apertium-eng-spa (0.8.1-3) unstable; urgency=medium
 .
   * Team Upload
   * Add d/clean (Closes: #1043682)
   * Drop --fail-missing: it is the default
   * Drop "Rules-Requires-Root: no": it is the default
   * Bump Standards-Version to 4.7.3, drop Priority: tag
   * Replace obsolete pkg-config with pkgconf
   * Rewrite d/watch in v5 format
   * Disable useless Salsa CI jobs
   * Fix Team name

camomile (2.0.0-3) unstable; urgency=medium
 .
   * Team upload
   * Build-depend on libdune-site-ocaml-dev
   * Switch debian/watch to version 5
   * Bump Standards-Version to 4.7.3
   * Remove Priority and Rules-Requires-Root from debian/control

cmd2 (3.4.0+ds-1) unstable; urgency=medium
 .
   * New upstream version 3.4.0+ds
   * debian/control:
      - Bumped Standards-Version to 4.7.3
      - Fix Build-Depends for source-only build
      - Remove redundant Priority field
      - Remove redundant Rules-Requires-Root
   * debian/rules: Remove external twemoji CDN references from docs
   * debian/tests: fix python version detection in autopkgtest
   * debian/watch: Update to version 5 format

crun (1.27-1) unstable; urgency=medium
 .
   * New upstream release.
     - Fixes CVE-2026-30892. (Closes: #1132021)
     - Fix /dev/console on read-only file systems regression (Closes: #1125794)
   * Use the system copy of libblake3 (newly added to the archive) instead of
     the embedded copy. (Closes: #1107098)
   * Update d/copyright to document files that have been added since the last
     update.
   * Remove Priority: optional and Rules-Requires-Root: no, the defaults now.
   * Bump Standards-Version to 4.7.3.

crunch-dxtc (0.56.1-1) unstable; urgency=medium
 .
   * New upstream release

datasette (0.65.2+ds-2) unstable; urgency=medium
 .
   * Skip test_max_csv_mb: timing-dependent, fails on i386 and riscv64
datasette (0.65.2+ds-1) unstable; urgency=medium
 .
   * Initial release. (Closes: #1120835)
datasette (0.65.2-2) unstable; urgency=medium
 .
   * Add datasette-doc package.
   * Patches: remove fuzz.
   * Control: add build-dep on python3-pytest-timeout.

datum-gateway (0.4.1~beta-2) unstable; urgency=medium
 .
   * Fix "[INTL:pt] Portuguese translation - debconf messages" <explain
     what you changed and why> (Closes: #1130530)
   * Fix "[INTL:es] Spanish translation of datum-gateway debconf
     template" <explain what you changed and why> (Closes: #1131101)
   * Fix "[INTL:de] Initial German debconf translation" <explain what you
     changed and why> (Closes: #1131509)
datum-gateway (0.4.1~beta-1) unstable; urgency=medium
 .
   * Update to upstream version (v0.4.1beta)
   * Move to unstable
datum-gateway (0.4.0~beta-1) experimental; urgency=low
 .
   * Initial release. Closes: #1108258

debugedit (1:5.3-4) unstable; urgency=medium
 .
   * Bump standards version.
   * Remove the !nocheck profile from all build dependencies. These are
     unconditionally tested by the upstream configure.ac. Closes: #1131954.

dracut (110-8) unstable; urgency=medium
 .
   * Cherry-pick upstream fixes:
     - fix(zipl): repair parsing of rd.zipl=LABEL|UUID|...=
     - test(run-qemu): double QEMU timeout to 20 min on ARM
     - fix(dracut): enable hostonly_cmdline in hostonly mode again (LP: #2144948)
     - fix(dracut): properly detect kernel version with --sysroot
     - test(FULL-SYSTEMD): increase device timeout to infinity

duckdb (1.5.1-4) unstable; urgency=medium
 .
   * Add debian/README.Debian with CLI usage examples
   * Add manual page for duckdb(1)
   * Use system snappy, lz4, brotli and yyjson libraries
   * Use system mbedtls library
   * Mark libduckdb1.5 Multi-Arch: same
duckdb (1.5.1-3) unstable; urgency=medium
 .
   * Use system ICU libraries (fixes loong64 FTBFS due to bundled ICU 66.1)
   * Build with C++17 (required by system ICU headers)
   * Define PATH_MAX=4096 on Hurd where it is not declared
   * Re-trigger ITP closure. (Closes: #1036922)
duckdb (1.5.1-2) unstable; urgency=medium
 .
   * Use system zstd and xxhash libraries

fex (20200429-1) unstable; urgency=medium
 .
   [ Kilian Krause ]
   * New upstream release: 20200429
   * Add p7zip-full to recommends of "fex" and also add 7zl script
   * Drop upgrade from 20110610-1 (from fex.prerm)
   * Move systemd cleanup to prerm before files are actually deleted
   * Copy all of bin/* to /usr/share/fex/bin instead of cherry picking
 .
   [ Andreas Tille ]
   * Secure URI in Homepage
   * d/watch: version=5
   * debhelper-compat=13
   * delete debian/README.source
   * /lib/systemd/system should be /usr/lib/systemd/system
   * Remove alien tag package-supports-alternative-init-but-no-init.d-s from
     lintian-overrides
   * d/rules:
      - Short dh
      - Use /usr/share/dpkg/default.mk to set variables (helpful in Salsa CI)
   * Fix broken link
     Closes: #864176
   * Standards-Version: 4.7.3

fonts-ferrite-core (2.02+ds-3) unstable; urgency=medium
 .
   * Team upload.
   * Build from source again.
   * Clean properly via d/clean.

fonts-orya (2:1.4) unstable; urgency=low
 .
   * Team upload.
   * debian/control:
     + Updated Standards-Version to 4.7.3
     + Removed redundant fields.
     + Bumped dh to 13
   * Updated debian/copyright.

fonts-samyak (1.2.2-7) unstable; urgency=low
 .
   * Team upload.
   * debian/control:
     + Updated Standards-Version to 4.7.3
     + Removed redundant fields.
   * Updated debian/copyright.
   * debian/patches/02_fonts-make-file.patch:
     + Updated patch header.
   * Added dummy debian/watch again.

freeipmi (1.6.17-1) unstable; urgency=medium
 .
   * New upstream version 1.6.17 (Closes: #1132018, CVE-2026-33554)
   * d/patches: refresh
   * Update standards version to 4.7.3, no changes needed

gajim (2.4.5-1) unstable; urgency=medium
 .
   * New upstream relase
   * Promote Recommends of gstreamer1.0-plugins-bad to versioned Depends
     (Closes: #1130014)

giac (1.9.0.93+dfsg2-4) unstable; urgency=medium
 .
   * Team upload.
   * Use canonical email address for team
   * Add debian/salsa-ci.yml
   * Drop "Rules-Requires-Root: no": it is the default now
   * Bump Standards-Version to 4.7.3, drop Priority: tag
   * Drop useless dh_missing override: --fail-missing is now the default

golang-github-antithesishq-antithesis-sdk-go (0.7.0-1) unstable; urgency=medium
 .
   * New upstream release
   * Cleanup Build-Depends and Depends in d/control

golang-github-bougou-go-ipmi (0.8.1-1) unstable; urgency=medium
 .
   * New upstream release

golang-github-coder-quartz (0.3.0-1) unstable; urgency=medium
 .
   * New upstream release
   * Bump Standards-Version to 4.7.3
     - drop redundant Priority: optional
     - drop redundant Rules-Requires-Root: no

golang-github-dchest-safefile (0.0~git20151022.855e8d9-1) unstable; urgency=medium
 .
   * Use gbp sign-tags pristine-tar upstream-vcs-tag
   * Use watch v5
   * Drop Priority: optional
   * Drop Rules-Requires-Root: no
   * Standards-Version: 4.7.3
   * Use dh-sequence-golang
   * Bump debian/* copyright years

golang-github-go-git-go-git-fixtures-v5 (5.1.1-1) unstable; urgency=medium
 .
   * Initial upload to sid, needed for git-pages.

golang-github-go-git-go-git-v6 (6~git20260305.2083cf94-1) unstable; urgency=medium
 .
   * Initial release upload to sid, needed for git-pages.
   * Uploading v6 as its own source package (#1130257).

golang-github-minio-highwayhash (1.0.4-1) unstable; urgency=medium
 .
   * Team upload
   * New upstream release

icingaweb2 (2.13.0-1) unstable; urgency=medium
 .
   * New upstream release.
   * Drop Priority: optional, default since dpkg 1.22.13.
   * Bump Standards-Version to 4.7.3, changes: priority.
   * Update copyright file.
   * Require at least icinga-php-library 0.19.0 & icinga-php-thirdparty 0.15.0.
   * Convert icingaweb2-module-monitoring to transition package for icingadb-web.
   * Update lintian overrides.

indexed-gzip (1.10.3-2) unstable; urgency=medium
 .
   * Team upload.
   * Add build-dep on python3-setuptools-scm to fix dist-info
   * Disable useless Salsa CI jobs

janest-base (0.17.3-2) unstable; urgency=medium
 .
   * Build-Depend on libdune-configurator-ocaml-dev
   * Bump Standards-Version to 4.7.3
   * Remove Priority and Rules-Requires-Root from debian/control

jst-config (0.17.0-2) unstable; urgency=medium
 .
   * Team upload
   * Build-depend on libdune-configurator-ocaml-dev
   * Switch debian/watch to version 5
   * Bump Standards-Version to 4.7.3
   * Remove Priority and Rules-Requires-Root from debian/control

kanboard (1.2.51+ds-2) unstable; urgency=medium
 .
   * Remove tests autoloader after running the tests.
     Thanks to Chris Lamb <lamby@debian.org> (Closes: #1130666)

kanshi (1.9.0-3) unstable; urgency=medium
 .
   [ Diederik de Haas ]
   * d/patches: Drop patch removing mention of kanshictl in manpage

latex2html (2026+debian1-1) unstable; urgency=medium
 .
   * New upstream release.
   * Comply with Standards-Version 4.7.3

libapr-memcache (0.7.0-4) unstable; urgency=medium
 .
   * Team upload.
 .
   [ Jelmer Vernooij ]
   * Migrate repository from alioth to salsa.
 .
   [ Andreas Tille ]
   * Point Homepage to webarchive to express that the Homepage vanished
     from the web
   * d/copyright:
      - Secure URI in Format
      - Fix Upstream-Name
      - Point Source to Webarchive
   * d/watch: Fake watch file
   * debhelper = 13
     Closes: #739639
   * Standards-Version: 4.7.3
   * Fix clean target
     Closes: #1048881
   * Drop unused lintian-overrides

libbusiness-isbn-data-perl (20260328.001-1) unstable; urgency=medium
 .
   * Import upstream version 20260328.001.

libcdk5 (5.0.20260119-1) unstable; urgency=medium
 .
   [ Steve Robbins ]
   * [838ded0] New upstream version 5.0.20260119
   * [096a967] Override autoreconf: configure script written with older,
     incompatible autoconf version.

libpwizlite (3.0.14-2) unstable; urgency=medium
 .
   * Try to actually fix use unversioned libboost package names
   (closes: #1128107, thanks to Anton Gladky <gladk@debian.org>.

