python-django (3:4.2.16-1) unstable; urgency=high
 .
   * New upstream security release:
 .
     - CVE-2024-45230: Potential denial-of-service vulnerability in
       django.utils.html.urlize(). urlize and urlizetrunc were subject to a
       potential denial-of-service attack via very large inputs with a specific
       sequence of characters.
 .
     - CVE-2024-45231: Potential user email enumeration via response status on
       password reset. Due to unhandled email sending failures, the
       django.contrib.auth.forms.PasswordResetForm class allowed remote
       attackers to enumerate user emails by issuing password reset requests and
       observing the outcomes. To mitigate this risk, exceptions occurring
       during password reset email sending are now handled and logged using the
       django.contrib.auth logger.
 .
   * Bump Standards-Version to 4.7.0.

rust-strsim-0.10 (0.10.0-3) unstable; urgency=medium
 .
   * Package strsim 0.10.0 from crates.io using debcargo 2.6.1
   * Change source package name to track semver-branch
   * This is an older version to ease the transition for dependent crates:
     clap-2, clap-3, clap-builder, darling-core, deluxe-core, docopt,
     i18n-embed-fl, and numbat
   * Once those are patched to handle strsim 0.11, or dropped from the archive,
     this should be dropped too.
   * Clean up debian/copyright (thanks, Torsten Alteholz)