isc-kea (3.0.3-1) unstable; urgency=medium
 .
   * New upstream version 3.0.3

libextractor (1:1.13-10) unstable; urgency=medium
 .
   * QA upload
 .
   [ Christoph Martin ]
   * remove build-depends on libmagick-dev (closes: #1129968)
   * temp disable test_thumbnailgtk because of problems

libopenmpt (0.8.6-1) unstable; urgency=medium
 .
   * New upstream version 0.8.6
libopenmpt (0.8.5-1) unstable; urgency=medium
 .
   * New upstream version 0.8.5
   * debian/control:
     - Drop Priority: optional
     - Bump Standards-Version
   * debian/copyright: Update copyright years

libxml2 (2.15.2+dfsg-0.1) unstable; urgency=high
 .
   * Non-maintainer upload.
   * New upstream bug fix release.
     Security issues:
     - CVE-2026-1757 fix: Memory leak in xmllint Shell - shell.c
     - CVE-2026-0990 fix: Prevent infinite recursion in
       xmlCatalogListXMLResolve. Closes: #1125695.
     - CVE-2026-0992 fix: Exponential behavior when handling
       parser: Fix infinite loop in xmlCtxtParseContent. Closes: #1125696.
     - CVE-2025-10911 libxslt related: Ignore next/prev of documents when
       traversing XPath
     - CVE-2026-0989 fix: Add RelaxNG include limit. Closes: #1125691.
     - xmlIO: use size_t for buffer size reallocation
     - uri: fix signed integer overflow in xmlBuildRelativeURISafe
     - schematron: fix memory leaks on error paths in xmlSchematronParseRule
     - catalog: fix stack overflow from self-referencing SGML CATALOG entries
     Improvements
     - fuzz: Make fuzzy encoding match more lenient
     - Fix C14N type confusion
     - meson: Fix build with Meson < 1.3
     - xmllint: Use zlib directly
     - xmllint: New option to separate xpath results using null, --xpath0
     - autotools: Make valgrind actually check for leaks
     - meson: Add valgrind test setup
     - Fix xmlOutputBufferGetContent output when encoder is set
     - threads: don't force _WIN32_WINNT to Vista if it's set to a higher value
     - dist: Add generated documentation to the dist as "dist-doc" folder
       to simplify downstream packaging of doc
     - Fix xmlRemoveEntity removing from wrong hash table
     - use duplicating variant in relaxng to mitigate UAF
     - Fix memory leak in xmlTextWriterStartAttributeNS on OOM
     - meson: remove hardcoded buildtype=debug default
     - Fix memory leak of prefix in xmlTextWriterStartElementNS()
     - writer: Add a few extra NULL checks to avoid memory leaks on corrupt
       writer path.
   * Update symbols file.
   * Don't include the sources twice in the libxml2-source package.
   * Bump standards version.