Queue Overview for "proposed-updates"

TODO items

Overrides: none
debian-installer 20250803+deb13u6, replacing 20250803+deb13u5
cruft: kernel ABI 73+deb13 (left as old in 13.5), 88+deb13, 90+deb13, 90+deb13.1 (intermediate updates), leaving 86+deb13 (old stable) and 94+deb13 (new stable)
trixie-r0 updates - https://release.debian.org/proposed-updates/13/13.6/trixie-r0-additions.cs
Prop-ups to testing - https://release.debian.org/proposed-updates/13/13.6/propups.testing
Prop-ups to testing-debug - https://release.debian.org/proposed-updates/13/13.6/propups.testing-debug
Prop-ups to unstable - https://release.debian.org/proposed-updates/13/13.6/propups.unstable
Prop-ups to unstable-debug - https://release.debian.org/proposed-updates/13/13.6/propups.unstable-debug
Announcements: fwupd/SB CA
Source propups unstable:
ffmpeg 7:7.1.5-0+deb13u1 source
mxml 3.3.1-1+deb13u1 source
mesa 25.0.7-2+deb13u1 source
tomcat10 10.1.55-1~deb13u1 source

List of missing builds
List of missing packages relative to security archive

Resolution Pending (15 uploads for 14 packages)

Package	Version	Version Problems	Installability Problems	Architectures	Action
alsa-lib	1.2.14-1+deb13u1		Installability problems	Built: source	?
µdebs: present Closes: 1126629 CVEs referenced: CVE-2026-25068
ansible-core	2.19.11-0+deb13u1		Installability problems	Built: source	?
Closes: 1139175 CVEs referenced: CVE-2026-11332 Lintian issues: source
chromium	150.0.7871.46-1~deb13u1	Version problems testing (149.0.7827.196-1)	Installability problems	Built: allamd64arm64armhfi386ppc64elsource	?
DSA: 6378 CVEs referenced: CVE-2026-13281 CVE-2026-13282 CVE-2026-13283 CVE-2026-13774 CVE-2026-13775 CVE-2026-13776 CVE-2026-13777 CVE-2026-13778 CVE-2026-13779 CVE-2026-13780 CVE-2026-13781 CVE-2026-13782 CVE-2026-13783 CVE-2026-13784 CVE-2026-13785 CVE-2026-13786 CVE-2026-13787 CVE-2026-13788 CVE-2026-13790 CVE-2026-13791 CVE-2026-13792 CVE-2026-13793 CVE-2026-13794 CVE-2026-13795 CVE-2026-13796 CVE-2026-13797 CVE-2026-13798 CVE-2026-13799 CVE-2026-13800 CVE-2026-13801 CVE-2026-13802 CVE-2026-13803 CVE-2026-13804 CVE-2026-13805 CVE-2026-13806 CVE-2026-13807 CVE-2026-13808 CVE-2026-13809 CVE-2026-13810 CVE-2026-13811 CVE-2026-13812 CVE-2026-13813 CVE-2026-13814 CVE-2026-13815 CVE-2026-13816 CVE-2026-13817 CVE-2026-13818 CVE-2026-13819 CVE-2026-13820 CVE-2026-13821 CVE-2026-13822 CVE-2026-13823 CVE-2026-13824 CVE-2026-13825 CVE-2026-13826 CVE-2026-13827 CVE-2026-13828 CVE-2026-13829 CVE-2026-13830 CVE-2026-13831 CVE-2026-13832 CVE-2026-13833 CVE-2026-13834 CVE-2026-13835 CVE-2026-13836 CVE-2026-13837 CVE-2026-13838 CVE-2026-13839 CVE-2026-13840 CVE-2026-13841 CVE-2026-13842 CVE-2026-13843 CVE-2026-13844 CVE-2026-13845 CVE-2026-13846 CVE-2026-13847 CVE-2026-13848 CVE-2026-13849 CVE-2026-13850 CVE-2026-13851 CVE-2026-13852 CVE-2026-13853 CVE-2026-13854 CVE-2026-13855 CVE-2026-13856 CVE-2026-13857 CVE-2026-13858 CVE-2026-13859 CVE-2026-13860 CVE-2026-13861 CVE-2026-13862 CVE-2026-13863 CVE-2026-13864 CVE-2026-13865 CVE-2026-13866 CVE-2026-13867 CVE-2026-13868 CVE-2026-13869 CVE-2026-13870 CVE-2026-13871 CVE-2026-13872 CVE-2026-13873 CVE-2026-13874 CVE-2026-13875 CVE-2026-13876 CVE-2026-13877 CVE-2026-13878 CVE-2026-13879 CVE-2026-13880 CVE-2026-13881 CVE-2026-13882 CVE-2026-13883 CVE-2026-13884 CVE-2026-13885 CVE-2026-13886 CVE-2026-13887 CVE-2026-13888 CVE-2026-13889 CVE-2026-13890 CVE-2026-13891 CVE-2026-13892 CVE-2026-13893 CVE-2026-13894 CVE-2026-13895 CVE-2026-13896 CVE-2026-13897 CVE-2026-13898 CVE-2026-13899 CVE-2026-13900 CVE-2026-13901 CVE-2026-13902 CVE-2026-13903 CVE-2026-13904 CVE-2026-13905 CVE-2026-13906 CVE-2026-13907 CVE-2026-13908 CVE-2026-13909 CVE-2026-13910 CVE-2026-13911 CVE-2026-13912 CVE-2026-13913 CVE-2026-13914 CVE-2026-13915 CVE-2026-13916 CVE-2026-13917 CVE-2026-13918 CVE-2026-13919 CVE-2026-13920 CVE-2026-13921 CVE-2026-13922 CVE-2026-13923 CVE-2026-13924 CVE-2026-13925 CVE-2026-13926 CVE-2026-13927 CVE-2026-13928 CVE-2026-13929 CVE-2026-13930 CVE-2026-13931 CVE-2026-13932 CVE-2026-13933 CVE-2026-13934 CVE-2026-13935 CVE-2026-13936 CVE-2026-13937 CVE-2026-13938 CVE-2026-13939 CVE-2026-13940 CVE-2026-13941 CVE-2026-13942 CVE-2026-13943 CVE-2026-13944 CVE-2026-13945 CVE-2026-13946 CVE-2026-13947 CVE-2026-13948 CVE-2026-13949 CVE-2026-13950 CVE-2026-13951 CVE-2026-13952 CVE-2026-13953 CVE-2026-13954 CVE-2026-13955 CVE-2026-13956 CVE-2026-13957 CVE-2026-13958 CVE-2026-13959 CVE-2026-13960 CVE-2026-13961 CVE-2026-13962 CVE-2026-13963 CVE-2026-13964 CVE-2026-13965 CVE-2026-13966 CVE-2026-13967 CVE-2026-13968 CVE-2026-13969 CVE-2026-13970 CVE-2026-13971 CVE-2026-13972 CVE-2026-13973 CVE-2026-13974 CVE-2026-13975 CVE-2026-13976 CVE-2026-13977 CVE-2026-13978 CVE-2026-13979 CVE-2026-13980 CVE-2026-13981 CVE-2026-13982 CVE-2026-13983 CVE-2026-13984 CVE-2026-13985 CVE-2026-13986 CVE-2026-13987 CVE-2026-13988 CVE-2026-13989 CVE-2026-13990 CVE-2026-13991 CVE-2026-13992 CVE-2026-13993 CVE-2026-13994 CVE-2026-13995 CVE-2026-13996 CVE-2026-13997 CVE-2026-13998 CVE-2026-13999 CVE-2026-14000 CVE-2026-14001 CVE-2026-14002 CVE-2026-14003 CVE-2026-14004 CVE-2026-14005 CVE-2026-14006 CVE-2026-14007 CVE-2026-14008 CVE-2026-14009 CVE-2026-14010 CVE-2026-14011 CVE-2026-14012 CVE-2026-14013 CVE-2026-14014 CVE-2026-14015 CVE-2026-14016 CVE-2026-14017 CVE-2026-14018 CVE-2026-14019 CVE-2026-14020 CVE-2026-14021 CVE-2026-14022 CVE-2026-14023 CVE-2026-14024 CVE-2026-14025 CVE-2026-14026 CVE-2026-14027 CVE-2026-14028 CVE-2026-14030 CVE-2026-14031 CVE-2026-14032 CVE-2026-14033 CVE-2026-14034 CVE-2026-14035 CVE-2026-14036 CVE-2026-14037 CVE-2026-14038 CVE-2026-14039 CVE-2026-14040 CVE-2026-14041 CVE-2026-14042 CVE-2026-14043 CVE-2026-14044 CVE-2026-14045 CVE-2026-14046 CVE-2026-14047 CVE-2026-14048 CVE-2026-14049 CVE-2026-14050 CVE-2026-14051 CVE-2026-14052 CVE-2026-14053 CVE-2026-14054 CVE-2026-14055 CVE-2026-14056 CVE-2026-14057 CVE-2026-14058 CVE-2026-14059 CVE-2026-14060 CVE-2026-14061 CVE-2026-14062 CVE-2026-14063 CVE-2026-14064 CVE-2026-14065 CVE-2026-14066 CVE-2026-14067 CVE-2026-14068 CVE-2026-14069 CVE-2026-14070 CVE-2026-14071 CVE-2026-14072 CVE-2026-14073 CVE-2026-14074 CVE-2026-14075 CVE-2026-14076 CVE-2026-14077 CVE-2026-14078 CVE-2026-14079 CVE-2026-14080 CVE-2026-14081 CVE-2026-14082 CVE-2026-14083 CVE-2026-14084 CVE-2026-14085 CVE-2026-14086 CVE-2026-14087 CVE-2026-14088 CVE-2026-14089 CVE-2026-14090 CVE-2026-14091 CVE-2026-14092 CVE-2026-14093 CVE-2026-14094 CVE-2026-14095 CVE-2026-14096 CVE-2026-14097 CVE-2026-14098 CVE-2026-14099 CVE-2026-14100 CVE-2026-14101 CVE-2026-14102 CVE-2026-14103 CVE-2026-14104 CVE-2026-14105 CVE-2026-14106 CVE-2026-14107 CVE-2026-14108 CVE-2026-14109 CVE-2026-14110 CVE-2026-14111 CVE-2026-14112 CVE-2026-14113 CVE-2026-14114 CVE-2026-14115 CVE-2026-14116 CVE-2026-14117 CVE-2026-14118 CVE-2026-14119 CVE-2026-14120 CVE-2026-14121 CVE-2026-14122 CVE-2026-14123 CVE-2026-14124 CVE-2026-14125 CVE-2026-14126 CVE-2026-14127 CVE-2026-14128 CVE-2026-14129 CVE-2026-14130 CVE-2026-14131 CVE-2026-14132 CVE-2026-14133 CVE-2026-14134 CVE-2026-14135 CVE-2026-14136 CVE-2026-14137 CVE-2026-14138 CVE-2026-14139 CVE-2026-14140 CVE-2026-14141 CVE-2026-14142 CVE-2026-14143 CVE-2026-14144 CVE-2026-14145 CVE-2026-14146 CVE-2026-14147 CVE-2026-14148 CVE-2026-14149 CVE-2026-14150 CVE-2026-14151 CVE-2026-14152 CVE-2026-14153 CVE-2026-14154 CVE-2026-14155 CVE-2026-14156 CVE-2026-14381 CVE-2026-14382 CVE-2026-14383 CVE-2026-14384 CVE-2026-14385 CVE-2026-14386 CVE-2026-14387 CVE-2026-14388 CVE-2026-14389 CVE-2026-14390 CVE-2026-14391 CVE-2026-14392 CVE-2026-14393 CVE-2026-14394 CVE-2026-14395 CVE-2026-14396 CVE-2026-14397 CVE-2026-14398 CVE-2026-14399 CVE-2026-14400 CVE-2026-14401 CVE-2026-14402 CVE-2026-14403 CVE-2026-14404 CVE-2026-14405 CVE-2026-14406 CVE-2026-14407 CVE-2026-14408 CVE-2026-14409 CVE-2026-14410 CVE-2026-14411 CVE-2026-14412 CVE-2026-14413 CVE-2026-14414 CVE-2026-14415 CVE-2026-14416 CVE-2026-14417 CVE-2026-14418 CVE-2026-14419 CVE-2026-14420 CVE-2026-14421 CVE-2026-14422 CVE-2026-14423 CVE-2026-14424 CVE-2026-14425 CVE-2026-14426 CVE-2026-14427 CVE-2026-14428 CVE-2026-14429 CVE-2026-14430 CVE-2026-14431 CVE-2026-14432 Lintian issues: source
debian-installer-netboot-images	20250803+deb13u6	Version problems testing (20250803+deb13u5)	Installability problems	Built: source	?
glibc	2.41-12+deb13u4		Installability problems	Built: source	?
µdebs: present Closes: 1134543 1134544 1135405 CVEs referenced: CVE-2026-5450 CVE-2026-5928
imagemagick	8:7.1.1.43+dfsg1-1+deb13u11		Installability problems	Built: allamd64arm64armelarmhfi386ppc64elriscv64s390xsource	?
DSA: 6383 CVEs referenced: CVE-2026-53466 CVE-2026-53467 CVE-2026-55577 CVE-2026-55594 CVE-2026-55597 CVE-2026-55628 CVE-2026-56361 CVE-2026-56363 CVE-2026-56364 CVE-2026-56365 CVE-2026-56367 CVE-2026-56368 CVE-2026-56370 CVE-2026-56371 CVE-2026-56376 CVE-2026-56377 CVE-2026-56378 Binary debdiffs: amd64 arm64 armel armhf i386 ppc64el riscv64 s390x Lintian issues: all amd64 arm64 armel armhf i386 ppc64el riscv64 s390x
linux	6.12.95-1		Installability problems	Built: allamd64arm64armelarmhfi386ppc64elriscv64s390xsource	?
DSA: 6381 µdebs: present Closes: 1136179 1139686 CVEs referenced: CVE-2025-23131 CVE-2026-31419 CVE-2026-31732 CVE-2026-43010 CVE-2026-43216 CVE-2026-43355 CVE-2026-46242 CVE-2026-52975 CVE-2026-53070 CVE-2026-53101 CVE-2026-53139 CVE-2026-53142 CVE-2026-53151 CVE-2026-53157 CVE-2026-53167 CVE-2026-53179 CVE-2026-53325 CVE-2026-53341 CVE-2026-53359 CVE-2026-53361 CVE-2026-53362 Binary debdiffs: all amd64 arm64 armel armhf i386 ppc64el riscv64 s390x Lintian issues: all amd64 arm64 armel armhf i386 ppc64el riscv64 s390x source
linux-signed-amd64	6.12.95+1		Installability problems amd64	Built: amd64source	?
DSA: 6381 µdebs: present Closes: 1136179 1139686 CVEs referenced: CVE-2025-23131 CVE-2026-31419 CVE-2026-31732 CVE-2026-43010 CVE-2026-43216 CVE-2026-43355 CVE-2026-46242 CVE-2026-52975 CVE-2026-53070 CVE-2026-53101 CVE-2026-53139 CVE-2026-53142 CVE-2026-53151 CVE-2026-53157 CVE-2026-53167 CVE-2026-53179 CVE-2026-53325 CVE-2026-53341 CVE-2026-53359 CVE-2026-53361 CVE-2026-53362 Binary debdiffs: amd64 Lintian issues: amd64 source
linux-signed-arm64	6.12.95+1		Installability problems arm64	Built: arm64source	?
DSA: 6381 µdebs: present Closes: 1136179 1139686 CVEs referenced: CVE-2025-23131 CVE-2026-31419 CVE-2026-31732 CVE-2026-43010 CVE-2026-43216 CVE-2026-43355 CVE-2026-46242 CVE-2026-52975 CVE-2026-53070 CVE-2026-53101 CVE-2026-53139 CVE-2026-53142 CVE-2026-53151 CVE-2026-53157 CVE-2026-53167 CVE-2026-53179 CVE-2026-53325 CVE-2026-53341 CVE-2026-53359 CVE-2026-53361 CVE-2026-53362 Binary debdiffs: arm64 Lintian issues: arm64 source
llvm-toolchain-22	1:22.1.8-1~deb13u1		Installability problems amd64	Built: allamd64source	?
Lintian issues: all amd64 source
mbedtls	3.6.6-0.1~deb13u1		Installability problems	Built: source	?
