gcc-13 (13.5.0-3) unstable; urgency=medium
 .
   * libstdc++: Ensure that aligned new detects size_t overflow, taken
     from the gcc-14 branch. CVE-2026-95619.
gcc-13 (13.5.0-2) unstable; urgency=medium
 .
   * Fix PR libstdc++/127656: Fix use-after-free in pbds binary heap,
     taken from the gcc-14 branch.  CVE-2026-102010. Closes: #1150197.

gcc-14 (14.4.0-3) unstable; urgency=medium
 .
   * Update to git 20261009 from the gcc-14 branch.
     - Fix PR target/127650 (x86), PR target/127482 (AVR),
       PR target/107549 (xtensa), PR target/127500 (x86),
       PR target/126932 (RISCV), PR target/126463 (AArch64),
       PR target/126196 (RISCV), PR rtl-optimization/125683, PR ada/126125,
       PR c++/125642, PR c++/126483, PR c++/126280, PR fortran/127187,
       PR libstdc++/127666, PR libstdc++/126364, PR libstdc++/122224,
       PR libstdc++/124015, PR libstdc++/114400, PR libstdc++/123409,
       PR libstdc++/123510, PR libstdc++/118665, PR libstdc++/127006,
       PR libstdc++/126452, PR libstdc++/126849, PR libstdc++/116110,
       PR libstdc++/124852.
     - Fix PR libstdc++/127656: Fix use-after-free in pbds binary heap,
       CVE-2026-102010. Closes: #1150196.

xen (4.20.4+39-gf1e1321c87-1) unstable; urgency=medium
 .
   * Update to new upstream version 4.20.4+39-gf1e1321c87, which also contains
     security fixes for the following issues:
     - x86: DMs may cause mem leak by IRQ binding
       XSA-509 CVE-2026-62437
     - x86: improper handling of HVM emulation return codes
       XSA-510 CVE-2026-79602
     - Unconditionally do TLB flushing ahead of page scrubbing
       XSA-511 CVE-2026-79603
     - oxenstored: Unbounded accumulation of watches
       XSA-512 CVE-2026-79604
     - x86/AMD: ineffectual Zenbleed workaround
       XSA-515 CVE-2026-79608
     - x86: XPTI may break on huge-memory systems
       XSA-516 CVE-2026-79609
     - grant-table: double version change race
       XSA-517 CVE-2026-79610
     - VMX: VMentry failure with branch tracing and blocked states
       XSA-518 CVE-2026-79611
     - Arm: multiple issues with GNTTABOP_cache_flush
       XSA-519 CVE-2026-102699 CVE-2026-102702
     - gnttab: cache-flush handling may cause page reference leak
       XSA-520 CVE-2026-102700
   * Note that the following XSA are not listed, because...
     - XSA-513 applies to blktap which is not included in Debian
     - XSA-514 only applies to Xen 4.22
     - XSA-521 applies to blktap which is not included in Debian
     - XSA-522 has patches for the Linux kernel