Queue Overview for "proposed-updates"
TODO items
- Decruft mono (dropped mono-source)
- Skip: kexec-tools, python-django, gss (unless fixed)
List of missing builds
List of missing packages relative to security archive
Resolution Pending (6 uploads for 5 packages)
| Package | Version | Version Problems | Installability Problems | Architectures | Action |
|---|---|---|---|---|---|
| freerdp2 | 2.11.7+dfsg1-6~deb12u1 | Installability problems | Built: source | ? | |
|
Reason: new upstream release; fix out of bound reads in zgfx_decompress_segment [CVE-2024-32041], planar_skip_plane_rle [CVE-2024-32458], ncrush_decompress [CVE-2024-32459], and interleaved_decompress CVE-2024-32460]; fix Integer overflow & OutOfBound Write in clear_decompress_residual_data [CVE-2024-32039]; fix integer underflow in nsc_rle_decode [CVE-2024-32040] Request: 1054915 Closes: 1036095 1041377 1051638 1053317 1061173 1061952 1069728 1072112 1072413 1073156 1074969 1079025 CVEs referenced: CVE-2023-39350 CVE-2023-39351 CVE-2023-39352 CVE-2023-39353 CVE-2023-39354 CVE-2023-39355 CVE-2023-39356 CVE-2023-40181 CVE-2023-40186 CVE-2023-40188 CVE-2023-40567 CVE-2023-40589 CVE-2024-22211 CVE-2024-32039 CVE-2024-32040 CVE-2024-32041 CVE-2024-32458 CVE-2024-32459 CVE-2024-32460 CVE-2024-32661 Lintian issues: source |
|||||
| mydumper | 0.10.1-1+deb12u2 | Installability problems | Built: source |
|
|
|
Reason: not yet fixed in unstable CVEs referenced: CVE-2025-30224 |
|||||
| mydumper | 0.10.1-1+deb12u1 | Installability problems | Built: source |
|
|
|
Reason: not yet fixed in unstable CVEs referenced: CVE-2025-30224 |
|||||
| openssl | 3.0.17-1~deb12u1 | Installability problems | Built: source | ? | |
|
µdebs: present Lintian issues: source |
|||||
| qemu | 1:7.2+dfsg-7+deb12u14 | Installability problems | Built: source | ? | |
| systemd | 252.39-1~deb12u1 | Installability problems | Built: source | ? | |
|
µdebs: present |
|||||
Pending Processing (0 uploads for 0 packages)
Processed (136 uploads for 116 packages)
| Package | Version | Version Problems | Installability Problems | Action |
|---|---|---|---|---|
| amd64-microcode | 3.20250311.1~deb12u1 | Installability problems | ACCEPTED | |
|
Reason: update AMD-SEV firmware [CVE-2024-56161]; update included microcode Request: 1108122 Closes: 1095470 CVEs referenced: CVE-2024-56161 |
||||
| aom | 3.6.0-1+deb12u2 | Installability problems | ACCEPTED | |
|
Reason: fix libaom encoder output validity Request: 1107069 Closes: 1106884 |
||||
| balboa | 2.0.0+ds-5+b9 | Installability problems | ACCEPTED | |
|
Reason: rebuild against glibc 2.36-9+deb12u12 Request: 1106777 |
||||
| bash | 5.2.15-2+b9 | Installability problems | ACCEPTED | |
|
Reason: rebuild against glibc 2.36-9+deb12u12 Request: 1106777 Binary debdiffs: amd64arm64armelarmhfi386mips64elmipselppc64els390x |
||||
| busybox | 1.35.0-4+b5 | Installability problems | ACCEPTED | |
|
Reason: rebuild against glibc 2.36-9+deb12u12 Request: 1106777 µdebs: present Binary debdiffs: amd64arm64armelarmhfi386mips64elmipselppc64els390x |
||||
| ca-certificates | 20230311+deb12u1 | Installability problems | ACCEPTED | |
|
Reason: add Sectigo Public Server Authentication Root E46 and Sectigo Public Server Authentication Root R46 µdebs: present Closes: 1095913 Binary debdiffs: all |
||||
| catatonit | 0.1.7-1+b2 | Installability problems | ACCEPTED | |
|
Reason: rebuild against glibc 2.36-9+deb12u12 Request: 1106777 Binary debdiffs: mipsel |