libva (2.23.0-2) unstable; urgency=medium
 .
   * debian/control:
     - Drop RRR: no
     - mesa-va-drivers was merged into mea-libgallium which mesa depends on by
       default
     - Drop Priority: optional
     - Bump Standards-Version

linux (6.19.10-1) unstable; urgency=medium
 .
   * New upstream stable update:
     https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.19.9
     - remoteproc: qcom_wcnss: Fix reserved region mapping failure
     - [powerpc*] uaccess: Fix inline assembly for clang build on PPC32
     - [powerpc*] kexec/core: use big-endian types for crash variables
     - [powerpc*] crash: adjust the elfcorehdr size
     - remoteproc: sysmon: Correct subsys_name_len type in QMI request
     - remoteproc: mediatek: Unprepare SCP clock during system suspend
     - [powerpc*] 83xx: km83xx: Fix keymile vendor prefix
     - smb/server: Fix another refcount leak in smb2_open()
     - scsi: storvsc: Fix scheduling while atomic on PREEMPT_RT
     - ACPI: PM: Save NVS memory on Lenovo G70-35
     - scsi: ufs: core: Reset urgent_bkops_lvl to allow runtime PM power mode
     - fs: init flags_valid before calling vfs_fileattr_get
     - scsi: mpi3mr: Add NULL checks when resetting request and reply queues
     - ALSA: hda/realtek: Fix speaker pop on Star Labs StarFighter
     - unshare: fix unshare_fs() handling
     - wifi: mac80211: set default WMM parameters on all links
     - ACPI: OSI: Add DMI quirk for Acer Aspire One D255
     - scsi: ses: Fix devices attaching to different hosts
     - [amd64] ASoC: amd: yc: Add ASUS EXPERTBOOK BM1503CDA to quirk table
     - [amd64] ASoC: cs42l43: Report insert for exotic peripherals
     - scsi: ufs: core: Fix possible NULL pointer dereference in
       ufshcd_add_command_trace()
     - scsi: ufs: core: Fix shift out of bounds when MAXQ=32
     - ALSA: usb-audio: Avoid implicit feedback mode on DIYINHK USB Audio 2.0
     - drm/amdgpu/vcn5: Add SMU dpm interface type
     - ALSA: usb-audio: Check max frame size for implicit feedback mode, too
     - nfs: return EISDIR on nfs3_proc_create if d_alias is a dir
     - [arm64] drm/msm/dsi: fix hdisplay calculation when programming dsi
       registers
     - xprtrdma: Decrement re_receiving on the early exit paths
     - btrfs: hold space_info->lock when clearing periodic reclaim ready
     - [arm64] drm/msm/a6xx: Fix the bogus protect error on X2-85
     - workqueue: Use POOL_BH instead of WQ_BH when checking pool flags
     - perf disasm: Fix off-by-one bug in outside check
     - [arm64] drm/msm/a8xx: Fix ubwc config related to swizzling
     - dt-bindings: display/msm: qcom,sm8750-mdss: Fix model typo
     - [arm64] drm/msm/dsi: fix pclk rate calculation for bonded dsi
     - drm/amd/pm: add missing od setting PP_OD_FEATURE_ZERO_FAN_BIT for smu v13
     - drm/amd/pm: add missing od setting PP_OD_FEATURE_ZERO_FAN_BIT for smu v14
     - drm/amdgpu: Fix kernel-doc comments for some LUT properties
     - bonding: do not set usable_slaves for broadcast mode
     - bonding: handle BOND_LINK_FAIL, BOND_LINK_BACK as valid link states
     - net/mlx5: Fix deadlock between devlink lock and esw->wq
     - net/mlx5: Fix crash when moving to switchdev mode
     - net/mlx5: Fix peer miss rules host disabled checks
     - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery
     - net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ
     - net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ
     - net/sched: teql: fix NULL pointer dereference in iptunnel_xmit on TEQL
       slave xmit (CVE-2026-23277)
     - rxrpc, afs: Fix missing error pointer check after
       rxrpc_kernel_lookup_peer()
     - net: spacemit: Fix error handling in emac_alloc_rx_desc_buffers()
     - net: spacemit: Fix error handling in emac_tx_mem_map()
     - firmware: cs_dsp: Fix fragmentation regression in firmware download
     - spi: amlogic: spifc-a4: Fix DMA mapping error handling
     - [arm64] spi: rockchip-sfc: Fix double-free in remove() callback
     - ASoC: soc-core: drop delayed_work_pending() check before flush
     - ASoC: soc-core: flush delayed work before removing DAIs and widgets
     - ASoC: simple-card-utils: fix graph_util_is_ports0() for DT overlays
     - net: sfp: improve Huawei MA5671a fixup
     - serial: caif: hold tty->link reference in ldisc_open and ser_release
     - bnxt_en: Fix RSS table size check when changing ethtool channels
     - [amd64] drm/i915/dp: Read ALPM caps after DPCD init
     - net: enetc: fix incorrect fallback PHY address handling
     - net: enetc: do not skip setting LaBCR[MDIO_PHYAD_PRTAD] for addr 0
     - mctp: i2c: fix skb memory leak in receive path
     - can: hi311x: hi3110_open(): add check for hi3110_power_enable() return
       value
     - bonding: fix type confusion in bond_setup_by_slave()
     - mctp: route: hold key->lock in mctp_flow_prepare_output()
     - [amd64,arm64] amd-xgbe: fix link status handling in xgbe_rx_adaptation
     - [amd64,arm64] amd-xgbe: prevent CRC errors during RX adaptation with AN
       disabled
     - [amd64,arm64] amd-xgbe: reset PHY settings before starting PHY
     - net: add xmit recursion limit to tunnel xmit functions (CVE-2026-23276)
     - netfilter: nf_tables: Fix for duplicate device in netdev hooks
     - netfilter: nf_tables: always walk all pending catchall elements
       (CVE-2026-23278)
     - netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop()
     - netfilter: x_tables: guard option walkers against 1-byte tail reads
     - netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path
     - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table()
     - netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels
       (CVE-2026-23274)
     - perf annotate: Fix hashmap__new() error checking
     - regulator: pca9450: Correct interrupt type
     - regulator: pca9450: Correct probed name for PCA9452
     - perf ftrace: Fix hashmap__new() error checking
     - sched: idle: Make skipping governor callbacks more consistent
     - nvme-pci: Fix slab-out-of-bounds in nvme_dbbuf_set
     - nvme-pci: Fix race bug in nvme_poll_irqdisable()
     - drivers: net: ice: fix devlink parameters get without irdma
     - iavf: fix PTP use-after-free during reset
     - iavf: fix incorrect reset handling in callbacks
     - [amd64] accel/amdxdna: Fix runtime suspend deadlock when there is pending
       job
     - [amd64,arm64] ASoC: codecs: rt1011: Use component to get the dapm context
       in spk_mode_put
     - i40e: fix src IP mask checks and memcpy argument names in cloud filter
     - e1000/e1000e: Fix leak in DMA error cleanup
     - page_pool: store detach_time as ktime_t to avoid false-negatives
     - net: bcmgenet: fix broken EEE by converting to phylib-managed state
     - ACPI: OSL: fix __iomem type on return from acpi_os_map_generic_address()
     - [amd64] ASoC: amd: acp3x-rt5682-max9836: Add missing error check for clock
       acquisition
     - ASoC: detect empty DMI strings
     - drm/amdkfd: Unreserve bo if queue update failed
     - [amd64] ASoC: amd: acp-mach-common: Add missing error check for clock
       acquisition
     - io_uring: fix physical SQE bounds check for SQE_MIXED 128-byte ops
     - perf synthetic-events: Fix stale build ID in module MMAP2 records
     - net: bonding: Fix nd_tbl NULL dereference when IPv6 is disabled
     - neighbour: restore protocol != 0 check in pneigh update
     - [amd64,arm64] net/mana: Null service_wq on setup error to prevent double
       destroy
     - [arm64] octeontx2-af: devlink: fix NIX RAS reporter recovery condition
     - [arm64] octeontx2-af: devlink: fix NIX RAS reporter to use RAS interrupt
       status
     - net: prevent NULL deref in ip[6]tunnel_xmit()
     - iio: imu: inv-mpu9150: fix irq ack preventing irq storms
     - usb: gadget: f_mass_storage: Fix potential integer overflow in
       check_command_size_in_blocks()
     - drm/amdgpu: ensure no_hw_access is visible before MMIO
     - cgroup: fix race between task migration and iteration
     - sched_ext: Remove redundant css_put() in scx_cgroup_init()
     - cgroup: Don't expose dead tasks in cgroup
     - ALSA: pcm: fix use-after-free on linked stream runtime in snd_pcm_drain()
     - ALSA: usb-audio: Check endpoint numbers at parsing Scarlett2 mixer
       interfaces
     - can: gs_usb: gs_can_open(): always configure bitrates before starting
       device
     - net: usb: lan78xx: fix silent drop of packets with checksum errors
     - net: usb: lan78xx: fix TX byte statistics for small packets
     - net: usb: lan78xx: fix WARN in __netif_napi_del_locked on disconnect
     - net: usb: lan78xx: skip LTM configuration for LAN7850
     - gpib: lpvo_usb: fix unintended binding of FTDI 8U232AM devices
     - rust: str: make NullTerminatedFormatter public
     - ata: libata-core: Add BRIDGE_OK quirk for QEMU drives
     - [amd64] ASoC: amd: yc: Add DMI quirk for ASUS EXPERTBOOK PM1503CDA
     - [arm64] KVM: arm64: Fix protected mode handling of pages larger than 4kB
     - [amd64] KVM: x86: Introduce KVM_X86_QUIRK_VMCS12_ALLOW_FREEZE_IN_SMM
     - [amd64] KVM: SVM: Initialize AVIC VMCB fields if AVIC is enabled with
       in-kernel APIC
     - [amd64] KVM: SVM: Set/clear CR8 write interception when AVIC is
       (de)activated
     - [arm64] KVM: arm64: pkvm: Fallback to level-3 mapping on host stage-2
       fault
     - [arm64] KVM: arm64: vgic: Pick EOIcount deactivations from AP-list tail
     - [arm64] KVM: arm64: pkvm: Don't reprobe for ICH_VTR_EL2.TDS on CPU hotplug
     - USB: add QUIRK_NO_BOS for video capture several devices
     - usb/core/quirks: Add Huawei ME906S-device to wakeup quirk
     - USB: ezcap401 needs USB_QUIRK_NO_BOS to function on 10gbs usb speed
     - usb: xhci: Fix memory leak in xhci_disable_slot()
     - usb: xhci: Prevent interrupt storm on host controller error (HCE)
     - xhci: Fix NULL pointer dereference when reading portli debugfs files
     - usb: yurex: fix race in probe
     - usb: dwc3: pci: add support for the Intel Nova Lake -H
     - usb: misc: uss720: properly clean up reference in uss720_probe()
     - usb: core: don't power off roothub PHYs if phy_set_mode() fails
     - usb: cdc-acm: Restore CAP_BRK functionnality to CH343
     - usb: roles: get usb role switch from parent only for usb-b-connector
     - usb: typec: altmode/displayport: set displayport signaling rate in
       configure message
     - USB: usbcore: Introduce usb_bulk_msg_killable()
     - USB: usbtmc: Use usb_bulk_msg_killable() with user-specified timeouts
     - USB: core: Limit the length of unkillable synchronous timeouts
     - usb: class: cdc-wdm: fix reordering issue in read code path
     - usb: renesas_usbhs: fix use-after-free in ISR during device removal
     - usb: gadget: f_hid: fix SuperSpeed descriptors
     - usb: mdc800: handle signal and read racing
     - usb: gadget: uvc: fix interval_duration calculation
     - usb: image: mdc800: kill download URB on timeout
     - usb: gadget: f_tcm: Fix NULL pointer dereferences in nexus handling
     - usb: gadget: f_ncm: Fix atomic context locking issue
     - usb: legacy: ncm: Fix NPE in gncm_bind
     - Revert "usb: gadget: f_ncm: Fix atomic context locking issue"
     - Revert "usb: legacy: ncm: Fix NPE in gncm_bind"
     - Revert "usb: gadget: u_ether: Add auto-cleanup helper for freeing
       net_device"
     - Revert "usb: gadget: f_ncm: align net_device lifecycle with bind/unbind"
     - Revert "usb: gadget: u_ether: add gether_opts for config caching"
     - usb: gadget: f_ncm: Fix net_device lifecycle with device_move
     - mm/tracing: rss_stat: ensure curr is false from kthread context
     - ceph: fix i_nlink underrun during async unlink
     - ceph: do not skip the first folio of the next object in writeback
     - ceph: fix memory leaks in ceph_mdsc_build_path()
     - ALSA: usb-audio: Improve Focusrite sample rate filtering
     - objtool/klp: Fix detection of corrupt static branch/call entries
     - objtool: Fix data alignment in elf_add_data()
     - objtool: Fix another stack overflow in validate_branch()
     - [riscv64] irqchip/riscv-aplic: Preserve APLIC states across suspend/resume
     - [riscv64] irqchip/riscv-aplic: Do not clear ACPI dependencies on probe
       failure
     - [riscv64] irqchip/riscv-aplic: Register syscore operations only once
     - time/jiffies: Mark jiffies_64_to_clock_t() notrace
     - sched/mmcid: Prevent CID stalls due to concurrent forks
     - sched/mmcid: Handle vfork()/CLONE_VM correctly
     - sched/mmcid: Remove pointless preempt guard
     - sched/mmcid: Avoid full tasklist walks
     - i3c: dw-i3c-master: Set SIR_REJECT in DAT on device attach and reattach
     - [powerpc*] perf: Check that current->mm is alive before getting user
       callchain
     - scsi: ufs: core: Fix SError in ufshcd_rtc_work() during UFS suspend
     - scsi: qla2xxx: Completely fix fcport double free
     - scsi: hisi_sas: Fix NULL pointer exception during user_scan()
     - mm/kfence: fix KASAN hardware tag faults during late enablement
     - mmc: mmci: Fix device_node reference leak in of_get_dml_pipe_index()
