heap information. * Fix CVE-2026-105083: A policy bypass vulnerability in LoadPolicyCache that silently skips security policy rules when policy.xml uses an alternate DOCTYPE. A valid DOCTYPE not ending in ']>' makes the parser consume the rest of the file, so no policy rules are applied and restricted operations become allowed. * Fix CVE-2026-106564: A crafted EXR image can cause the EXR decoder to write beyond a heap buffer, causing the process to crash. * Fix CVE-2026-106565: A missing end-of-file check while reading bzip2-compressed image data can cause an infinite loop and exhaust processing resources. * Fix CVE-2026-106566: Delegate symlink cleanup does not check the MAGICK_SHRED_PASSES environment variable, allowing a local privileged workflow to overwrite a file with random data. * Fix CVE-2026-106567: A crafted PSD file can trigger an integer-conversion error in the PSD decoder on 32-bit builds, causing an infinite loop and denial of service. * Fix CVE-2026-106568: A crafted XMP profile embedded in an image can cause the profile parser to enter an infinite loop, preventing image processing from completing. * Fix CVE-2026-106569: A missing validation and resource checks in the ASE decoder allow a crafted ASE image to cause a crash or a long-running operation. * Fix CVE-2026-106570: An unauthenticated adjacent-network client can repeatedly connect to the distributed pixel cache server and exhaust its available connections, causing denial of service. * Fix CVE-2026-109258: An invalid memory free vulnerability in the fx operation that occurs when initialization of an FX runtime entry fails. Attackers can trigger the failed FX runtime initialization to cause an invalid free, resulting in memory corruption and application crashes. * Fix CVE-2026-109259: An uninitialized memory read in the TGA image decoder that can expose memory contents. * Fix CVE-2026-109260: A memory leak in the PNG encoder, which does not release allocated memory when libpng initialization fails. * Fix CVE-2026-109261: A memory leak in the GIF encoder because allocated memory is not released when color quantization fails during encoding. * Fix CVE-2026-109262: A memory leak in the SVG encoder (WriteSVGImage) that fails to release allocated memory when handling crafted images. * Fix CVE-2026-109263: A memory leak in the YUV encoder, which fails to release allocated memory when a specific operation fails. * Fix CVE-2026-109264: An uncontrolled recursion in the MVG decoder that can exhaust the program stack. * Fix CVE-2026-109265: A heap buffer over-read vulnerability that allows attackers to read beyond allocated memory due to incorrect string termination in XMP profiles. * Fix CVE-2026-109266: An XML injection vulnerability in the CIP encoder, which does not properly escape input-derived data when writing Cisco IP Phone XML output. * Fix CVE-2026-109267: A stack overflow in the MSL decoder caused by an incorrect depth check that fails to limit recursion. Attackers can supply a set of crafted MSL images that exhaust the stack when one of them is read, crashing the process and causing a denial of service. * Fix CVE-2026-109268: An use after free vulnerability in the PDF writer when writing CMYK images with JPEG2000 compression. * Fix CVE-2026-109269: An information disclosure vulnerability in the JPEG decoder, which performs a read that exposes uninitialized memory when handling crafted input. * Fix CVE-2026-109270: A memory leak vulnerability in the -process option that allows attackers to cause unreleased memory allocations by supplying certain arguments. * Fix CVE-2026-109271: A use after free vulnerability in the WBINFO decoder that occurs when a memory allocation fails during image decoding. * Fix CVE-2026-109272: A NULL pointer dereference in the PostScript decoder that is triggered when a policy limit is reached. * Fix CVE-2026-109273: An information disclosure vulnerability in the PostScript decoder, which allocates a buffer one byte longer than the data it decoded. * Fix CVE-2026-109274: A time-of-check time-of-use symlink race vulnerability that allows attackers to bypass the path security policy when executing a magick script. * Fix CVE-2026-109275: a code injection vulnerability in the MVG decoder when a PostScript renderer is used. * Fix CVE-2026-109276: An incomplete cleanup flaw in the JNG decoder that fails to