dolfin (2019.2.0~git20201207.b495043-5) unstable; urgency=medium
 .
   * use triple-slash (file:///) for mathjax local url replacement to
     make docs for demos properly legible.

dolfinx (2019.2.0~git20210130.c14cb0a-5) unstable; urgency=medium
 .
   * use triple-slash (file:///) for mathjax local url replacement to
     make docs for demos properly legible.

golang-github-justinas-alice (1.2.0-2) unstable; urgency=medium
 .
   * Team upload.
   * No-change, source-only upload as requested by the release team.
golang-github-justinas-alice (1.2.0-1) unstable; urgency=medium
 .
   [ Debian Janitor ]
   * Set debhelper-compat version in Build-Depends.
   * Set upstream metadata fields: Bug-Database, Bug-Submit.
   * Apply multi-arch hints.
     + golang-github-justinas-alice-dev: Add Multi-Arch: foreign.
 .
   [ Raul Benencia ]
   * Update Standards-Version to 4.5.1 (no changes).
   * Set Rules-Requires-Root.
   * Add upstream repository metadata.
   * Use debhelper-compat 13.

golang-github-namsral-flag (1.7.4~alpha+git20170814.67f268f-3) unstable; urgency=medium
 .
   * Team upload.
   * No-change, source-only upload as requested by the release team.
golang-github-namsral-flag (1.7.4~alpha+git20170814.67f268f-2) unstable; urgency=medium
 .
   [ Debian Janitor ]
   * Apply multi-arch hints.
     + golang-github-namsral-flag-dev: Add Multi-Arch: foreign.
 .
   [ Raul Benencia ]
   * Fix d/watch.
   * Update Section to golang.
   * Update Standards-Version to 4.5.1 (no changes).
   * Use debhelper-compat 13.
   * Build does not require root.
   * Add upstream metadata.

libwebp (0.6.1-2.1) unstable; urgency=medium
 .
   * Non-maintainer upload.
   * Fix multiple security issues: CVE-2018-25009, CVE-2018-25010, CVE-2018-25011
     CVE-2020-36328, CVE-2018-25013, CVE-2018-25014, CVE-2020-36329, CVE-2020-36330
     CVE-2020-36331, CVE-2020-36332

mc (3:4.8.26-1.1) unstable; urgency=medium
 .
   * Non-maintainer upload.
   * Fix PKZIP archive handling, patch backported from upstream

nettle (3.7.3-1) unstable; urgency=high
 .
   * New upstream release fixing bugs that could make the RSA decryption
     functions crash on invalid inputs [CVE-2021-3580] (Closes: #989631).

orthanc-dicomweb (1.5+dfsg-3) unstable; urgency=medium
 .
   * Added missing "Built-Using" attribute (backport from experimental).
     Closes: #989128

orthanc-webviewer (2.7-4) unstable; urgency=medium
 .
   * Added missing "Built-Using" attribute. Closes: #989127

orthanc-wsi (1.0-3) unstable; urgency=medium
 .
   * Added missing "Built-Using" attribute. Closes: #989126

prometheus-blackbox-exporter (0.18.0+ds-3) unstable; urgency=medium
 .
   * Team upload.
 .
   [ Américo Monteiro ]
   * Update Portuguese debconf translation (Closes: #982331)
 .
   [ Adriano Rafael Gomes ]
   * Update Brazilian Portuguese debconf translation (Closes: #987435)
 .
   [ Camaleón ]
   * Update Spanish debconf translation (Closes: #987596)
 .
   [ Guillem Jover ]
   * Add Catalan debconf translation

prometheus-node-exporter (1.1.2+ds-2) unstable; urgency=medium
 .
   * Move README.textfile from /var/lib to /usr/share/doc

pygments (2.7.1+dfsg-2.1) unstable; urgency=medium
 .
   * Non-maintainer upload.
   * Fix several exponential/cubic complexity regexes (CVE-2021-27291)
     (Closes: #985574)

secsipidx (1.1.1~git20210601.d388d64-1) unstable; urgency=medium
 .
   * New upstream version 1.1.1~git20210601.d388d64

ssl-cert (1.1.0+nmu1) unstable; urgency=medium
 .
   * Non-maintainer upload.
   * Use correct argument for output file (Closes: #988310)

thunderbird (1:78.11.0-1) unstable; urgency=medium
 .
   * [42c4a87] New upstream version 78.11.0
     Fixed CVE issues in upstream version 78.11 (MFSA 2021-26):
     CVE-2021-29967: Memory safety bugs fixed in Thunderbird 78.11
thunderbird (1:78.10.2-1) unstable; urgency=medium
 .
   * [69552d8] New upstream version 78.10.2
     Fixed CVE issues in upstream version 78.10.2 (MFSA 2021-22):
     CVE-2021-29957: Partial protection of inline OpenPGP message not indicated
     CVE-2021-29956: Thunderbird stored OpenPGP secret keys without master
                     password protection

webkit2gtk (2.32.1-2) unstable; urgency=high
 .
   * debian/control:
     + Update the dependencies on GStreamer plugins (Closes: #989332):
       - WebKitGTK really expects at least the -base and -good sets.
       - For video playback (e.g YouTube) -bad is also recommended.
       - The pulseaudio plugin was merged into the -good package so it will
         be always be available now. Move -alsa to Suggests.

xscreensaver (5.45+dfsg1-2) unstable; urgency=medium
 .
   * Do not assign raw net capability to "sonar" hack due to a security
     vulnerability in mesa (Closes: #987149)
   * Make sure is systemd unit is disabled if upgrading from previous
     two releases (Closes: #978589)
   * Do not enable screensaver on login screen (Closes: #979562, #988158)
   * Recommend needed font for unlock dialog (Closes: #978086)
   * Apply fix for crash on video output disconnection (Closes: #989508)