||||
| catdoc | 1:0.95-6~deb12u1 | Installability problems | ACCEPTED | |
|
DSA: 5953 Closes: 1107168 CVEs referenced: CVE-2024-48877 CVE-2024-52035 CVE-2024-54028 Binary debdiffs: amd64arm64armelarmhfi386mips64elmipselppc64els390x |
||||
| cdebootstrap | 0.7.8+b31 | Installability problems | ACCEPTED | |
|
Reason: rebuild against glibc 2.36-9+deb12u12 Request: 1106777 Binary debdiffs: amd64arm64armelarmhfi386mips64elmipselppc64els390x |
||||
| chkrootkit | 0.57-2+b6 | Installability problems | ACCEPTED | |
|
Reason: rebuild against glibc 2.36-9+deb12u12 Request: 1106777 Binary debdiffs: amd64arm64armelarmhfi386mips64elmipselppc64els390x |
||||
| chromium | 138.0.7204.92-1~deb12u1 | Installability problems | ACCEPTED | |
|
DSA: 5955 CVEs referenced: CVE-2025-6554 Binary debdiffs: amd64arm64ppc64el Lintian issues: source |
||||
| chromium | 138.0.7204.49-1~deb12u1 | Installability problems | ACCEPTED | |
|
This upload was superseded by a more current one. DSA: 5952 CVEs referenced: CVE-2025-6555 CVE-2025-6556 CVE-2025-6557 |
||||
| chromium | 137.0.7151.119-1~deb12u1 | Installability problems | ACCEPTED | |
|
This upload was superseded by a more current one. DSA: 5944 Closes: 1107837 CVEs referenced: CVE-2025-6191 CVE-2025-6192 |
||||
| chromium | 137.0.7151.103-1~deb12u1 | Installability problems | ACCEPTED | |
|
This upload was superseded by a more current one. DSA: 5942 CVEs referenced: CVE-2025-5958 CVE-2025-5959 |
||||
| chromium | 137.0.7151.68-1~deb12u1 | Installability problems | ACCEPTED | |
|
This upload was superseded by a more current one. DSA: 5935 CVEs referenced: CVE-2025-5068 CVE-2025-5419 |
||||
| chromium | 137.0.7151.55-3~deb12u1 | Installability problems | ACCEPTED | |
|
This upload was superseded by a more current one. DSA: 5929 CVEs referenced: CVE-2025-5063 CVE-2025-5064 CVE-2025-5065 CVE-2025-5066 CVE-2025-5067 CVE-2025-5280 CVE-2025-5281 CVE-2025-5283 |
||||
| chromium | 136.0.7103.113-1~deb12u1 | Installability problems | ACCEPTED | |
|
This upload was superseded by a more current one. DSA: 5920 CVEs referenced: CVE-2025-4609 CVE-2025-4664 |
||||
| chromium | 136.0.7103.92-1~deb12u1 | Installability problems | ACCEPTED | |
|
This upload was superseded by a more current one. DSA: 5916 CVEs referenced: CVE-2025-4372 |
||||
| chromium | 136.0.7103.59-2~deb12u2 | Installability problems | ACCEPTED | |
|
This upload was superseded by a more current one. DSA: 5914 CVEs referenced: CVE-2025-4050 CVE-2025-4051 CVE-2025-4052 CVE-2025-4096 |
||||
| cjson | 1.7.15-1+deb12u3 | Installability problems | ACCEPTED | |
|
Reason: prevent DoS with crafted document [CVE-2023-26819]; prevent heap buffer overflow [CVE-2023-53154] Request: 1107852 Closes: 1103687 CVEs referenced: CVE-2023-26819 CVE-2023-53154 |
||||
| clamav | 1.0.9+dfsg-1~deb12u1 | Installability problems | ACCEPTED | |
|
Reason: new upstream stable release; fix buffer overflow issues [CVE-2025-20128 CVE-2025-20260] Request: 1108504 CVEs referenced: CVE-2025-20128 CVE-2025-20260 |
||||
| cloud-init | 22.4.2-1+deb12u3 | Installability problems | ACCEPTED | |
|
Reason: make hotplug socket writable only by root [CVE-2024-11584]; don't attempt to identify non-x86 OpenStack instances [CVE-2024-6174] Request: 1109127 CVEs referenced: CVE-2024-11584 CVE-2024-6174 |
||||
| corosync | 3.1.7-1+deb12u1 | Installability problems | ACCEPTED | |
|
