cpp-httplib (0.41.0+ds-3) unstable; urgency=medium . * Upload to unstable. See Bug#1126438 * d/rules: disable last failing tests on i386 * d/watch: update to version 5 . cpp-httplib (0.41.0+ds-2) experimental; urgency=medium . * d/rules: increase test timeout * d/rules: make test skip patterns more specific * d/rules: skip some more flaky tests . cpp-httplib (0.41.0+ds-1) experimental; urgency=medium . * Update to new upstream version 0.41.0+ds. * Fix numerous CVEs in the server component: - CVE-2025-66570 and CVE-2025-66577. Closes: #1122027 - CVE-2026-21428. Closes: #1124586 - CVE-2026-22776. Closes: #1126754 - CVE-2026-28434. Closes: #1130232 - CVE-2026-28435. Closes: #1130234 - CVE-2026-29076. Closes: #1130235 - CVE-2026-31870. Closes: #1130505 - CVE-2026-34441. Closes: #1133187 * Fix two CVEs in the client component: - CVE-2026-32627. Closes: #1130876 - CVE-2026-33745. Closes: #1132162 * d/control: libcpp-httplib0.26 -> libcpp-httplib0.41 * d/rules: disable WebSocketIntegrationTest.SocketSettings test . cpp-httplib (0.26.0+ds-2) experimental; urgency=low . * Re-do upload, with binaries . cpp-httplib (0.26.0+ds-1) experimental; urgency=medium . * Update to new upstream version 0.26.0+ds. * build(meson): use C++17 for gtest >= 1.17.0 * d/control: libcpp-httplib0.25 -> libcpp-httplib0.26 * d/rules: use new option names . cpp-httplib (0.25.0+ds-1) experimental; urgency=medium . * Update to new upstream version 0.25.0+ds. . * Fix numerous CVEs (Closes: #1109340): - CVE-2025-52887 (Unlimited number of HTTP headers causes memory leak). Version 0.22.0 adds a limit to the number of headers which can be passed in an HTTP request, mitigating a possible DoS due to memory exhaustion. . - CVE-2025-53628 (HTTP Header Smuggling due to insecure trailers merge). Version 0.23.0 changes the way HTTP trailer fields are handled so to avoid an attacker to modify headers with prohibited trailers. . - CVE-2025-53629 (Unbounded Memory Allocation in Chunked Requests). Version 0.23.0 complements the fix for CVE-2025-46728, actually solving memory exhaustion attacks via chucked HTTP requests. . * d/control: libcpp-httplib0.20 -> libcpp-httplib0.25 * d/changelog: mention CVE-2025-46728 in 0.20.1+ds-1 changelog entry. * d/rules: remove redundant file copy . cpp-httplib (0.20.1+ds-3) experimental; urgency=low . * Third time's the charm . cpp-httplib (0.20.1+ds-2) experimental; urgency=low . * Re-try git-debpush upload . cpp-httplib (0.20.1+ds-1) experimental; urgency=low . * Update to new upstream version 0.20.1+ds. * fix CVE-2025-46728 (DoS via unbounded request line length). While this version intended to enforce request body size limits for chunked Transfer-Encoding, it actually adds size limits for a unique lines read from HTTP requests, solving another kind of DoS. See the GHSA-px83-72rx-v57c GitHub advisory for more details. Thanks to Yang Wang for the patch! Closes: #1104926 * d/control: libcpp-httplib0.18 -> libcpp-httplib0.20 cpp-httplib (0.41.0+ds-2) experimental; urgency=medium . * d/rules: increase test timeout * d/rules: make test skip patterns more specific * d/rules: skip some more flaky tests cpp-httplib (0.41.0+ds-1) experimental; urgency=medium . * Update to new upstream version 0.41.0+ds. * Fix numerous CVEs in the server component: - CVE-2025-66570 and CVE-2025-66577. Closes: #1122027 - CVE-2026-21428. Closes: #1124586 - CVE-2026-22776. Closes: #1126754 - CVE-2026-28434. Closes: #1130232 - CVE-2026-28435. Closes: #1130234 - CVE-2026-29076. Closes: #1130235 - CVE-2026-31870. Closes: #1130505 * Fix two CVEs in the client component: - CVE-2026-32627. Closes: #1130876 - CVE-2026-33745. Closes: #1132162 * d/control: libcpp-httplib0.26 -> libcpp-httplib0.41 * d/rules: disable