dar (2.7.16-1) unstable; urgency=medium
 .
   * New upstream release

mpi4py (4.0.3-1) unstable; urgency=medium
 .
   * New upstream release

openssl (3.4.1-1) unstable; urgency=medium
 .
   * Import 3.4.1
   - CVE-2024-12797 (RFC7250 handshakes with unauthenticated servers don't
     abort as expected) (Closes: #1095765).
   - CVE-2024-13176 (Timing side-channel in ECDSA signature computation)
     (Closes: #1094027).
   - Compile on LoongArch again (Closes: #1092307).

prometheus (2.53.3+ds1-1) unstable; urgency=medium
 .
   * New upstream release 2.53.3: the last LTS (Long-Term Support) release of
     the 2.x series.
     10 years since the first commit in the Debian packaging repo!
   * Add missing documentation and examples
   * d/control: Migrate to Static-Built-Using

samba (2:4.21.4+dfsg-1) unstable; urgency=medium
 .
   * new upstream stable/bugfix release (Closes: #1084559):
    - https://bugzilla.samba.org/show_bug.cgi?id=14213:
      Windows Explorer crashes on S-1-22-* Unix-SIDs when accessing security tab
    - https://bugzilla.samba.org/show_bug.cgi?id=15151:
      vfs_gpfs silently garbles timestamps > year 2106
    - https://bugzilla.samba.org/show_bug.cgi?id=15703:
      General improvements for vfs_ceph_new module
    - https://bugzilla.samba.org/show_bug.cgi?id=15738:
      Creation of GPOs applicable to more than one group is impossible
      with Samba 4.20.0 and later
    - https://bugzilla.samba.org/show_bug.cgi?id=15756:
      Replace `crypt` module in python/samba/netcmd/user/readpasswords/common.py
    - https://bugzilla.samba.org/show_bug.cgi?id=15759:
      net ads create/join/winbind producing unix dysfunctional keytabs
    - https://bugzilla.samba.org/show_bug.cgi?id=15769:
      The values from hresult_errstr_const and hresult_errstr
      are reversed in 4.20 and 4.21
    - https://bugzilla.samba.org/show_bug.cgi?id=15777:
      net offlinejoin not working correctly
    - https://bugzilla.samba.org/show_bug.cgi?id=15778:
      Kerberos referral tickets are generated for principals in our domain
      if we have a trust to a top level domain
    - https://bugzilla.samba.org/show_bug.cgi?id=15780:
      Increasing slowness of sharesec performance with high number
      of registry shares
    - https://bugzilla.samba.org/show_bug.cgi?id=15782:
      winbindd shows memleak in kerberos_decode_pac
    - https://bugzilla.samba.org/show_bug.cgi?id=15783:
      NETLOGON_NTLMV2_ENABLED is missing in the SamLogon* user_flags field
    - https://bugzilla.samba.org/show_bug.cgi?id=15784:
      Regression: stack-use-after-return in crypt_as_best_we_can()
    - https://bugzilla.samba.org/show_bug.cgi?id=15788:
      libreplace:readline: gcc 15 complains about incompatible pointer types
    - https://bugzilla.samba.org/show_bug.cgi?id=15796:
      Spotlight search results don't show file size and creation date
   * replace-xpg-strerror.patch: to avoid linking other libs with libreplace
   * samba-libs: add libutil-crypt-private-samba.so.0