Reason: fix buffer overflow vulnerability on large UDP packets [CVE-2025-30472] Request: 1107252 Closes: 1102006 CVEs referenced: CVE-2025-30472 |
||||
| curl | 7.88.1-10+deb12u13 | Installability problems | ACCEPTED | |
|
Reason: fix regression handling sftp://host/~ URIs Request: 1107902 CVEs referenced: CVE-2023-27534 |
||||
| dar | 2.7.8-2+b5 | Installability problems | ACCEPTED | |
|
Reason: rebuild against glibc 2.36-9+deb12u12 Request: 1106777 Binary debdiffs: amd64arm64armelarmhfi386mips64elmipselppc64els390x |
||||
| debian-edu-config | 2.12.46~deb12u1 | Installability problems | ACCEPTED | |
|
Reason: fix quoting in Exim configuration; gosa-sync: fix password verification; fix quoting in gosa.conf Request: 1107147 |
||||
| debian-security-support | 1:12+2025.06.20 | Installability problems | ACCEPTED | |
|
Reason: query source:Package instead of Source to get the correct list of packages; fix typo related to gobgp Request: 1108127 Closes: 1106203 |
||||
| djvulibre | 3.5.28-2.1~deb12u1 | Installability problems | ACCEPTED | |
|
DSA: 5960 Closes: 1108729 CVEs referenced: CVE-2025-53367 Lintian issues: allamd64arm64armelarmhfi386mips64elmipselppc64els390x |
||||
| docker.io | 20.10.24+dfsg1-1+deb12u1+b2 | Installability problems | ACCEPTED | |
|
Reason: rebuild against glibc 2.36-9+deb12u12 Request: 1106777 Binary debdiffs: amd64arm64armelarmhfi386mips64elmipselppc64els390x |
||||
| dropbear | 2022.83-1+deb12u3 | Installability problems | ACCEPTED | |
|
Reason: fix shell injection vulnerability in multihop handling [CVE-2025-47203] Request: 1105888 CVEs referenced: CVE-2025-47203 |
||||
| e2fsprogs | 1.47.0-2+b2 | Installability problems | ACCEPTED | |
|
Reason: rebuild against glibc 2.36-9+deb12u12 Request: 1106777 µdebs: present Binary debdiffs: amd64arm64armelarmhfi386mips64elmipselppc64els390x |
||||
| expat | 2.5.0-1+deb12u2 | Installability problems c-i failed: node-expat/2.4.0+ds-2 [amd64] node-expat/2.4.0+ds-2 [arm64] node-expat/2.4.0+ds-2 [armel] node-expat/2.4.0+ds-2 [armhf] node-expat/2.4.0+ds-2 [i386] node-expat/2.4.0+ds-2 [ppc64el] node-expat/2.4.0+ds-2 [s390x] python3.11/3.11.2-6+deb12u6 [amd64] python3.11/3.11.2-6+deb12u6 [arm64] python3.11/3.11.2-6+deb12u6 [armel] python3.11/3.11.2-6+deb12u6 [armhf] python3.11/3.11.2-6+deb12u6 [i386] python3.11/3.11.2-6+deb12u6 [ppc64el] python3.11/3.11.2-6+deb12u6 [s390x] | ACCEPTED | |
|
Reason: fix denial of service issues [CVE-2023-52425 CVE-2024-8176]; fix parser crash [CVE-2024-50602] Request: 1102752 µdebs: present CVEs referenced: CVE-2023-52425 CVE-2024-50602 CVE-2024-8176 Binary debdiffs: amd64arm64armelarmhfi386mips64elmipselppc64els390x
autopkgtest failure investigation requested (elbrus 2025-06-05, bug report message 34)
|
||||
| fig2dev | 1:3.2.8b-3+deb12u2 | Installability problems | ACCEPTED | |
|
Reason: detect nan in spline control values [CVE-2025-46397]; permit \0 in 2nd line in fig file [CVE-2025-46398]; ge output: correct spline computation [CVE-2025-46399]; reject arcs with a radius smaller than 3 [CVE-2025-46400] Request: 1104154 CVEs referenced: CVE-2025-46397 CVE-2025-46398 CVE-2025-46399 CVE-2025-46400 |
||||
| firefox-esr | 128.12.0esr-1~deb12u1 | Version problems testing (128.11.0esr-1) | Installability problems | ACCEPTED |
|
Missing builds: mips64el DSA: 5950 CVEs referenced: CVE-2025-6424 CVE-2025-6425 CVE-2025-6429 CVE-2025-6430 |
||||
| firefox-esr | 128.11.0esr-1~deb12u1 | Installability problems | ACCEPTED | |