Closes: 1132577 1133841 CVEs referenced: CVE-2026-25834 CVE-2026-25835 CVE-2026-34872 CVE-2026-34873 CVE-2026-34874 CVE-2026-34875 CVE-2026-34876
node-lodash	4.17.21+dfsg+~cs8.31.198.20210220-9+deb13u1		Installability problems	Built: source	?
Closes: 1126265 CVEs referenced: CVE-2025-13465 CVE-2026-2950 CVE-2026-4800 Lintian issues: source
postfix	3.10.12-0+deb13u2		Installability problems	Built: allamd64arm64armelarmhfi386ppc64elriscv64s390xsource	?
DSA: 6382
postfix	3.10.12-0+deb13u1		Installability problems	Built: source	?
xz-utils	5.8.3-0+deb13u1		Installability problems	Built: source
Reason: unacceptable churn for simple fix? index issue fixed in 5.8.1-1+deb13u1 Request: 1140802 µdebs: present Closes: 1132497 CVEs referenced: CVE-2026-34743

Pending Processing (0 uploads for 0 packages)

Processed (252 uploads for 202 packages)

Package	Version	Installability Problems	Action
apache2	2.4.68-1~deb13u1	Installability problems	ACCEPTED
Reason: fix use-after-free issues [CVE-2026-29167 CVE-2026-48913]; fix cross-site scripting issue [CVE-2026-29170]; fix buffer overflow issues [CVE-2026-34355 CVE-2026-34356 CVE-2026-42536]; fix denial of serice issues [CVE-2026-42535 CVE-2026-44186 CVE-2026-49975]; fix out of bounds read issues [CVE-2026-43951 CVE-2026-44185]; fix file read issue [CVE-2026-44119]; fix buffer underwrite issue [CVE-2026-44631] Request: 1139713 CVEs referenced: CVE-2026-29167 CVE-2026-29170 CVE-2026-34355 CVE-2026-34356 CVE-2026-42535 CVE-2026-42536 CVE-2026-43951 CVE-2026-44119 CVE-2026-44185 CVE-2026-44186 CVE-2026-44631 CVE-2026-48913 CVE-2026-49975 Binary debdiffs: all
apache2	2.4.67-1~deb13u3	Installability problems	ACCEPTED
This upload was superseded by a more current one. DSA: 6323 CVEs referenced: CVE-2026-49975
archlinux-keyring	0~20260420-1~deb13u1	Installability problems	ACCEPTED
Reason: update keys Request: 1139326 Lintian issues: source
atril	1.26.2-4+deb13u1	Installability problems	ACCEPTED
DSA: 6349 Closes: 1139874 CVEs referenced: CVE-2026-46529 Binary debdiffs: amd64 arm64 armel armhf i386 ppc64el riscv64 s390x
awstats	7.9-1+deb13u2	Installability problems	ACCEPTED
Reason: prevent freezing on keyword stat Request: 1138164 Closes: 1135203
base-files	13.8+deb13u6	Installability problems c-i failed: mmdebstrap/1.5.7-1+deb13u1 [armel]	ACCEPTED
Reason: update for the point release
beets	2.2.0-3+deb13u1	Installability problems	ACCEPTED
Reason: fix XSS vulnerability [CVE-2026-42052] Request: 1136681 Closes: 1135779 CVEs referenced: CVE-2026-42052
bind9	1:9.20.23-1~deb13u1	Installability problems c-i failed: shadowsocks-libev/3.3.5+ds-16 [armel] systemtap/5.1-5 [riscv64]	ACCEPTED
DSA: 6285 CVEs referenced: CVE-2026-3039 CVE-2026-3592 CVE-2026-3593 CVE-2026-5946 CVE-2026-5947 CVE-2026-5950 Binary debdiffs: amd64 arm64 armel armhf i386 ppc64el riscv64 s390x Lintian issues: amd64 arm64 armel armhf i386 ppc64el riscv64 s390x
bird2	2.17.5-0+deb13u1	Installability problems	ACCEPTED
DSA: 6347 Binary debdiffs: all amd64 arm64 armel armhf i386 ppc64el riscv64 s390x Lintian issues: source
bird3	3.1.7-0+deb13u1	Installability problems	ACCEPTED
DSA: 6379 Binary debdiffs: all amd64 arm64 armhf i386 ppc64el riscv64 s390x Lintian issues: armel
calibre	8.5.0+ds-1+deb13u3	Installability problems amd64 arm64 armhf i386	ACCEPTED
Reason: fix unsafe e-book extraction and resource path handling [CVE-2026-30853 CVE-2026-33206]; prevent e-book viewer local file reads and SSRF/exfiltration [CVE-2026-33205]; avoid unsafe catalog rule evaluation; correct XPath and SQL query handling; fix reader-background endpoint path normalisation; improve exception diagnostics Request: 1136055 Closes: 1135543 CVEs referenced: CVE-2026-30853 CVE-2026-33205 CVE-2026-33206 Binary debdiffs: amd64 arm64 armhf i386
cdebootstrap	0.7.9+b12	Installability problems	ACCEPTED
Reason: rebuild with updated xz-utils Binary debdiffs: amd64 arm64 armel armhf i386 ppc64el riscv64 s390x
ceph	18.2.7+ds-1+deb13u1	Installability problems	ACCEPTED
DSA: 6321 Closes: 1120797 1126573 CVEs referenced: CVE-2024-31884 CVE-2024-47866 Binary debdiffs: s390x Lintian issues: all amd64 arm64 ppc64el riscv64 s390x
chromium	149.0.7827.196-1~deb13u1	Installability problems	ACCEPTED
DSA: 6364 CVEs referenced: CVE-2026-13021 CVE-2026-13022 CVE-2026-13023 CVE-2026-13024 CVE-2026-13025 CVE-2026-13026 CVE-2026-13027 CVE-2026-13028 CVE-2026-13029 CVE-2026-13030 CVE-2026-13031 CVE-2026-13032 CVE-2026-13033 CVE-2026-13034 CVE-2026-13035 CVE-2026-13036 CVE-2026-13037 CVE-2026-13038 Lintian issues: source
chromium	149.0.7827.155-1~deb13u1	Installability problems	ACCEPTED
This upload was superseded by a more current one. DSA: 6352 CVEs referenced: CVE-2026-12437 CVE-2026-12438 CVE-2026-12439 CVE-2026-12440 CVE-2026-12441 CVE-2026-12442 CVE-2026-12443 CVE-2026-12444 CVE-2026-12445 CVE-2026-12446 CVE-2026-12447 CVE-2026-12448 CVE-2026-12449 CVE-2026-12450 CVE-2026-12451 CVE-2026-12452 CVE-2026-12453 CVE-2026-12454 CVE-2026-12455 CVE-2026-12456 CVE-2026-12457 CVE-2026-12458 CVE-2026-12459 CVE-2026-12460 CVE-2026-12461 CVE-2026-12462 CVE-2026-12463 CVE-2026-12464 CVE-2026-12465 CVE-2026-12466 CVE-2026-12467 CVE-2026-12468 CVE-2026-12469
chromium	149.0.7827.114-1~deb13u1	Installability problems	ACCEPTED
This upload was superseded by a more current one. DSA: 6344 CVEs referenced: CVE-2026-12007 CVE-2026-12008 CVE-2026-12009 CVE-2026-12010 CVE-2026-12011 CVE-2026-12012 CVE-2026-12013 CVE-2026-12014 CVE-2026-12015 CVE-2026-12016 CVE-2026-12017 CVE-2026-12018 CVE-2026-12019 CVE-2026-12020 CVE-2026-12022 CVE-2026-12023 CVE-2026-12024 CVE-2026-12025 CVE-2026-12026 CVE-2026-12027 CVE-2026-12028 CVE-2026-12029 CVE-2026-12030 CVE-2026-12031 CVE-2026-12032 CVE-2026-12033 CVE-2026-12034 CVE-2026-12035
chromium	149.0.7827.102-1~deb13u1	Installability problems	ACCEPTED
This upload was superseded by a more current one. DSA: 6337 CVEs referenced: CVE-2026-11628 CVE-2026-11629 CVE-2026-11630 CVE-2026-11631 CVE-2026-11632 CVE-2026-11633 CVE-2026-11634 CVE-2026-11635 CVE-2026-11636 CVE-2026-11637 CVE-2026-11638 CVE-2026-11639 CVE-2026-11640 CVE-2026-11641 CVE-2026-11642 CVE-2026-11643 CVE-2026-11644 CVE-2026-11645 CVE-2026-11646 CVE-2026-11647 CVE-2026-11648 CVE-2026-11649 CVE-2026-11650 CVE-2026-11651 CVE-2026-11652 CVE-2026-11653 CVE-2026-11654 CVE-2026-11655 CVE-2026-11656 CVE-2026-11657 CVE-2026-11658 CVE-2026-11659 CVE-2026-11660 CVE-2026-11661 CVE-2026-11662 CVE-2026-11663 CVE-2026-11664 CVE-2026-11665 CVE-2026-11666 CVE-2026-11667 CVE-2026-11668 CVE-2026-11669 CVE-2026-11670 CVE-2026-11671 CVE-2026-11672 CVE-2026-11673 CVE-2026-11674 CVE-2026-11675 CVE-2026-11676 CVE-2026-11677 CVE-2026-11678 CVE-2026-11679 CVE-2026-11680 CVE-2026-11681 CVE-2026-11682 CVE-2026-11683 CVE-2026-11684 CVE-2026-11685 CVE-2026-11686 CVE-2026-11687 CVE-2026-11688 CVE-2026-11689 CVE-2026-11690 CVE-2026-11691 CVE-2026-11692 CVE-2026-11693 CVE-2026-11694 CVE-2026-11695 CVE-2026-11696 CVE-2026-11697 CVE-2026-11698 CVE-2026-11699 CVE-2026-11700 CVE-2026-11701
chromium	149.0.7827.53-1~deb13u1	Installability problems	ACCEPTED
This upload was superseded by a more current one. DSA: 6325 CVEs referenced: CVE-2026-10881 CVE-2026-10882 CVE-2026-10883 CVE-2026-10884 CVE-2026-10885 CVE-2026-10886 CVE-2026-10887 CVE-2026-10888 CVE-2026-10889 CVE-2026-10890 CVE-2026-10891 CVE-2026-10892 CVE-2026-10893 CVE-2026-10894 CVE-2026-10895 CVE-2026-10896 CVE-2026-10897 CVE-2026-10898 CVE-2026-10899 CVE-2026-10900 CVE-2026-10901 CVE-2026-10902 CVE-2026-10903 CVE-2026-10904 CVE-2026-10905 CVE-2026-10906 CVE-2026-10907 CVE-2026-10908 CVE-2026-10909 CVE-2026-10910 CVE-2026-10911 CVE-2026-10912 CVE-2026-10913 CVE-2026-10914 CVE-2026-10915 CVE-2026-10916 CVE-2026-10917 CVE-2026-10918 CVE-2026-10919 CVE-2026-10920 CVE-2026-10921 CVE-2026-10922 CVE-2026-10923 CVE-2026-10924 CVE-2026-10925 CVE-2026-10926 CVE-2026-10927 CVE-2026-10928 CVE-2026-10929 CVE-2026-10930 CVE-2026-10931 CVE-2026-10932 CVE-2026-10933 CVE-2026-10934 CVE-2026-10935 CVE-2026-10936 CVE-2026-10937 CVE-2026-10938 CVE-2026-10939 CVE-2026-10940 CVE-2026-10941 CVE-2026-10942 CVE-2026-10943 CVE-2026-10944 CVE-2026-10945 CVE-2026-10946 CVE-2026-10947 CVE-2026-10948 CVE-2026-10949 CVE-2026-10950 CVE-2026-10951 CVE-2026-10952 CVE-2026-10953 CVE-2026-10954 CVE-2026-10955 CVE-2026-10956 CVE-2026-10957 CVE-2026-10958 CVE-2026-10959 CVE-2026-10960 CVE-2026-10961 CVE-2026-10962 CVE-2026-10963 CVE-2026-10964 CVE-2026-10965 CVE-2026-10966 CVE-2026-10967 CVE-2026-10968 CVE-2026-10969 CVE-2026-10970 CVE-2026-10971 CVE-2026-10972 CVE-2026-10973 CVE-2026-10974 CVE-2026-10975 CVE-2026-10976 CVE-2026-10977 CVE-2026-10978 CVE-2026-10979 CVE-2026-10980 CVE-2026-10981 CVE-2026-10982 CVE-2026-10983 CVE-2026-10984 CVE-2026-10985 CVE-2026-10986 CVE-2026-10987 CVE-2026-10988 CVE-2026-10989 CVE-2026-10990 CVE-2026-10991 CVE-2026-10992 CVE-2026-10993 CVE-2026-10994 CVE-2026-10995 CVE-2026-10996 CVE-2026-10997 CVE-2026-10998 CVE-2026-10999 CVE-2026-11000 CVE-2026-11001 CVE-2026-11002 CVE-2026-11003 CVE-2026-11004 CVE-2026-11005 CVE-2026-11006 CVE-2026-11007 CVE-2026-11008 CVE-2026-11009 CVE-2026-11010 CVE-2026-11011 CVE-2026-11012 CVE-2026-11013 CVE-2026-11014 CVE-2026-11015 CVE-2026-11016 CVE-2026-11017 CVE-2026-11018 CVE-2026-11019 CVE-2026-11020 CVE-2026-11021 CVE-2026-11022 CVE-2026-11023 CVE-2026-11024 CVE-2026-11025 CVE-2026-11026 CVE-2026-11027 CVE-2026-11028 CVE-2026-11029 CVE-2026-11030 CVE-2026-11031 CVE-2026-11032 CVE-2026-11033 CVE-2026-11034 CVE-2026-11035 CVE-2026-11036 CVE-2026-11037 CVE-2026-11038 CVE-2026-11039 CVE-2026-11040 CVE-2026-11041 CVE-2026-11042 CVE-2026-11043 CVE-2026-11044 CVE-2026-11045 CVE-2026-11046 CVE-2026-11047 CVE-2026-11048 CVE-2026-11049 CVE-2026-11050 CVE-2026-11051 CVE-2026-11052 CVE-2026-11053 CVE-2026-11054 CVE-2026-11055 CVE-2026-11056 CVE-2026-11057 CVE-2026-11058 CVE-2026-11059 CVE-2026-11060 CVE-2026-11061 CVE-2026-11062 CVE-2026-11063 CVE-2026-11064 CVE-2026-11065 CVE-2026-11066 CVE-2026-11067 CVE-2026-11068 CVE-2026-11069 CVE-2026-11070 CVE-2026-11071 CVE-2026-11072 CVE-2026-11073 CVE-2026-11074 CVE-2026-11075 CVE-2026-11076 CVE-2026-11077 CVE-2026-11078 CVE-2026-11079 CVE-2026-11080 CVE-2026-11081 CVE-2026-11082 CVE-2026-11083 CVE-2026-11084 CVE-2026-11085 CVE-2026-11086 CVE-2026-11087 CVE-2026-11088 CVE-2026-11089 CVE-2026-11090 CVE-2026-11091 CVE-2026-11092 CVE-2026-11093 CVE-2026-11094 CVE-2026-11095 CVE-2026-11096 CVE-2026-11097 CVE-2026-11098 CVE-2026-11099 CVE-2026-11100 CVE-2026-11101 CVE-2026-11102 CVE-2026-11103 CVE-2026-11104 CVE-2026-11105 CVE-2026-11106 CVE-2026-11107 CVE-2026-11108 CVE-2026-11109 CVE-2026-11110 CVE-2026-11111 CVE-2026-11112 CVE-2026-11113 CVE-2026-11114 CVE-2026-11115 CVE-2026-11116 CVE-2026-11117 CVE-2026-11118 CVE-2026-11119 CVE-2026-11120 CVE-2026-11121 CVE-2026-11122 CVE-2026-11123 CVE-2026-11124 CVE-2026-11125 CVE-2026-11126 CVE-2026-11127 CVE-2026-11128 CVE-2026-11129 CVE-2026-11130 CVE-2026-11131 CVE-2026-11132 CVE-2026-11133 CVE-2026-11134 CVE-2026-11135 CVE-2026-11136 CVE-2026-11137 CVE-2026-11138 CVE-2026-11139 CVE-2026-11140 CVE-2026-11141 CVE-2026-11142 CVE-2026-11143 CVE-2026-11144 CVE-2026-11145 CVE-2026-11146 CVE-2026-11147 CVE-2026-11148 CVE-2026-11149 CVE-2026-11150 CVE-2026-11151 CVE-2026-11152 CVE-2026-11153 CVE-2026-11154 CVE-2026-11155 CVE-2026-11156 CVE-2026-11157 CVE-2026-11158 CVE-2026-11159 CVE-2026-11160 CVE-2026-11161 CVE-2026-11162 CVE-2026-11163 CVE-2026-11164 CVE-2026-11165 CVE-2026-11166 CVE-2026-11167 CVE-2026-11168 CVE-2026-11169 CVE-2026-11170 CVE-2026-11171 CVE-2026-11172 CVE-2026-11173 CVE-2026-11174 CVE-2026-11175 CVE-2026-11176 CVE-2026-11177 CVE-2026-11178 CVE-2026-11179 CVE-2026-11180 CVE-2026-11181 CVE-2026-11182 CVE-2026-11183 