at-spi2-core (2.24.1-2) unstable; urgency=medium . * control: Bump Standards-Version to 4.1.0 (no changes). * patches/accessible_get_parent.diff: Upstream fix for crash on switching between windows (Closes: Bug#872912). banshee (2.6.2-6.2) unstable; urgency=medium . * Non-maintainer upload. * Disable webkit features, the currently used library will not be in buster. (Closes: #790198) baresip (0.5.4-1.1) unstable; urgency=medium . * Non-maintainer upload. . [ Steve Langasek ] * Build with -D_GNU_SOURCE to fix FTBFS with GCC 7. (Closes: #872406) bind9 (1:9.10.3.dfsg.P4-12.6) unstable; urgency=medium . * Non-maintainer upload. * Import upcoming DNSSEC KSK-2017 from 9.10.5 (Closes: #860794) ca-certificates (20170717) unstable; urgency=medium . * Update to Standards-Version: 4.0.1 * debian/ca-certificates.postinst: Prevent postinst failure on read-only /usr/local. Closes: #843722 * mozilla/certdata2pem.py: Remove email-only roots from mozilla trust store. Closes: #721976 * mozilla/{certdata.txt,nssckbi.h}: Update Mozilla certificate authority bundle to version 2.14. Closes: #858064 The following certificate authorities were added (+): + "AC RAIZ FNMT-RCM" + "Amazon Root CA 1" + "Amazon Root CA 2" + "Amazon Root CA 3" + "Amazon Root CA 4" + "D-TRUST Root CA 3 2013" + "LuxTrust Global Root 2" + "TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1" The following certificate authorities were removed (-): - "AC Raiz Certicamara S.A." - "ApplicationCA - Japanese Government" - "Buypass Class 2 CA 1" - "ComSign CA" - "EBG Elektronik Sertifika Hizmet Saglayicisi" - "Equifax Secure CA" - "Equifax Secure eBusiness CA 1" - "Equifax Secure Global eBusiness CA" - "IGC/A" - "Juur-SK" - "Microsec e-Szigno Root CA" - "Root CA Generalitat Valenciana" - "RSA Security 2048 v3" - "S-TRUST Authentication and Encryption Root CA 2005 PN" - "S-TRUST Universal Root CA" - "SwissSign Platinum CA - G2" - "TC TrustCenter Class 3 CA II" - "TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı H6" - "UTN USERFirst Email Root CA" - "Verisign Class 1 Public Primary Certification Authority" - "Verisign Class 1 Public Primary Certification Authority - G3" - "Verisign Class 2 Public Primary Certification Authority - G2" - "Verisign Class 2 Public Primary Certification Authority - G3" - "Verisign Class 3 Public Primary Certification Authority" - "WellsSecure Public Root Certificate Authority" choose-mirror (2.81) unstable; urgency=medium . * Update Mirrors.masterlist console-data (2:1.12-5.1) unstable; urgency=medium . * Non-maintainer upload. * Avoid creating bogus keymaps under some locales. Some locales trick `grep` into thinking the origin file as "binary"; force it to parse it as "text". Closes: #799871 Thanks to Chris Lamb for the patch * Avoid storing build timestamps inside some keymap files. debian-edu-install (1.917) unstable; urgency=medium . [ Holger Levsen ] * Bump Standards-Version to 4.0.1, no changes needed. * Drop no longer active people from uploaders, thanks for all your work: - Andrew Lee (李健秋). * debian-edu-install.postinst: - drop workaround for missing versions present between 1.810 and 1.813. - update version number in /etc/debian-edu/config on upgrades. * Bump version file to 10+edu0~a0 to reflect that we are working on Buster now. * base-installer: drop code disabled since 2012. . [ Mike Gabriel ] * Overall white-space cleanup on all files in this package (strip white- spaces at EOL). * debian/control: Use my @d.o mail address in Uploaders: field. debian-installer (20170828) unstable; urgency=medium . [ Cyril Brulebois ] * Bump Linux kernel ABI from 4.9.0-3 to 4.11.0-2. * Update translation-status for the release. * Adjust fontconfig's hinting and freetype's interpreter version to keep the original rendering in the graphical installer for the time being (See: #873462). * Update build/config/common and debian/rules to perform release builds against buster now that stretch has been released. . [ Martin Michlmayr ] * Drop orion5x-qnap image. * Remove NSLU2 related build dependencies. . [ Vagrant Cascadian ] * [armhf] Fix build of Firefly-RK3288 images with recent u-boot versions. (Closes: #870615) . [ Aurelien Jarno ] * debian/control: do not build-depends on -pic libraries, that is not needed anymore since the switch to mklibs-copy. . [ Karsten Merker ] * Add a build-dependency on "fdisk | util-linux (<< 2.29.2-3~)" for