|
This upload was superseded by a more current one. DSA: 5926 CVEs referenced: CVE-2025-5263 CVE-2025-5264 CVE-2025-5266 CVE-2025-5267 CVE-2025-5268 CVE-2025-5269 |
||||
| firefox-esr | 128.10.1esr-1~deb12u1 | Installability problems | ACCEPTED | |
|
This upload was superseded by a more current one. DSA: 5922 CVEs referenced: CVE-2025-4920 CVE-2025-4921 |
||||
| fort-validator | 1.5.4-1+deb12u1 | Installability problems | ACCEPTED | |
|
Reason: fix denial of service issues [CVE-2024-45234 CVE-2024-45235 CVE-2024-45236 CVE-2024-45238 CVE-2024-45239 CVE-2024-48943]; fix buffer overflow issue [CVE-2024-45237] Request: 1098783 CVEs referenced: CVE-2024-45234 CVE-2024-45235 CVE-2024-45236 CVE-2024-45237 CVE-2024-45238 CVE-2024-45239 CVE-2024-48943 Binary debdiffs: arm64 |
||||
| gdk-pixbuf | 2.42.10+dfsg-1+deb12u2 | Installability problems | ACCEPTED | |
|
DSA: 5946 µdebs: present Closes: 1107994 CVEs referenced: CVE-2025-6199 |
||||
| gimp | 2.10.34-1+deb12u3 | Installability problems | ACCEPTED | |
|
DSA: 5939 CVEs referenced: CVE-2025-2760 CVE-2025-2761 CVE-2025-48797 CVE-2025-48798 |
||||
| glibc | 2.36-9+deb12u12 | Installability problems | ACCEPTED | |
|
Reason: fix incorrect LD_LIBRARY_PATH search in dlopen for static setuid binaries [CVE-2025-4802]; improve memory layout of structures in exp/exp10/expf functions; add an SVE implementation of memset on aarch64; improve generic implementation of memset on aarch64 Request: 1106761 µdebs: present CVEs referenced: CVE-2025-4802 Binary debdiffs: allamd64arm64armelarmhfi386mips64elmipselppc64els390x Lintian issues: all |
||||
| glibc | 2.36-9+deb12u11 | Installability problems | ACCEPTED | |
|
This upload was superseded by a more current one. Reason: fix incorrect LD_LIBRARY_PATH search in dlopen for static setuid binaries [CVE-2025-4802]; improve memory layout of structures in exp/exp10/expf functions; add an SVE implementation of memset on aarch64; improve generic implementation of memset on aarch64 Request: 1106761 µdebs: present CVEs referenced: CVE-2025-4802 Binary debdiffs: amd64armelarmhfi386mips64elmipselppc64els390x Lintian issues: all |
||||
| gnupg2 | 2.2.40-1.1+deb12u1 | Installability problems | ACCEPTED | |
|
Reason: fix recommends of architecture-any packages on architecture-all package to support binNMUs Request: 1108137 µdebs: present Closes: 1060366 |
||||
| gnupg2 | 2.2.40-1.1+b4 | Installability problems | ACCEPTED | |
|
This upload was superseded by a more current one. Reason: rebuild against glibc 2.36-9+deb12u12 Request: 1106777 µdebs: present |
||||
| gss | 1.0.4-1+deb12u1 | Installability problems | ACCEPTED | |
|
Reason: fix FTBFS caused by an expired Kerberos ticket Missing builds: armel armhf i386 mipsel Request: 1091842 Closes: 1076885 |
||||
| gst-plugins-bad1.0 | 1.22.0-4+deb12u6 | Installability problems | ACCEPTED | |
|
DSA: 5941 Closes: 1106285 CVEs referenced: CVE-2025-3887 |
||||
| icu | 72.1-3+deb12u1 | Installability problems | ACCEPTED | |
|
DSA: 5951 Closes: 1106684 CVEs referenced: CVE-2025-5222 Lintian issues: amd64arm64armelarmhfi386mips64elmipselppc64els390x |
||||
| insighttoolkit4 | 4.13.3withdata-dfsg2-4+deb12u1 | Installability problems | ACCEPTED | |
|
Reason: fix build on systems with a single CPU Request: 1106328 Closes: 1105896 |
||||
| insighttoolkit5 | 5.2.1-5+deb12u1 | Installability problems | ACCEPTED | |
|
Reason: fix build on systems with a single CPU Request: 1106300 Closes: 1105896 Binary debdiffs: amd64 |