CVE-2026-11184 CVE-2026-11185 CVE-2026-11186 CVE-2026-11187 CVE-2026-11188 CVE-2026-11189 CVE-2026-11190 CVE-2026-11191 CVE-2026-11192 CVE-2026-11193 CVE-2026-11194 CVE-2026-11195 CVE-2026-11196 CVE-2026-11197 CVE-2026-11198 CVE-2026-11199 CVE-2026-11200 CVE-2026-11201 CVE-2026-11202 CVE-2026-11203 CVE-2026-11204 CVE-2026-11205 CVE-2026-11206 CVE-2026-11207 CVE-2026-11208 CVE-2026-11209 CVE-2026-11210 CVE-2026-11211 CVE-2026-11212 CVE-2026-11213 CVE-2026-11214 CVE-2026-11215 CVE-2026-11216 CVE-2026-11217 CVE-2026-11218 CVE-2026-11219 CVE-2026-11220 CVE-2026-11221 CVE-2026-11222 CVE-2026-11223 CVE-2026-11224 CVE-2026-11225 CVE-2026-11226 CVE-2026-11227 CVE-2026-11228 CVE-2026-11229 CVE-2026-11230 CVE-2026-11231 CVE-2026-11232 CVE-2026-11233 CVE-2026-11234 CVE-2026-11235 CVE-2026-11236 CVE-2026-11237 CVE-2026-11238 CVE-2026-11239 CVE-2026-11240 CVE-2026-11241 CVE-2026-11242 CVE-2026-11243 CVE-2026-11244 CVE-2026-11245 CVE-2026-11246 CVE-2026-11247 CVE-2026-11248 CVE-2026-11249 CVE-2026-11250 CVE-2026-11251 CVE-2026-11252 CVE-2026-11253 CVE-2026-11254 CVE-2026-11255 CVE-2026-11256 CVE-2026-11257 CVE-2026-11258 CVE-2026-11259 CVE-2026-11260 CVE-2026-11261 CVE-2026-11262 CVE-2026-11263 CVE-2026-11264 CVE-2026-11265 CVE-2026-11266 CVE-2026-11267 CVE-2026-11268 CVE-2026-11269 CVE-2026-11270 CVE-2026-11271 CVE-2026-11272 CVE-2026-11273 CVE-2026-11274 CVE-2026-11275 CVE-2026-11276 CVE-2026-11277 CVE-2026-11278 CVE-2026-11279 CVE-2026-11280 CVE-2026-11281 CVE-2026-11282 CVE-2026-11283 CVE-2026-11284 CVE-2026-11285 CVE-2026-11286 CVE-2026-11287 CVE-2026-11288 CVE-2026-11289 CVE-2026-11290 CVE-2026-11291 CVE-2026-11292 CVE-2026-11293 CVE-2026-11294 CVE-2026-11295 CVE-2026-11296 CVE-2026-11297 CVE-2026-11298 CVE-2026-11299 CVE-2026-11300 CVE-2026-11301 CVE-2026-11302 CVE-2026-11303 CVE-2026-11304 CVE-2026-11305 CVE-2026-11306 CVE-2026-11307 CVE-2026-11308 CVE-2026-11309
chromium	148.0.7778.215-1~deb13u1	Installability problems	ACCEPTED
This upload was superseded by a more current one. DSA: 6316 CVEs referenced: CVE-2026-10000 CVE-2026-10001 CVE-2026-10002 CVE-2026-10003 CVE-2026-10004 CVE-2026-10005 CVE-2026-10006 CVE-2026-10007 CVE-2026-10008 CVE-2026-10009 CVE-2026-10010 CVE-2026-10011 CVE-2026-10012 CVE-2026-10013 CVE-2026-10014 CVE-2026-10015 CVE-2026-10016 CVE-2026-10017 CVE-2026-10018 CVE-2026-10019 CVE-2026-10020 CVE-2026-10021 CVE-2026-10022 CVE-2026-9872 CVE-2026-9873 CVE-2026-9874 CVE-2026-9875 CVE-2026-9876 CVE-2026-9877 CVE-2026-9878 CVE-2026-9879 CVE-2026-9880 CVE-2026-9881 CVE-2026-9882 CVE-2026-9883 CVE-2026-9884 CVE-2026-9885 CVE-2026-9886 CVE-2026-9887 CVE-2026-9888 CVE-2026-9889 CVE-2026-9890 CVE-2026-9891 CVE-2026-9892 CVE-2026-9893 CVE-2026-9894 CVE-2026-9895 CVE-2026-9896 CVE-2026-9897 CVE-2026-9898 CVE-2026-9899 CVE-2026-9900 CVE-2026-9901 CVE-2026-9902 CVE-2026-9903 CVE-2026-9904 CVE-2026-9905 CVE-2026-9906 CVE-2026-9907 CVE-2026-9908 CVE-2026-9909 CVE-2026-9910 CVE-2026-9911 CVE-2026-9912 CVE-2026-9913 CVE-2026-9914 CVE-2026-9915 CVE-2026-9916 CVE-2026-9917 CVE-2026-9918 CVE-2026-9919 CVE-2026-9920 CVE-2026-9921 CVE-2026-9922 CVE-2026-9923 CVE-2026-9924 CVE-2026-9925 CVE-2026-9926 CVE-2026-9927 CVE-2026-9928 CVE-2026-9929 CVE-2026-9930 CVE-2026-9931 CVE-2026-9932 CVE-2026-9933 CVE-2026-9934 CVE-2026-9935 CVE-2026-9936 CVE-2026-9937 CVE-2026-9938 CVE-2026-9939 CVE-2026-9940 CVE-2026-9941 CVE-2026-9942 CVE-2026-9943 CVE-2026-9944 CVE-2026-9945 CVE-2026-9946 CVE-2026-9947 CVE-2026-9948 CVE-2026-9949 CVE-2026-9950 CVE-2026-9951 CVE-2026-9952 CVE-2026-9953 CVE-2026-9954 CVE-2026-9955 CVE-2026-9956 CVE-2026-9957 CVE-2026-9958 CVE-2026-9959 CVE-2026-9960 CVE-2026-9961 CVE-2026-9962 CVE-2026-9963 CVE-2026-9964 CVE-2026-9965 CVE-2026-9966 CVE-2026-9967 CVE-2026-9968 CVE-2026-9969 CVE-2026-9970 CVE-2026-9971 CVE-2026-9972 CVE-2026-9973 CVE-2026-9974 CVE-2026-9975 CVE-2026-9976 CVE-2026-9977 CVE-2026-9978 CVE-2026-9979 CVE-2026-9980 CVE-2026-9981 CVE-2026-9982 CVE-2026-9983 CVE-2026-9984 CVE-2026-9985 CVE-2026-9986 CVE-2026-9987 CVE-2026-9988 CVE-2026-9989 CVE-2026-9990 CVE-2026-9991 CVE-2026-9992 CVE-2026-9993 CVE-2026-9994 CVE-2026-9995 CVE-2026-9996 CVE-2026-9997 CVE-2026-9998 CVE-2026-9999
chromium	148.0.7778.178-1~deb13u1	Installability problems	ACCEPTED
This upload was superseded by a more current one. DSA: 6287 CVEs referenced: CVE-2026-9110 CVE-2026-9111 CVE-2026-9112 CVE-2026-9113 CVE-2026-9114 CVE-2026-9115 CVE-2026-9116 CVE-2026-9117 CVE-2026-9118 CVE-2026-9119 CVE-2026-9120 CVE-2026-9121 CVE-2026-9122 CVE-2026-9123 CVE-2026-9124 CVE-2026-9126
chromium	148.0.7778.167-1~deb13u1	Installability problems	ACCEPTED
This upload was superseded by a more current one. DSA: 6273 CVEs referenced: CVE-2026-8509 CVE-2026-8510 CVE-2026-8511 CVE-2026-8512 CVE-2026-8513 CVE-2026-8514 CVE-2026-8515 CVE-2026-8516 CVE-2026-8517 CVE-2026-8518 CVE-2026-8519 CVE-2026-8520 CVE-2026-8521 CVE-2026-8522 CVE-2026-8523 CVE-2026-8524 CVE-2026-8525 CVE-2026-8526 CVE-2026-8527 CVE-2026-8528 CVE-2026-8529 CVE-2026-8530 CVE-2026-8531 CVE-2026-8532 CVE-2026-8533 CVE-2026-8534 CVE-2026-8535 CVE-2026-8536 CVE-2026-8537 CVE-2026-8538 CVE-2026-8539 CVE-2026-8540 CVE-2026-8541 CVE-2026-8542 CVE-2026-8543 CVE-2026-8544 CVE-2026-8545 CVE-2026-8546 CVE-2026-8547 CVE-2026-8548 CVE-2026-8549 CVE-2026-8550 CVE-2026-8551 CVE-2026-8552 CVE-2026-8553 CVE-2026-8554 CVE-2026-8555 CVE-2026-8556 CVE-2026-8557 CVE-2026-8558 CVE-2026-8559 CVE-2026-8560 CVE-2026-8561 CVE-2026-8562 CVE-2026-8563 CVE-2026-8564 CVE-2026-8565 CVE-2026-8566 CVE-2026-8567 CVE-2026-8568 CVE-2026-8569 CVE-2026-8570 CVE-2026-8571 CVE-2026-8572 CVE-2026-8573 CVE-2026-8574 CVE-2026-8575 CVE-2026-8576 CVE-2026-8577 CVE-2026-8578 CVE-2026-8579 CVE-2026-8580 CVE-2026-8581 CVE-2026-8582 CVE-2026-8583 CVE-2026-8584 CVE-2026-8585 CVE-2026-8586 CVE-2026-8587
chromium	148.0.7778.96-1~deb13u1	Installability problems	ACCEPTED
This upload was superseded by a more current one. DSA: 6250 CVEs referenced: CVE-2026-7896 CVE-2026-7897 CVE-2026-7898 CVE-2026-7899 CVE-2026-7900 CVE-2026-7901 CVE-2026-7902 CVE-2026-7903 CVE-2026-7904 CVE-2026-7905 CVE-2026-7906 CVE-2026-7907 CVE-2026-7908 CVE-2026-7909 CVE-2026-7910 CVE-2026-7911 CVE-2026-7912 CVE-2026-7913 CVE-2026-7914 CVE-2026-7915 CVE-2026-7916 CVE-2026-7917 CVE-2026-7918 CVE-2026-7919 CVE-2026-7920 CVE-2026-7921 CVE-2026-7922 CVE-2026-7923 CVE-2026-7924 CVE-2026-7925 CVE-2026-7926 CVE-2026-7927 CVE-2026-7928 CVE-2026-7929 CVE-2026-7930 CVE-2026-7931 CVE-2026-7932 CVE-2026-7933 CVE-2026-7934 CVE-2026-7935 CVE-2026-7936 CVE-2026-7937 CVE-2026-7938 CVE-2026-7939 CVE-2026-7940 CVE-2026-7941 CVE-2026-7942 CVE-2026-7943 CVE-2026-7944 CVE-2026-7945 CVE-2026-7946 CVE-2026-7947 CVE-2026-7948 CVE-2026-7949 CVE-2026-7950 CVE-2026-7951 CVE-2026-7952 CVE-2026-7953 CVE-2026-7954 CVE-2026-7955 CVE-2026-7956 CVE-2026-7957 CVE-2026-7958 CVE-2026-7959 CVE-2026-7960 CVE-2026-7961 CVE-2026-7962 CVE-2026-7963 CVE-2026-7964 CVE-2026-7965 CVE-2026-7966 CVE-2026-7967 CVE-2026-7968 CVE-2026-7969 CVE-2026-7970 CVE-2026-7971 CVE-2026-7972 CVE-2026-7973 CVE-2026-7974 CVE-2026-7975 CVE-2026-7976 CVE-2026-7977 CVE-2026-7978 CVE-2026-7979 CVE-2026-7980 CVE-2026-7981 CVE-2026-7982 CVE-2026-7983 CVE-2026-7984 CVE-2026-7985 CVE-2026-7986 CVE-2026-7987 CVE-2026-7988 CVE-2026-7989 CVE-2026-7990 CVE-2026-7991 CVE-2026-7992 CVE-2026-7993 CVE-2026-7994 CVE-2026-7995 CVE-2026-7996 CVE-2026-7997 CVE-2026-7998 CVE-2026-7999 CVE-2026-8000 CVE-2026-8001 CVE-2026-8002 CVE-2026-8003 CVE-2026-8004 CVE-2026-8005 CVE-2026-8006 CVE-2026-8007 CVE-2026-8008 CVE-2026-8009 CVE-2026-8010 CVE-2026-8011 CVE-2026-8012 CVE-2026-8013 CVE-2026-8014 CVE-2026-8015 CVE-2026-8016 CVE-2026-8017 CVE-2026-8018 CVE-2026-8019 CVE-2026-8020 CVE-2026-8021 CVE-2026-8022
chrony	4.6.1-3+deb13u2	Installability problems c-i failed: chrony/4.6.1-3+deb13u2 [armel]	ACCEPTED
Reason: ensure that if-up/down hook scripts exit successfully Request: 1141322 Closes: 1011533
ckermit	416~beta12-1+deb13u1	Installability problems	ACCEPTED
Reason: Block remote control of the local kermit by default [CVE-2025-68920]; disable unnecessary OpenSSL version check Request: 1129707 Closes: 1118629 1123025 CVEs referenced: CVE-2025-68920 Binary debdiffs: amd64 arm64 armel armhf i386 ppc64el riscv64 s390x
composer	2.8.8-1+deb13u3	Installability problems	ACCEPTED
Reason: fix support for new GitHub token format [CVE-2026-45793] Request: 1136642 CVEs referenced: CVE-2026-45793
courier	1.4.1-3+deb13u2	Installability problems	ACCEPTED
Reason: fix webadmin paths to imapd and imapd-ssl Closes: 1132026 Binary debdiffs: amd64 arm64 armel armhf i386 ppc64el riscv64 s390x Lintian issues: source
curl	8.14.1-2+deb13u4	Installability problems c-i failed: curl/8.14.1-2+deb13u4 [armel] curl/8.14.1-2+deb13u4 [armhf] curl/8.14.1-2+deb13u4 [i386] curl/8.14.1-2+deb13u4 [riscv64] dgit/12.16 [armel] di-netboot-assistant/0.79 [i386] ganeti/3.1.0~rc2-3 [armhf] glyr/1.0.10-2.1 [armhf] glyr/1.0.10-2.1 [i386] libmicrohttpd/1.0.1-4 [i386] live-build/1:20250505+deb13u1 [i386] node-sockjs/0.3.24+~0.3.33-6 [riscv64] nodejs/20.19.2+dfsg-1+deb13u2 [amd64] nodejs/20.19.2+dfsg-1+deb13u2 [arm64] nodejs/20.19.2+dfsg-1+deb13u2 [ppc64el] nodejs/20.19.2+dfsg-1+deb13u2 [s390x] openvswitch/3.5.0-1 [armhf] openvswitch/3.5.0-1 [i386] privoxy/4.0.0-2 [amd64] privoxy/4.0.0-2 [arm64] privoxy/4.0.0-2 [armhf] privoxy/4.0.0-2 [i386] privoxy/4.0.0-2 [ppc64el] privoxy/4.0.0-2 [riscv64] prometheus-hacluster-exporter/1.4.0-1 [armhf] prometheus-hacluster-exporter/1.4.0-1 [riscv64] prometheus-mysqlrouter-exporter/6.0.0-4 [armel] prometheus-mysqlrouter-exporter/6.0.0-4 [armhf] prometheus-mysqlrouter-exporter/6.0.0-4 [i386] prometheus-mysqlrouter-exporter/6.0.0-4 [riscv64] puppetdb/8.4.1-4 [riscv64] puppetserver/8.7.0-5 [arm64] slic3r-prusa/2.9.2+dfsg-1 [i386] slic3r-prusa/2.9.2+dfsg-1 [riscv64] slurm-wlm/24.11.5-4 [armhf] ulfius/2.7.15-2.2 [i386] vorbis-tools/1.4.3-1 [riscv64] xmltooling/3.3.0-2 [i386] xmltooling/3.3.0-2 [riscv64]	ACCEPTED
Reason: fix bearer token redirect leaks [CVE-2025-14524 CVE-2026-3783]; correct OpenSSL CA cache reuse [CVE-2025-14819]; fix HTTP Negotiate and proxy connection reuse [CVE-2026-1965 CVE-2026-3784 CVE-2026-5545]; prevent clear-text STARTTLS connection reuse [CVE-2026-4873]; fix SMB use-after-free and wrong share reuse [CVE-2026-3805 CVE-2026-5773]; clear redirected host/proxy/netrc credentials [CVE-2026-6253 CVE-2026-6429]; prevent stale cookie leaks [CVE-2026-6276]; clear proxy Digest state when switching proxies [CVE-2026-7168] Request: 1136033 CVEs referenced: CVE-2025-10148 CVE-2025-13034 CVE-2025-14524 CVE-2025-14819 CVE-2026-1965 CVE-2026-3783 CVE-2026-3784 CVE-2026-3805 CVE-2026-4873 CVE-2026-5545 CVE-2026-5773 CVE-2026-6253 CVE-2026-6276 CVE-2026-6429 CVE-2026-7168
cyborg	14.0.0-3+deb13u1	Installability problems	ACCEPTED
DSA: 6315 Closes: 1136006 CVEs referenced: CVE-2026-40213 CVE-2026-40214 Binary debdiffs: all
dar	2.7.17-1+b16	Installability problems	ACCEPTED
Reason: rebuild with updated curl Binary debdiffs: amd64 arm64 armel armhf i386 ppc64el riscv64 s390x
dar	2.7.17-1+b15	Installability problems	ACCEPTED
Reason: rebuild with updated openssl Missing builds: amd64 arm64 armel armhf i386 ppc64el riscv64 s390x
dar	2.7.17-1+b14	Installability problems	ACCEPTED
Reason: rebuild with updated libgcrypt20 Missing builds: amd64 arm64 armel armhf i386 ppc64el riscv64 s390x
dcmtk	3.6.9-5+deb13u2	Installability problems	ACCEPTED
Reason: fix buffer overflow issue [CVE-2026-12805] Request: 1140693 Closes: 1113993 1122926 1123584 1133001 1139181 1140562 CVEs referenced: CVE-2025-14607 CVE-2025-14841 CVE-2025-9732 CVE-2026-10194 CVE-2026-12805 CVE-2026-5663 Binary debdiffs: i386 s390x
dcmtk	3.6.9-5+deb13u1	Installability problems	ACCEPTED