armhf. util/gen-hd-image uses sfdisk when creating SD card images for armhf systems, and starting with util-linux 2.29.2-3 it is split out from util-linux into a separate, non-essential "fdisk" package: https://lists.debian.org/debian-devel-announce/2017/08/msg00005.html (Closes: #872091) * Bump the Linux kernel ABI from 4.11.0-2 to 4.12.0-1. directfb (1.7.7-5) unstable; urgency=medium . * debian/{patches,*.install}: Turn libdavinci_c64x into a convenience library. (Closes: #872306) directfb (1.7.7-4) unstable; urgency=medium . * Upload to unstable. * debian/control: Bump Standards-Version. * debian/*.preinst: Removed, no longer needed. directfb (1.7.7-3) experimental; urgency=medium . * debian/patches: add another missing file. * debian/copyright: Fix typo. directfb (1.7.7-2) experimental; urgency=medium . * debian/patches: Add missing files from upstream (Closes: #598976) directfb (1.7.7-1) experimental; urgency=medium . * New upstream release. (Closes: #645624) (LP: #1180318) * Build ++DFB package. (Closes: #413371) * SONAME bump: 1.4-6 -> 1.7-7. * debian/rules: - Enable mesa support. - Use dh_makeshlibs override since there are no symbol files at the moment. - Build with all hardening flags. - Use flux to re-generate .cpp/.h files from .flux files. - Disable uniquewm, because it does not build at the moment. * debian/copyright: Update using decopy and document flux. directfb (1.4.17-1) experimental; urgency=medium . * New upstream release. * SONAME bump: 0 -> 6. * Update upstream homepage to directfb.net everywhere. * debian/control: Adopt package. (Closes: #844130) * debian/{control,rules,compat}: Bump debhelper compat to 10. * Use -dbgsym packages. (Closes: #703157) * debian/rules: - Use dh more consistently. - Install NEWS as changelog. * debian/*.install: - Update for Multi-Arch paths. - Use dh-exec to simplify install files. - No longer install directfb-config. directfb provides pkg-config files. - Move directfb-csource to -bin. - Remove default font implementation, replaced by dgiff. - Do not install static libraries of drivers. * debian/{control,rules}: Remove udebs since GTK+ 2 switched to X11 years ago. * debian/control: - Fix dependencies in -dev. - Update Vcs-*. - Bump Standards-Version to 3.9.8. - Remove duplicate sections. - Drop libsysfs-dev (Closes: #689876) - Mark as M-A: same where possible. - Move libdirectfb-extras to Suggests. * debian/patches: Refresh patches and remove those integrated upstream. * debian/{rules,preinst}: Replace symlinks with directories. * debian/copyright: Convert to CF-1.0. Thanks to Thorsten Alteholz for some hints. directfb (1.4.3-1.1) experimental; urgency=medium . * Non-maintainer upload. * Merge from 1.2.10.0-5.1: - d/control: drop build depend on libts-dev. - d/libdirectfb-1.4-0.install.*: drop install libdirectfb_tslib.so - d/libdirectfb-dev.install.*: drop install libdirectfb_tslib.a * Merge from 1.2.10.0-5: - add support for libpng 1.5. - replace libpng12-dev build dependency by libpng-dev. * Merge from 1.2.10.0-4.3: - Fix "directfb ftbfs on armel. Implicit declaration error" * Merge from 1.2.10.0-4.1: - Fix typo for LDFLAGS. (Closes: #675112) directfb (1.4.3-1) experimental; urgency=low * New upstream release. (Closes: #549633) - Add pxa3xx, new driver for the 2D graphics accelerator found on PXA3xx processors. * Fix FTBFS on kFreeBSD: update per-architecture install files. (Closes: #565853) * Switch to dpkg-source 3.0 (quilt) format. * Update debian/control: - Remove quilt build dependency. - Update (build-)dependency on libjpeg62-dev to libjpeg-dev. - Bump Standards-Version to 3.8.4 (no changes needed). - Fix typo in package description: "This packages". (Closes: #557372) * Update debian/rules: - Enable parallel build (pass --parallel option to dh). directfb (1.4.1-2) experimental; urgency=low * Merge changes from 1.2 series: - Use per-architecture install files. - Add missing libdavinci_c64x library and c64x include on armel architecture. * Update debian/control: - Bump Standards-Version from 3.8.2 to 3.8.3 (no changes needed). * Add debian/README.source file. directfb (1.4.1-1) experimental; urgency=low * New upstream release. (Closes: #537224) - Add gl gfx driver and zytronic input driver. - debian/patches/05_link_dynamic.patch: Refreshed. - debian/patches/93_fix_unicode_key_handling.patch: Refreshed. * Update debian/control: - Add libgl1-mesa-dev