debos (1.1.1-2.1) unstable; urgency=medium
 .
   * Non-maintainer upload.
   * Cherry-pick upstream commit that unbreaks bookworm (Closes: #1027787)
   * Cherry-pick upstream doc fix for non-free-firmware
   * Cherry-pick upstream example fix for interactive password prompt
     (Closes: #1006823)

firefox-esr (102.10.0esr-1) unstable; urgency=medium
 .
   * New upstream release.
   * Fixes for mfsa2023-14, also known as:
     CVE-2023-29533, CVE-2023-29535, CVE-2023-29536, CVE-2023-29539,
     CVE-2023-29541, CVE-2023-1945, CVE-2023-29548, CVE-2023-29550.

google-android-installers (1675172737) unstable; urgency=medium
 .
   * cmdline-tools: set Architecture to 'amd64 i386'
google-android-installers (1675172736) unstable; urgency=medium
 .
   * cmdline-tools: add dependency to build-tools packages. Closes: #1033729

gortr (0.14.7-2) unstable; urgency=medium
 .
   * Stop building gortr because it is unmaintained and has been generally
     replaced by stayrtr.

linux (6.1.20-2) unstable; urgency=medium
 .
   [ Hans van Kranenburg ]
   * d/t/control.tools-unversioned.in: version rtla build deps
 .
   [ Helmut Grohne ]
   * Fix FTCBFS: Supply the host pkg-config to the rtla build. (Closes: #1019118)
 .
   [ Francesco Dolcini ]
   * [armhf] Add support for NXP i.MX7 SOC (Closes: #1031180)
 .
   [ Martyn Welch ]
   * [arm64] ti: am62x: Enable support for am625-sk eval board
   * d/salsa-ci.yml: Increase timeout of CI build stage to 3 hours
 .
   [ наб ]
   * Re-instate "KEYS: Make use of platform keyring for module signature verify"
     (Closes: #1030200)
 .
   [ Vincent Blut ]
   * drivers/input/touchscreen: Enable TOUCHSCREEN_SILEAD as module
     (Closes: #925424)
   * [x86] drivers/platform/x86: Enable TOUCHSCREEN_DMI
   * drivers/scsi/mpi3mr: Enable SCSI_MPI3MR as module (Closes: #1033566)
 .
   [ Diederik de Haas ]
   * [arm64,armhf] Enable DRM_PANEL_FEIYANG_FY07024DI26A30D as module
 .
   [ Cyril Brulebois ]
   * udeb: add intel_lpss* (optional) to kernel-image (Closes: #1032136)
     Many laptops have their touchpad accessible over I2C, only visible
     if LPSS is available in the installer.
 .
   [ Salvatore Bonaccorso ]
   * [x86] acpi/boot: Correct acpi_is_processor_usable() check (Closes: #1033732)
   * usb: ucsi: Fix NULL pointer deref in ucsi_connector_change()
     (Closes: #1032948)
   * usb: ucsi_acpi: Increase the command completion timeout (Closes: #1032948)
   * [arm64] hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to
     race condition (CVE-2023-1855)
   * net/sched: act_mirred: better wording on protection against excessive stack
     growth
   * act_mirred: use the backlog for nested calls to mirred ingress
     (CVE-2022-4269)
   * [x86] xirc2ps_cs: Fix use after free bug in xirc2ps_detach (CVE-2023-1670)
   * Bluetooth: HCI: Fix global-out-of-bounds (CVE-2023-28866)
 .
   [ Henning Schild ]
   * [x86] drivers/gpio: Enable GPIO_F7188X as module

liquidsoap (2.1.3-2) unstable; urgency=medium
 .
   * Refresh patches
   * Prevent large memory spikes loading remote content (Closes: #1033068)

mozjs102 (102.10.0-1) unstable; urgency=high
 .
   * New upstream release (LP: #2015880)
     - CVE-2023-29536: Invalid free from JavaScript code
     - CVE-2023-29548: Incorrect optimization result on ARM64
     - CVE-2023-29550: Memory safety bugs
     - CVE-2023-29535: Potential Memory Corruption following Garbage Collector
       compaction

mruby (3.1.0-3) unstable; urgency=medium
 .
   * Revert "d/rules: Build using host-m32.rb when architecture is i386"
   * d/rules: Fix FTBFS on i386. (Closes: #1031321)
     Add '-ffloat-store' to DEB_CFLAGS_MAINT_APPEND if architecture are i386 or
     m68k. Thanks to Adrian Bunk <bunk@debian.org>.
mruby (3.1.0-2) experimental; urgency=medium
 .
   * d/rules: Build using host-m32.rb when architecture is i386.

opm-grid (2022.10+ds-3) unstable; urgency=medium
 .
   * d/control: Removed unneeded git from Build-Depends.
opm-grid (2022.10+ds-2) experimental; urgency=medium
 .
   * d/control: Bumped standards version to 4.6.2 (no-change)

opm-simulators (2022.10+ds-2) unstable; urgency=medium
 .
   * d/rules: Require 4GB of RAM per make process
   * [cmake]  Work around missing imported Alberta targets.
   * d/control: Fixed version string used in binaries.

opm-upscaling (2022.10+ds-4) unstable; urgency=medium
 .
   * Removed stale static benchmarks to really not need git.
opm-upscaling (2022.10+ds-3) unstable; urgency=medium
 .
   * d/control: Remove git from Build-Depends as it is not needed.

pcsc-lite (1.9.9-2) unstable; urgency=medium
 .
   * Fix "dh_installsystemd doesn't handle files in
     /usr/lib/systemd/system" (Closes: #1034209)
   * d/control: remove lsb-base dependency and fix lintian error

slepc (3.18.2+dfsg1-2) unstable; urgency=medium
 .
   * debian patch finclude_EPSEVSL_fb6173ce.diff cherry picks upstream
     commit fb6173ce from the 3.18.3 release to add EPSEVS to fortran
     include files.