This upload was superseded by a more current one. Reason: fix NULL pointer dereference issues [CVE-2022-4981 CVE-2025-14841]; fix memory corruption issues [CVE-2025-2357 CVE-2025-9732 CVE-2025-14607]; fix command injection issue [CVE-2026-5663]; fix buffer overflow issue [CVE-2026-10194] Request: 1139722 Closes: 1113993 1122926 1123584 1133001 1139181 CVEs referenced: CVE-2022-4981 CVE-2025-14607 CVE-2025-14841 CVE-2025-2357 CVE-2025-9732 CVE-2026-10194 CVE-2026-5663
debian-installer	20250803+deb13u6	Installability problems	ACCEPTED
Reason: bump linux ABI 6.12.94+deb13; rebuild for point release Binary debdiffs: amd64 arm64 armhf ppc64el riscv64 s390x
debusine	0.11.3+deb13u1	Installability problems	ACCEPTED
Reason: enforce file upload permissions; restrict artifact relation creation/deletion [CVE-2026-11852]; harden sbuild repository command quoting; reject unsafe .dsc/.changes checksum paths [CVE-2026-11853] Request: 1139556 CVEs referenced: CVE-2026-11852 CVE-2026-11853 Lintian issues: source
deepdiff	8.1.1-4+deb13u1	Installability problems	ACCEPTED
Reason: fix class pollution issue [CVE-2025-58367]; fix denial of service issue [CVE-2026-33155] Request: 1141284 Closes: 1131472 CVEs referenced: CVE-2025-58367 CVE-2026-33155
dhcpcd	1:10.1.0-11+deb13u3	Installability problems	ACCEPTED
Reason: fix memory safety issues [CVE-2025-70102 CVE-2026-56113 CVE-2026-56114]; fix IPv6 Router Advertisement information leakage [CVE-2026-56116]; correct control socket lifetime handling [CVE-2026-56117] Request: 1140795 Closes: 1140767 CVEs referenced: CVE-2025-70102 CVE-2026-56113 CVE-2026-56114 CVE-2026-56116 CVE-2026-56117 Lintian issues: source
distrobuilder	3.2-2+b8	Installability problems	ACCEPTED
Reason: rebuild with updated incus Binary debdiffs: amd64 arm64 armel armhf i386 ppc64el riscv64 s390x
dnsdist	1.9.15-0+deb13u1	Installability problems	ACCEPTED
DSA: 6367 CVEs referenced: CVE-2026-40011 CVE-2026-40208 CVE-2026-40209 CVE-2026-40210 CVE-2026-40211 CVE-2026-42004 CVE-2026-42005
dolphin	4:25.04.3-1+deb13u1	Installability problems	ACCEPTED
Reason: fix sandbox escape issue [CVE-2026-41525] Request: 1141297 CVEs referenced: CVE-2026-41525
dovecot	1:2.4.1+dfsg1-6+deb13u6	Installability problems	ACCEPTED
DSA: 6313 Closes: 1136444 CVEs referenced: CVE-2026-27851 CVE-2026-33603 CVE-2026-40016 CVE-2026-40020 CVE-2026-42006
errands	46.2.8-1+deb13u1	Installability problems	ACCEPTED
Reason: fix verification of TLS certificates for CalDAV servers [CVE-2025-71063] Request: 1137317 Closes: 1123738 CVEs referenced: CVE-2025-71063
evince	48.1-3+deb13u1	Installability problems	ACCEPTED
DSA: 6286 CVEs referenced: CVE-2026-46529
execnet	2.1.1-1+deb13u1	Installability problems	ACCEPTED
Reason: disable unreliable build-time tests Request: 1139254 Closes: 854494 Binary debdiffs: all
exim4	4.98.2-1+deb13u3	Installability problems	ACCEPTED
DSA: 6309
fastnetmon	1.2.9-0+deb13u1	Installability problems	ACCEPTED
DSA: 6375 Closes: 1138646 CVEs referenced: CVE-2026-48683 CVE-2026-48684 CVE-2026-48685 CVE-2026-48686 CVE-2026-48687 CVE-2026-48688 CVE-2026-48689 CVE-2026-48690 CVE-2026-48691 CVE-2026-48694 CVE-2026-48695 CVE-2026-48696 Binary debdiffs: amd64 arm64 armel armhf i386 ppc64el riscv64 s390x Lintian issues: amd64 arm64 armel armhf i386 ppc64el riscv64 s390x source
ffmpeg	7:7.1.5-0+deb13u1	Installability problems	ACCEPTED
DSA: 6361 CVEs referenced: CVE-2026-8461 Binary debdiffs: amd64 arm64 armel armhf i386 ppc64el riscv64 s390x
ffmpeg	7:7.1.4-0+deb13u1	Installability problems	ACCEPTED
This upload was superseded by a more current one. DSA: 6268 Binary debdiffs: amd64 arm64 armel armhf i386 ppc64el riscv64 s390x Lintian issues: all amd64 arm64 armel armhf i386 ppc64el riscv64 s390x
firefox-esr	140.12.0esr-1~deb13u1	Installability problems	ACCEPTED
DSA: 6350 CVEs referenced: CVE-2026-12289 CVE-2026-12290 CVE-2026-12291 CVE-2026-12292 CVE-2026-12294 CVE-2026-12295 CVE-2026-12296 CVE-2026-12297 CVE-2026-12298 CVE-2026-12299 CVE-2026-12302 CVE-2026-12304 CVE-2026-12305 CVE-2026-12306 CVE-2026-12307 CVE-2026-12308 CVE-2026-12309 CVE-2026-12310 CVE-2026-12311 CVE-2026-12312 CVE-2026-12313 CVE-2026-12314 CVE-2026-12315 CVE-2026-12324 CVE-2026-12325 CVE-2026-12327 CVE-2026-12328 CVE-2026-12329 CVE-2026-12330 Lintian issues: armhf i386 riscv64 source
firefox-esr	140.11.0esr-1~deb13u1	Installability problems	ACCEPTED
This upload was superseded by a more current one. DSA: 6283 CVEs referenced: CVE-2026-8388 CVE-2026-8391 CVE-2026-8401 CVE-2026-8946 CVE-2026-8947 CVE-2026-8950 CVE-2026-8953 CVE-2026-8954 CVE-2026-8955 CVE-2026-8956 CVE-2026-8957 CVE-2026-8958 CVE-2026-8961 CVE-2026-8962 CVE-2026-8968 CVE-2026-8970 CVE-2026-8974 CVE-2026-8975 Lintian issues: amd64 arm64 armhf i386 riscv64
fldigi	4.2.06-1+deb13u1	Installability problems	ACCEPTED
Reason: force LC_NUMERIC=C.UTF-8 to use proper decimal separator in API and ADIF log files Request: 1138728 Closes: 1114613
freecad	1.0.0+dfsg-8+deb13u2	Installability problems	ACCEPTED
Reason: fix build failure on arm64 Request: 1141386 Binary debdiffs: amd64 arm64 armhf ppc64el riscv64 s390x Lintian issues: all amd64 arm64 armhf ppc64el riscv64 s390x
freecad	1.0.0+dfsg-8+deb13u1	Installability problems	ACCEPTED
This upload was superseded by a more current one. Reason: fix fanuc post processor Request: 1130115 Closes: 1117850 Binary debdiffs: amd64 arm64 armhf ppc64el riscv64 s390x Lintian issues: all amd64 arm64 armhf ppc64el riscv64 s390x
frr	10.3-3+deb13u1	Installability problems	ACCEPTED
DSA: 6322 CVEs referenced: CVE-2025-61099 CVE-2025-61100 CVE-2025-61101 CVE-2025-61102 CVE-2025-61103 CVE-2025-61104 CVE-2025-61105 CVE-2025-61106 CVE-2025-61107 CVE-2026-28532 CVE-2026-37457 CVE-2026-37458 CVE-2026-5107 Binary debdiffs: amd64 arm64 armel armhf i386 ppc64el riscv64 s390x
fwupd	2.0.20-1~deb13u1	Installability problems	ACCEPTED
Distribution mismatch: stable-updates Reason: enable UEFI CA/db/KEK updates for the 2026 Secure Boot certificate transition; fix UEFI PK/KEK/dbx enumeration; fix Thunderbolt controller deployment; correct firmware update regressions; update fwupd hardware support and tests Request: 1139251 Closes: 1138871 Binary debdiffs: all amd64 arm64 armel armhf i386 ppc64el riscv64 s390x Lintian issues: all amd64 arm64 armel armhf i386 ppc64el riscv64 s390x source
gambas3	3.20.2-1+deb13u1	Installability problems	ACCEPTED
Reason: fix Qt component loading Request: 1136271 Closes: 1136260 Binary debdiffs: i386 s390x
gdown	5.2.0+dfsg-2+deb13u1	Installability problems	ACCEPTED
Reason: fix arbitray file write issue [CVE-2026-40491] Request: 1139573 CVEs referenced: CVE-2026-40491
geoip	1.6.12-11.2~deb13u1	Installability problems	ACCEPTED
Reason: reinstate generator scripts, relied upon by geoip-database Request: 1141419 Binary debdiffs: amd64 arm64 armel armhf i386 ppc64el riscv64 s390x Lintian issues: amd64 arm64 armel armhf i386 ppc64el riscv64 s390x
geoip-database	20250401+really20191224-0+deb13u1	Installability problems	ACCEPTED
Reason: revert to a DFSG-compatible version Request: 1141421 Closes: 1134158 Binary debdiffs: all
giflib	5.2.2-1+deb13u1	Installability problems	ACCEPTED
Reason: fix memory corruption issues [CVE-2026-23868 CVE-2026-26740] Request: 1140102 Closes: 1130495 1131368 CVEs referenced: CVE-2026-23868 CVE-2026-26740 Binary debdiffs: amd64 arm64 armel armhf i386 ppc64el riscv64 s390x
gimp	3.0.4-3+deb13u9	Installability problems	ACCEPTED
Reason: fix integer overflow issues [CVE-2026-4154 CVE-2026-40915] Request: 1139632 CVEs referenced: CVE-2026-40915 CVE-2026-4154
gnupg2	2.4.7-21+deb13u1+b4	Installability problems	ACCEPTED
Reason: rebuild with updated libgcrypt20 µdebs: present Binary debdiffs: amd64 arm64 armel armhf i386 ppc64el riscv64 s390x
gnustep-sqlclient	1.9.0-6+deb13u1	Installability problems	ACCEPTED
Reason: remove Multi-Arch: same Request: 1138221 Closes: 1133733 Binary debdiffs: amd64 arm64 armel armhf i386 ppc64el riscv64 s390x
gnutls28	3.8.9-3+deb13u4	Installability problems c-i failed: curl/8.14.1-2+deb13u4 [i386] curl/8.14.1-2+deb13u4 [riscv64]	ACCEPTED
DSA: 6281 Closes: 1135319 CVEs referenced: CVE-2026-33845 CVE-2026-33846 CVE-2026-3832 CVE-2026-3833 CVE-2026-42009 CVE-2026-42010 CVE-2026-42011 CVE-2026-42012 CVE-2026-42013 CVE-2026-42014 CVE-2026-42015 CVE-2026-5260 CVE-2026-5419 Binary debdiffs: amd64 arm64 armel armhf i386 ppc64el riscv64 s390x Lintian issues: amd64 arm64 armel armhf i386 ppc64el riscv64 s390x
graphite2	1.3.14-2+deb13u1	Installability problems	ACCEPTED
Reason: fix out-of-bounds write [CVE-2026-50593] Request: 1139173 CVEs referenced: CVE-2026-50593 Binary debdiffs: all amd64 arm64 armel armhf i386 ppc64el riscv64 s390x
gsasl	2.2.2-1.1+deb13u2	Installability problems	ACCEPTED
DSA: 6348
gsasl	2.2.2-1.1+deb13u1	Installability problems	ACCEPTED
This upload was superseded by a more current one. DSA: 6271
gst-libav1.0	1.26.2-1+deb13u1	Installability problems amd64 arm64 armel armhf i386 ppc64el riscv64 s390x	ACCEPTED
DSA: 6353 CVEs referenced: CVE-2026-52717 Binary debdiffs: amd64 arm64 armel armhf i386 ppc64el riscv64 s390x
gst-plugins-bad1.0	1.26.2-3+deb13u2	Installability problems	ACCEPTED
DSA: 6362 CVEs referenced: CVE-2026-52718 CVE-2026-52719 CVE-2026-53701
gst-plugins-good1.0	1.26.2-1+deb13u2	Installability problems	ACCEPTED
DSA: 6359 CVEs referenced: CVE-2026-1940 CVE-2026-3083 CVE-2026-3085 CVE-2026-39043 CVE-2026-39044
gst-plugins-good1.0	1.26.2-1+deb13u1	Installability problems	ACCEPTED
This upload was superseded by a more current one. DSA: 6318 CVEs referenced: CVE-2026-46469 CVE-2026-46470 CVE-2026-5056 Binary debdiffs: i386 s390x Lintian issues: amd64 arm64 armel armhf i386 ppc64el riscv64 s390x
haproxy	3.0.11-1+deb13u3	Installability problems	ACCEPTED
DSA: 6291 CVEs referenced: CVE-2026-33555
haveged	1.9.19-12+deb13u1	Installability problems	ACCEPTED
DSA: 6292 µdebs: present Closes: 1137096 CVEs referenced: CVE-2026-41054
horizon	3:25.3.0-3+deb13u1	Installability problems	ACCEPTED
Reason: fix escaping of special characters in project Request: 1139601 Closes: 1138845
imagemagick	8:7.1.1.43+dfsg1-1+deb13u10	Installability problems	ACCEPTED
DSA: 6356 Closes: 1140176 CVEs referenced: CVE-2026-48724 CVE-2026-48734 CVE-2026-48994 CVE-2026-49218 CVE-2026-49219 CVE-2026-53460 CVE-2026-53461 CVE-2026-53463 CVE-2026-53464 Lintian issues: all amd64 arm64 armel armhf i386 ppc64el riscv64 s390x
imagemagick	8:7.1.1.43+dfsg1-1+deb13u9	Installability problems	ACCEPTED
This upload was superseded by a more current one. DSA: 6298 CVEs referenced: CVE-2026-33901 CVE-2026-42050 CVE-2026-42326 CVE-2026-45031 CVE-2026-45358 CVE-2026-45359 CVE-2026-45624 CVE-2026-45664 CVE-2026-46520 CVE-2026-46521 CVE-2026-46522 CVE-2026-46523 CVE-2026-46557 CVE-2026-46559 CVE-2026-46692 CVE-2026-46693 CVE-2026-47165 CVE-2026-47166 Lintian issues: all amd64 arm64 armel armhf i386 ppc64el riscv64 s390x
incus	6.0.4-2+deb13u8	Installability problems	ACCEPTED
DSA: 6370 CVEs referenced: CVE-2026-48749 CVE-2026-48750 CVE-2026-48751 CVE-2026-48752 CVE-2026-48755 CVE-2026-48756 CVE-2026-48769 CVE-2026-55621 CVE-2026-55622
ironic	1:29.0.5-0+deb13u2	Installability problems	ACCEPTED
DSA: 6341 Closes: 1138842 CVEs referenced: CVE-2026-44917 CVE-2026-46447 CVE-2026-48681 Binary debdiffs: all
ironic	1:29.0.5-0+deb13u1	Installability problems	ACCEPTED
This upload was superseded by a more current one. Reason: fix credential forwarding from configuration molds [CVE-2026-42997]; fix IPMI console command injection [CVE-2026-42510]; sandbox kickstart template rendering [CVE-2026-44916]; prevent conductor thread exhaustion from file special devices [CVE-2026-44919]; restrict unsafe file image paths; improve image download validation and checksumming; correct Redfish power, boot and firmware workflows; fix inspection rule validation and hook failures; avoid stuck service/deploy states Request: 1135911 Closes: 1135255 1135898 1136005 1136655 CVEs referenced: CVE-2026-42510 CVE-2026-42997 CVE-2026-44916 CVE-2026-44919 Binary debdiffs: all
