diff -Nru python-reportlab-4.0.4/debian/changelog python-reportlab-4.0.4/debian/changelog
--- python-reportlab-4.0.4/debian/changelog	2023-08-23 17:10:37.000000000 +0000
+++ python-reportlab-4.0.4/debian/changelog	2023-08-24 08:19:11.000000000 +0000
@@ -1,3 +1,16 @@
+python-reportlab (4.0.4-11) unstable; urgency=medium
+
+  * removed the dependency on ttf-bitstream-vera, replaced by dependencies on
+    fonts-dejavu-core and fonts-dejavu-extra. Adapted
+    debian/python3-reportlab.links accordingly. Hopefully, this definitely
+    Closes: #1050218
+  * installed also Vera fonts which are included in the source package, as
+    their license is documented in debian/copyright
+  * checked that upstream sources are using rl_safe_exec instead of exec in
+    file src/reportlab/platypus/flowables.py. Closes: #961524
+
+ -- Georges Khaznadar <georgesk@debian.org>  Thu, 24 Aug 2023 10:19:11 +0200
+
 python-reportlab (4.0.4-10) unstable; urgency=medium
 
   * replace default T1 fonts by DejaVuSans.ttf when those fonts cannot
diff -Nru python-reportlab-4.0.4/debian/control python-reportlab-4.0.4/debian/control
--- python-reportlab-4.0.4/debian/control	2023-07-13 12:17:08.000000000 +0000
+++ python-reportlab-4.0.4/debian/control	2023-08-24 08:17:28.000000000 +0000
@@ -21,7 +21,8 @@
  ${misc:Depends},
  python3-rlpycairo,
  python3-freetype,
- ttf-bitstream-vera,
+ fonts-dejavu-core,
+ fonts-dejavu-extra,
  fonts-urw-base35,
 Recommends: python3-pil
 Conflicts: python3-reportlab-accel (<= 4.0.4), python3-renderpm (<= 4.0.4)
diff -Nru python-reportlab-4.0.4/debian/python3-reportlab.install python-reportlab-4.0.4/debian/python3-reportlab.install
--- python-reportlab-4.0.4/debian/python3-reportlab.install	1970-01-01 00:00:00.000000000 +0000
+++ python-reportlab-4.0.4/debian/python3-reportlab.install	2023-08-24 08:19:11.000000000 +0000
@@ -0,0 +1 @@
+src/reportlab/fonts/Vera*	usr/lib/python3/dist-packages/reportlab/fonts
diff -Nru python-reportlab-4.0.4/debian/python3-reportlab.links python-reportlab-4.0.4/debian/python3-reportlab.links
--- python-reportlab-4.0.4/debian/python3-reportlab.links	2023-08-23 17:09:13.000000000 +0000
+++ python-reportlab-4.0.4/debian/python3-reportlab.links	2023-08-24 08:12:28.000000000 +0000
@@ -1,3 +1,4 @@
+# linking all the files provided by the dependency 
 /usr/share/fonts/truetype/dejavu/DejaVuMathTeXGyre.ttf usr/lib/python3/dist-packages/reportlab/fonts/DejaVuMathTeXGyre.ttf
 /usr/share/fonts/truetype/dejavu/DejaVuSans-BoldOblique.ttf usr/lib/python3/dist-packages/reportlab/fonts/DejaVuSans-BoldOblique.ttf
 /usr/share/fonts/truetype/dejavu/DejaVuSans-Bold.ttf usr/lib/python3/dist-packages/reportlab/fonts/DejaVuSans-Bold.ttf
@@ -21,7 +22,7 @@
 /usr/share/fonts/truetype/dejavu/DejaVuSerif-Italic.ttf usr/lib/python3/dist-packages/reportlab/fonts/DejaVuSerif-Italic.ttf
 /usr/share/fonts/truetype/dejavu/DejaVuSerif.ttf usr/lib/python3/dist-packages/reportlab/fonts/DejaVuSerif.ttf
 
-
+# other links to replace files provided in src/reportlab/fonts
 /usr/share/fonts/X11/Type1/C059-BdIta.pfb usr/lib/python3/dist-packages/reportlab/fonts/C059-BdIta.pfb
 /usr/share/fonts/X11/Type1/C059-Bold.pfb usr/lib/python3/dist-packages/reportlab/fonts/C059-Bold.pfb
 /usr/share/fonts/X11/Type1/C059-Italic.pfb usr/lib/python3/dist-packages/reportlab/fonts/C059-Italic.pfb