activemq (5.14.3-3) unstable; urgency=medium . * Team upload. * Fix CVE-2017-7559. DoS in client via shutdown command. Thanks to Salvatore Bonaccorso for the report. (Closes: #860866) installation-guide (20170419) unstable; urgency=medium . [ Samuel Thibault ] * Re-enable Dutch translation. Thanks a lot to Frans Spiesschaert! * Document shortcuts for expert, rescue, and automated installation with accessibility. * Update distrib name about the absence of graphical installer on arm64. * Drop the note about USB not being supported on Mustang, that was fixed. . [ Geert Stappers ] * Add header to preseed file. Closes: #859438 . [ Holger Wansing ] * Set TMPDIR variable, to get dblatex debugging files removed after pdf build. Closes: #859150 opensmtpd (6.0.2p1-2) unstable; urgency=medium . * Let smtpd create its spool directory tree instead of shipping it. This fixes errors regarding directories with incorrect owners. Thanks to Harald Dunkel for a patch. (Closes: #843978) * Actually remove the spool directory on purge. photutils (0.3-3) unstable; urgency=medium . * Fix aperture photometry computation for 32-bit machines. Closes: #860658 php-horde-core (2.27.6+debian1-2) unstable; urgency=medium . * Replace minified CSS by non-minified one php-horde-core (2.27.6+debian1-1) unstable; urgency=medium . * Use jquery and jquery-mobile from upstream Horde_Core to fix IMP (Closes: #749799, #859048). Horde has jquery 1.11.2 and jquery-mobile 1.3.2, while Debian sid currently has 3.1.1-2 and (broken) 1.2.0+dfsg-2 (See #734101). To ensure proper migration: - Update gbp.conf to stop removing those libs - Stop depending on libjs-jquery-mobile and libjs-jquery - Update debian/copyright - Remove symlinks - Use symlink_to_dir for the images directory - Stop trimming jquery.mobile in package.xml (but still trim the minified js) - Add symlinks from .min.js to .js files php-horde-imp (6.2.17-2) unstable; urgency=medium . * Fix sending email after attch_body_check hook fails (Closes: #859048) pyvirtualdisplay (0.2.1-2) unstable; urgency=medium . * debian/control - add xvfb to depends and xserver-xephyr to suggests: one of them has to be available to instantiate the Display() class; Closes: #860501 softcatala-spell (0.20111230b-10) unstable; urgency=medium . * Stop building myspell-ca, it is now a transitional package in src:hunspell-ca (Closes: #860893). spectral-cube (0.4.0-2) unstable; urgency=medium . * Add ASCL Id and reference to d/u/metadata * Use assert_almost_equal instead of assert_equal in test_twod_numpy (Closes: #860620) xen (4.8.1-1) unstable; urgency=high . * Update to upstream 4.8.1 release. Changes include numerous bugfixes, including security fixes for: XSA-212 / CVE-2017-7228 Closes:#859560 XSA-207 / no cve yet Closes:#856229 XSA-206 / no cve yet no Debian bug xserver-xorg-video-nouveau (1:1.0.13-3) unstable; urgency=medium . * Team upload. * Cherry-pick commit e9418e4343 ("Do not register hotplug without RandR") from upstream (Closes: #860756).