     - mm/kfence: disable KFENCE upon KASAN HW tags enablement
     - mmc: sdhci-brcmstb: use correct register offset for V1 pin_sel restore
     - mmc: dw_mmc-rockchip: Fix runtime PM support for internal phase support
     - mmc: core: Avoid bitfield RMW for claim/retune flags
     - [arm64] ASoC: qcom: qdsp6: Fix q6apm remove ordering during ADSP stop and
       start
     - tipc: fix divide-by-zero in tipc_sk_filter_connect()
     - firmware: stratix10-rsu: Fix NULL pointer dereference when RSU is disabled
     - kprobes: avoid crash when rmmod/insmod after ftrace killed
     - ceph: add a bunch of missing ceph_path_info initializers
     - libceph: Fix potential out-of-bounds access in ceph_handle_auth_reply()
     - libceph: reject preamble if control segment is empty
     - libceph: prevent potential out-of-bounds reads in process_message_header()
     - libceph: Use u32 for non-negative values in ceph_monmap_decode()
     - libceph: admit message frames only in CEPH_CON_S_OPEN state
     - Revert "tcpm: allow looking for role_sw device in the main node"
     - Revert "ptdesc: remove references to folios from __pagetable_ctor() and
       pagetable_dtor()"
     - mm: Fix a hmm_range_fault() livelock / starvation problem
     - nsfs: tighten permission checks for ns iteration ioctls
     - liveupdate: luo_file: remember retrieve() status
     - kthread: consolidate kthread exit paths to prevent use-after-free
     - cpufreq: intel_pstate: Fix NULL pointer dereference in
       update_cpu_qos_request()
     - drm/amdgpu: add upper bound check on user inputs in signal ioctl
     - drm/amdgpu/userq: Fix reference leak in amdgpu_userq_wait_ioctl
     - drm/amdgpu: add upper bound check on user inputs in wait ioctl
     - drm/amd: Disable MES LR compute W/A
     - ipmi:si: Don't block module unload if the BMC is messed up
     - ipmi:si: Use a long timeout when the BMC is misbehaving
     - drm/bridge: samsung-dsim: Fix memory leak in error path
     - drm/bridge: ti-sn65dsi86: Enable HPD polling if IRQ is not used
     - ipmi:si: Handle waiting messages when BMC failure detected
     - nouveau/gsp: drop WARN_ON in ACPI probes
     - [amd64] drm/i915/alpm: ALPM disable fixes
     - gpiolib: normalize the return value of gc->get() on behalf of buggy
       drivers
     - ipmi:si: Fix check for a misbehaving BMC
     - drm/xe/sync: Fix user fence leak on alloc failure
     - drm/xe/sync: Cleanup partially initialized sync on parse failure
     - [s390x] pfault: Fix virtual vs physical address confusion
     - bpf: Fix kprobe_multi cookies access in show_fdinfo callback
     - [arm64] gcs: Honour mprotect(PROT_NONE) on shadow stack mappings
     - nfsd: Fix cred ref leak in nfsd_nl_listener_set_doit().
     - device property: Allow secondary lookup in fwnode_get_next_child_node()
     - [arm64,armhf] irqchip/gic-v3-its: Limit number of per-device MSIs to the
       range the ITS supports
     - btrfs: fix chunk map leak in btrfs_map_block() after
       btrfs_chunk_map_num_copies()
     - sched_ext: Disable preemption between scx_claim_exit() and kicking helper
       work
     - sched_ext: Fix starvation of scx_enable() under fair-class saturation
     - iomap: don't mark folio uptodate if read IO has bytes pending
     - iomap: reject delalloc mappings during writeback
     - nsfs: tighten permission checks for handle opening
     - nstree: tighten permission checks for listing
     - ice: reintroduce retry mechanism for indirect AQ
     - ixgbevf: fix link setup issue
     - mm: memfd_luo: always make all folios uptodate
     - mm: memfd_luo: always dirty all folios
     - mm/huge_memory: fix a folio_split() race condition with folio_try_get()
     - mm/damon/core: clear walk_control on inactive context in damos_walk()
     - mm/slab: fix an incorrect check in obj_exts_alloc_size()
     - staging: sm750fb: add missing pci_release_region on error and removal
     - staging: rtl8723bs: properly validate the data in rtw_get_ie_ex()
     - staging: rtl8723bs: fix potential out-of-bounds read in
       rtw_restruct_wmm_ie
     - media: dvb-net: fix OOB access in ULE extension header tables
     - [amd64,arm64] net: mana: Ring doorbell at 4 CQ wraparounds
     - net: Fix rcu_tasks stall in threaded busypoll
     - ice: fix retry for AQ command 0x06EE
     - fgraph: Fix thresh_return clear per-task notrace
     - tracing: Fix syscall events activation by ensuring refcount hits zero
     - net/tcp-ao: Fix MAC comparison to be constant-time
     - fgraph: Fix thresh_return nosleeptime double-adjust
     - net/tcp-md5: Fix MAC comparison to be constant-time
     - batman-adv: Avoid double-rtnl_lock ELP metric worker
     - drm/xe/xe2_hpg: Correct implementation of Wa_16025250150
     - pmdomain: rockchip: Fix PD_VCODEC for RK3588
     - nouveau/dpcd: return EBUSY for aux xfer if the device is asleep
     - [arm64] mm: Add PTE_DIRTY back to PAGE_KERNEL* to fix kexec/hibernation
     - hwmon: (pmbus/q54sj108a2) fix stack overflow in debugfs read
     - io_uring/zcrx: use READ_ONCE with user shared RQEs
     - [arm64] contpte: fix set_access_flags() no-op check for SMMU/ATS faults
     - io_uring/net: reject SEND_VECTORIZED when unsupported
     - pmdomain: bcm: bcm2835-power: Fix broken reset status read
     - drm/ttm: Fix ttm_pool_beneficial_order() return type
     - [amd64] crypto: ccp - allow callers to use HV-Fixed page API when SEV is
       disabled
     - [s390x] stackleak: Fix __stackleak_poison() inline assembly constraint
     - ata: libata-core: Disable LPM on ST1000DM010-2EP102
     - [s390x] xor: Fix xor_xc_2() inline assembly constraints
     - drm/amd/display: Fallback to boot snapshot for dispclk
     - [s390x] xor: Fix xor_xc_5() inline assembly
     - slab: distinguish lock and trylock for sheaf_flush_main()
     - memcg: fix slab accounting in refill_obj_stock() trylock path
     - ksmbd: fix use-after-free in smb_lazy_parent_lease_break_close()
     - smb: server: fix use-after-free in smb2_open()
     - ksmbd: Don't log keys in SMB3 signing and encryption key generation
     - ksmbd: fix use-after-free by using call_rcu() for oplock_info
     - net: mctp: fix device leak on probe failure
     - net: nexthop: fix percpu use-after-free in remove_nh_grp_entry
     - net: ncsi: fix skb leak in error paths
     - net: ethernet: arc: emac: quiesce interrupts before requesting IRQ
     - net: macb: Shuffle the tx ring before enabling tx
     - drm/amd/pm: remove invalid gpu_metrics.energy_accumulator on smu v13.0.x
     - drm/amdgpu: Fix use-after-free race in VM acquire
     - drm/amd: Set num IP blocks to 0 if discovery fails
     - drm/amd: Fix NULL pointer dereference in device cleanup
     - [amd64] drm/i915: Fix potential overflow of shmem scatterlist length
     - [amd64] drm/i915/psr: Repeat Selective Update area alignment
     - [arm64] drm/msm: Fix dma_free_attrs() buffer size
     - drm/amd: Fix a few more NULL pointer dereference in device cleanup
     - [amd64] drm/i915/vrr: Configure VRR timings after enabling
       TRANS_DDI_FUNC_CTL
     - tracing: Fix enabling multiple events on the kernel command line and
       bootconfig
     - tracing: Fix trace_buf_size= cmdline parameter with sizes >= 2G
     - net-shapers: don't free reply skb after genlmsg_reply()
     - qmi_wwan: allow max_mtu above hard_mtu to control rx_urb_size
     - can: dev: keep the max bitrate error at 5%
     - io_uring/kbuf: check if target buffer list is still legacy on recycle
     - cifs: make default value of retrans as zero
     - xfs: fix integer overflow in bmap intent sort comparator
     - xfs: fix returned valued from xfs_defer_can_append
     - xfs: fix undersized l_iclog_roundoff values
     - xfs: ensure dquot item is deleted from AIL only after log shutdown
     - sched_ext: Fix enqueue_task_scx() truncation of upper enqueue flags
     - [s390x] zcrypt: Enable AUTOSEL_DOM for CCA serialnr sysfs attribute
     - dt-bindings: display: msm: Fix reg ranges and clocks on Glymur
     - ublk: fix NULL pointer dereference in ublk_ctrl_set_size()
     - [s390x] dasd: Move quiesce state with pprc swap
     - [s390x] dasd: Copy detected format information to secondary device
     - [powerpc*] pseries: Correct MSI allocation tracking
     - [powerpc*] bpf: fix kfunc call support
     - [powerpc*] bpf: fix the address returned by bpf_get_func_ip
     - lib/bootconfig: fix off-by-one in xbc_verify_tree() unclosed brace error
     - scsi: core: Fix error handling for scsi_alloc_sdev()
     - [amd64] x86/apic: Disable x2apic on resume if the kernel expects so
     - kprobes: Remove unneeded warnings from __arm_kprobe_ftrace()
     - lib/bootconfig: fix snprintf truncation check in
       xbc_node_compose_key_after()
     - lib/bootconfig: check bounds before writing in __xbc_open_brace()
     - smb: client: fix atomic open with O_DIRECT & O_SYNC
     - smb: client: fix in-place encryption corruption in SMB2_write()
     - smb: client: fix iface port assignment in parse_server_interfaces
     - btrfs: fix transaction abort when snapshotting received subvolumes
     - btrfs: fix transaction abort on file creation due to name hash collision
     - btrfs: fix transaction abort on set received ioctl due to item overflow
     - btrfs: add missing RCU unlock in error path in
       try_release_subpage_extent_buffer()
     - btrfs: abort transaction on failure to update root in the received subvol
       ioctl
     - iio: dac: ds4424: reject -128 RAW value
     - iio: frequency: adf4377: Fix duplicated soft reset mask
     - iio: chemical: sps30_serial: fix buffer size in sps30_serial_read_meas()
     - iio: chemical: sps30_i2c: fix buffer size in sps30_i2c_read_meas()
     - iio: magnetometer: tlv493d: remove erroneous shift in X-axis data
     - iio: potentiometer: mcp4131: fix double application of wiper shift
     - iio: chemical: bme680: Fix measurement wait duration calculation
     - iio: buffer: Fix wait_queue not being removed
     - iio: gyro: mpu3050-core: fix pm_runtime error handling
     - iio: imu: adis: Fix NULL pointer dereference in adis_init
     - iio: gyro: mpu3050-i2c: fix pm_runtime error handling
     - iio: imu: inv_icm45600: fix regulator put warning when probe fails
     - iio: light: bh1780: fix PM runtime leak on error path
     - iio: imu: inv_icm45600: fix INT1 drive bit inverted
     - iio: imu: inv_icm42600: fix odr switch to the same value
     - iio: imu: inv_icm42600: fix odr switch when turning buffer off
     - iio: proximity: hx9023s: fix assignment order for __counted_by
     - iio: proximity: hx9023s: Protect against division by zero in set_samp_freq
     - i3c: mipi-i3c-hci: Use ETIMEDOUT instead of ETIME for timeout errors
     - i3c: mipi-i3c-hci: Factor out DMA mapping from queuing path
     - i3c: mipi-i3c-hci: Consolidate spinlocks
     - i3c: mipi-i3c-hci: Restart DMA ring correctly after dequeue abort
     - i3c: mipi-i3c-hci: Add missing TID field to no-op command descriptor
     - i3c: mipi-i3c-hci: Fix race in DMA ring dequeue
     - i3c: mipi-i3c-hci: Correct RING_CTRL_ABORT handling in DMA dequeue
     - mm/damon: rename DAMON_MIN_REGION to DAMON_MIN_REGION_SZ
     - mm/damon: rename min_sz_region of damon_ctx to min_region_sz
     - mm/damon/core: disallow non-power of two min_region_sz
     - [arm64] KVM: arm64: gic: Set vgic_model before initing private IRQs
     - [arm64] KVM: arm64: Eagerly init vgic dist/redist on vgic creation
     - io_uring: ensure ctx->rings is stable for task work flags manipulation
       (CVE-2026-23275)
     - io_uring/eventfd: use ctx->rings_rcu for flags checking
     - cxl/acpi: Fix CXL_ACPI and CXL_PMEM Kconfig tristate mismatch
     - bpf: drop kthread_exit from noreturn_deny
     - sched_ext: Use WRITE_ONCE() for the write side of scx_enable helper
       pointer
     https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.19.10
     - NFSD: Defer sub-object cleanup in export put callbacks
     - NFSD: Hold net reference for the lifetime of /proc/fs/nfs/exports fd
     - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache
     - HID: bpf: prevent buffer overflow in hid_hw_request
     - sunrpc: fix cache_request leak in cache_release
     - nvdimm/bus: Fix potential use after free in asynchronous initialization
     - crash_dump: don't log dm-crypt key bytes in read_key_from_user_keying
     - mm/rmap: fix incorrect pte restoration for lazyfree folios
     - mm/huge_memory: fix use of NULL folio in move_pages_huge_pmd()
     - mm/huge_memory: fix early failure try_to_migrate() when split huge pmd for
       shared THP
     - NFC: nxp-nci: allow GPIOs to sleep
     - net: macb: fix use-after-free access to PTP clock
     - bnxt_en: fix OOB access in DBG_BUF_PRODUCER async event handler
     - batman-adv: avoid OGM aggregation when skb tailroom is insufficient
     - mac80211: fix crash in ieee80211_chan_bw_change for AP_VLAN stations
     - [amd64] crypto: padlock-sha - Disable for Zhaoxin processor
       (Closes: #1113996)
     - Bluetooth: L2CAP: Fix type confusion in l2cap_ecred_reconf_rsp()
     - Bluetooth: L2CAP: Validate L2CAP_INFO_RSP payload length before access