remove temporary files when processing crafted input. * Fix CVE-2026-109277: A policy bypass vulnerability in the -script operation due to missing checks on file descriptor handling. * Fix CVE-2026-109278: A memory leak in the wavelet-denoise operation, which fails to release allocated memory when a required resource cannot be acquired. * Fix CVE-2026-109279: A lack of proper synchronization when the security policy is accessed, so simultaneous reads and writes of the policy by multiple threads trigger a race condition that causes a heap buffer over-write. * Fix CVE-2026-109280: A use after free vulnerability in the -fx option that occurs when a memory allocation fails during a specific operation. * Fix CVE-2026-109281: A heap buffer over-read in its handling of the -fx option, where a certain -fx operation reads beyond the bounds of an allocated heap buffer in specific situations. * Fix CVE-2026-109282: A type confusion flaw in the INFO, JSON and YAML encoders, where an internal method receives a pointer of an unexpected type when writing an image in a compressed format. libcpansa-db-perl (20261025.002-1) unstable; urgency=medium . * Import upstream version 20261025.002. * Convert debian/watch to version 5. * Set upstream metadata fields: Security-Contact. * Apply multi-arch hints. + libcpansa-db-perl: Add Multi-Arch: foreign. libgee (0.20.8-4) unstable; urgency=medium . * Rename libgee-dev back to libgee-0.8-dev to match its .pc file libgee (0.20.8-3) unstable; urgency=medium . * Rename source package and -dev package to remove version number * debian/copyright: Convert to 1.0 format * debian/watch: Convert to Version: 5 * Update Homepage * Update debhelper compat to 14 * Update Standards Version to 4.7.4 libgee (0.8.4-1) experimental; urgency=low . * New upstream release * Add myself to uploaders libgee (0.8.3-1) experimental; urgency=low . * Team upload. (Closes: #695982) * Imported Upstream version 0.8.3 * Build with valac-0.18 * Rename packages to match new libgee-0.8 library name * Update symbols for new library name libgee (0.6.8-2) unstable; urgency=medium . * Install typelib files into the MA libdir. * debian/libgee2.symbols: Drop *_node_*_get_type symbols which weren't meant to be exported. * Run dh-autoreconf for new ports (Closes: #751506) * Mark gi package as M-A: same libgee (0.6.8-1) unstable; urgency=low . * Team upload. * Track the 0.6 branch. * New upstream release. * Build-Depend on valac (>= 0.16) instead of valac-0.16. (Closes: #709695) * Bump Standards-Version to 3.9.4. No further changes. * Do not override VALAC in debian/rules but instead use VALAFLAGS to set the target glib. Bump target-glib to 2.32. * Don't set an explicit shlibs version, but simply use -V. libgee (0.6.4-2) unstable; urgency=low * Team upload. * Build with valac-0.16. libgee (0.6.4-1) unstable; urgency=low * Team upload. * New upstream release. * debian/watch: Track .xz tarballs. * debian/control: Change section of gir1.2-gee-1.0 to introspection. * debian/patches/01_priority-queue-second-element-addition.patch: Removed, merged upstream. * debian/gbp.conf: Change compression to xz. * Build with valac-0.14. * Bump Standards-Version to 3.9.3. * Convert to multiarch. libgee (0.6.1-3) unstable; urgency=low [ Emilio Pozuelo Monfort ] * debian/control, debian/libgee-dev.install, debian/gir1.2-gee-1.0.install: + Add GIR support. (Closes: #624565) * debian/gbp.conf: + Added with branch information for git-buildpackage. [ Sjoerd Simons ] * Upload to unstable libgee (0.6.1-2) unstable; urgency=low * debian/patches/01_priority-queue-second-element-addition.patch: + Fix addition of the second element to a priority queue. Patch taken from upstream GIT. * debian/rules, debian/libgee2.symbols: + Add symbol file and proper shlibs versioning. * debian/control.in, debian/rules: + Build with valac-0.12. libgee (0.6.1-1) unstable; urgency=low * New upstream bugfix release. * Upload to unstable. libgee (0.6.0-1) experimental; urgency=low * New upstream release. libgee (0.5.3-1) experimental; urgency=low * New upstream release. * debian/control, debian/rules: + Use Vala 0.9 for compilation. + Build everything with GLib 2.24 features. * debian/rules: + Fix name of the tests stamp file. libgee (0.5.2-1) unstable; urgency=low * New upstream release: + debian/libgee-dev.install: - Don't ship GIR file for now. libgee (0.5.1-1) unstable; urgency=low * New upstream release: + debian/patches/01_timsort-references.patch, debian/patches/02_vala-0.8.0-buildfix.patch: - Dropped, merged upstream. * debian/control: + Require valac >= 0.8.1-2 for an important bugfix. libgee (0.5.0-4) unstable; urgency=low * debian/control, debian/compat: + Update to debhelper compat level 7. * debian/rules, debian/control: + Target GLib 2.22. * debian/control, debian/patches/02_vala-0.8.0-buildfix.patch: + Fix build with Vala 0.8.0. libgee (0.5.0-3) unstable; urgency=low * debian/patches/01_timsort-references.patch: + Fix from upstream GIT to fix references of counted items. * debian/source/format, debian/rules, debian/patches/series: + Update to source format 3.0 (quilt). * debian/compat: + Update to debhelper compat level 6. * debian/control: + Update to Standards-Version 3.8.4. + Update Homepage. * debian/rules: + Make testsuite failures fail the build. libgee (0.5.0-2) unstable; urgency=low * debian/control: + Require valac >= 0.7.7 to fix FTBFS. libgee doesn't build with earlier versions because of valac bugs. libgee (0.5.0-1) unstable; urgency=low * New upstream release: + Use correct default hash/equal/copy functions for string hashmaps and other containers (Closes: #543249). + debian/control, debian/libgee[12].install: - Update for the new so version. + debian/copyright: - Updated. * debian/rules: + Also regenerate the generated C sources for the tests. libgee (0.3.0-2) unstable; urgency=low * debian/control: + Update Standards-Version. * debian/rules, debian/control: + Update GLib dependencies. + Always use valac to build the C sources from the Vala sources and set a target GLib version. This gives additional features like thread-safe type registration. libgee (0.3.0-1) unstable; urgency=low * New upstream release: + debian/*.install, debian/control: - Update for the new soname version. + debian/copyright: - Update. * debian/control: + Update Standards-Version. libgee (0.1.5-1) unstable; urgency=low [ Marc-Andre Lureau ] * New upstream release. [ Ross Burton ] * debian/control: move -dbg to debug section libipc-shareable-perl (1.19-2) unstable; urgency=medium . * Add patches to fix build failures on ppc*. Thanks to Edmund Lodewijks for providing the patches. (Closes: #1146517) libipc-shareable-perl (1.19-1) unstable; urgency=medium . * Import upstream version 1.19. * Drop 32bit.patch. The patch was applied in a similar way upstream (in the renamed t/47-seg_size.t). * Drop debian/tests/pkg-perl/smoke-env, CI_TESTING is gone. * debian/rules: drop override_dh_auto_test. The CI_TESTING variable is gone. * Update debian/libipc-shareable-perl.docs. README is gone. * debian/rules: remove override_dh_auto_install. The removed ipc.pl is gone. * Convert to arch:any, this module now has an XS component. * Add build dependency on libcrypt-dev. * Declare compliance with Debian Policy 4.7.4. * Remove «Rules-Requires-Root: no», which is the current default. * Remove «Priority: optional», which is the current default. * Update years of packaging copyright. * Add debian/salsa-ci.yml. * Disable t/47-seg_size.t which continues to cause troubles. libiri-perl (0.15-1) unstable; urgency=medium . * Team upload. * Import upstream version 0.15. liblwp-mediatypes-perl (6.05-1) unstable; urgency=medium . * Team upload. * Import upstream version 6.05. * Update test dependencies. * Update debian/upstream/metadata. * Declare compliance with Debian Policy 4.7.4. * Remove «Priority: optional», which is the current default. * Convert debian/watch to version 5. * Apply multi-arch hints. + liblwp-mediatypes-perl: Add Multi-Arch: foreign. liferea (2.0.3+ds-1) unstable; urgency=medium . * New upstream version 2.0.3+ds * tests: increase timeout for the other tests too * d/rules: liferea-add-feed was dropped, stop linking the manpage liferea (2.0.2+ds-2) unstable; urgency=medium . * Temporarily B-D on architecture-is-little-endian * tests: mark isolation-machine * tests: don't fail on riscv64 (but try to fix the test with a longer timeout) liferea (2.0.2+ds-1) unstable; urgency=medium . * New upstream version 2.0.2 - update for new Build-Depends - Refresh patches and drop one * d/rules: enable all tests again, upstream fixed the issue * add test-use-in-tree-schema.patch to ensure all tests pass * add upstream patch to avoid a crash * adapt autopkgtest REMOVED: libgee-0.8 0.20.8-2