isc-kea	2.6.3-1+deb13u1	Installability problems	ACCEPTED
Reason: fix denial of service issue [CVE-2026-3608] Request: 1139931 CVEs referenced: CVE-2026-3608 Binary debdiffs: s390x
isenkram	0.69+deb13u1	Installability problems	ACCEPTED
Reason: handle usr-merge migration in update-fw-list; update generated firmware lists Request: 1133880 Closes: 1133426 Binary debdiffs: all
jackson-core	2.14.1-2~deb13u1	Installability problems	ACCEPTED
DSA: 6336 CVEs referenced: CVE-2025-49128 CVE-2025-52999 Binary debdiffs: all Lintian issues: all source
jackson-databind	2.14.0+ds-1+deb13u1	Installability problems	ACCEPTED
DSA: 6336 Closes: 1135410 CVEs referenced: CVE-2025-52999 Binary debdiffs: all Lintian issues: source
jackson-dataformat-smile	2.7.8-5+deb13u1	Installability problems	ACCEPTED
DSA: 6336 Binary debdiffs: all Lintian issues: all
jpeg-xl	0.11.2-0.1~deb13u2	Installability problems	ACCEPTED
DSA: 6342 Closes: 1138575 CVEs referenced: CVE-2025-70103
kdenlive	24.12.3-2+deb13u1	Installability problems	ACCEPTED
DSA: 6299 Closes: 1136172 CVEs referenced: CVE-2026-45184
keystone	2:27.0.0-3+deb13u4	Installability problems	ACCEPTED
DSA: 6331 Closes: 1135645 CVEs referenced: CVE-2026-42998 CVE-2026-42999 CVE-2026-43000 CVE-2026-43001 CVE-2026-44394
keystone	2:27.0.0-3+deb13u3	Installability problems	ACCEPTED
This upload was superseded by a more current one. Reason: fix behaviour of user_enabled_invert [CVE-2026-40683]; prevent unauthorized EC2 credential creation and deletion [CVE-2026-33551] Request: 1135936 Closes: 1133118 1133884 CVEs referenced: CVE-2026-33551 CVE-2026-40683
kitty	0.41.1-2+deb13u1	Installability problems	ACCEPTED
DSA: 6307 Closes: 1137210 CVEs referenced: CVE-2026-33633 CVE-2026-33642
krb5	1.21.3-5+deb13u1	Installability problems	ACCEPTED
DSA: 6293 Closes: 1135317 CVEs referenced: CVE-2026-40355 CVE-2026-40356
libapache-session-browseable-perl	1.3.16-1+deb13u1	Installability problems	ACCEPTED
Reason: improve entropy source [CVE-2026-8503] Request: 1136625 CVEs referenced: CVE-2026-8503 Binary debdiffs: all
libass	1:0.17.3-1+deb13u1	Installability problems	ACCEPTED
Reason: fix out of bounds read and write issues Request: 1140695 Binary debdiffs: armel armhf
libbytes-random-secure-perl	0.29-4~deb13u1	Installability problems	ACCEPTED
Reason: fix incorrect usage of seed in PRNG [CVE-2026-11625] Request: 1140807 CVEs referenced: CVE-2026-11625 Lintian issues: all
libcaca	0.99.beta20-5+deb13u1	Installability problems	ACCEPTED
Reason: prevent undefined behaviour in overflow check [CVE-2026-42046] Request: 1138539 Closes: 1136952 CVEs referenced: CVE-2026-42046 Binary debdiffs: amd64 arm64 armel armhf i386 ppc64el riscv64 s390x
libconfig-inifiles-perl	3.000003-3+deb13u1	Installability problems	ACCEPTED
DSA: 6354 CVEs referenced: CVE-2026-11527
libcrypt-pbkdf2-perl	0.261630-1~deb13u1	Installability problems	ACCEPTED
Reason: change default hash algorithm to HMAC-SHA256 and default iterations to 600,000 [CVE-2026-9641]; generate salts using Crypt::URandom [CVE-2026-9638]; use a constant-time comparison in `validate` to avoid timing attacks [CVE-2017-20240] Request: 1139897 Closes: 1139867 CVEs referenced: CVE-2017-20240 CVE-2026-9638 CVE-2026-9641 Binary debdiffs: all Lintian issues: source
libcrypt-urandom-perl	0.54-1+deb13u1	Installability problems	ACCEPTED
Reason: fix buffer overflow issue [CVE-2026-2474] Request: 1139698 CVEs referenced: CVE-2026-2474 Binary debdiffs: amd64 arm64 armel armhf i386 ppc64el riscv64 s390x
libdbi-perl	1.647-1+deb13u1	Installability problems c-i running: libdata-session-perl/1.18-2 [armhf]	ACCEPTED
DSA: 6338 CVEs referenced: CVE-2026-10879 CVE-2026-9698 Binary debdiffs: amd64 arm64 armel armhf i386 ppc64el riscv64 s390x
libgcrypt20	1.11.0-7+deb13u1	Installability problems	ACCEPTED
DSA: 6294 µdebs: present CVEs referenced: CVE-2026-41989 Binary debdiffs: amd64 arm64 armel armhf i386 ppc64el riscv64 s390x
libgd-perl	2.78-1+deb13u1	Installability problems	ACCEPTED
DSA: 6345 CVEs referenced: CVE-2026-11526 Binary debdiffs: amd64 arm64 armel armhf i386 ppc64el riscv64 s390x
libhtml-parser-perl	3.83-2~deb13u1	Installability problems	ACCEPTED
Reason: fix heap-use-after-free in _decode_entities [CVE-2026-8829] Request: 1139921 CVEs referenced: CVE-2026-8829 Binary debdiffs: amd64 arm64 armel armhf i386 ppc64el riscv64 s390x
libhttp-daemon-perl	6.16-1+deb13u1	Installability problems c-i running: cyrus-imapd/3.10.2-1 [i386] libfirefox-marionette-perl/1.63-1 [i386]	ACCEPTED
DSA: 6358 Closes: 1138050 CVEs referenced: CVE-2026-8450
libinput	1.28.1-1+deb13u1	Installability problems	ACCEPTED
DSA: 6339 µdebs: present CVEs referenced: CVE-2026-50292
libnet-cidr-lite-perl	0.22-3~deb13u2	Installability problems	ACCEPTED
Reason: fix IP/CIDR parser validation: reject non-ASCII digits and trailing newlines [CVE-2026-55190]; reject zero-padded CIDR masks [CVE-2026-45191] Request: 1140833 CVEs referenced: CVE-2026-45190 CVE-2026-45191 CVE-2026-55190
librabbitmq	0.15.0-1+deb13u1	Installability problems	ACCEPTED
DSA: 6343 CVEs referenced: CVE-2026-44235 CVE-2026-44236 Binary debdiffs: amd64 arm64 armel armhf i386 ppc64el riscv64 s390x
libreoffice	4:25.2.3-2+deb13u6	Installability problems armel armhf ppc64el s390x c-i running: h2orestart/0.7.2-1 [armel]	ACCEPTED
Reason: gracefully handle failure in graphite2 Request: 1140107 CVEs referenced: CVE-2026-50593 Binary debdiffs: all armhf Lintian issues: source
libreoffice	4:25.2.3-2+deb13u5	Installability problems armel armhf ppc64el s390x	ACCEPTED
This upload was superseded by a more current one. DSA: 6346 CVEs referenced: CVE-2026-6039 CVE-2026-6040 CVE-2026-6045 CVE-2026-8356 CVE-2026-8357 CVE-2026-8358 Binary debdiffs: all
libslirp	4.8.0-1+deb13u1	Installability problems	ACCEPTED
Reason: fix memory disclosure issue [CVE-2026-9539] Request: 1140797 CVEs referenced: CVE-2026-9539 Binary debdiffs: armhf
libssh2	1.11.1-1+deb13u1	Installability problems	ACCEPTED
DSA: 6365 Closes: 1135647 1140401 CVEs referenced: CVE-2025-15661 CVE-2026-55199 CVE-2026-55200 CVE-2026-7598
libtasn1-6	4.20.0-2+deb13u1	Installability problems	ACCEPTED
Reason: fix buffer overflow issue [CVE-2025-13151] Request: 1140295 Closes: 1125063 CVEs referenced: CVE-2025-13151
libvncserver	0.9.15+dfsg-1+deb13u2	Installability problems	ACCEPTED
Reason: fix buffer overflow and out-of-bounds write [CVE-2026-44988 CVE-2026-50538] Request: 1140224 Closes: 1138174 1138253 CVEs referenced: CVE-2026-44988 CVE-2026-50538
libxml-libxml-perl	2.0207+dfsg+really+2.0134-5+deb13u1	Installability problems s390x c-i running: libwebservice-musicbrainz-perl/1.0.7-1 [armhf]	ACCEPTED
Reason: fix out-of-bounds read [CVE-2026-8177] Request: 1140835 Closes: 1136300 CVEs referenced: CVE-2026-8177 Binary debdiffs: amd64 arm64 armel armhf i386 ppc64el riscv64 s390x
libxml2	2.12.7+dfsg+really2.9.14-2.1+deb13u3	Installability problems c-i failed: ruby-libxml/5.0.3-1 [armel]	ACCEPTED
Reason: fix RelaxNG include recursion limits [CVE-2026-0989]; prevent XML and SGML catalog recursion/resource exhaustion [CVE-2025-8732 CVE-2026-0990 CVE-2026-0992]; fix xmllint shell memory leak [CVE-2026-1757]; correct XML writer and Schematron error-path leaks; avoid RelaxNG validation use-after-free; update regression tests Request: 1139255 Closes: 1125691 1125695 1125696 CVEs referenced: CVE-2025-49794 CVE-2025-8732 CVE-2026-0989 CVE-2026-0990 CVE-2026-0992 CVE-2026-1757 Binary debdiffs: amd64 arm64 armel armhf i386 ppc64el riscv64 s390x Lintian issues: amd64 arm64 armel armhf i386 ppc64el riscv64 s390x source
libxpm	1:3.5.17-1+deb13u1	Installability problems	ACCEPTED
Reason: fix out of bounds read issue [CVE-2026-4367] Request: 1139576 Closes: 1134690 CVEs referenced: CVE-2026-4367 Lintian issues: source
linux	6.12.94-1	Installability problems	ACCEPTED
DSA: 6355 µdebs: present Closes: 1130365 CVEs referenced: CVE-2025-22069 CVE-2025-68251 CVE-2025-68768 CVE-2026-23247 CVE-2026-23272 CVE-2026-23346 CVE-2026-23394 CVE-2026-23469 CVE-2026-31420 CVE-2026-31560 CVE-2026-31613 CVE-2026-31663 CVE-2026-31717 CVE-2026-43116 CVE-2026-43219 CVE-2026-43303 CVE-2026-43331 CVE-2026-45850 CVE-2026-45930 CVE-2026-46158 CVE-2026-46170 CVE-2026-46203 CVE-2026-46216 CVE-2026-46316 CVE-2026-46320 CVE-2026-46321 CVE-2026-46322 CVE-2026-46331 CVE-2026-52909 CVE-2026-52910 Binary debdiffs: all amd64 arm64 armel armhf i386 ppc64el riscv64 s390x Lintian issues: all amd64 arm64 armel armhf i386 ppc64el riscv64 s390x source
linux	6.12.90-2	Installability problems	ACCEPTED
This upload was superseded by a more current one. DSA: 6305 µdebs: present CVEs referenced: CVE-2026-43494
linux	6.12.90-1	Installability problems	ACCEPTED
This upload was superseded by a more current one. DSA: 6295 µdebs: present Closes: 1136790 CVEs referenced: CVE-2026-23171 CVE-2026-46300
linux	6.12.88-1	Installability problems	ACCEPTED
This upload was superseded by a more current one. DSA: 6274 µdebs: present Closes: 1119093 1131025 1135313 CVEs referenced: CVE-2026-31499 CVE-2026-43088 CVE-2026-43109 CVE-2026-43220
linux-signed-amd64	6.12.94+1	Installability problems amd64	ACCEPTED
DSA: 6355 µdebs: present Closes: 1130365 CVEs referenced: CVE-2025-22069 CVE-2025-68251 CVE-2025-68768 CVE-2026-23247 CVE-2026-23272 CVE-2026-23346 CVE-2026-23394 CVE-2026-23469 CVE-2026-31420 CVE-2026-31560 CVE-2026-31613 CVE-2026-31663 CVE-2026-31717 CVE-2026-43116 CVE-2026-43219 CVE-2026-43303 CVE-2026-43331 CVE-2026-45850 CVE-2026-45930 CVE-2026-46158 CVE-2026-46170 CVE-2026-46203 CVE-2026-46216 CVE-2026-46316 CVE-2026-46320 CVE-2026-46321 CVE-2026-46322 CVE-2026-46331 CVE-2026-52909 CVE-2026-52910 Binary debdiffs: amd64 Lintian issues: amd64 source
linux-signed-amd64	6.12.90+2	Installability problems	ACCEPTED
This upload was superseded by a more current one. DSA: 6305 µdebs: present CVEs referenced: CVE-2026-43494
linux-signed-amd64	6.12.90+1	Installability problems	ACCEPTED
This upload was superseded by a more current one. DSA: 6295 µdebs: present Closes: 1136790 CVEs referenced: CVE-2026-23171 CVE-2026-46300
linux-signed-amd64	6.12.88+1	Installability problems	ACCEPTED
This upload was superseded by a more current one. DSA: 6274 µdebs: present Closes: 1119093 1131025 1135313 CVEs referenced: CVE-2026-31499 CVE-2026-43088 CVE-2026-43109 CVE-2026-43220
linux-signed-arm64	6.12.94+1	Installability problems arm64	ACCEPTED
DSA: 6355 µdebs: present Closes: 1130365 CVEs referenced: CVE-2025-22069 CVE-2025-68251 CVE-2025-68768 CVE-2026-23247 CVE-2026-23272 CVE-2026-23346 CVE-2026-23394 CVE-2026-23469 CVE-2026-31420 CVE-2026-31560 CVE-2026-31613 CVE-2026-31663 CVE-2026-31717 CVE-2026-43116 CVE-2026-43219 CVE-2026-43303 CVE-2026-43331 CVE-2026-45850 CVE-2026-45930 CVE-2026-46158 CVE-2026-46170 CVE-2026-46203 CVE-2026-46216 CVE-2026-46316 CVE-2026-46320 CVE-2026-46321 CVE-2026-46322 CVE-2026-46331 CVE-2026-52909 CVE-2026-52910 Binary debdiffs: arm64 Lintian issues: arm64 source
linux-signed-arm64	6.12.90+2	Installability problems	ACCEPTED
This upload was superseded by a more current one. DSA: 6305 µdebs: present CVEs referenced: CVE-2026-43494
linux-signed-arm64	6.12.90+1	Installability problems	ACCEPTED
This upload was superseded by a more current one. DSA: 6295 µdebs: present Closes: 1136790 CVEs referenced: CVE-2026-23171 CVE-2026-46300
linux-signed-arm64	6.12.88+1	Installability problems	ACCEPTED