     - drm/amd: Fix hang on amdgpu unload by using pci_dev_is_disconnected()
     - smb: client: fix krb5 mount with username option
     - ksmbd: unset conn->binding on failed binding request
     - ksmbd: use volume UUID in FS_OBJECT_ID_INFORMATION
     - [amd64] drm/i915/dsc: Add Selective Update register definitions
     - [amd64] drm/i915/dsc: Add helper for writing DSC Selective Update ET
       parameters
     - [amd64] drm/i915/psr: Write DSC parameters on Selective Update in ET mode
     - net: macb: Introduce gem_init_rx_ring()
     - net: macb: Reinitialize tx/rx queue pointer registers and rx ring during
       resume
     - firmware: stratix10-svc: Delete some stray tabs
     - firmware: stratix10-svc: Add Multi SVC clients support
     - netconsole: fix sysdata_release_enabled_show checking wrong flag
     - cifs: open files should not hold ref on superblock
     - drm/xe: Fix memory leak in xe_vm_madvise_ioctl
     - ipmi: Consolidate the run to completion checking for xmit msgs lock
     - ipmi:msghandler: Handle error returns from the SMI sender
     - ata: libata-core: disable LPM on ADATA SU680 SSD
     - ata: libata-scsi: report correct sense field pointer in
       ata_scsiop_maint_in()
     - mmc: sdhci-pci-gli: fix GL9750 DMA write corruption
     - mmc: sdhci: fix timing selection for 1-bit bus width
     - pmdomain: mediatek: Fix power domain count
     - pmdomain: bcm: bcm2835-power: Increase ASB control timeout
     - spi: fix use-after-free on controller registration failure
     - spi: fix statistics allocation
     - mtd: spi-nor: Fix RDCR controller capability core check
     - mtd: rawnand: pl353: make sure optimal timings are applied
     - mtd: rawnand: cadence: Fix error check for dma_alloc_coherent() in
       cadence_nand_init()
     - mtd: Avoid boot crash in RedBoot partition table parser
     - [amd64] iommu/vt-d: Fix intel iommu iotlb sync hardlockup and retry
     - [amd64] iommu/vt-d: Only handle IOPF for SVA when PRI is supported
     - io_uring/poll: fix multishot recv missing EOF on wakeup race
     - io_uring/kbuf: fix missing BUF_MORE for incremental buffers at EOF
     - io_uring/kbuf: propagate BUF_MORE through early buffer commit path
     - vt: save/restore unicode screen buffer for alternate screen
     - serial: 8250_pci: add support for the AX99100
     - serial: 8250: Fix TX deadlock when using DMA
     - serial: 8250: always disable IRQ during THRE test
     - serial: 8250: Protect LCR write in shutdown
     - serial: 8250_dw: Avoid unnecessary LCR writes
     - serial: 8250: Add serial8250_handle_irq_locked()
     - serial: 8250_dw: Rework dw8250_handle_irq() locking and IIR handling
     - serial: 8250_dw: Rework IIR_NO_INT handling to stop interrupt storm
     - serial: 8250: Add late synchronize_irq() to shutdown to handle DW UART
       BUSY
     - serial: 8250_dw: Ensure BUSY is deasserted
     - serial: core: fix infinite loop in handle_tx() for PORT_UNKNOWN
     - serial: uartlite: fix PM runtime usage count underflow on probe
     - drm: Fix use-after-free on framebuffers and property blobs when calling
       drm_dev_unplug
     - drm/amd/display: Wrap dcn32_override_min_req_memclk() in DC_FP_{START,
       END}
     - drm/amdgpu/gmc9.0: add bounds checking for cid
     - drm/amdgpu/mmhub2.0: add bounds checking for cid
     - drm/amdgpu/mmhub2.3: add bounds checking for cid
     - drm/amdgpu/mmhub3.0.1: add bounds checking for cid
     - drm/amdgpu/mmhub3.0.2: add bounds checking for cid
     - drm/amdgpu/mmhub3.0: add bounds checking for cid
     - drm/amdgpu/mmhub4.1.0: add bounds checking for cid
     - drm/imagination: Fix deadlock in soft reset sequence
     - drm/imagination: Synchronize interrupts before suspending the GPU
     - drm/radeon: apply state adjust rules to some additional HAINAN vairants
     - drm/amdgpu: apply state adjust rules to some additional HAINAN vairants
     - drm/amdgpu: Limit BO list entry count to prevent resource exhaustion
     - drm/amdgpu: rework how we handle TLB fences
     - [amd64] drm/i915/dmc: Fix an unlikely NULL pointer deference at probe
     - [amd64] drm/i915/psr: Compute PSR entry_setup_frames into intel_crtc_state
     - [amd64] drm/i915/psr: Disable PSR on update_m_n and update_lrr
     - drm/xe/guc: Ensure CT state transitions via STOP before DISABLED
     - drm/xe/oa: Allow reading after disabling OA stream
     - drm/xe: Always kill exec queues in xe_guc_submit_pause_abort
     - drm/xe: Fix missing runtime PM reference in ccs_mode_store
     - drm/xe: Open-code GGTT MMIO access protection
     - Bluetooth: L2CAP: Fix accepting multiple L2CAP_ECRED_CONN_REQ
       (CVE-2026-23395)
     - btrfs: log new dentries when logging parent dir of a conflicting inode
     - btrfs: tree-checker: fix misleading root drop_level error message
     - [riscv64] soc: microchip: mpfs: Fix memory leak in
       mpfs_sys_controller_probe()
     - [riscv64] cache: starfive: fix device node leak in starlink_cache_init()
     - [arm64,armhf] soc: rockchip: grf: Add missing of_node_put() when returning
     - [amd64,arm64] tee: shm: Remove refcounting of kernel pages
     - wifi: mac80211: remove keys after disabling beaconing
     - wifi: mac80211: use jiffies_delta_to_msecs() for sta_info inactive times
     - wifi: mac80211: Fix static_branch_dec() underflow for aql_disable.
     - wifi: cfg80211: cancel pmsr_free_wk in cfg80211_pmsr_wdev_down
     - [arm64] dts: renesas: rzt2h-n2h-evk: Add ramp delay for SD0 card regulator
     - [arm64] dts: renesas: rzv2-evk-cn15-sd: Add ramp delay for SD0 regulator
     - [arm64] dts: renesas: r9a09g057: Remove wdt{0,2,3} nodes
     - [arm64] dts: renesas: r9a09g077: Fix CPG register region sizes
     - [arm64] dts: renesas: r9a09g087: Fix CPG register region sizes
     - [arm64] dts: renesas: rzg3s-smarc-som: Set bypass for Versa3 PLL2
     - [arm64] dts: renesas: r8a78000: Fix out-of-range SPI interrupt numbers
     - [arm64] firmware: arm_ffa: Remove vm_id argument in ffa_rxtx_unmap()
     - [arm64] firmware: arm_scpi: Fix device_node reference leak in probe path
     - [arm64] firmware: arm_scmi: Fix NULL dereference on notify error path
     - Bluetooth: LE L2CAP: Disconnect if received packet's SDU exceeds IMTU
     - Bluetooth: LE L2CAP: Disconnect if sum of payload sizes exceed SDU
     - Bluetooth: SMP: make SM/PER/KDU/BI-04-C happy
     - Bluetooth: ISO: Fix defer tests being unstable
     - Bluetooth: hci_sync: Fix hci_le_create_conn_sync
     - Bluetooth: MGMT: Fix list corruption and UAF in command complete handlers
     - Bluetooth: HIDP: Fix possible UAF
     - Bluetooth: L2CAP: Fix use-after-free in l2cap_unregister_user
     - Bluetooth: qca: fix ROM version reading on WCN3998 chips
     - af_unix: Give up GC if MSG_PEEK intervened. (CVE-2026-23394)
     - bridge: cfm: Fix race condition in peer_mep deletion (CVE-2026-23393)
     - net/rose: fix NULL pointer dereference in rose_transmit_link on reconnect
     - ip_tunnel: adapt iptunnel_xmit_stats() to NETDEV_PCPU_STAT_DSTATS
     - mpls: add missing unregister_netdevice_notifier to mpls_init
     - netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct()
     - netfilter: conntrack: add missing netlink policy validations
     - netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in
       sip_help_tcp()
     - netfilter: nf_flow_table_ip: reset mac header before vlan push
     - netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case
     - nf_tables: nft_dynset: fix possible stateful expression memleak in error
       path
     - netfilter: nft_ct: drop pending enqueued packets on removal
     - netfilter: xt_CT: drop pending enqueued packets on template removal
       (CVE-2026-23391)
     - netfilter: xt_time: use unsigned int for monthday bit shift
     - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931()
     - [amd64] crypto: ccp - Fix leaking the same page twice
     - [arm64] net: bcmgenet: increase WoL poll timeout
     - [amd64,arm64] net: mana: fix use-after-free in mana_hwc_destroy_channel()
       by reordering teardown
     - sched: idle: Consolidate the handling of two special cases
     - PM: runtime: Fix a race condition related to device removal
     - bonding: prevent potential infinite loop in bond_header_parse()
     - net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock()
     - net/sched: teql: Fix double-free in teql_master_xmit
     - net: usb: cdc_ncm: add ndpoffset to NDP16 nframes bounds check
     - net: usb: cdc_ncm: add ndpoffset to NDP32 nframes bounds check
     - clsact: Fix use-after-free in init/destroy rollback asymmetry
     - net: usb: aqc111: Do not perform PM inside suspend callback
     - ACPICA: Update the format of Arg3 of _DSM
     - igc: fix missing update of skb->tail in igc_xmit_frame()
     - igc: fix page fault in XDP TX timestamps handling
     - iavf: fix VLAN filter lost on add/delete race
     - libie: prevent memleak in fwlog code
     - wifi: mac80211: fix NULL deref in mesh_matches_local() (CVE-2026-23396)
     - wifi: wlcore: Return -ENOMEM instead of -EAGAIN if there is not enough
       headroom
     - wifi: mac80211: always free skb on ieee80211_tx_prepare_skb() failure
     - ACPI: processor: Fix previous acpi_processor_errata_piix4() fix
     - net: macb: fix uninitialized rx_fs_lock
     - ipv6: add NULL checks for idev in SRv6 paths
     - net/mlx5: qos: Restrict RTNL area to avoid a lock cycle
     - net/mlx5e: Prevent concurrent access to IPSec ASO context
     - net/mlx5e: Fix race condition during IPSec ESN update
     - udp_tunnel: fix NULL deref caused by udp_sock_create6 when CONFIG_IPV6=n
     - net: bonding: fix NULL deref in bond_debug_rlb_hash_show
     - netfilter: bpf: defer hook memory release until rcu readers are done
     - netfilter: nf_tables: release flowtable after rcu grace period on error
       (CVE-2026-23392)
     - nfnetlink_osf: validate individual option lengths in fingerprints
       (CVE-2026-23397)
     - [arm64,armhf] net: mvpp2: guard flow control update with global_tx_fc in
       buffer switching
     - net: shaper: protect late read accesses to the hierarchy
     - net: shaper: protect from late creation of hierarchy
     - [armhf] net: dsa: bcm_sf2: fix missing clk_disable_unprepare() in error
       paths
     - icmp: fix NULL pointer dereference in icmp_tag_validation()
       (CVE-2026-23398)
     - MPTCP: fix lock class name family in pm_nl_create_listen_socket
     - hwmon: (pmbus/ina233) Add error check for pmbus_read_word_data() return
       value
     - hwmon: (pmbus/mp2975) Add error check for pmbus_read_word_data() return
       value
     - hwmon: (pmbus/mp2869) Check pmbus_read_byte_data() before using its return
       value
     - hwmon: (pmbus/isl68137) Fix unchecked return value and use sysfs_emit()
     - i2c: cp2615: fix serial string NULL-deref at probe
     - i2c: fsi: Fix a potential leak in fsi_i2c_probe()
     - i2c: pxa: defer reset on Armada 3700 when recovery is used
     - [riscv64] irqchip/riscv-rpmi-sysmsi: Fix mailbox channel leak in
       rpmi_sysmsi_probe()
     - [amd64] perf/x86/intel: Add missing branch counters constraint apply
     - [amd64] perf/x86: Move event pointer setup earlier in x86_pmu_enable()
     - ring-buffer: Fix to update per-subbuf entries of persistent ring buffer
     - tracing: Fix failure to read user space from system call trace events
     - tracing: Fix trace_marker copy link list updates
     - [amd64] x86/mce/amd: Check SMCA feature bit before accessing SMCA MSRs
     - binfmt_elf_fdpic: fix AUXV size calculation for ELF_HWCAP3 and ELF_HWCAP4
     - mtd: rawnand: serialize lock/unlock against other NAND operations
     - mtd: rawnand: brcmnand: skip DMA during panic write
     - [amd64] x86/hyperv: Use __naked attribute to fix stackless C function
     - drm/vmwgfx: Don't overwrite KMS surface dirty tracker
     - iommu: Fix mapping check for 0x0 to avoid re-mapping it (Closes: #1130971)
     - [amd64] iommu/sva: Fix crash in iommu_sva_unbind_device()
     - [amd64] iommu/amd: Block identity domain when SNP enabled
     - drm/amd/display: Fix DisplayID not-found handling in
       parse_edid_displayid_vrr()
     - drm/amd: fix dcn 2.01 check
     - drm/bridge: dw-hdmi-qp: fix multi-channel audio output
     - ksmbd: fix use-after-free of share_conf in compound request
     - ksmbd: fix use-after-free in durable v2 replay of active file handles
     - [amd64] drm/i915/gt: Check set_default_submission() before deferencing
     - lib/bootconfig: check xbc_init_node() return in override path
     - tools/bootconfig: fix fd leak in load_xbc_file() on fstat failure
     - [arm64] realm: Fix PTE_NS_SHARED for 52bit PA support
     - drm/xe/guc: Fail immediately on GuC load error
     - hwmon: (max6639) Fix pulses-per-revolution implementation
     - xen/privcmd: restrict usage in unprivileged domU (CVE-2026-31788)
     - xen/privcmd: add boot control for restricted usage in domU
 .
   [ Ben Hutchings ]
   * Fix ordering of kernel version strings for multiple Debian revisions
     (Closes: #1113728)

