boxer-data (10.10.1) unstable; urgency=medium . * fix class Desktop.design.painting.gtk: + stop install gimp-lensfun gimp-plugin-registry since trixie * fix class Console.design.drawing: + stop install gtk-vector-screenshot since trixie * fix class Desktop.tools.harden: + stop include parcimonie since trixie * fix class Console.mobile.sync: + stop install syncevolution syncevolution-http since trixie * fix class Desktop.office.gtk.document-viewer: + stop avoid obsolete evince-gtk * fix class Desktop.media.video.mplayer: + install mplayer-gui (not gnome-mplayer) + stop avoid obsolete mplayer2 * fix class Desktop.media.audio: + drop obsolete subclass esound * fix class Desktop.web: + simplify subclass qutebrowser + drop subclass webkit.qt * all of the above together closes: bug#1109028 bthome-ble (3.13.1-1) unstable; urgency=medium . * New upstream release. evince (48.1-2) unstable; urgency=medium . * Team upload * Mention #1109382 in previous changelog entry * d/p/EvWindow-fix-launching-fullscreen-actions-from-popover.patch: Add proposed patch from upstream MR evince!728 to fix entry to fullscreen or presentation mode via the menu. This fixes an intermittent but frequent bug seen when testing presentation mode, where the popover menu remains visible (but unresponsive) after presentation mode is entered. (Closes: #1109381) evince (48.1-1) unstable; urgency=medium . * Team upload * New upstream bugfix release - Stop working around a GTK scaling bug when using a sufficiently recent GTK where the bug is fixed, to avoid double-scaling causing presentation mode to display the PDF too small (evince#1600 upstream, Closes: #1093497) - Ensure that the application ID matches the .desktop filename, so that Wayland compositors can always match the window to its icon; previously this was correct for the main app but not for the previewer (evince!725 upstream, Closes: #1023928) - Make sure the caret colour is visible against the document background colour, even if viewing a light-background document under a dark system theme (evince#2093 upstream) - Always make annotation popup windows opaque, even if the annotation highlight colour is semi-transparent (evince#1399 upstream) - Guard against integer overflow when allocating memory on a per-page basis (evince#2094 upstream; probably redundant because GLib already has a similar check, but harmless) - Avoid deprecated syntax in Appstream metadata - Translation updates * d/patches: Update to upstream git commit 48.1-4-g440ab79d8 from gnome-48 branch - Fix a crash in accessibility code by guarding against ev_page_cache_get_text() returning NULL (evince!681 upstream) - Avoid an XML metacharacter in the Hindi translation causing the Appstream metadata to become corrupted with recent gettext (Infrastructure/damned-lies#655 upstream) - Translation updates * d/control: Remove Suggests: unrar. evince has used libarchive instead since Debian 10 or earlier. Thanks to Adrian Bunk (Closes: #1065399) golang-github-containers-ocicrypt (1.1.10-3) unstable; urgency=medium . * Drop unnedeed dependency on libhsm-bin, Closes: #1109389 hunspell-ar (3.5.2014-11-08-5) unstable; urgency=medium . * Remove unintended changes introduced in version 3.5.2014-11-08-4 that are not relevant to the solution of bug #1109305 and were not declared in the changelog: - Deletion of debian/dirs directory. The directory was restored. - Cosmetic changes in debian/control. The content in this file was reversed to meet version 3.5.2014-11-08-3. - Cosmetic changes in debian/watch. The content in this file was reversed to meet version 3.5.2014-11-08-3. - Cosmetic changes in debian/salsa-ci.yml. The content in this file was reversed to meet version 3.5.2014-11-08-3. - Changes made to debian/install were declared without any modifications to the file. - Add back dictionary symbolic linking for MySpell in debian/links. hunspell-ar (3.5.2014-11-08-4) unstable; urgency=medium . * debian/links: Add language variants to the name of the Hunspell dictionary files to make them work with LibreOffice. (closes: #1109305). * debian/install: Install the renamed dictionary