This upload was superseded by a more current one. DSA: 6274 µdebs: present Closes: 1119093 1131025 1135313 CVEs referenced: CVE-2026-31499 CVE-2026-43088 CVE-2026-43109 CVE-2026-43220
linuxcnc	1:2.9.4-2+deb13u1	Installability problems	ACCEPTED
Reason: sanitize module names Request: 1141042 Closes: 1140943 Binary debdiffs: i386
lxd	5.0.2+git20231211.1364ae4-9+deb13u7	Installability problems	ACCEPTED
DSA: 6373 CVEs referenced: CVE-2026-48749 CVE-2026-48750 CVE-2026-48751 CVE-2026-48752 CVE-2026-48755 CVE-2026-48769 CVE-2026-55621 CVE-2026-55622 CVE-2026-9639 CVE-2026-9640 Lintian issues: all
lxml-html-clean	0.4.4-1~deb13u1	Installability problems	ACCEPTED
Reason: fix filter bypass issue [CVE-2026-28348]; fix tag injection issue [CVE-2026-28350] Request: 1140353 CVEs referenced: CVE-2026-28348 CVE-2026-28350 Binary debdiffs: all Lintian issues: source
mariadb	1:11.8.8-0+deb13u1	Installability problems	ACCEPTED
Reason: new upstream stable release; fix code execution issues [CVE-2026-44168 CVE-2026-48163 CVE-2026-48165]; fix authorization bypass [CVE-2026-44169]; fix shell interpolation vulnerability [CVE-2026-44170]; fix path traversal issue [CVE-2026-44171]; fix SQL injection issue [CVE-2026-44172]; fix incomplete privilege check issue [CVE-2026-44173]; fix "Illegal mix of collations" error; fix "Mroonga hangs on invalid index flag"; fix crash in information_schema.table_constraints Request: 1140853 Closes: 1104533 1110683 1126850 1127431 1137221 CVEs referenced: CVE-2026-44168 CVE-2026-44169 CVE-2026-44170 CVE-2026-44171 CVE-2026-44172 CVE-2026-44173 CVE-2026-48163 CVE-2026-48165 Binary debdiffs: all amd64 arm64 armel armhf i386 ppc64el riscv64 s390x Lintian issues: armhf
mediawiki	1:1.43.9+dfsg-1~deb13u1	Installability problems	ACCEPTED
DSA: 6380 CVEs referenced: CVE-2026-58024 CVE-2026-58025 CVE-2026-58026 CVE-2026-58027 CVE-2026-58028 CVE-2026-58029 CVE-2026-58030 CVE-2026-58032 CVE-2026-58033 CVE-2026-58036 CVE-2026-58037 Binary debdiffs: all
mesa	25.0.7-2+deb13u1	Installability problems c-i running: camitk/5.2.0-5 [armhf] libqglviewer/2.8.0+dfsg1-2.1 [armhf] openxr-sdk-source/1.1.47~ds-2 [armhf]	ACCEPTED
Reason: fix WebGPU/SPIR-V allocation handling [CVE-2026-40393] Request: 1140473 CVEs referenced: CVE-2026-40393 Binary debdiffs: amd64 arm64 armel armhf i386 ppc64el riscv64 s390x Lintian issues: amd64 arm64 armel armhf i386 ppc64el riscv64 s390x
miniupnpd	2.3.9-2+deb13u1	Installability problems	ACCEPTED
Reason: fix integer underflow issue [CVE-2026-5720] Request: 1140436 Closes: 1134334 CVEs referenced: CVE-2026-5720
mistral	20.0.0-2+deb13u1	Installability problems	ACCEPTED
DSA: 6333 Closes: 1138843 1138849 CVEs referenced: CVE-2026-41283 Binary debdiffs: all
modsecurity	3.0.14-1+deb13u1	Installability problems	ACCEPTED
Reason: prevent denial of service in hexDecode handling [CVE-2026-30923]; prevent denial of service in SSN/CPF/SVNR verification [CVE-2026-42268] Request: 1137277 CVEs referenced: CVE-2026-30923 CVE-2026-42268 Binary debdiffs: i386 s390x
mutt	2.2.13-1+deb13u1	Installability problems	ACCEPTED
Reason: fix buffer truncation issues [CVE-2026-43859 CVE-2026-43860 CVE-2026-43861]; fix mishandling of imap_auth_gss security level [CVE-2026-43862]; fix denial of service issue [CVE-2026-43863]; fix NULL pointer dereference issue [CVE-2026-43864] Request: 1139927 Closes: 1135699 CVEs referenced: CVE-2026-43859 CVE-2026-43860 CVE-2026-43861 CVE-2026-43862 CVE-2026-43863 CVE-2026-43864 Binary debdiffs: amd64 arm64 armel armhf i386 ppc64el riscv64 s390x
mxml	3.3.1-1+deb13u1	Installability problems	ACCEPTED
Reason: fix out-of-bounds read [CVE-2026-5037] Request: 1140382 Closes: 1132328 CVEs referenced: CVE-2026-5037 Binary debdiffs: armel armhf
nagios4	4.4.6-4.1+deb13u1	Installability problems	ACCEPTED
DSA: 6308 Closes: 1136340 Binary debdiffs: all amd64 arm64 armel armhf i386 ppc64el riscv64 s390x
nbconvert	7.16.6-1+deb13u1	Installability problems c-i running: spyder/6.0.5+ds-6 [riscv64]	ACCEPTED
Reason: fix arbitrary file write issue [CVE-2026-39377]; fix arbitrary file read issue [CVE-2026-39378] Request: 1140449 Closes: 1134889 1134890 CVEs referenced: CVE-2026-39377 CVE-2026-39378
netatalk	4.2.3~ds-1+deb13u2	Installability problems	ACCEPTED
DSA: 6280 CVEs referenced: CVE-2026-44047 CVE-2026-44048 CVE-2026-44049 CVE-2026-44050 CVE-2026-44051 CVE-2026-44052 CVE-2026-44054 CVE-2026-44055 CVE-2026-44057 CVE-2026-44060 CVE-2026-44062 CVE-2026-44064 CVE-2026-44066 CVE-2026-44068 CVE-2026-44076 CVE-2026-45354 CVE-2026-45355 CVE-2026-45356 CVE-2026-45698 CVE-2026-45699
neutron	2:26.0.3-0+deb13u2	Installability problems	ACCEPTED
DSA: 6340 Closes: 1135272 1138844 CVEs referenced: CVE-2026-50266 Binary debdiffs: all
neutron	2:26.0.0-9+deb13u1	Installability problems	ACCEPTED
This upload was superseded by a more current one. Reason: fix tagging policy bypass Request: 1138225 Closes: 1138172
nghttp2	1.64.0-1.1+deb13u1	Installability problems c-i running: cyrus-imapd/3.10.2-1 [i386] nodejs/20.19.2+dfsg-1+deb13u2 [amd64] nodejs/20.19.2+dfsg-1+deb13u2 [arm64] nodejs/20.19.2+dfsg-1+deb13u2 [ppc64el] nodejs/20.19.2+dfsg-1+deb13u2 [s390x]	ACCEPTED
DSA: 6266 Closes: 1131369 CVEs referenced: CVE-2026-27135
nginx	1.26.3-3+deb13u7	Installability problems	ACCEPTED
DSA: 6374 Closes: 1140359 1140361 CVEs referenced: CVE-2026-42055 CVE-2026-48142 Lintian issues: all amd64 arm64 armel armhf i386 ppc64el riscv64 s390x
nginx	1.26.3-3+deb13u6	Installability problems	ACCEPTED
This upload was superseded by a more current one. DSA: 6326 CVEs referenced: CVE-2026-42946 CVE-2026-9256 Lintian issues: all amd64 arm64 armel armhf i386 ppc64el riscv64 s390x
nginx	1.26.3-3+deb13u5	Installability problems	ACCEPTED
This upload was superseded by a more current one. DSA: 6278 CVEs referenced: CVE-2026-40460 CVE-2026-40701 CVE-2026-42934 CVE-2026-42945 CVE-2026-42946 Lintian issues: all
node-shell-quote	1.7.4+~1.7.1-1+deb13u1	Installability problems c-i failed: node-browserify/17.0.0+ds-5 [riscv64]	ACCEPTED
DSA: 6300 Closes: 1137372 CVEs referenced: CVE-2026-9277
nss	2:3.110-1+deb13u3	Installability problems	ACCEPTED
Reason: improve handling of escape sequences in pk11uri_ParseAttributes [CVE-2026-12318] Request: 1141246 CVEs referenced: CVE-2026-12318
nss	2:3.110-1+deb13u2	Installability problems	ACCEPTED
This upload was superseded by a more current one. DSA: 6290 CVEs referenced: CVE-2026-6766 CVE-2026-6767 CVE-2026-6772
ojalgo	55.0.0+ds-1+deb13u1	Installability problems	ACCEPTED
Reason: reduce frequency of built-time test failures Request: 1140607 Closes: 1140433
okular	4:25.04.2-1+deb13u1	Installability problems	ACCEPTED
DSA: 6332
opencc	1.1.9+ds1-1+deb13u1	Installability problems	ACCEPTED
Reason: fix out-of-bounds read issue [CVE-2025-15536] Request: 1140450 Closes: 1126286 CVEs referenced: CVE-2025-15536 Binary debdiffs: amd64 arm64 armel armhf i386 ppc64el riscv64 s390x
openjpeg2	2.5.3-2.1~deb13u2	Installability problems	ACCEPTED
DSA: 6277 Closes: 1133832 CVEs referenced: CVE-2026-6192 Lintian issues: amd64 arm64 armel armhf i386 ppc64el riscv64 s390x source
openslide	3.4.1+dfsg-7+deb13u1	Installability problems	ACCEPTED
Reason: fix possible code execution issue [CVE-2026-48977] Request: 1140493 Closes: 1140003 CVEs referenced: CVE-2026-48977 Binary debdiffs: amd64 arm64 armel armhf i386 ppc64el riscv64 s390x
openssl	3.5.6-1~deb13u2	Installability problems c-i failed: apt/3.0.3 [armhf] fastdds/3.1.2+ds-1 [arm64] fastdds/3.1.2+ds-1 [armel] golang-github-github-smimesign/0.2.0+dfsg-3 [armhf] golang-github-mendersoftware-openssl/1.1.0-4 [arm64] grpc/1.51.1-6 [arm64] grpc/1.51.1-6 [i386] hiredict/1.3.1-2 [arm64] hiredict/1.3.1-2 [i386] hiredict/1.3.1-2 [riscv64] lambda-align/1.0.3-6 [i386] node-sshpk/1.17.0+dfsg-2 [riscv64] nodejs/20.19.2+dfsg-1+deb13u2 [amd64] nodejs/20.19.2+dfsg-1+deb13u2 [arm64] nodejs/20.19.2+dfsg-1+deb13u2 [ppc64el] nodejs/20.19.2+dfsg-1+deb13u2 [s390x] privoxy/4.0.0-2 [amd64] privoxy/4.0.0-2 [arm64] privoxy/4.0.0-2 [armhf] privoxy/4.0.0-2 [riscv64] privoxy/4.0.0-2 [s390x] r-cran-s2/1.1.7-2 [riscv64] readpe/0.84-2 [riscv64] ruby3.3/3.3.8-2 [arm64] rust-ognibuild/0.0.34-1 [amd64] rust-ognibuild/0.0.34-1 [armel] seqkit/2.9.0+ds-1 [armhf] slic3r-prusa/2.9.2+dfsg-1 [i386] slic3r-prusa/2.9.2+dfsg-1 [riscv64] srpc/0.10.3-2 [armel] vlc-plugin-bittorrent/2.15-2 [riscv64] xmltooling/3.3.0-2 [i386] xmltooling/3.3.0-2 [riscv64]	ACCEPTED
DSA: 6335 µdebs: present CVEs referenced: CVE-2026-34180 CVE-2026-34181 CVE-2026-34182 CVE-2026-34183 CVE-2026-42764 CVE-2026-42766 CVE-2026-42767 CVE-2026-42768 CVE-2026-42769 CVE-2026-42770 CVE-2026-45445 CVE-2026-45446 CVE-2026-45447 CVE-2026-7383 CVE-2026-9076
openvpn	2.6.14-1+deb13u3	Installability problems	ACCEPTED
DSA: 6376 CVEs referenced: CVE-2026-11771 CVE-2026-12932 CVE-2026-12996 CVE-2026-13117 CVE-2026-13122 CVE-2026-13698 Lintian issues: amd64 arm64 armel armhf i386 ppc64el riscv64 s390x
openvpn	2.6.14-1+deb13u2	Installability problems	ACCEPTED
This upload was superseded by a more current one. DSA: 6289 CVEs referenced: CVE-2026-35058 CVE-2026-40215 Lintian issues: amd64 arm64 armel armhf i386 ppc64el riscv64 s390x
pdns	4.9.16-0+deb13u1	Installability problems	ACCEPTED
DSA: 6368 CVEs referenced: CVE-2026-42005
pdns	4.9.15-0+deb13u1	Installability problems	ACCEPTED
This upload was superseded by a more current one. DSA: 6284 CVEs referenced: CVE-2026-42000 CVE-2026-42001 CVE-2026-42002 CVE-2026-42396
pdns-recursor	5.2.11-0+deb13u1	Installability problems	ACCEPTED
DSA: 6369 CVEs referenced: CVE-2026-33612 CVE-2026-40012 CVE-2026-42005 CVE-2026-42387 CVE-2026-42388 CVE-2026-42390 CVE-2026-52690
php-guzzlehttp-psr7	2.7.1-1+deb13u1	Installability problems	ACCEPTED
Reason: fix Host authority validation [CVE-2026-48998]; reject control characters in URI hosts [CVE-2026-49214]; harden ServerRequest globals handling; normalise global header values; encode literal plus signs in query helpers Request: 1139278 Closes: 1138265 CVEs referenced: CVE-2026-48998 CVE-2026-49214 Binary debdiffs: all
php-league-csv	9.23.0+dfsg-1+deb13u1	Installability problems	ACCEPTED
Reason: fix build time test with PHP >=8.4.14 Request: 1138226 Closes: 1137038
php-twig	3.27.0-0+deb13u1	Installability problems	ACCEPTED
DSA: 6311 CVEs referenced: CVE-2026-24425 CVE-2026-46627 CVE-2026-46628 CVE-2026-46629 CVE-2026-46633 CVE-2026-46634 CVE-2026-46635 CVE-2026-46636 CVE-2026-46637 CVE-2026-46638 CVE-2026-46639 CVE-2026-46640 CVE-2026-47730 CVE-2026-47732 CVE-2026-48805 CVE-2026-48806 CVE-2026-48807 CVE-2026-48808 Binary debdiffs: all Lintian issues: source
php-twig	3.26.0-0+deb13u1	Installability problems	ACCEPTED
This upload was superseded by a more current one. Distribution mismatch: trixie-security Reason: security update CVEs referenced: CVE-2026-24425 CVE-2026-46627 CVE-2026-46628 CVE-2026-46629 CVE-2026-46633 CVE-2026-46634 CVE-2026-46635 CVE-2026-46637 CVE-2026-46638 CVE-2026-46639 CVE-2026-46640 CVE-2026-47730 CVE-2026-47732 Binary debdiffs: all
php8.4	8.4.23-1~deb13u1	Installability problems c-i failed: symfony/6.4.21+dfsg-2+deb13u1 [riscv64]	ACCEPTED
DSA: 6377 CVEs referenced: CVE-2026-14355 Binary debdiffs: arm64
php8.4	8.4.21-1~deb13u1	Installability problems	ACCEPTED
This upload was superseded by a more current one. DSA: 6256 CVEs referenced: CVE-2025-14179 CVE-2026-29078 CVE-2026-29079 CVE-2026-6104 CVE-2026-6722 CVE-2026-6735 CVE-2026-7258 CVE-2026-7259 CVE-2026-7261 CVE-2026-7262 CVE-2026-7263 CVE-2026-7568 Binary debdiffs: amd64 arm64 armel armhf i386 ppc64el riscv64 s390x
pillow	11.1.0-5+deb13u4	Installability problems c-i running: cctbx/2024.10+ds2+~3.22.1+ds1-5 [amd64]	ACCEPTED
Reason: followup fix for CVE-2026-42310 Request: 1141397 Closes: 1141330 CVEs referenced: CVE-2026-42310