lomiri-settings-components (1.1.3-2) unstable; urgency=medium
 .
   * Team upload.
   * debian/control: bump standard to 4.7.3 (no changes)
   * debian/control: remove RRR:
   * debian/control: remove Priority:
   * debian/copyright: update year for debian/*
   * debian/rules: add ignore line for blhc
   * Use salsa-ci.yml instead of .gitlab-ci.yml

luma.core (2.5.3-1) unstable; urgency=medium
 .
   * [98651dd] New upstream version 2.5.3
   * [7e66af8] chore(debian): update Standards-Version to 4.7.3

luma.emulator (1.7.0-1) unstable; urgency=medium
 .
   * [819f621] New upstream version 1.7.0
   * [e3a8d21] chore(debian): refresh drop_timeout patch
   * [958c1b8] chore(debian): update Standards-Version to 4.7.3

luma.lcd (2.13.0-1) unstable; urgency=medium
 .
   * [77e506c] New upstream version 2.13.0
   * [b37c91c] chore(debian): refresh 30_skip_rpi_tests.patch
   * [57301bf] chore(debian): bump Standards-Version to 4.7.3

luma.led-matrix (1.9.0-1) unstable; urgency=medium
 .
   * [1bfae0f] New upstream version 1.9.0
   * [5023003] fix(debian): update 10_fix_test.patch
   * [729921f] chore(debian): bump Standards-Version to 4.7.3

luma.oled (3.15.0-1) unstable; urgency=medium
 .
   * [fdbe5b6] New upstream version 3.15.0
   * [f42b4b3] chore(debian): bump Standards-Version to 4.7.3

magic-wormhole-mailbox-server (0.5.1-3) unstable; urgency=medium
 .
   * Team Upload
   * Adapt d/watch for new PyPi archive naming policy (Closes: #1127946)
   * Bump Standards-Version to 4.7.3, drop Priority: tag
   * Add debian/salsa-ci.yml

mako-notifier (1.11.0-1) unstable; urgency=medium
 .
   * New upstream release
   * debian/gbp.conf: drop pristine-tar setting
   * debian/control:
    + Bump Standards-Version to 4.7.3 (no changes required)
    + Drop redundant fields Rules-Requireds-Root and Priority
    + Run wrap-and-sort
   * debian/watch: update to Version 5 format
   * debian/copyright: bump copyright years

megacmd (2.5.0-1) unstable; urgency=medium
 .
   [ Josenilson Ferreira da Silva ]
   * New upstream version 2.5.0
   * debian/control: improve short description for megacmd and megacmd-doc
   * debian/patches:
      - Added 003.fix-freeimage-openexr-transitive-deps.patch
      - Updated 001.debian-environment-tweaks.patch
      - Updated 002.removed-method-owns_lock.patch
   * debian/rules: remove --max-parallel=1
 .
   [ Dmitry Shachnev ]
   * Remove extra character from 002.removed-method-owns_lock.patch.
   * debian/rules: Simplify code.
megacmd (2.4.0-1) unstable; urgency=medium
 .
   * Initial release. (Closes: 939318)

msolve (0.9.5-1) unstable; urgency=medium
 .
   * New upstream release.
   * debian/libmsolve3.symbols
     - Remove missing nmod_mat_* symbols.
   * debian/patches/nmod.patch
     - Remove patch; applied upstream.
   * debian/patches/x86-baseline.patch
     - Refresh for new upstream release.
   * debian/rules
     - Restore dh_auto_test on 32-bit architectures

ngspice (46+ds-1) unstable; urgency=medium
 .
   * [401e55f] d/control: Bump B-D on lyx to 2.4
   * [89fb3ed] New upstream version 46+ds
   * [4047ba3] Drop current patch queue
   * [45ca9f8] d/control: Drop field Priority: optional
   * [4aa3ade] d/control: Update Standards-Version to 4.7.3
     No further changes needed.
   * [13c8780] d/copyright: Update the copyright information
   * [8b283ef] autopkgtest: Use pkgconf instead of pkg-config

node-brace-expansion (2.0.3+~1.1.2-1) unstable; urgency=medium
 .
   * Team upload
   * Declare compliance with policy 4.7.3
   * Drop "Rules-Requires-Root: no"
   * Drop "Priority: optional"
   * debian/watch version 5
   * New upstream version (Closes: CVE-2026-33750)
   * Drop patch included in upstream

node-cjs-module-lexer (2.2.0+dfsg-1) unstable; urgency=medium
 .
   * Team upload
   * Declare compliance with policy 4.7.3
   * Drop "Rules-Requires-Root: no"
   * Drop "Priority: optional"
   * New upstream version 2.2.0+dfsg
   * Back to unstable
node-cjs-module-lexer (2.1.0+dfsg-1) experimental; urgency=medium
 .
   * Team upload
   * Declare compliance with policy 4.7.2
   * New upstream version 2.1.0+dfsg
   * Refresh patch

node-follow-redirects (1.15.11+~1.14.4-2) unstable; urgency=medium
 .
   * Team upload
   * Declare compliance with policy 4.7.3
   * Drop "Priority: optional"
   * Update lolex patch for node-sinon 21

node-path-to-regexp (8.4.1-1) unstable; urgency=medium
 .
   * Team upload
   * Declare compliance with policy 4.7.4
   * New upstream version 8.4.1

node-recast (0.23.4-3) unstable; urgency=medium
 .
   * Declare compliance with policy 4.7.3
   * Drop "Rules-Requires-Root: no"
   * Drop "Priority: optional"
   * debian/watch version 5
   * Replace node-source-map by node-source-map-js

node-vinyl-sourcemaps-apply (0.2.1-3) unstable; urgency=medium
 .
   * Declare compliance with policy 4.7.3
   * Drop "Rules-Requires-Root: no"
   * Drop "Priority: optional"
   * debian/watch version 5
   * Replace node-source-map by node-source-map-js

node-xterm (5.3.0-6) unstable; urgency=medium
 .
   * Drop "Priority: optional"
   * Fix build-only dependencies (Closes: #1131970)

nxt-firmware (1.29.8-1) unstable; urgency=medium
 .
   * New upstream version 1.29.8.
     - Update upstream signing key.
     - Remove fix-ftbfs-gcc-15.patch which is no longer needed.
   * Update d/watch to version 5.
   * Enable Salsa CI using default template.

ocaml-dune (3.21.1-4) unstable; urgency=medium
 .
   * Add libdune-ocaml-dev to debian/tests/control
ocaml-dune (3.21.1-3) unstable; urgency=medium
 .
   * Update debian/copyright
   * Build a new ocaml-dune-source binary package
   * Remove pkg.ocaml-dune.bootstrap build profile and build only dune
     packages that have no other dependencies. The other packages will
     be built by another source package.
   * Split libdune-ocaml-dev into libdune-core-ocaml{,-dev} and make them
     provide packages built here
   * Fix packaging errors spotted by Lintian
ocaml-dune (3.21.1-3~exp3) experimental; urgency=medium
 .
   * Actually install source tarball
   * Fix other packaging errors spotted by Lintian
ocaml-dune (3.21.1-3~exp2) experimental; urgency=medium
 .
   * Update debian/copyright
   * Build a new ocaml-dune-source binary package
   * Remove pkg.ocaml-dune.bootstrap build profile and build only dune
     packages that have no other dependencies. The other packages will
     be built by another source package.
   * Split libdune-ocaml-dev into libdune-core-ocaml{,-dev} and make them
     provide packages built here

ocaml-dune-configurator-builder (3.21.1+3) unstable; urgency=medium
 .
   * Upload to unstable
ocaml-dune-configurator-builder (3.21.1+2) experimental; urgency=medium
 .
   * Add Built-Using, Breaks and Replaces to binary package
ocaml-dune-configurator-builder (3.21.1+1) experimental; urgency=medium
 .
   * Initial packaging

ocaml-dune-full-builder (3.21.1+4) unstable; urgency=medium
 .
   * Make libdune-ocaml-dev depend on libdune-{core,configurator}-ocaml-
     dev
ocaml-dune-full-builder (3.21.1+3) unstable; urgency=medium
 .
   * Install only dune-package in libdune-ocaml-dev
ocaml-dune-full-builder (3.21.1+2) unstable; urgency=medium
 .
   * Fix FTBFS on bytecode architectures
   * Upload to unstable
ocaml-dune-full-builder (3.21.1+1) experimental; urgency=medium
 .
   * Initial packaging

ocaml-version (4.0.4-1) unstable; urgency=medium
 .
   * New upstream release
   * Bump Standards-Version to 4.7.3
   * Remove Priority from debian/control