build dependency and dependency to libdirectfb-dev package. * Update debian/libdirectfb-1.4-0.install file. * Update debian/debian/libdirectfb-dev.install file. espeakup (1:0.80-6) unstable; urgency=medium . [ Samuel Thibaul ] * patches/space: Fix spelling space character. * patches/unicode: Enable unicode support. * control: Update maintainer mailing list. * control: Migrate priority to optional. * control: Bump Standards-Version to 4.0.1. * patches/empty-default: Make empty voice name select the default voice (Closes: Bug#872194). . [ Valentin Vidic ] * Croatian translation of debconf message (Closes: Bug#859323). glib2.0 (2.53.6-1) unstable; urgency=medium . * New upstream release. * git_glib-mkenums-utf8.patch, git_glib-mkenums-flags.patch: Drop, now applied upstream. * debian/rules: Don't pass -X.la to dh_auto_install - it can easily lead to unwanted removals (not claiming this is happening here) * debian/rules: Fix arguments to dh_auto_test so tests are run again * debian/rules, debian/control{,.in}: Use dh_missing and not dh_install --list-missing. Also upgrade this check to --fail-missing. * debian/rules: Don't run the tests under fakeroot; it makes them fail with dbus-related authentication problems. glibc (2.24-17) unstable; urgency=medium . [ Samuel Thibault ] * patches/hurd-i386/unsubmitted-clock_t_centiseconds.diff: Drop clock() part from patch, it always uses CLOCKS_PER_SEC which is always 1000000. Should fix ffmpeg build. Closes: Bug#872556. . [ Aurelien Jarno ] * debian/patches/any/submitted-intl-tstgettext.diff: new patch to fix the intl/tst-gettext with newer gettext versions. Closes: #873097. glibc (2.24-16) unstable; urgency=medium . [ Aurelien Jarno ] * debian/sysdeps/kfreebsd-i386.mk: don't try to build libc0.1-i686. * debian/sysdeps/hurd-i386.mk: don't try to build libc0.3-i686. * debian/sysdeps/i386.mk: don't try to build libc6-i686. * debian/testsuite-xfail-debian.mk: update kfreebsd* according to git-updates.diff. . [ Samuel Thibault ] * debian/testsuite-xfail-debian.mk: update hurd according to git-updates.diff. glibc (2.24-15) unstable; urgency=medium . [ Aurelien Jarno ] * debian/patches/git-updates.diff: update from upstream stable branch: - Avoid use-after-free read access in clntudp_call (CVE-2017-12133). Closes: #870648. * debian/control.in/*: Change back gcc-multilib to a Recommends for biarch packages. It provides the /usr/include/linux/asm symlink. * debian/control.in/x32: Add a gcc-multilib Recommends for libc6-dev-x32. * Update French debconf translation, by Alban Vidal. Closes: #872025. * debian/control.in/main: Change gcc-multiarch to priority optional and section oldlibs. * debian/control.in/opt: Remove transitional packages libc0.1-i686, libc0.3-i686, libc6-i686. * debian/control.in/libc, debian/control.in/main, debian/control.in/opt: change the priority of libc0.1-dbg, libc0.1-udeb, libc0.3-dbg, libc0.3-udeb, libc0.3-xen, libc6.1-alphaev67, libc6.1-dbg, libc6.1-udeb, libc6-dbg, libc6-udeb, libc6-xen and locales-all to optional. gnupg2 (2.1.23-2) unstable; urgency=medium . * add openssh-client to build-deps for testing gnupg2 (2.1.23-1) unstable; urgency=medium . * New upstream release * move to unstable * refresh patches * keep default --no-auto-key-retrieve * Standards-Version: 4.0.1 (Priority: extra -> optional) * run tests in parallel gnupg2 (2.1.22-1) experimental; urgency=medium . * New upstream release * refreshed patches * pulled a few bugfix patches from upstream * simplify systemd user units gnupg2 (2.1.21-4) experimental; urgency=medium . * package reorganization: - new package 'gpg' is just for public key operations - 'gnupg' package is the full suite - 'gnupg-agent' package is renamed to 'gpg-agent' - 'gpgconf' is a base package, other packages depend on it - 'gnupg-utils' are a grab-bag of helper tools that may be useful * scdaemon: add AppStream metainfo about supported smartcards gnupg2 (2.1.21-2) experimental; urgency=medium . [ Stefan Bühler ] * Create WKS server and client packages . [ Daniel Kahn Gillmor ] * minor packaging cleanups * more upstream bugfix and cleanup patches * rename WKS packages to match the tool names gnupg2 (2.1.21-1) experimental; urgency=medium . * new upstream release * drop patches alread yupstream, refresh patches * import post-release bugfixes from upstream gnupg2 (2.1.20-4) experimental; urgency=medium . * avoid shipping or