pillow	11.1.0-5+deb13u3	Installability problems	ACCEPTED
This upload was superseded by a more current one. DSA: 6357 CVEs referenced: CVE-2026-42308 CVE-2026-42310 CVE-2026-42311
poco	1.13.0-6+deb13u1	Installability problems	ACCEPTED
Reason: fix segmentation fault [CVE-2025-6375] Request: 1140455 Closes: 1108157 CVEs referenced: CVE-2025-6375 Binary debdiffs: amd64 arm64 armel armhf i386 ppc64el s390x
poetry	2.1.2+dfsg-1+deb13u1	Installability problems c-i running: tabnet/4.1.0+ds-2 [armhf] tabnet/4.1.0+ds-2 [i386]	ACCEPTED
Reason: fix arbitrary file write issue [CVE-2026-34591] Request: 1141377 Closes: 1132609 CVEs referenced: CVE-2026-34591
poppler	25.03.0-5+deb13u4	Installability problems c-i running: camlpdf/2.8.1-1 [i386]	ACCEPTED
Reason: fix invalid signature creation issue Request: 1141293 Closes: 1127146 Lintian issues: all amd64 arm64 armel armhf i386 ppc64el riscv64 s390x
poppler	25.03.0-5+deb13u3	Installability problems	ACCEPTED
This upload was superseded by a more current one. DSA: 6334 Closes: 1117046 1117853 1138708 CVEs referenced: CVE-2025-43718 CVE-2025-52885 CVE-2026-10118 Lintian issues: all amd64 arm64 armel armhf i386 ppc64el riscv64 s390x
postfix	3.10.11-0+deb13u1	Installability problems	ACCEPTED
Reason: new upstream stable release Request: 1141410 Binary debdiffs: amd64 arm64 armel armhf i386 ppc64el riscv64 s390x Lintian issues: amd64 arm64 armel armhf i386 ppc64el riscv64 s390x source
postfix	3.10.10-0+deb13u1	Installability problems	ACCEPTED
This upload was superseded by a more current one. Reason: new upstream stable release; fix denial of service issue [CVE-2026-43964]; keep daemon running during upgrades Request: 1139680 Closes: 1120869 1135718 CVEs referenced: CVE-2026-43964
postgresql-17	17.10-0+deb13u1	Installability problems c-i failed: cyrus-imapd/3.10.2-1 [i386] isc-kea/2.6.3-1 [ppc64el] londiste-sql/3.8-6 [i386] osm2pgrouting/2.3.8-3 [i386] pgfaceting/0.2.0-4 [i386] pgfaceting/0.2.0-4 [s390x] pgl-ddl-deploy/2.2.1-2 [amd64] pgl-ddl-deploy/2.2.1-2 [arm64] pgl-ddl-deploy/2.2.1-2 [ppc64el] pgl-ddl-deploy/2.2.1-2 [s390x] pgq-node/3.5-7 [i386]	ACCEPTED
DSA: 6270 CVEs referenced: CVE-2026-6472 CVE-2026-6473 CVE-2026-6474 CVE-2026-6475 CVE-2026-6476 CVE-2026-6477 CVE-2026-6478 CVE-2026-6479 CVE-2026-6637 CVE-2026-6638 Binary debdiffs: all i386 s390x
protobuf	3.21.12-11+deb13u1	Installability problems c-i running: berkeley-express/1.5.3+dfsg-3 [armhf] berkeley-express/1.5.3+dfsg-3 [i386] criu/4.1.1-1 [i386] criu/4.1.1-1 [riscv64] grpc/1.51.1-6 [arm64] grpc/1.51.1-6 [i386] grpc/1.51.1-6 [ppc64el] meson/1.7.0-1 [arm64] meson/1.7.0-1 [armhf] meson/1.7.0-1 [i386] osmpbf/1.5.1-1 [arm64] osmpbf/1.5.1-1 [i386]	ACCEPTED
Reason: fix parser recursion limits [CVE-2024-7254 CVE-2025-4565 CVE-2026-0994 CVE-2026-6409] Request: 1141310 Closes: 1082381 1108057 1126302 1134895 CVEs referenced: CVE-2024-7254 CVE-2025-4565 CVE-2026-0994 CVE-2026-6409 Binary debdiffs: i386 s390x
psd-tools	1.10.7+dfsg.1-1+deb13u1	Installability problems	ACCEPTED
Reason: fix denial of service issue [CVE-2026-27809] Request: 1140505 Closes: 1129098 CVEs referenced: CVE-2026-27809 Binary debdiffs: i386 s390x
pupnp	1:1.14.20-1+deb13u1	Installability problems	ACCEPTED
Reason: fix SSRF port confusion issue [CVE-2026-41682] Request: 1140543 CVEs referenced: CVE-2026-41682 Binary debdiffs: armel armhf
pymdown-extensions	10.13-1+deb13u1	Installability problems c-i running: python-mkdocs/1.6.1+dfsg1-2 [armhf]	ACCEPTED
Reason: fix regular expression-based denial of service issue [CVE-2025-68142] Request: 1140547 Closes: 1123672 CVEs referenced: CVE-2025-68142
pyopenssl	25.0.0-1+deb13u1	Installability problems c-i failed: python-truststore/0.10.1-1 [armel] python-truststore/0.10.1-1 [riscv64] python-urllib3/2.3.0-3+deb13u1 [riscv64]	ACCEPTED
Reason: fix handling of exceptions and connection cancelling [CVE-2026-27448]; fix buffer overflow in DTLS cookie callback [CVE-2026-27459] Request: 1140553 CVEs referenced: CVE-2026-27448 CVE-2026-27459 Binary debdiffs: all
pytest-httpbin	2.1.0-1+deb13u1	Installability problems	ACCEPTED
Reason: disable unreliable build-time test Request: 1138577 Closes: 1137653
python-daphne	4.1.2-2+deb13u1	Installability problems	ACCEPTED
Reason: fix denial of service issue [CVE-2026-44545]; fix header injection issue [CVE-2026-44546] Request: 1141383 Closes: 1138864 CVEs referenced: CVE-2026-44545 CVE-2026-44546
python-django	3:4.2.28-0+deb13u2	Installability problems c-i running: slm/1.32-3 [riscv64]	ACCEPTED
Distribution mismatch: stable-proposed-updates Reason: update test suite following changes in python3.13 Request: 1137724 Closes: 1137039 CVEs referenced: CVE-2025-6069
python-dynaconf	3.1.7-2+deb13u1	Installability problems	ACCEPTED
Reason: fix Server-Side Template Injection issue [CVE-2026-33154] Request: 1140626 Closes: 1131476 CVEs referenced: CVE-2026-33154
python-grpc-tools	1.14.1-8+deb13u1	Installability problems	ACCEPTED
Reason: fix TypeError in command.build_package_protos Request: 1136656 Closes: 1132763 Binary debdiffs: s390x Lintian issues: amd64 arm64 armel armhf i386 ppc64el riscv64 s390x
python-handy-archives	0.2.0-5+deb13u1	Installability problems	ACCEPTED
Reason: fix end of central diretory locator for Zip64 Request: 1137103 Closes: 1137041
python-idna	3.10-1+deb13u1	Installability problems c-i failed: httpx/0.28.1-1 [armhf]	ACCEPTED
Reason: fix denial of service issue [CVE-2026-45409] Request: 1140848 Closes: 1139164 CVEs referenced: CVE-2026-45409
python-iniparse	0.5.1-1+deb13u1	Installability problems	ACCEPTED
Reason: fix race condition in build-time tests Request: 1139261 Closes: 1137634
python-jwcrypto	1.5.6-1.1~deb13u1	Installability problems	ACCEPTED
Reason: fix denial of service issue [CVE-2026-39373] Request: 1140850 Closes: 1133006 CVEs referenced: CVE-2026-39373
python-markdown	3.7-2+deb13u1	Installability problems	ACCEPTED
Reason: adapt to changes in Python's html.parser module Request: 1137180 Closes: 1137043 Binary debdiffs: all
python-marshmallow	3.26.2-0+deb13u1	Installability problems	ACCEPTED
Reason: fix denial of service issue [CVE-2025-68480] Request: 1140910 Closes: 1123888 CVEs referenced: CVE-2025-68480 Binary debdiffs: all
python-memray	1.17.0+dfsg-1+deb13u1	Installability problems	ACCEPTED
Reason: fix cross-site scripting issue [CVE-2026-32722] Request: 1140671 Closes: 1131372 CVEs referenced: CVE-2026-32722
python-oslo.messaging	16.1.0-3+deb13u1	Installability problems	ACCEPTED
DSA: 6341 Closes: 1138848 CVEs referenced: CVE-2026-44393
python-urllib3	2.3.0-3+deb13u2	Installability problems c-i failed: breezy/3.3.11-1 [riscv64] finalcif/137+dfsg-4 [amd64] finalcif/137+dfsg-4 [armhf] patroni/4.0.7-3~deb13u1 [arm64] patroni/4.0.7-3~deb13u1 [armel] pyaps3/0.3.6-1 [armhf] pyaps3/0.3.6-1 [i386] python-podman/5.4.0.1-2 [armhf] python-truststore/0.10.1-1 [amd64] yt-dlp/2025.04.30-1 [i386] yt-dlp/2025.04.30-1 [riscv64]	ACCEPTED
DSA: 6363 Closes: 1136653 CVEs referenced: CVE-2026-44431
python-virtualenv	20.31.2+ds-1+deb13u1	Installability problems c-i failed: poetry/2.1.2+dfsg-1 [riscv64]	ACCEPTED
Reason: fix time-of-check / time-of-use issues [CVE-2026-22702] Request: 1140948 Closes: 1125191 CVEs referenced: CVE-2026-22702
python-webob	1:1.8.10-0+deb13u1	Installability problems c-i failed: nova/2:31.0.0-6+deb13u2 [ppc64el] python-oslo.versionedobjects/3.6.0-3 [arm64] python-oslo.versionedobjects/3.6.0-3 [riscv64]	ACCEPTED
Reason: fix open redirect issue [CVE-2026-44889] Request: 1141382 CVEs referenced: CVE-2026-44889 Binary debdiffs: all
python-xmltodict	0.13.0-1.1~deb13u1	Installability problems	ACCEPTED
Reason: fix XML injectin issue [CVE-2025-9375] Request: 1141370 Closes: 1113825 CVEs referenced: CVE-2025-9375
python3.13	3.13.5-2+deb13u3	Installability problems c-i failed: pytorch/2.6.0+dfsg-7 [riscv64] rust-ognibuild/0.0.34-1 [amd64] ycmd/0+20240823+git8b61f19+ds-2 [ppc64el] ycmd/0+20240823+git8b61f19+ds-2 [riscv64] ycmd/0+20240823+git8b61f19+ds-2 [s390x]	ACCEPTED
Reason: fix a crash in SNI callback when the SSL object is gone; fix reference leaks in ssl.SSLContext objects; avoid garbage collecting objects too early when sharing __dict__; fix "CR/LF bytes were not rejected by HTTP client proxy tunnel headers or host" [CVE-2026-1502]; fix denial of service issues [CVE-2026-3276 CVE-2026-9669]; fix insufficient escaping issue [CVE-2026-6019]; fix path traversal issue [CVE-2026-7774]; fix server-side request forgery issue [CVE-2026-8328] Request: 1139577 Closes: 1108039 1138157 CVEs referenced: CVE-2026-1502 CVE-2026-3276 CVE-2026-6019 CVE-2026-7774 CVE-2026-8328 CVE-2026-9669 Lintian issues: amd64 arm64 armel armhf i386 ppc64el riscv64 s390x
qemu	1:10.0.11+ds-0+deb13u1	Installability problems c-i failed: edk2/2025.02-8+deb13u1 [s390x] nova/2:31.0.0-6+deb13u2 [ppc64el] vagrant-mutate/1.2.0-4.1 [amd64] vagrant-mutate/1.2.0-4.1 [arm64] vagrant-mutate/1.2.0-4.1 [i386] vagrant-mutate/1.2.0-4.1 [ppc64el] vagrant-mutate/1.2.0-4.1 [riscv64]	ACCEPTED
Reason: new upstream stable release; security fixes [CVE-2026-48002 CVE-2026-48003 CVE-2026-48004 CVE-2026-48914 CVE-2026-48915 CVE-2026-6425 CVE-2026-8343] Request: 1140902 Closes: 1139923 CVEs referenced: CVE-2026-48002 CVE-2026-48003 CVE-2026-48004 CVE-2026-48914 CVE-2026-48915 CVE-2026-6425 CVE-2026-8343 Binary debdiffs: amd64 arm64 armel armhf i386 ppc64el riscv64 s390x Lintian issues: all amd64 arm64 armel armhf i386 ppc64el riscv64 s390x
qemu	1:10.0.10+ds-0+deb13u1	Installability problems	ACCEPTED
This upload was superseded by a more current one. Reason: new upstream stable release; security fixes [CVE-2024-6519 CVE-2026-2243 CVE-2026-3195 CVE-2026-3196 CVE-2026-3842 CVE-2026-3886 CVE-2026-3890 CVE-2026-41435 CVE-2026-41436 CVE-2026-41437 CVE-2026-41438 CVE-2026-41439 CVE-2026-41440 CVE-2026-5744 CVE-2026-5761 CVE-2026-5763 CVE-2026-6502 CVE-2026-8341] Request: 1139679 Closes: 1085299 1128478 1129349 1129604 1129605 CVEs referenced: CVE-2024-6519 CVE-2026-2243 CVE-2026-3195 CVE-2026-3196 CVE-2026-3842 CVE-2026-3886 CVE-2026-3890 CVE-2026-41435 CVE-2026-41436 CVE-2026-41437 CVE-2026-41438 CVE-2026-41439 CVE-2026-41440 CVE-2026-5744 CVE-2026-5761 CVE-2026-5763 CVE-2026-6502 CVE-2026-8341
qtmir	0.8.0~git20250407.ea2f477-1+deb13u1	Installability problems	ACCEPTED
Reason: fix Lomiri rendering, scaling, focus handling, and session crash issues; correct stale window and dead surface cleanup; ensure Xwayland applications inherit DISPLAY; improve Asahi Linux rendering provider selection Request: 1136699 Binary debdiffs: amd64 arm64 armel armhf i386 ppc64el riscv64 s390x
rauc	1.13-3+deb13u1	Installability problems	ACCEPTED
Reason: fix improper signing of large bundles [CVE-2026-34155] Request: 1140966 CVEs referenced: CVE-2026-34155
redis	5:8.0.2-3+deb13u2	Installability problems c-i running: django-q/1.7.4-2 [riscv64]	ACCEPTED
DSA: 6279 CVEs referenced: CVE-2025-67733 CVE-2026-21863 Lintian issues: source
request-tracker5	5.0.7+dfsg-4+deb13u3	Installability problems	ACCEPTED
DSA: 6324 CVEs referenced: CVE-2026-41073 CVE-2026-41075 CVE-2026-41076 CVE-2026-44229 CVE-2026-44230 CVE-2026-44231 CVE-2026-6841
resource-agents	1:4.16.0-3+deb13u2	Installability problems	ACCEPTED
Reason: fix syntax error Request: 1136163 Closes: 1133386 Lintian issues: all amd64 arm64 armel armhf i386 ppc64el riscv64 s390x source
rhino	1.7.15.1-0.1~deb13u1	Installability problems	ACCEPTED
Reason: fix denial of service issue [CVE-2025-66453] Request: 1141349 Closes: 1121953 CVEs referenced: CVE-2025-66453
rlottie	0.1+dfsg-4.2+deb13u2	Installability problems	ACCEPTED