ocamlformat (0.29.0-1) unstable; urgency=medium
 .
   * New upstream release
ocamlformat (0.28.1-2) unstable; urgency=medium
 .
   * Build-depend on libdune-build-info-ocaml-dev
   * Bump Standards-Version to 4.7.3
   * Remove Priority from debian/control

octave-datatypes (1.2.1-1) unstable; urgency=medium
 .
   * New upstream version 1.2.1

open-adventure (1.20-2) unstable; urgency=medium
 .
   * Remove Priority: optional from d/control
   * Remove Rules-Requires-Root from d/control
   * Update Standards-Version to 4.7.3
   * Run tests in alphabetic order (Closes: #1091064)
open-adventure (1.20-1) unstable; urgency=medium
 .
   * New upstream version 1.20
   * Build-Depend on pkgconf instead of pkg-config
open-adventure (1.18-1) unstable; urgency=medium
 .
   [ Debian Janitor ]
   * Set upstream metadata fields: Bug-Database, Bug-Submit, Repository-Browse.
     Changes-By: lintian-brush
     Fixes: lintian: upstream-metadata-file-is-missing
     See-also: https://lintian.debian.org/tags/upstream-metadata-file-is-missing.html
     Fixes: lintian: upstream-metadata-missing-bug-tracking
     See-also: https://lintian.debian.org/tags/upstream-metadata-missing-bug-tracking.html
   * Update standards version to 4.6.2, no changes needed.
     Changes-By: lintian-brush
     Fixes: lintian: out-of-date-standards-version
     See-also: https://lintian.debian.org/tags/out-of-date-standards-version.html
 .
   [ Dr. Tobias Quathamer ]
   * New upstream version 1.18. Closes: #1071865
   * Rename development branch to debian/latest
   * Update d/watch for new GitLab tag order
   * Update d/copyright
   * Update Standards-Version to 4.7.0, no changes needed
   * Install NEWS.adoc after filename change
   * Use wrap-and-sort -a
   * Clean up Build-Depends
open-adventure (1.12-1) unstable; urgency=medium
 .
   * New upstream version 1.12
     - TODOs have all been done, so don't try to install that file.
   * Update Standards-Version to 4.6.2, no changes needed
   * Update d/copyright
open-adventure (1.11-1) unstable; urgency=medium
 .
   * New upstream version 1.11
     - Uses yaml.safe_load() in tests. Closes: #1022032
     - Remove patch, has been applied upstream
   * Update d/copyright
   * Update Standards-Version to 4.6.1, no changes needed
open-adventure (1.9-1) unstable; urgency=medium
 .
   * New upstream version 1.9
     - Remove patch which has been appled upstream
   * Remove unneeded --as-needed flag :-)
   * Add Rules-Requires-Root: no to d/rules
   * Update Standards-Version to 4.5.1, no changes needed
   * Use debhelper v13
open-adventure (1.8-1) unstable; urgency=medium
 .
   * New upstream version 1.8
     - Refresh patches
   * Update d/watch for new download location
   * Switch to debhelper-compat and use v12
   * Update d/copyright
   * Update Standards-Version to 4.4.0, no changes needed
   * Apply fixes from cme fix dpkg
open-adventure (1.4+git20170917.0.d512384-2) unstable; urgency=medium
 .
   * Fix FTBFS in Ubuntu.
     The package fails to build in Ubuntu, because the Ubuntu
     autobuilders run with a $TERM value of 'unknown', and the
     open-adventure testsuite doesn't like this. Setting $TERM
     to a known-good value makes the package build more portable.
     Thanks to Steve Langasek <steve.langasek@canonical.com> (Closes: #889519)
   * Switch Vcs-URLs to salsa.d.o
   * Use debhelper v11
   * Update d/copyright
   * Update Standards-Version to 4.1.3, no changes needed
   * Add $(CFLAGS) to package building
open-adventure (1.4+git20170917.0.d512384-1) unstable; urgency=medium
 .
   * New upstream version 1.4+git20170917.0.d512384
     - Fix FTBFS on architectures other than amd64/arm654. Closes: #874205
   * Update Standards-Version to 4.1.1, no changes needed
open-adventure (1.4-1) unstable; urgency=medium
 .
   * New upstream version 1.4
     - Remove advent.desktop and advent.svg, have been included upstream
     - Install .desktop and .svg from upstream
     - Overriding dh_install is no longer necessary
     - Add patch to build package with Python 3
   * Use real homepage, not gitlab
   * Update d/watch to recognize new tarballs
   * Update Standards-Version to 4.1.0
open-adventure (1.2-1) unstable; urgency=medium
 .
   * Initial release (Closes: #868163)

opm-common (2025.10+ds-4) unstable; urgency=medium
 .
   [Markus Blatt]
   * Use CONFIG mode of CMake for finding boost for newer CMake.
   * d/copyright: Removed superfluous file patterns (lintian warning)
   * d/control: Replaced old transitional packages.
   [Alexandre Detiste]
   * drop useless "quilt" build-dependency

opm-upscaling (2025.10+ds-3) unstable; urgency=medium
 .
   [ Alexandre Detiste ]
   * drop useless "quilt" build-dependency
   * drop "Rules-Requires-Root: no": it is the default now
   * bump Standards-Version to 4.7.3, drop Priority: tag

pay-respects (0.7.12-2) unstable; urgency=medium
 .
   * New source only update
pay-respects (0.7.12-1) unstable; urgency=medium
 .
   * New upstream release (Closes: #1117914)
pay-respects (0.7.8-1) unstable; urgency=medium
 .
   * Initial debian release (Closes: #1089677)

percona-toolkit (3.7.1-3) unstable; urgency=medium
 .
   * Use supported function term.ReadPassword for password entry.
     - d/p/use-supported-password-entry-lib.patch: Swap to term.ReadPassword
       to remove outdated gopass and ssh/terminal dependencies.
     - d/control: Remove golang-github-howeyc-gopass-dev and
       add golang-golang-x-term-dev build dependencies.

prometheus-alertmanager (0.31.1+ds-1) unstable; urgency=medium
 .
   * New upstream release
   * Add version constraint for golang-github-coder-quartz-dev (>= 0.3.0)
   * Drop obsolete 0010-Extend-testing-CA-certificates-expiry-date.patch
   * Refresh patches
prometheus-alertmanager (0.30.1+ds-1) unstable; urgency=medium
 .
   * New upstream release
   * Drop obsolete patches
     - 0008-Disable-React-app.patch
     - 0011-Disable-Jira-notification.patch
     - 0012-Default-to-legacy-label-name-validation-in-tests.patch
   * Refresh patches
   * Add new 0011-Downgrade-otel-semconv-package-version.patch
   * Update Build-Depends:
     - drop golang-github-gofrs-uuid-dev
     - drop golang-github-kylelemons-godebug-dev
     - drop golang-go.uber-atomic-dev
     - add golang-github-google-uuid-dev
     - add golang-google-grpc-dev
     - add golang-opentelemetry-contrib-dev
     - add golang-opentelemetry-otel-dev
prometheus-alertmanager (0.29.0+ds-1) unstable; urgency=medium
 .
   * New upstream release
   * Drop obsolete 0013-Support-prometheus-common-v0.63.0.patch
   * Refresh patches
   * Bump Standards-Version to 4.7.3 (no changes)
   * Drop obsolete Build-Depends golang-github-aws-aws-sdk-go-dev
   * Add new Build-Depends:
     - golang-github-aws-aws-sdk-go-v2-dev
     - golang-github-aws-smithy-go-dev

pysvn (1.9.25-1) unstable; urgency=medium
 .
   * Team Upload
   * New upstream version 1.9.25
   * Rewrite d/rules with newer & shorter syntax
   * Drop "Rules-Requires-Root: no": it is now the default
   * Bump Standards-Version to 4.7.3, drop Priority: tag
   * Rewrite d/watch in v5 format
   * Disable useless Salsa CI jobs
   * Drop useless debian/python3-svn.dirs

pytest-asdf-plugin (0.1.1-2) unstable; urgency=medium
 .
   * Team Upload
   * Add build-dep on python3-setuptools-scm to fix dist-info
   * Use dh-sequence-python3
   * Bump Standards-Version to 4.7.3, drop Priority: tag
   * debian/watch: fix syntaxical glitch

python-adguardhome (0.7.0-3) unstable; urgency=medium
 .
   * Team Upload
   * Use dh-sequence-python3
   * Switch to debhelper-compat 13
   * Bump Standards-Version to 4.7.3, drop Priority: tag
   * Rewrite d/watch in v5 format
   * Add debian/salsa-ci.yml

python-bayespy (0.6.4+ds-1) unstable; urgency=medium
 .
   * New upstream version 0.6.4
   * New maintainer (Closes: #943918)
   * add CI/CD config file
   * drop patches
   * d/control:
     - bump S-V to 4.7.3
     - enable autopkgtests
     - move to python-team maintenance
     - remove unused build-depends
   * d/copyright:
     - remove superfluous files and licenses
     - update copyright holders

python-bsblan (5.1.3-1) unstable; urgency=medium
 .
   * New upstream release.
   * Remove debian/gbp.conf, switch to dgit.

python-check-jsonschema (0.34.1+really0.25.0-2) unstable; urgency=medium
 .
   * Bump standards version.

python-pyhanko-certvalidator (0.30.2-1) unstable; urgency=medium
 .
   * New upstream release.
   * Add debian/upstream/metadata.
   * debian/copyright: update Source/Upstream-Contact.

python-pyutil (3.3.2-6) unstable; urgency=medium
 .
   * Team upload.
   * removed the dependency on python3-pkg-resources. Closes: #1125813
python-pyutil (3.3.2-5) unstable; urgency=medium
 .
   * Team upload.
   * Add an explicit runtime dependency on python3-pkg-resources
python-pyutil (3.3.2-4) unstable; urgency=medium
 .
   * Team upload.
   * Fix SyntaxWarnings (Closes: #1060879)
python-pyutil (3.3.2-3) unstable; urgency=medium
 .
   * Team Upload
   * remove extraneous build-dep python3-mock
python-pyutil (3.3.2-2) unstable; urgency=medium
 .
   * Remove deprecated TestCase.assert_() (Closes: #1056500, #1058143)
python-pyutil (3.3.2-1) unstable; urgency=medium
 .
   * New upstream version 3.3.2
   * Watch GitHub tags.
   * Describe and refresh python-module-only.patch.
python-pyutil (0.0~git20221225.46c0611-1) unstable; urgency=medium
 .
   * Initial release. (Closes: #1029567)

r-cran-igraph (2.2.2-1) unstable; urgency=medium
 .
   * Team upload.
   * New upstream version
   * Standards-Version: 4.7.3 (routine-update)
   * dh-update-R to update Build-Depends (routine-update)
r-cran-igraph (2.2.1-1) unstable; urgency=medium
 .
   * Team upload.
   * New upstream version
   * Standards-Version: 4.7.3 (routine-update)
   * Restrict to 64-bits architectures (routine-update)
   * Restrict to little-endian architectures (routine-update)
   * dh-update-R to update Build-Depends (routine-update)

rpart (4.1.27-1) unstable; urgency=medium
 .
   * New upstream release
 .
   * debian/control: Set Build-Depends: to current R version
   * debian/control: Set Standards-Version: to current version
   * debian/watch: Update to version 4

saunafs (5.8.0-1) unstable; urgency=medium
 .
   [ Urmas Rist ]
   * Team upload.
   * Fix lintian errors about unsupported archs
   * Add architecture-is-64-bit virtual package
   * Update copyright for nfs-ganesha plugin
   * Add missing copyright info
   * Rename remaining LizardFS to SaunaFS
   * Fix ulimit bug using old lizardfs user
   * Fix chunkserver not stopping when sleeping
   * Change upstream tag in gbp.conf
   * Update dependencies and not-installed
   * Add debian/lrc.conf
   * Fix lintian error regarding invalid archs
   * Update standards version to 4.7.3
   * New upstream version (Closes: #1129856)
 .
   [ Anton Gladky ]
   * Remove Priority and Rules-Requires-Root

secpanel (1:0.6.1-4) unstable; urgency=medium
 .
   * Team upload.
   * Secure URI in Homepage
   * Maintain package in Debian team on Salsa
   * d/watch: version=5
   * debhelper-compat (= 13)
   * d/control:
      - Secure URI in Source
      - Remove old FSF address
   * Standards-Version: 4.7.3 (Remove Priority field)

starlink-ast (9.2.14+ds-1) unstable; urgency=medium
 .
   [ Phil Wyett ]
   * Remove no longer needed 'Rules-Requires-Root: no'. Now is default behavior.
 .
   [ Ole Streicher ]
   * New upstream version 9.2.14+ds
   * d/watch: Update to version 5, switch to Github
   * Rediff patches
   * Push Standards-Version to 4.7.3, remove redundant Pritority: optional
   * xmlchan: Avoid variable names "true", "false"
   * Add argument types to some function casts
   * Add new symbols to libstarlink-ast9.symbols
   * Remove pinpointing of C version

supermin (5.2.2-8) unstable; urgency=medium
 .
   * Remove obsolete "Breaks" constraint
   * Limit libguestfs-dev build-dependency to 32bit architectures
     (Closes: #1131833)

swift (2.37.1-3) unstable; urgency=medium
 .
   * Add python3-anycrc as (build-)depends.
swift (2.37.1-2) unstable; urgency=medium
 .
   * Uploading to unstable.
   * Blacklist 4 tests reported as flacky by the Debian release team
     (Closes: #1130637).
swift (2.37.1-1) experimental; urgency=medium
 .
   * New upstream release.
   * Add pybuild-plugin-pyproject as build-depends.
swift (2.37.0-1) experimental; urgency=medium
 .
   * New upstream release.
   * Drop bug-2119646-swift.patch applied upstream.
   * Refreshed a few patches.