||||
| integrit | 4.1-3+b1 | Installability problems | ACCEPTED | |
|
Reason: rebuild against glibc 2.36-9+deb12u12 Request: 1106777 |
||||
| intel-microcode | 3.20250512.1~deb12u1 | Installability problems | ACCEPTED | |
|
DSA: 5924 Closes: 1105172 CVEs referenced: CVE-2024-28956 CVE-2024-43420 CVE-2024-45332 CVE-2025-20012 CVE-2025-20054 CVE-2025-20103 CVE-2025-20623 CVE-2025-24495 |
||||
| jinja2 | 3.1.2-1+deb12u3 | Installability problems | ACCEPTED | |
|
Reason: fix arbitrary code execution issue [CVE-2025-27516] Request: 1105996 Closes: 1099690 CVEs referenced: CVE-2025-27516 |
||||
| jpeg-xl | 0.7.0-10+deb12u1 | Installability problems | ACCEPTED | |
|
DSA: 5958 Closes: 1034722 1055306 1088818 CVEs referenced: CVE-2023-0645 CVE-2023-35790 CVE-2024-11403 CVE-2024-11498 |
||||
| jq | 1.6-2.1+deb12u1 | Installability problems | ACCEPTED | |
|
Reason: zero-terminate string in jv.c [CVE-2025-48060] Request: 1109012 CVEs referenced: CVE-2025-48060 Binary debdiffs: amd64arm64armelarmhfi386mips64elmipselppc64els390x |
||||
| kexec-tools | 1:2.0.25-3+deb12u2 | Installability problems | ACCEPTED | |
|
Reason: fix path for systemd units with merged /usr; drop depedencies no longer required Request: 1086622 µdebs: present Binary debdiffs: amd64arm64armelarmhfi386mips64elmipselppc64els390x Lintian issues: amd64arm64armelarmhfi386mips64elmipselppc64els390x
systemd change not required; do not release
|
||||
| kmail-account-wizard | 4:22.12.3-1+deb12u1 | Installability problems | ACCEPTED | |
|
Reason: fix man in the middle attack issue [CVE-2024-50624] Request: 1106867 CVEs referenced: CVE-2024-50624 |
||||
| konsole | 4:22.12.3-1+deb12u1 | Installability problems | ACCEPTED | |
|
DSA: 5945 CVEs referenced: CVE-2025-49091 |
||||
| krb5 | 1.20.1-2+deb12u4 | Installability problems | ACCEPTED | |
|
Reason: fix message tampering issue [CVE-2025-3576]; disable issuance of tickets using RC4 or triple-DES session keys by default Request: 1104882 Closes: 1103525 CVEs referenced: CVE-2025-3576 Lintian issues: amd64arm64armelarmhfi386mips64elmipselppc64els390x |
||||
| kubernetes | 1.20.5+really1.20.2-1.1+deb12u1 | Installability problems | ACCEPTED | |
|
Reason: sanitise raw data output to terminal [CVE-2021-25743]; hide long and multi-line strings when printing Request: 1108921 CVEs referenced: CVE-2021-25743 |
||||
| libavif | 0.11.1-1+deb12u1 | Installability problems | ACCEPTED | |
|
DSA: 5930 CVEs referenced: CVE-2025-48174 CVE-2025-48175 Binary debdiffs: amd64arm64armelarmhfi386mips64elmipselppc64els390x |
||||
| libblockdev | 2.28-2+deb12u1 | Installability problems | ACCEPTED | |
|
DSA: 5943 CVEs referenced: CVE-2025-6019 Lintian issues: allamd64arm64armelarmhfi386mips64elmipselppc64els390xsource |
||||
| libbpf | 1.1.2-0+deb12u1 | Installability problems | ACCEPTED | |
|
Reason: fix operation with newer systemd versions Request: 1102091 Closes: 1101745 Binary debdiffs: amd64arm64armelarmhfi386mips64elmipselppc64els390x |
||||
| libcap2 | 1:2.66-4+deb12u2 | Installability problems | ACCEPTED | |
|
Reason: add missing Built-Using: glibc Request: 1107253 µdebs: present Closes: 1106802 Binary debdiffs: amd64arm64armelarmhfi386mips64elmipselppc64els390x |
||||
| libcap2 | 1:2.66-4+deb12u1+b1 | Installability problems | ACCEPTED | |
|
This upload was superseded by a more current one. Reason: rebuild against glibc 2.36-9+deb12u12 Request: 1106777 µdebs: present |