Reason: fix out-of-bounds read issue [CVE-2026-10305]; fix denial of service issues [CVE-2026-47319 CVE-2026-47320] Request: 1141368 Closes: 1138919 1138920 1139179 CVEs referenced: CVE-2026-10305 CVE-2026-47319 CVE-2026-47320 Lintian issues: amd64 arm64 armel armhf i386 ppc64el riscv64 s390x
roundcube	1.6.16+dfsg-0+deb13u1	Installability problems	ACCEPTED
DSA: 6301 Closes: 1137507 CVEs referenced: CVE-2026-48842 CVE-2026-48843 CVE-2026-48844 CVE-2026-48845 CVE-2026-48846 CVE-2026-48847 CVE-2026-48848 CVE-2026-48849
rsync	3.4.1+ds1-5+deb13u4	Installability problems c-i running: dgit/12.16 [armel] nova/2:31.0.0-6+deb13u2 [amd64]	ACCEPTED
Reason: reject excessively long HTTP proxy response lines [CVE-2026-45232] Request: 1138659 CVEs referenced: CVE-2026-45232
rsync	3.4.1+ds1-5+deb13u3	Installability problems	ACCEPTED
This upload was superseded by a more current one. DSA: 6282 CVEs referenced: CVE-2026-29518 CVE-2026-43617 CVE-2026-43618 CVE-2026-43619 CVE-2026-43620
rtl-433	25.02-1+deb13u1	Installability problems	ACCEPTED
Reason: fix buffer overflow issue [CVE-2025-34450] Request: 1141179 Closes: 1126178 CVEs referenced: CVE-2025-34450
ruby-css-parser	1.19.0-1+deb13u1	Installability problems	ACCEPTED
Reason: fix validation of HTTPS certificates for remote CSS [CVE-2026-44312] Request: 1138988 CVEs referenced: CVE-2026-44312
rust-time	0.3.37-1+deb13u1	Installability problems c-i running: rust-zxcvbn/3.1.0-1 [ppc64el] rust-zxcvbn/3.1.0-1 [s390x]	ACCEPTED
Reason: fix denial of service [CVE-2026-25727] Request: 1128925 Closes: 1128404 CVEs referenced: CVE-2026-25727 Binary debdiffs: amd64 arm64 armel armhf i386 ppc64el riscv64 s390x
samba	2:4.22.10+dfsg-0+deb13u1	Installability problems c-i failed: libsoup2.4/2.74.3-10.1 [amd64] scapy/2.6.1+dfsg-1 [armel]	ACCEPTED
Reason: new upstream stable release Request: 1139677 CVEs referenced: CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 CVE-2026-3238 CVE-2026-4408 CVE-2026-4480 Binary debdiffs: amd64 arm64 armel armhf i386 ppc64el riscv64 s390x Lintian issues: amd64 arm64 armel armhf i386 ppc64el riscv64 s390x
samba	2:4.22.8+dfsg-0+deb13u2	Installability problems	ACCEPTED
This upload was superseded by a more current one. DSA: 6297 CVEs referenced: CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 CVE-2026-3238 CVE-2026-4408 CVE-2026-4480 Binary debdiffs: amd64 arm64 armel armhf i386 ppc64el riscv64 s390x Lintian issues: amd64 arm64 armel armhf i386 ppc64el riscv64 s390x
shim	16.1-2~deb13u1	Installability problems	ACCEPTED
Reason: new upstream release; build with default gcc; set SBAT revocation level to 2025021800 Request: 1131861 Lintian issues: source
shim-helpers-amd64-signed	1+16.1+2~deb13u1	Installability problems amd64	ACCEPTED
Distribution mismatch: trixie-proposed-updates Reason: update to shim 16.1-2~deb13u1 Binary debdiffs: amd64
shim-helpers-arm64-signed	1+16.1+2~deb13u1	Installability problems arm64	ACCEPTED
Distribution mismatch: trixie-proposed-updates Reason: update to shim 16.1-2~deb13u1 Binary debdiffs: arm64
shim-signed	1.51~1+deb13u1	Installability problems	ACCEPTED
Reason: ensure Secure Boot compatibility with 2023 Microsoft UEFI CA; check for likely boot issues before installation; combine and verify multiple shim signatures; update signed shim binaries Request: 1140760 Binary debdiffs: amd64 arm64 Lintian issues: source
skanpage	25.04.2-1+deb13u1	Installability problems	ACCEPTED
Reason: fix data leakage issue [CVE-2025-55174] Request: 1139665 Closes: 1121443 CVEs referenced: CVE-2025-55174
smartdns	46.1+dfsg-1.1~deb13u1	Installability problems	ACCEPTED
Reason: fix buffer overflow issue [CVE-2026-1425] Request: 1141358 Closes: 1126538 CVEs referenced: CVE-2026-1425 Binary debdiffs: s390x
sogo	5.12.1-3+deb13u2	Installability problems	ACCEPTED
DSA: 6366 Closes: 1130878 1131605 1131606 CVEs referenced: CVE-2025-71276 CVE-2026-3054 CVE-2026-33550 CVE-2026-46445 CVE-2026-46446 CVE-2026-8496 CVE-2026-8851
spip	4.4.15+dfsg-0+deb13u1	Installability problems	ACCEPTED
DSA: 6296 CVEs referenced: CVE-2026-8429 CVE-2026-8430 Binary debdiffs: all
squid	6.13-2+deb13u2	Installability problems	ACCEPTED
DSA: 6360 CVEs referenced: CVE-2026-33515 CVE-2026-33526 CVE-2026-47729 CVE-2026-50012 Binary debdiffs: i386 s390x Lintian issues: all amd64 arm64 armel armhf i386 ppc64el riscv64 s390x source
squirrel3	3.1-8.2+deb13u1	Installability problems	ACCEPTED
Reason: fix sandbox escape [CVE-2021-41556] Request: 1140351 Closes: 1016212 CVEs referenced: CVE-2021-41556 Binary debdiffs: amd64 arm64 armel armhf i386 ppc64el riscv64 s390x
sshfs-fuse	3.7.3-1.2~deb13u1	Installability problems c-i running: gsocket/1.4.43-4 [riscv64]	ACCEPTED
Reason: add contain_symlinks option to prevent symlink escape attacks [CVE-2026-47187]; reject hostname option injection via bracketed mount source [CVE-2026-48711] Request: 1138705 Closes: 1138293 CVEs referenced: CVE-2026-47187 CVE-2026-48711 Binary debdiffs: amd64 arm64 armel armhf i386 ppc64el riscv64 s390x
starlette	0.46.1-3+deb13u2	Installability problems c-i failed: fastapi/0.115.11-4 [s390x]	ACCEPTED
DSA: 6302 Closes: 1137375 CVEs referenced: CVE-2026-48710
starman	0.4018-0+deb13u1	Installability problems	ACCEPTED
Reason: fix request smuggling issue [CVE-2026-40560] Request: 1141398 Closes: 1135229 CVEs referenced: CVE-2026-40560
strongswan	6.0.1-6+deb13u6	Installability problems	ACCEPTED
DSA: 6330 CVEs referenced: CVE-2026-47895
survex	1.4.22-1~bpo13+1	Installability problems	REJECTED
Reason: incorrect upload target
swift	2.35.1-0+deb13u2	Installability problems	ACCEPTED
DSA: 6314 Closes: 1138170 CVEs referenced: CVE-2026-49017 Lintian issues: source
symfony	6.4.41+dfsg-0+deb13u1	Installability problems c-i failed: php-twig/3.20.0-2 [armel] php-twig/3.20.0-2 [armhf] php-twig/3.20.0-2 [riscv64] symfony/6.4.41+dfsg-0+deb13u1 [armel]	ACCEPTED
DSA: 6312 CVEs referenced: CVE-2024-50340 CVE-2026-45063 CVE-2026-45064 CVE-2026-45065 CVE-2026-45066 CVE-2026-45067 CVE-2026-45068 CVE-2026-45069 CVE-2026-45071 CVE-2026-45072 CVE-2026-45073 CVE-2026-45077 CVE-2026-45133 CVE-2026-45304 CVE-2026-45305 CVE-2026-45754 CVE-2026-46626 CVE-2026-48489 CVE-2026-48736 CVE-2026-48760 CVE-2026-48761 CVE-2026-48784 Binary debdiffs: all Lintian issues: all source
symfony	6.4.40+dfsg-0+deb13u1	Installability problems	ACCEPTED
This upload was superseded by a more current one. Distribution mismatch: trixie-security Reason: security update CVEs referenced: CVE-2024-50340 CVE-2026-45063 CVE-2026-45064 CVE-2026-45065 CVE-2026-45066 CVE-2026-45067 CVE-2026-45068 CVE-2026-45069 CVE-2026-45071 CVE-2026-45072 CVE-2026-45073 CVE-2026-45077 CVE-2026-45133 CVE-2026-45304 CVE-2026-45305 CVE-2026-45754 CVE-2026-46626 Binary debdiffs: all Lintian issues: all
thunderbird	1:140.12.0esr-1~deb13u1	Installability problems	ACCEPTED
DSA: 6351 Lintian issues: i386 riscv64 source
thunderbird	1:140.11.0esr-1~deb13u1	Installability problems	ACCEPTED
This upload was superseded by a more current one. DSA: 6288 Lintian issues: i386 riscv64
thunderbird	1:140.10.2esr-1~deb13u1	Installability problems	ACCEPTED
This upload was superseded by a more current one. DSA: 6267 Lintian issues: i386 riscv64
tigervnc	1.15.0+dfsg-2.1~deb13u1	Installability problems riscv64 s390x	ACCEPTED
Reason: prevent other users reading x0vncserver screen [CVE-2026-34352] Request: 1141381 Closes: 1132166 CVEs referenced: CVE-2026-34352 Binary debdiffs: amd64 arm64 armel armhf i386 ppc64el riscv64 s390x
tomcat10	10.1.55-1~deb13u1	Installability problems	ACCEPTED
DSA: 6328 CVEs referenced: CVE-2026-24880 CVE-2026-25854 CVE-2026-29129 CVE-2026-29145 CVE-2026-29146 CVE-2026-32990 CVE-2026-34483 CVE-2026-34487 CVE-2026-34500 CVE-2026-41284 CVE-2026-41293 CVE-2026-42498 CVE-2026-43512 CVE-2026-43513 CVE-2026-43514 CVE-2026-43515 Binary debdiffs: all Lintian issues: all
tomcat11	11.0.22-1~deb13u1	Installability problems	ACCEPTED
DSA: 6329 CVEs referenced: CVE-2026-24734 CVE-2026-24880 CVE-2026-25854 CVE-2026-29129 CVE-2026-29145 CVE-2026-29146 CVE-2026-32990 CVE-2026-34483 CVE-2026-34487 CVE-2026-34500 CVE-2026-41284 CVE-2026-41293 CVE-2026-42498 CVE-2026-43512 CVE-2026-43513 CVE-2026-43514 CVE-2026-43515 Binary debdiffs: all Lintian issues: all source
tor	0.4.9.11-0+deb13u1	Installability problems	ACCEPTED
DSA: 6372
unbound	1.22.0-2+deb13u3	Installability problems	ACCEPTED
DSA: 6304 Closes: 1137187 CVEs referenced: CVE-2026-32792 CVE-2026-33278 CVE-2026-40622 CVE-2026-41292 CVE-2026-42534 CVE-2026-42923 CVE-2026-42944 CVE-2026-42959 CVE-2026-42960 CVE-2026-44390 CVE-2026-44608
user-mode-linux	6.12um1+b18	Installability problems	ACCEPTED
Reason: rebuild with updated linux Binary debdiffs: amd64 i386
user-mode-linux	6.12um1+b17	Installability problems	ACCEPTED
Reason: rebuild with updated linux Missing builds: amd64 i386
user-mode-linux	6.12um1+b16	Installability problems	ACCEPTED
Reason: rebuild with updated linux Missing builds: amd64 i386
user-mode-linux	6.12um1+b15	Installability problems	ACCEPTED
Reason: rebuild with updated linux Missing builds: amd64 i386
varnish	7.7.0-3+deb13u1	Installability problems	ACCEPTED
DSA: 6303 CVEs referenced: CVE-2025-8671 Binary debdiffs: all amd64 arm64 armel armhf i386 ppc64el riscv64 s390x
vitrage	14.0.0-4+deb13u1	Installability problems	ACCEPTED
Reason: fix remote code execution vulnerability [CVE-2026-28370] Request: 1139646 Closes: 1139452 CVEs referenced: CVE-2026-28370
wireless-regdb	2026.05.30-1~deb13u1	Installability problems	ACCEPTED
Reason: new upstream stable release; update regulatory information for several countries Request: 1139581 µdebs: present Lintian issues: source
wireshark	4.4.16-0+deb13u1	Installability problems	ACCEPTED
Reason: new upstream stable release; fix denial of service issue [CVE-2026-9759] Request: 1141200 CVEs referenced: CVE-2026-9759 Binary debdiffs: all amd64 arm64 armel armhf i386 ppc64el riscv64 s390x Lintian issues: amd64 arm64 armel armhf i386 ppc64el riscv64 s390x
xorg-server	2:21.1.16-1.3+deb13u3	Installability problems c-i failed: cataclysm-dda/0.H-1 [armhf] cataclysm-dda/0.H-1 [i386] dbuskit/0.1.1-13 [armhf] dogtail/1.0.0-6 [ppc64el] dogtail/1.0.0-6 [s390x] drm-info/2.6.0-2 [amd64] finalcif/137+dfsg-4 [amd64] finalcif/137+dfsg-4 [arm64] finalcif/137+dfsg-4 [armhf] finalcif/137+dfsg-4 [i386] fldiff/1.1+0-7 [amd64] fldiff/1.1+0-7 [arm64] fldiff/1.1+0-7 [armhf] fldiff/1.1+0-7 [i386] freecad/1.0.0+dfsg-8 [i386] jquery.sparkline/2.1.2-3 [amd64] jquery.sparkline/2.1.2-3 [arm64] jquery.sparkline/2.1.2-3 [armhf] jquery.sparkline/2.1.2-3 [i386] libchamplain/0.12.21-2 [armhf] libfirefox-marionette-perl/1.63-1 [amd64] libfirefox-marionette-perl/1.63-1 [arm64] libfirefox-marionette-perl/1.63-1 [i386] libpanel/1.10.0-1 [riscv64] libqglviewer/2.8.0+dfsg1-2.1 [armhf] openscad/2021.01-8 [armhf] python-pyvista/0.44.1-11 [armhf] rabbit/3.0.3-1 [armhf] rabbit/3.0.3-1 [i386] rabbit/3.0.3-1 [s390x] scilab/2024.1.0+dfsg-6+deb13u1 [armhf] scilab/2024.1.0+dfsg-6+deb13u1 [i386] slic3r-prusa/2.9.2+dfsg-1 [i386] slic3r-prusa/2.9.2+dfsg-1 [riscv64] spyder-unittest/0.7.0-1 [ppc64el] spyder/6.0.5+ds-6 [riscv64] taurus/5.2.3-2 [armhf] thunderbird/1:140.10.1esr-1~deb13u1 [armhf]	ACCEPTED
DSA: 6371 µdebs: present Closes: 1138680 CVEs referenced: CVE-2026-50256 CVE-2026-50257 CVE-2026-50258 CVE-2026-50259 CVE-2026-50260 CVE-2026-50261 CVE-2026-50262 CVE-2026-50263 CVE-2026-50264 Lintian issues: source
xz-utils	5.8.1-1+deb13u1	Installability problems c-i failed: apt/3.0.3 [armhf] aptly/1.6.1+ds1-3 [s390x] initramfs-tools/0.148.4 [armhf] live-build/1:20250505+deb13u1 [i386] needrestart/3.11-1 [amd64] needrestart/3.11-1 [ppc64el]	ACCEPTED
Reason: fix buffer overflow issue [CVE-2026-34743] Request: 1141258 µdebs: present Closes: 1132497 CVEs referenced: CVE-2026-34743
yelp	42.2-4+deb13u1	Installability problems	ACCEPTED
DSA: 6319 Closes: 1136299