sympy (1.14.0-3) unstable; urgency=medium
 .
   [ Georges Khaznadar ]
   * patched a few test files in order to skip tests failing with mpmath
     Closes: #1129166
   * some header stuff added into patches by gbp pq
   * bumped Standards-Version: 4.7.3
   * disabled debrebuild job in Salsa until someone figures out how to fix it
 .
   [ Alexandre Detiste ]
   * apply Multi-Arch: hint

syncevolution (2.0.0-3.4) unstable; urgency=medium
 .
   * Non-maintainer upload
   * debian/patches: Adjust Makefile.am to avoid embedding timestamps.
     (Closes: #1000921)

toilet (0.3-6) unstable; urgency=medium
 .
   * d/tests/control: add simple autopkgtests
   * d/copyright: update copyright years
   * d/control:
     - Standards-Version to 4.7.3
     - remove obsolete Rules-Requires-Root field

toppic (1.8.0+repack1-3) unstable; urgency=medium
 .
   * Team upload.
 .
   [ Adrian Bunk ]
   * Switch to unversioned Boost build dependencies and remove the
     unused build dependency on system. Closes: #1129998.
 .
   [ Santiago Vila ]
   * Simplify and fine-tune salsa-ci.yml.
toppic (1.8.0+repack1-2) unstable; urgency=medium
 .
   * Team Upload
   * Drop obsolete "quilt" build-dep, this is a modern "3.0 (quilt)" package
   * Drop "Rules-Requires-Root: no": it is the default now
   * Bump Standards-Version to 4.7.3, drop Priority: tag
   * Apply Multi-Arch: hint
toppic (1.8.0+repack1-1) unstable; urgency=low
 .
   * New upstream release.
toppic (1.7.10+cleaned1-2) unstable; urgency=low
 .
   * Remove no more dependees from Depends for toppic-common.
toppic (1.7.10+cleaned1-1) unstable; urgency=low
 .
   * New upstream version.
 .
   * Repackaged source tree to actually remove unused code and other stuff,
     like .github...
 .
   * Updated patches to use the Debian official packages for a number
     of libraries and install stuff at proper Debian-compatible locations.
 .
   * Standards-Version: 4.7.2
toppic (1.5.3+dfsg1-1) unstable; urgency=low
 .
   * Repackaged source tree to actually remove doc/wiki.
   * Fixes to license names and small designations (Boost, MIT).
   * Also ship example files in toppic-common doc.
toppic (1.5.3+dfsg-1) unstable; urgency=medium
 .
   * Team upload.
   * Drop redundant parts from d/watch that are confusing routine-update
   * Standards-Version: 4.6.1 (routine-update)
   * debhelper-compat 13 (routine-update)
   * Remove trailing whitespace in debian/control (routine-update)
   * Remove trailing whitespace in debian/copyright (routine-update)
   * Add salsa-ci file (routine-update)
   * Rules-Requires-Root: no (routine-update)
   * Trim trailing whitespace.
   * Set upstream metadata fields: Bug-Database, Bug-Submit, Contact, Name,
     Repository, Repository-Browse.
   * Build-Depends: libeigen3-dev, nlohmann-json3-dev
 .
   * Patch-based fixes to CMakeLists.txt to ensure all the _gui variants of the
     programs are shipped.
   * Update d/copyright
toppic (1.3.0+dfsg1-4) unstable; urgency=low
 .
   * Fix the URLs for the VCS.
 .
   * Make sure the build flags are handled correctly.
toppic (1.3.0+dfsg1-3) unstable; urgency=low
 .
   * Reinstating the ITP bug closing statement (Closes: #961085).
 .
   * Patch the build system so that the external libpwiz subset code that is
     included is not used. Instead, link to the pwizlite library that I have
     created and packaged for Debian. Use CMake to find libpwizlite and libhts.
 .
   * Remove from the d/copyright all the stanzas related to the pwiz/boost code
     since it does not belong to the cleaned package anymore. Add the
     corresponding files to the Files-Excluded stanza.
 .
   * d/s/lintian-overrides: override E for missing sources files that are
     genuine package authors' code (lintian is triggered by long lines > 512
     chars).

utop (2.16.0-2) unstable; urgency=medium
 .
   * Team upload
   * Build-depend on libxdg-ocaml-dev instead of libdune-ocaml-dev
   * Switch debian/watch to version 5
   * Bump Standards-Version to 4.7.3
   * Remove Priority and Rules-Requires-Root from debian/control

valkey (8.1.4+dfsg1-2) unstable; urgency=medium
 .
   * Fix CVE-2025-67733 (Closes: #1130911).
     A malicious user can use scripting commands to inject arbitrary
     information into the response stream for the given client, potentially
     corrupting or returning tampered data to other users on the same
     connection. The error handling code for lua scripts does not properly
     handle null characters.
     - d/p/CVE-2025-67733.patch
   * Fix CVE-2026-21863 (Closes: #1130911).
     A malicious actor with access to the Valkey clusterbus port can send an
     invalid packet that may cause an out bound read, which might result in
     the system crashing. The Valkey clusterbus packet processing code does
     not validate that a clusterbus ping extension packet is located within
     buffer of the clusterbus packet before attempting to read it.
     - d/p/CVE-2026-21863.patch

vboxmanage-bash-completion (7.2.4-1) unstable; urgency=medium
 .
   * d/control:
     - remove obsolete Rules-Requires-Root field
     - update virtualbox Recommends for 7.2.4
     - Standards-Version to 4.7.3
   * d/copyright: update copyright years

wims-lti (0.4.4.1-17) unstable; urgency=medium
 .
   * added a dependency on python3-pyutil. Closes: #1108932
wims-lti (0.4.4.1-16) unstable; urgency=medium
 .
   * added a build dependency on python3-setuptools. Closes: #1080831
   * bumped Standards-Version: 4.7.1
wims-lti (0.4.4.1-15) unstable; urgency=medium
 .
   * replaced libjs-bootstrap by libjs-bootstrap5. Closes: #1088537
wims-lti (0.4.4.1-14) unstable; urgency=medium
 .
   * added pt_BR.po, thanks to Paulo Henrique de Lima Santana. Closes: #1025993
wims-lti (0.4.4.1-13) unstable; urgency=medium
 .
   * added sv.po, thanks to Peter Kvillegård. Closes: #1042516
wims-lti (0.4.4.1-12) unstable; urgency=medium
 .
   [ Debian Janitor ]
   * Trim trailing whitespace.
   * Use set -e rather than passing -e on the shebang-line.
   * Set upstream metadata fields: Repository-Browse.
   * Update standards version to 4.6.1, no changes needed.
wims-lti (0.4.4.1-11) unstable; urgency=medium
 .
   * do not use perl in postrm script. Closes: #1009644
   * bumped Standards-Version: 4.6.0
   * updated d/po/pt.po; Closes: #1000763
wims-lti (0.4.4.1-10) unstable; urgency=medium
 .
   * replaced the call of tempfile by a call of $(perl -e 'print rand();')
     a piuparts is missing the package debianutils ... Why is puiparts
     missing this package?
   * removed the dependency on debianutils which is useless
wims-lti (0.4.4.1-9) unstable; urgency=medium
 .
   * added a dependency on debianutils, which is necessary for post-removal
     script
wims-lti (0.4.4.1-8) unstable; urgency=medium
 .
   * removed "which" commands from the post{int|rm} scripts
wims-lti (0.4.4.1-7) unstable; urgency=medium
 .
   * reuploaded the source, since I do not understand why piuparts can fail
wims-lti (0.4.4.1-6) unstable; urgency=medium
 .
   * removed the dependency on  python3-mysql.connector; this package provided
     python modules names "mysql" and "mysqlx", bu there is not "import mysql"
     in any Python file. As a matter of fact, this dependency was suggested by
     the documentation of the upstream package, but it depends on a use case
     where an Oracle database is used for the Django-based server. Currently,
     the debian package configures Django's settings.py file to use its
     sqlite3 backend.
wims-lti (0.4.4.1-5) unstable; urgency=medium
 .
   * added debian/po/{de,es,nl}.po :
     Closes: #987418
     Closes: #988377
     Closes: #989052
wims-lti (0.4.4.1-4) unstable; urgency=medium
 .
   * reordered a little commands in d/wims-lti.postinst, so the module
     wimsLTI.config does exist before the first call to manage.py;
     Closes: #989112
wims-lti (0.4.4.1-3) unstable; urgency=medium
 .
   * Now the package ships a file /var/lib/wims-lti/wimsLTI/config.py_dpkg_dist
     and the file /var/lib/wims-lti/wimsLTI/config.py is managed during
     the package's configuration. Closes: #987610
wims-lti (0.4.4.1-2) unstable; urgency=medium
 .
   * added a dependency on python3-httplib2; Closes: #987302
wims-lti (0.4.4.1-1) unstable; urgency=medium
 .
   * debian/postinst: fixed the substitution for sed, and the path
     for confFile; fixed the substitution to build a correct
     Python list syntax
   * added a configuration for https:
   * added a configuration for SSL
   * settings.py: fixed the link to static data when DEBUG is True
   * added dependencies: python3-redis, python3-pymongo, python3-memcache,
     python3-mysql.connector
   * embedded the oauth2 library from https://pypi.org/project/oauth2/
   * modifications to use a local wims package
wims-lti (0.4.4-5) unstable; urgency=medium
 .
   * modified d/wims-lti.postrm: purge will remove
     /etc/apache2/sites-available/wims-lti-django.conf
     Closes: #985872
wims-lti (0.4.4-4) unstable; urgency=medium
 .
   * modified the postinst script to avoid the mofification of
     the file wims-lti-django.conf-dist, which is considered as a conffile,
     hence not modifiable per the Policy (10.7.3). Closes: #984115
wims-lti (0.4.4-3) unstable; urgency=medium
 .
   * Applied the fix suggested by Andreas Beckman, thanks! Closes: #983785
wims-lti (0.4.4-2) unstable; urgency=medium
 .
   * included Américo Monteiro's po file, thanks! Closes: #982656
wims-lti (0.4.4-1) unstable; urgency=medium
 .
   * new upstream version
wims-lti (0.4.3-8) unstable; urgency=medium
 .
   * added dependencies on: apache2, sqlite3, acl, python3-defusedxml,
     python3-wimsapi, libapache2-mod-wsgi-py3. Added suggests and enhances:
     wims.
   * modified the postinst script to check whether apache2 is active
     before trying to reload it.
wims-lti (0.4.3-7) unstable; urgency=medium
 .
   * added the dependency on python3-django and python3-lti
wims-lti (0.4.3-6) unstable; urgency=medium
 .
   * added Frans Spiesschaert's po file (Thanks!). Closes: #972979
wims-lti (0.4.3-5) unstable; urgency=medium
 .
   * fixed a lot of typos in d/wims-lti.postinst, and taken care
     of the creation of a system group "lti"
   * fixed the symlink for popper.min.js in d/rules
   * added missing dependencies
   * patched lti_app/utils.py to use oauth2 from oauthlib library.
   * added the missing directory wims-lti/tests to d/wims-lti.install
   * fixed python-path in the patch apacheconf.patch
wims-lti (0.4.3-4) unstable; urgency=medium
 .
   * upgraded standards : debhelper-compat (= 13), Standards-Version: 4.5.1
wims-lti (0.4.3-3) unstable; urgency=medium
 .
   * added Helge Kreutzman's translation (Thanks!)
     Closes: #971922
wims-lti (0.4.3-2) unstable; urgency=medium
 .
   * added a glossary in debian/control, thanks to Wookey's hint.
wims-lti (0.4.3-1) unstable; urgency=medium
 .
   * Initial release (Closes: #968718)