||||
| libfile-find-rule-perl | 0.34-4~deb12u1 | Installability problems | ACCEPTED | |
|
DSA: 5936 Closes: 1107311 CVEs referenced: CVE-2011-10007 |
||||
| libfile-tail-perl | 1.3-7+deb12u1 | Installability problems | ACCEPTED | |
|
Reason: fix uninitialized variable issue Request: 1107217 Closes: 1104900 |
||||
| libphp-adodb | 5.21.4-1+deb12u1 | Installability problems | ACCEPTED | |
|
Reason: fix SQL injection vulnerability in pg_insert_id() [CVE-2025-46337] Request: 1104821 Closes: 1104548 CVEs referenced: CVE-2025-46337 Lintian issues: all |
||||
| libraw | 0.20.2-2.1+deb12u1 | Installability problems | ACCEPTED | |
|
Reason: fix out-of-bounds read issues [CVE-2025-43961 CVE-2025-43962 CVE-2025-43963]; enforce minimum w0 and w1 values [CVE-2025-43964] Request: 1106536 Closes: 1103781 1103782 1103783 CVEs referenced: CVE-2025-43961 CVE-2025-43962 CVE-2025-43963 CVE-2025-43964 Binary debdiffs: i386 |
||||
| libtheora | 1.1.1+dfsg.1-16.1+deb12u1 | Installability problems | ACCEPTED | |
|
Reason: prevent segfault during decoder initialisation; avoid possible bit-shifting in decoder Request: 1100607 Lintian issues: source |
||||
| libvpx | 1.12.0-1+deb12u4 | Installability problems | ACCEPTED | |
|
DSA: 5928 Closes: 1106689 |
||||
| libxml2 | 2.9.14+dfsg-1.3~deb12u2 | Installability problems | ACCEPTED | |
|
DSA: 5949 Closes: 1051230 1053629 1063234 1071162 1094238 1098320 1098321 1098322 1102521 1103511 CVEs referenced: CVE-2022-49043 CVE-2023-39615 CVE-2023-45322 CVE-2024-25062 CVE-2024-34459 CVE-2024-56171 CVE-2025-24928 CVE-2025-27113 CVE-2025-32414 CVE-2025-32415 Lintian issues: source |
||||
| libyaml-libyaml-perl | 0.86+ds-1+deb12u1 | Installability problems | ACCEPTED | |
|
Reason: fix arbitrary file edit issue [CVE-2025-40908] Request: 1107116 CVEs referenced: CVE-2025-40908 Binary debdiffs: amd64arm64armelarmhfi386mips64elmipselppc64els390x |
||||
| linux | 6.1.140-1 | Installability problems | ACCEPTED | |
|
DSA: 5925 µdebs: present CVEs referenced: CVE-2024-26807 CVE-2024-35790 CVE-2024-36903 CVE-2024-36927 CVE-2024-43840 CVE-2024-53203 CVE-2024-53209 CVE-2025-21645 CVE-2025-21931 CVE-2025-22062 CVE-2025-37967 Binary debdiffs: allamd64arm64armelarmhfi386mips64elmipselppc64els390x Lintian issues: allamd64arm64armelarmhfi386mips64elmipselppc64els390x |
||||
| linux | 6.1.139-1 | Installability problems | ACCEPTED | |
|
This upload was superseded by a more current one. DSA: 5925 µdebs: present CVEs referenced: CVE-2024-28956 CVE-2025-21839 CVE-2025-37819 |
||||
| linux-signed-amd64 | 6.1.140+1 | Installability problems amd64 | ACCEPTED | |
|
DSA: 5925 µdebs: present CVEs referenced: CVE-2024-26807 CVE-2024-35790 CVE-2024-36903 CVE-2024-36927 CVE-2024-43840 CVE-2024-53203 CVE-2024-53209 CVE-2025-21645 CVE-2025-21931 CVE-2025-22062 CVE-2025-37967 Binary debdiffs: amd64 |
||||
| linux-signed-amd64 | 6.1.139+1 | Installability problems | ACCEPTED | |
|
This upload was superseded by a more current one. DSA: 5925 µdebs: present CVEs referenced: CVE-2024-28956 CVE-2025-21839 CVE-2025-37819 |
||||
| linux-signed-arm64 | 6.1.140+1 | Installability problems arm64 | ACCEPTED | |
|
DSA: 5925 µdebs: present CVEs referenced: CVE-2024-26807 CVE-2024-35790 CVE-2024-36903 CVE-2024-36927 CVE-2024-43840 CVE-2024-53203 CVE-2024-53209 CVE-2025-21645 CVE-2025-21931 CVE-2025-22062 CVE-2025-37967 Binary debdiffs: arm64 |
||||