WebSocketIntegrationTest.SocketSettings test cpp-httplib (0.26.0+ds-2) experimental; urgency=low . * Re-do upload, with binaries . cpp-httplib (0.26.0+ds-1) experimental; urgency=medium . * Update to new upstream version 0.26.0+ds. * build(meson): use C++17 for gtest >= 1.17.0 * d/control: libcpp-httplib0.25 -> libcpp-httplib0.26 * d/rules: use new option names cpp-httplib (0.25.0+ds-1) experimental; urgency=medium . * Update to new upstream version 0.25.0+ds. . * Fix numerous CVEs (Closes: #1109340): - CVE-2025-52887 (Unlimited number of HTTP headers causes memory leak). Version 0.22.0 adds a limit to the number of headers which can be passed in an HTTP request, mitigating a possible DoS due to memory exhaustion. . - CVE-2025-53628 (HTTP Header Smuggling due to insecure trailers merge). Version 0.23.0 changes the way HTTP trailer fields are handled so to avoid an attacker to modify headers with prohibited trailers. . - CVE-2025-53629 (Unbounded Memory Allocation in Chunked Requests). Version 0.23.0 complements the fix for CVE-2025-46728, actually solving memory exhaustion attacks via chucked HTTP requests. . * d/control: libcpp-httplib0.20 -> libcpp-httplib0.25 * d/changelog: mention CVE-2025-46728 in 0.20.1+ds-1 changelog entry. * d/rules: remove redundant file copy cpp-httplib (0.20.1+ds-3) experimental; urgency=low . * Third time's the charm photutils (3.0.0-1) unstable; urgency=medium . * New upstream version 3.0.0 * Rediff patches * Push Standards-Version to 4.7.4, remove redundant Priority: optional * Add missing 'bool' import * Fix d/clean (Closes: #1048580) python-nh3 (0.3.4-1) unstable; urgency=medium . * [b1eb142] New upstream version 0.3.4 * [189dd79] Rebuild patch queue from patch-queue branch Renamed and updated patch: relax-pyo3.patch -> Be-more-flexible-on-pyo3-versions.patch Updated patch: Cargo.toml-Drop-feature-generate-import-lib.patch * [6300592] d/control: Drop field Priority: optional * [f1642fa] d/control: Update Standards-Version to 4.7.4 No further changes needed. * [c8a2243] d/copyright: Update year data python-opentelemetry (1.41.0-2) unstable; urgency=medium . * [0fa4b08] d/control: Add missing deps in -sdk package python-opentelemetry (1.41.0-1) unstable; urgency=medium . * [443c10d] New upstream version 1.41.0 * [0b1f02f] d/control: Add new needed build deps * [40d87f7] d/control: Adding bin python3-opentelemetry-proto-json * [c0d1f59] d/rules: Add new pkg into the build * [101631c] d/control: Update Standards-Version to 4.7.4 No further changes needed. rust-github-actions-expressions (1.24.1-1) unstable; urgency=medium . * Package github-actions-expressions 1.24.1 from crates.io using debcargo 2.8.2 rust-github-actions-models (1.24.1-1) unstable; urgency=medium . * Package github-actions-models 1.24.1 from crates.io using debcargo 2.8.2 rust-subfeature (1.24.1-1) unstable; urgency=medium . * Package subfeature 1.24.1 from crates.io using debcargo 2.8.2 rust-tree-sitter-iter (1.24.1-1) unstable; urgency=medium . * Package tree-sitter-iter 1.24.1 from crates.io using debcargo 2.8.2 rust-yamlpatch (1.24.1-1) unstable; urgency=medium . * Package yamlpatch 1.24.1 from crates.io using debcargo 2.8.2 rust-yamlpath (1.24.1-1) unstable; urgency=medium . * Package yamlpath 1.24.1 from crates.io using debcargo 2.8.2 stopt (6.1+dfsg-3) unstable; urgency=medium . * Team upload. . [ Anton Gladky ] * Add an `lrc` alias for `LGPL-3+` versus `LGPL` so licenserecon does not flag the upstream `LICENCE.txt` text as a false positive. * Enable salsa-ci and disable BLHC. . [ Gianfranco Costamagna ] * Edit control, remove libboost-system-dev dependency timestamp9 (1.4.0-2) unstable; urgency=medium . * Fix test directory name. timestamp9 (1.4.0-1) unstable; urgency=medium . * Initial release.