xdp-tools (1.6.3-1) unstable; urgency=medium
 .
   [ Gianfranco Costamagna ]
   * debian/patches/563.patch: cherry-pick upstream
     patch to fix a build failure with kernel 7.0
 .
   [ Luca Boccassi ]
   * Update upstream source from tag 'upstream/1.6.3'
   * Drop backported patches

xfdesktop4 (4.20.2-1) unstable; urgency=medium
 .
   [ Yves-Alexis Perez ]
   * d/rules: set default wallpaper at build time
   * New upstream version 4.20.2
   * d/copyright: remove old FSF address
   * switch to the meson buildsystem
 .
   [ Pino Toscano ]
   * d/control: limit libgtk-layer-shell-dev B-D as linux-any

xgalaga (2.1.1.0-8) unstable; urgency=medium
 .
   * Team upload
   * Fix FTBFS with GCC-15 (Closes: #1098139)
   * Fix build on GNU/Hurd
   * Update default joystick path on Linux
   * Declare compliance with Debian Policy 4.7.3
   * Remove 'Rules-Requires-Root: no' field, it's redundant as of dpkg 1.22.13
   * d/watch: switch to v5
xgalaga (2.1.1.0-7) unstable; urgency=medium
 .
   * Team upload.
   * Set Rules-Requires-Root: no
 .
   [ Debian Janitor ]
   * Remove constraints unnecessary since buster (oldstable):
     + Build-Depends: Drop dependency on essential package dpkg-dev (>= 1.9.0).
     + Build-Depends: Replace dependency on transitional package
       x11proto-core-dev with replacement x11proto-dev.
xgalaga (2.1.1.0-6) unstable; urgency=medium
 .
   * Team upload.
   * Remove obsolete menu file.
   * Switch to debhelper-compat = 13.
   * Declare compliance with Debian Policy 4.5.0.
   * Use canonical VCS URI.
   * Fix FTCBFS: Pass --host to ./configure.
     Thanks to Helmut Grohne for the patch. (Closes: #945871)
xgalaga (2.1.1.0-5) unstable; urgency=medium
 .
   * Team upload.
   * Use compat level 9 and require debhelper >= 9.
   * wrap-and-sort -sa.
   * Declare compliance with Debian Policy 3.9.6.
   * Add missing Vcs-Browser field and use canonical Vcs-URI. (Closes: #708418)
   * Drop the removal of the old highscore file in postinst because Lenny and
     earlier releases are not supported anymore.
   * Add 0004-clang-ftbfs.patch and fix FTBFS with the clang compiler because
     void functions should not have a returned value.
     Thanks to Arthur Marble for the report and patch. (Closes: #739926)
   * Use copyright format 1.0.
   * debian/rules: Provide hardening build flags.
   * Add 0005-reproducible-build.patch and disable timestamps when using gzip.
xgalaga (2.1.1.0-4) unstable; urgency=low

  * Team upload.

  [ Paul Wise ]
  * Drop use of dh_desktop, it does nothing now

  [ Stephen M. Webb ]
  * Switch to 3.0 (quilt) source format.
  * Bumped Standards-Version to 3.9.2 (no changes required).
    - ran wrap-and-sort.
  * Converted copyright file to DEP5 format.
  * debian/rules: added build-arch and build-indep targets.
  * Fixed FTBFS with ld --as-needed (Closes: #641293) (LP: #832918).
  * Converted previous source mods to quilt format.
  * Fixed build warnings due to implicit declarations.
  * Fixed build warnings due to deprecated xf86dga.h header.

xgalaga (2.0.34-44) unstable; urgency=low

  * Update menu file for new policy and de-hardcode paths.

xgalaga (2.0.34-43) unstable; urgency=low

  * Take config.sub and config.guess from autotools-dev.
  * kFreeBSD porting. Closes: #415664
  * Create a xgal.sndsrv.oss that will work on linux and, presumably, FreeBSD
    (untested). The source file is left at xgal.sndsrv.linux.c since renaming
    source files in a Debian diff is too ugly.

xgalaga (2.0.34-42) unstable; urgency=low

  * Fix formatting of --help. Closes: #399985

xgalaga (2.0.34-41) unstable; urgency=low

  * No change upload to get buildds to rebuild it now that
    linux-kernel-headers is fixed. Closes: #389324

xgalaga (2.0.34-39) unstable; urgency=low

  * Revert last change, this was a linux-kernel-headers bug.

xgalaga (2.0.34-38) unstable; urgency=low

  * Include linux/types.h in linux-joystick.c to avoid a FTBFS when including
    linux/joystick.h with the latest gcc.

xgalaga (2.0.34-37) unstable; urgency=low

  * Patch from Hans de Goede to make window size configurable at run time.
    This includes fixes for the behavior in #369016 when running at
    nonstandard window sizes, it also sets the default window size to 468x586
    again.
  * Finally removed the old xgal compatability symlink to xgalaga.

xgalaga (2.0.34-36) unstable; urgency=low

  * Set window size back to 400x500 which makes fullscreen not quite that but
    avoids gameplay and display issues from changing the size. Closes: #369016

xgalaga (2.0.34-35) unstable; urgency=low

  * Patch from Hans de Goede <j.w.r.degoede@hhs.nl> of Fedora Extras to remove
    all the build warnings.
  * Patch from Hans de Goede to add fullscreen support. Note that full screen
    mode is enabled by default.
  * Update man page to document fullscreen support.
  * Moved a lot of stuff to /usr/share.

xgalaga (2.0.34-34) unstable; urgency=low

  * Fix FTBFS due to xorg transition causing $x_libraries not to be set.
    Closes: #365160

xgalaga (2.0.34-33) unstable; urgency=low

  * Minor improvement to man page. Closes: #349647

xgalaga (2.0.34-32) unstable; urgency=low

  * Debhelper v5.
  * Move away from xlibs-dev.
  * Current policy.

xgalaga (2.0.34-31) unstable; urgency=low

  * Build with -O2 not -O3 so it's debuggable.
  * Add NO_GLOBAL_SCORES define that rips out all support for global score
    file. The old global score file is not deleted until xgalaga is purged,
    but it will not be used anymore.
  * Remove insecure sgid bit. Closes: #319686

xgalaga (2.0.34-30) unstable; urgency=low

  * Patch from Andreas Jochens to support building with gcc 4.
    Closes: #300374

xgalaga (2.0.34-29) unstable; urgency=low

  * Add support for building a xgalaga-hyperspace binary,
    based on a patch by Paul Telford. Closes: #280975

xgalaga (2.0.34-28) unstable; urgency=low

  * Fix non-POSIX chown call in postinst. Closes: #236524
  * And one in the rules file.
  * Quote all strings in menu file.

xgalaga (2.0.34-27) unstable; urgency=low

  * Make the sound server deal with any buffer size the sound card returns.
    Thanks to Chris Capoccia for helping to track this down. See #196979,
    which is not all fixed, since larger buffer sizes make xgalagas sound
    effects lose sync.

xgalaga (2.0.34-26) unstable; urgency=low

  * Joystick patch fix for when two buttons are pressed and one released.

xgalaga (2.0.34-25) unstable; urgency=low

  * Joystick support patch from Wouter Verhelst <wouter@debian.org>, also
    sent upstream. Closes: #190241
  * Add README.Debian with info about the joystick patch. Also update man
    page.
  * Fixed icon to use Debian icon color map.

xgalaga (2.0.34-24) unstable; urgency=low

  * Updated config.sub and config.guess so they know about
    parisc64-unknown-linux-gnu host system type. Closes: #174786


yamllint (1.38.0-1) unstable; urgency=medium
 .
   * New upstream version 1.38.0
   * Refreshed debian/patches/docs.diff
   * Updated years in debian/copyright
   * Updated debian/control
   * Updated debian/watch to version 5
   * Updated Standards-Version: 4.7.3 (no changes needed)

zfec (1.5.7.4-0.2) unstable; urgency=medium
 .
   * Non-maintainer upload.
   * d/patches/112.patch: Add patch from upstream to fix Python3.13 build
     (Closes: #1081480).
zfec (1.5.7.4-0.1) unstable; urgency=medium
 .
   * Non-maintainer upload.
   * New upstream version 1.5.7.4. (Closes: #1055545)
   * Drop debian/patch
   * Remove upstream-vcs-tag when use gbp
   * Add python3-pyutil on B-D.
   * Add python3-hypothesis and python3-twisted for test.
   * Remove python3:Recommends and python3:Suggests from d/control
   * Fix lintian issue:
     - Clear whitespace of debian/changelog
     - Set std-ver to 4.6.2
     - Set debhelper-compat to 13 and remove debian/compat
     - Add Rules-Requires-Root
zfec (1.5.2-2.1) unstable; urgency=medium
 .
   * Non-maintainer upload.
   * Drop python2 support; Closes: #938887
zfec (1.5.2-2) unstable; urgency=medium
 .
   * Use tracker team address in maintainers field.
     Closes: bug#899755, Thanks to Christoph Biedl.
zfec (1.5.2-1) unstable; urgency=medium
 .
   * New upstream release.
   * debian/control:
     + Mark package compliance with Debian policy 4.1.3.
     + Use salsa URL for Vcs-* field.s
     + Add python3-all-dev and python3-setuptools to build dependencies.
     + Introduce python3-zfec.
     + Bump debhelper build depends to >= 11.
   * Bump compat to 11.
   * debian/patches:
     + Refresh patch remove_pyutils-deps with new upstream release.
     + Add patch 2001-drop_command_line_tools to replace
       remove_upstream_setup_deps patch.
   * Don't install TGPPL license file as documentation.
   * Enable +bindnow for python extensions.
zfec (1.4.24-3) unstable; urgency=medium
 .
   * debian/control:
     + Take over the maintainer ship of the package.
       Closes: bug#859186. Thanks Ramakrishnan for your contributions.
     + Make the package team maintained and mark myself as uploader.
     + Mark package compliant with Debian Policy 4.0.0.
     + Convert package to short-term dh sequencer and add dependency on
       dh-python and python-all-dev.
     + Update Vcs-* fields to point to team repo.
   * debian/copyright is updated to follow Debian Copyright format 1.0.
   * Drop obsolete debian/pycompat file.
   * Use pybuild in debian/rules for building package.
   * Add source options to ignore *.egg-info directory contents.
   * Introduce python-zfec.lintian-overrides for false doc-base related
     lintian warnings.
   * Introduces debian/source/lintian-overrides for use of
     License-Reference field in debian/copyright.
zfec (1.4.24-2) unstable; urgency=medium
 .
   * Orphaning the package
zfec (1.4.24-1) unstable; urgency=medium
 .
   [Ramakrishnan Muthukrishnan]
   * New upstream version (1.4.24). This debian packaging is more of
     a maintenance release to fix some immediate issues.
   * New co-maintainer, Ramakrishnan Muthukrishnan <rkrishnan@debian.org>
   * debian/watch: point to the right path.
   * debian/compat: bump up the version to 9.
   * debian/patches/*: regenerate patches. (Closes: #715167)
   * debian/rules: does not use bzip2 for packages anymore. (Closes: #833232)
   * debian/control: change Vcs-* fields to point to the new repository.
zfec (1.4.5-2) unstable; urgency=low

  [ Bert Agaz ]
  * Remove dependency on pyutils.
  * Update Vcs-Git and Vcs-Browser entry on debian/control.

zfec (1.4.5-1) unstable; urgency=low

  [ Bert Agaz ]
  * Initial release (Closes: #503976).
  * Remove ubuntu specific control file header.
  * Add debian source format file.
  * Remove deprecated XB-Python-Version.
  * Switch from python-support to dh_python2.
  * Update project homepage.
  * Rename XS-Python-Version to X-Python-Version in debian/control.
  * Migrate ubuntu patches to upstream into quilt.




REMOVED: trocla 0.6.0-1
REMOVED: actiona 3.11.1-3
REMOVED: hiera-eyaml 4.2.0-1.1
REMOVED: libpappsomspp 0.11.4-1