files. * debian/info-myspell: Remove no more needed file. inkbird-ble (1.0.0-1) unstable; urgency=medium . * New upstream release. kate (4:25.04.3-2) unstable; urgency=medium . [ Aurélien COUDERC ] * Backport upstream commits: - Fix data loss when closing kate if the option to save and restore unsaved files is enabled. [9767f9d1, a843f106, 9502ae17, 5ec8803d, 6b29a7e6] (kde#505135) - Fix symbol highlight not working when using the LSP client. [ca61073b, 2650a5e6, 79765d29] (kde#503414) kate (4:25.04.3-1) unstable; urgency=medium . [ Aurélien COUDERC ] * New upstream release (25.04.3). - Open read-write for _commit, don't use WriteOnly, that will truncate. - Build: Fix creating a new set of targets. (kde#505346) (Closes: #1108892) - Fix saving & restoring last active build target index. (kde#505241) kwin (4:6.3.6-1) unstable; urgency=medium . [ Aurélien COUDERC ] * New upstream bugfix release (6.3.6). - Backends/drm: never use DEGAMMA_LUT. (kde#505869) - Workspace: Fix window activation on activity change. (kde#501393) - Don't add deleted windows to the stacking order. - Xwayland: don't forward left/middle/right mouse buttons to Xwayland. (kcde#490057) - Output management: add some safe guards for invalid brightness overrides. (kde#506090) - Wayland/tablet_v2: fix the tablet cursor hotspot with Xwayland scaling. - Core/renderloop: fix subsurfaces vrr scheduling. - Plugins/slideback: Scale smoothness proportionally to adjusted strength from 6.3. (kde#503964) - Plugins/systembell: Throttle visual bell. - Backends/drm: disable direct scanout on secondary GPUs. - Scene/surfaceitem_wayland: handle some missing initial properties. - Plugins/translucency: Fix unsetting animations for minimized windows. (kde#504687) - Autotests/integration/outputchanges: wait for frame callbacks before committing. - Autotests/outputchanges: add a test for evacuating windows from removed outputs. - Scene/workspacescene: restrict frame callbacks based on the output rather than geometry. (kde#479694, kde#498628, kde#505060) - Backends/drm: reduce severity of pageflip failure logging. (kde#505028) - Xwayland: Fix leaking normal key presses with keyboard layouts other than English. (kde#500032) - Backends/drm: Add missing null guard. - Outputconfigurationstore: disable adaptive sync by default. - Map xinerama index to Output by output name. - Backends/drm: clear the test buffer with legacy modesetting. (kde#504258) - Wayland/xdgoutput: round the scaled output position. - Don't leak lcms tone curves. - Plugins/colorpicker: round the result. (kde#491633) - Plugins/colorpicker: use BPC when converting to sRGB. (kde#491633) - X11: Add an environment variable to disable _NET_WM_SYNC_REQUEST in X11Window. - Wayland/colormanagement: compare primaries with the protocol's resolution. - Wayland/colormanagement: also around max_fall and max_cll. - Wayland/colormanagement: fix sending target luminance levels. - Core/iccprofile: also estimate black point even if there's no luminance tag. - Backends/drm: also guard DrmOutput::cursorLayer for nullptr pipeline. (kde#504516) * Drop backported patches now part of the upstreame release. * Refresh patches. * Backport upstream commits: - Fix inactive inner window action "Activate, raise and pass click" not raising the window. (kde#501457) - Fix incorrect window sometimes receiving clicks when slideback effect in use. [572fee09] (kde#455429) - wayland: Send wl_data_source.cancelled if wl_data_device.start_drag is rejected similar to what weston does. [48ddfb59] - backends/drm: also handle GPU resets on secondary GPUs. [9580193a] - Fix night light not tinting properly on wayland. [98b64e9b] (kde#505495) - Implement org.freedesktop.a11y.KeyboardMonitor interface which allows screen readers to intercept keys for their own shortcut handling. [252c74c0, cfc05b0e, 5ba6279b, 889ffed2] - Fix an issue where windows may be placed at a non-0,0 coordinate after a maximize on fractionally scaled displays if the window was previously resized from the top edge, potentially allowing mouse clicks on the top of the display to reach windows underneath the maximized window. [070f5ba6] - Fix for