| linux-signed-arm64 | 6.1.139+1 | Installability problems | ACCEPTED | |
|
This upload was superseded by a more current one. DSA: 5925 µdebs: present CVEs referenced: CVE-2024-28956 CVE-2025-21839 CVE-2025-37819 |
||||
| linux-signed-i386 | 6.1.140+1 | Installability problems i386 | ACCEPTED | |
|
DSA: 5925 µdebs: present CVEs referenced: CVE-2024-26807 CVE-2024-35790 CVE-2024-36903 CVE-2024-36927 CVE-2024-43840 CVE-2024-53203 CVE-2024-53209 CVE-2025-21645 CVE-2025-21931 CVE-2025-22062 CVE-2025-37967 Binary debdiffs: i386 |
||||
| linux-signed-i386 | 6.1.139+1 | Installability problems | ACCEPTED | |
|
This upload was superseded by a more current one. DSA: 5925 µdebs: present CVEs referenced: CVE-2024-28956 CVE-2025-21839 CVE-2025-37819 |
||||
| llvm-toolchain-19 | 1:19.1.7-3~deb12u1 | Installability problems c-i failed: llvm-toolchain-19/1:19.1.7-3~deb12u1 [i386] | ACCEPTED | |
|
Reason: new upstream stable release Request: 1108308 Closes: 1084638 1094233 1100161 Binary debdiffs: allamd64arm64armelarmhfi386mips64elmipselppc64els390x Lintian issues: amd64arm64armelarmhfi386mips64elmipselppc64els390x
c-i: i386 failure appears to occur in unstable also
|
||||
| lxc | 5.0.2-1+deb12u3+b1 | Installability problems | ACCEPTED | |
|
Reason: rebuild against glibc 2.36-9+deb12u12 Request: 1106777 |
||||
| mariadb | 1:10.11.13-0+deb12u1 | Installability problems | ACCEPTED | |
|
Reason: new upstream stable release; security fixes [CVE-2023-52969 CVE-2023-52970 CVE-2023-52971 CVE-2025-30693 CVE-2025-30722]; fix restart after out of memory Request: 1104874 Closes: 1073847 1084293 1099515 1100437 1100575 1105976 CVEs referenced: CVE-2023-52969 CVE-2023-52970 CVE-2023-52971 CVE-2025-30693 CVE-2025-30722 Binary debdiffs: allamd64arm64armelarmhfi386mips64elmipselppc64els390x Lintian issues: allamd64arm64armelarmhfi386mips64elmipselppc64els390x |
||||
| mediawiki | 1:1.39.13-1~deb12u1 | Installability problems | ACCEPTED | |
|
DSA: 5957 CVEs referenced: CVE-2025-32072 CVE-2025-6590 CVE-2025-6591 CVE-2025-6593 CVE-2025-6594 CVE-2025-6597 Binary debdiffs: all |
||||
| mlt | 7.12.0-1+deb12u1 | Installability problems | ACCEPTED | |
|
Reason: fix Python scripts Request: 1104028 Closes: 1104027 Binary debdiffs: arm64 |
||||
| modsecurity-apache | 2.9.7-1+deb12u1 | Installability problems | ACCEPTED | |
|
DSA: 5940 CVEs referenced: CVE-2025-47947 CVE-2025-48866 |
||||
| mono | 6.8.0.105+dfsg-3.3+deb12u1 | Installability problems | ACCEPTED | |
|
Reason: remove unneeded (and broken) mono-source package Missing builds: mipsel Request: 1106348 Closes: 1106296 1106348 961942 Binary debdiffs: all |
||||
| mosquitto | 2.0.11-1.2+deb12u2 | Installability problems | ACCEPTED | |
|
Reason: fix memory leak issue [CVE-2023-28366]; fix out of bounds memory access issue [CVE-2024-10525]; fix double free issue [CVE-2024-3935]; fix possible segmentation fault issue [CVE-2024-8376] Request: 1103927 CVEs referenced: CVE-2023-28366 CVE-2024-10525 CVE-2024-3935 CVE-2024-8376 |
||||
| multipath-tools | 0.9.4-3+deb12u2 | Installability problems | ACCEPTED | |
|
Reason: reinstate ANA prioritizer in build process Request: 1109087 µdebs: present Closes: 1101332 Binary debdiffs: amd64arm64armelarmhfi386mips64elmipselppc64els390x |
||||
| net-tools | 2.10-0.1+deb12u2 | Installability problems c-i failed: gsocket/1.4.39-1 [s390x] inetutils/2:2.4-2+deb12u1 [ppc64el] | ACCEPTED | |
|
DSA: 5923 Closes: 1106147 |
||||