trying to use .skel files * more bugfixes from upstream * skip missing signing keys (Closes: #834922) * prefer available smartcard gnupg2 (2.1.20-3) experimental; urgency=medium . * more upstream bugfixes (Closes: #858400) gnupg2 (2.1.20-2) experimental; urgency=medium . * more bugfix patches from upstream gnupg2 (2.1.20-1) experimental; urgency=medium . * new upstream release * drop patches already upstream, refresh patches * import post-release bugfixes from upstream gnupg2 (2.1.19-3) experimental; urgency=medium . * more patches from usptream - test suite should now use /tmp and not require /run/user/ gnupg2 (2.1.19-2) experimental; urgency=medium . * more patches from upstream (Closes: #854829) * add verbose=3 to the test suite as requested by upstream gnupg2 (2.1.19-1) experimental; urgency=medium . * New upstream release (Closes: #854359) * many post-release bugfixes from upstream * add logcheck filters for gpg-agent (Closes: #856438) * Upload to experimental due to the freeze gtk+3.0 (3.22.19-1) unstable; urgency=medium . [ Jeremy Bicha ] * New upstream release * debian/libgtk-3-common.install.in: Install EmojiChooser gsettings schemas * Add fix-gtk-menu-sliders.patch: - Cherry-pick patch to fix regression with clicking on sliders in menus, such as with Unity's sound indicator (LP: #1712701) (Closes: #872687) . [ Ken VanDine ] * debian/control.in: - Bump libpango1.0-dev Build-Depends to >= 1.40.5 for colornames test iprutils (2.4.15.1-2) unstable; urgency=medium . * Update copyright years in debian/copyright (thanks, Matthias Klose). * Change priority to optional, since "Priority: extra" is now deprecated. * Use HTTPS form of copyright-format URL. * Policy version 4.1.0. libgcrypt20 (1.7.9-1) unstable; urgency=high . * New upstream version, mitigates a local side-channel attack on Curve25519 dubbed "May the Fourth be With You". [CVE-2017-0379] Closes: #873383 + Drop 30_mpi-Fix-mpi_set_secure.patch libguestfs (1:1.34.6-5) unstable; urgency=medium . * Adjust dependencies because *fdisk will be split out of util-linux into its own package (Closes: #872101) * Bump Debhelper compat level, Standards-Version * Adjust Vcs-* headers libpng1.6 (1.6.32-1) unstable; urgency=medium . * New upstream version 1.6.32 * Update copyright file libxcursor (1:1.1.14-3) unstable; urgency=medium . * Team upload. . [ Drew Parsons ] * debian/control Homepage: https://www.x.org * Standards-Version: 4.1.0 . [ Cyril Brulebois ] * debian/rules: Set PACKAGE to libxcursor1. Otherwise dh_makeshlibs is called with an incomplete package name for the udeb, which breaks reverse dependencies (Closes: #873041). libxcursor (1:1.1.14-2) unstable; urgency=medium . * Team upload. - remove Drew Parsons as Uploader. * Standards-Version: 4.0.1 * Debian source format 3.0 (quilt) - remove debian/xsfbs (quilt patch functionality now standard) - update autogen.sh as debian patch, take from upstream git repo * Convert debian build system to dh * debhelper compatibility level 10 * Remove libxcursor1-dbg: symbols are now provided by libxcursor1-dbgsym lvm2 (2.02.173-1) unstable; urgency=medium . * New upstream release. openssl (1.1.0f-5) unstable; urgency=medium . * Instead of completly disabling TLS 1.0 and 1.1, just set the minimum version to TLS 1.2 by default. TLS 1.0 and 1.1 can be enabled again by calling SSL_CTX_set_min_proto_version() or SSL_set_min_proto_version(). pango1.0 (1.40.11-1) unstable; urgency=medium . * New upstream release. * Bump Standards-Version to 4.0.1. * Add fix-sentence-break-function.patch: - Fix regression caught by gtk3 & libgtk2-perl build tests (LP: #1709225) (Closes: #872317) pango1.0 (1.40.9-1) unstable; urgency=medium . * New upstream release. reiserfsprogs (1:3.6.25-7) unstable; urgency=medium . * Suggest fdisk | util-linux (<< 2.29.2-3~) (Closes: #872209) * Update to policy 4.0.1. util-linux (2.29.2-4) unstable; urgency=medium . * Bump Standards-Version to 4.0.1 * Upload to unstable. util-linux (2.29.2-3) experimental; urgency=medium . * Enable more tests by build-dep on bc, socat and netbase (Closes: #867183) * Move findmnt from mount to util-linux package * Make mount package non-Essential (Important: yes) * Split out cfdisk, fdisk and sfdisk to separate package * Switch fdisk-udeb Priority from extra to optional * Add util-linux NEWS entry for fdisk package split * Add mount NEWS entry about now being non-Essential