multiples instances of screens waking up just after going to sleep. [8f331a26] (kde#493879, kde#506135, kde#505953) - Fix some wayland clients crashing in some race conditions when attempting to create an xdg_surface while mapping a window. [225e7360] (kde#506412) - backends/drm: Fix memory leak in DrmGpu::createNonMasterFd. [e4e144db] - wayland: Fix resizing with fractional increments. [e8541cf2] - wayland: close popups upon window activation, fixing GTK4 popups preventing the kicker launcher getting focus. [51c0880f] (kde#497075) - Fix panel not registering clicks when window behavior set to "activate and raise", and a tooltip is visible. [267fa4ec] (kde#461414) libxml2 (2.12.7+dfsg+really2.9.14-2) unstable; urgency=medium . * Security fixes: - CVE-2025-6021: integer overflow in xmlBuildQName() (Closes: #1107720) - CVE-2025-{49794,49796}: use after free and type confusion in xmlSchematronReportOutput() (Closes: #1107755) open-plc-utils (0.0.6+git20250517.7fb8ac5-1) unstable; urgency=medium . * d/control: bump standards version (no changes). * New upstream version, commit 7fb8ac5. pnopaste (1.8-4) unstable; urgency=medium . * Acknowledge NMU from Chris Hofstaedtler. * Adjust dbconfig dependency to fix an error in noninteractive frontend. Closes: #1108946 puppet-module-barbican (25.0.0-5) unstable; urgency=medium . * Add Add-queue_manager-and-stream_fanout.patch. puppet-module-cinder (25.0.0-3) unstable; urgency=medium . * d/watch: switch to version=4 and mode=git. * Add Add-queue_manager-and-stream_fanout.patch. puppet-module-cloudkitty (14.0.0-6) unstable; urgency=medium . * Add Add-queue_manager-and-stream_fanout.patch. * Add Expose-rabbit_qos_prefetch_count.patch. puppet-module-designate (25.0.0-3) unstable; urgency=medium . * d/watch: switch to version=4 and mode=git. * Add Add-queue_manager-and-stream_fanout.patch. puppet-module-glance (25.0.0-3) unstable; urgency=medium . * d/watch: switch to version=4 and mode=git. * Add Add-queue_manager-and-stream_fanout.patch. puppet-module-ironic (25.0.0-2) unstable; urgency=medium . * Add Add-amqp_auto_delete-and-rabbit_transient_queues_ttl-params.patch. * Add Add-queue_manager-and-stream_fanout.patch. puppet-module-mistral (25.0.0-2) unstable; urgency=medium . * Add Add-amqp_auto_delete-and-rabbit_transient_queues_ttl-params.patch. * Add Add-queue-manager-and-stream_fanout.patch. pyopengl (3.1.9+dfsg-2) unstable; urgency=medium . * Team upload. * Skip check_egl_platform_ext in case of PermissionError (LP: #2115791) * autopkgtest: use py3versions --supported instead of --requested redis (5:8.0.2-3) unstable; urgency=medium . * Add a patch to re-add "Redis ver. $REDIS_VERSION" output to the LOLWUT ~Easter Egg command output as a some testsuites were relying on it existing. This upstream change was made in 8.0.2, not in 8.0.0. redis (5:8.0.2-2) unstable; urgency=high . * CVE-2025-32023: An authenticated user may have used a specially-crafted string to trigger a stack/heap out-of-bounds write during hyperloglog operations, potentially leading to remote code execution. Installations that used Redis' ACL system to restrict hyperloglog "HLL" commands are unaffected by this issue. (Closes: #1108975) * CVE-2025-48367: An unauthenticated connection could have caused repeated IP protocol errors, leading to client starvation and ultimately become a Denial of Service (DoS) attack. (Closes: #1108981) thermopro-ble (0.13.1-1) unstable; urgency=medium . * New upstream release. wireless-regdb (2025.07.10-1) unstable; urgency=medium . * New upstream version: - Update regulatory info for Indonesia (ID) for 2025 - Permit 320 MHz bandwidth in 6 GHz band for GB - Update regulatory info for Egypt (EG) for 2024 - Update regulatory rules for Brazil (BR) on 6GHz - Update regulatory info for Vietnam (VN) for 2025 - Update regulatory info for Estonia (EE) for 2024 - update regulatory rules for Paraguay (PY) on 6 GHz for 2025 - Update regulatory info for CEPT countries for 6GHz listed by WiFi Alliance - update regulatory rules for Bosnia and Herzegovina (BA) for 6 GHz * d/upstream/signing-key.asc: Update for later expiry date and new uids