| net-tools | 2.10-0.1+deb12u1 | Installability problems | ACCEPTED | |
|
This upload was superseded by a more current one. DSA: 5923 Closes: 1105806 CVEs referenced: CVE-2025-46836 |
||||
| node-csstype | 3.1.1-1+deb12u1 | Installability problems | ACCEPTED | |
|
Reason: fix FTBFS Request: 1098229 Closes: 1078884 |
||||
| node-minipass | 3.3.6+~cs9.4.19-1+deb12u1 | Installability problems | ACCEPTED | |
|
Reason: fix tap reporter in auto test and autopkgtest Request: 1098225 Closes: 1098224 Lintian issues: source |
||||
| node-tar-fs | 2.1.3-0+deb12u1 | Installability problems | ACCEPTED | |
|
Reason: fix path traversal issues [CVE-2024-12905 CVE-2025-48387] Request: 1107568 Closes: 1101501 CVEs referenced: CVE-2024-12905 CVE-2025-48387 |
||||
| nvda2speechd | 0.1-6+deb12u1 | Installability problems | ACCEPTED | |
|
Reason: fix required rmp-serde version Request: 1105816 Closes: 1078901 |
||||
| open-vm-tools | 2:12.2.0-1+deb12u3 | Installability problems | ACCEPTED | |
|
DSA: 5919 Closes: 1105159 CVEs referenced: CVE-2025-22247 |
||||
| postgresql-common | 248+deb12u1 | Installability problems | ACCEPTED | |
|
Reason: PgCommon.pm: Set defined path in prepare_exec. Fixes compatibility with trixie's perl version Closes: 1107154 Binary debdiffs: all |
||||
| prody | 2.3.1+dfsg-3+deb12u1 | Installability problems | ACCEPTED | |
|
Reason: fix FTBFS Missing builds: i386 Request: 1108185 Closes: 1028722 |
||||
| python-django | 3:3.2.19-1+deb12u2 | Installability problems c-i failed: python-django-storages/1.13.2-1 [amd64] python-django-storages/1.13.2-1 [arm64] python-django-storages/1.13.2-1 [armel] python-django-storages/1.13.2-1 [armhf] python-django-storages/1.13.2-1 [i386] python-django-storages/1.13.2-1 [ppc64el] python-django-storages/1.13.2-1 [s390x] | ACCEPTED | |
|
Reason: fix regular expression-based denial of service issue [CVE-2023-36053], denial of service issues [CVE-2024-38875 CVE-2024-39614 CVE-2024-41990 CVE-2024-41991], user enumeration issue [CVE-2024-39329], directory traversal issue [CVE-2024-39330], excessive memory consumption issue [CVE-2024-41989], SQL injection issue [CVE-2024-42005] Request: 1079454 CVEs referenced: CVE-2023-36053 CVE-2024-38875 CVE-2024-39329 CVE-2024-39330 CVE-2024-39614 CVE-2024-41989 CVE-2024-41990 CVE-2024-41991 CVE-2024-42005 Binary debdiffs: all Lintian issues: all
autopkgtest failure in python-django-storages considered blocking for now (elbrus 2025-05-11, see the bug report)
|
||||
| python-tornado | 6.2.0-3+deb12u2 | Installability problems | ACCEPTED | |
|
DSA: 5938 Closes: 1105886 CVEs referenced: CVE-2025-47287 |
||||
| python-zipp | 1.0.0-6+deb12u1 | Installability problems | ACCEPTED | |
|
Reason: fix denial of service issue [CVE-2024-5569] Request: 1105971 CVEs referenced: CVE-2024-5569 |
||||
| qemu | 7.2+dfsg-7+deb12u13+b1 | Installability problems | ACCEPTED | |
|
Reason: rebuild against glibc 2.36-9+deb12u12 Request: 1106777 Binary debdiffs: amd64arm64armelarmhfi386mips64elmipselppc64els390x |
||||
| raptor2 | 2.0.15-4+deb12u1 | Installability problems | ACCEPTED | |
|
Reason: fix integer underflow issue [CVE-2024-57823]; fix heap read buffer overflow issue [CVE-2024-57822] Request: 1105957 Closes: 1067896 CVEs referenced: CVE-2024-57822 CVE-2024-57823 |
||||
| rar | 2:7.01-1~deb12u1 | Installability problems | ACCEPTED | |
|
Reason: new upstream release; fix ANSI escape injection issue [CVE-2024-33899] Request: 1108543 CVEs referenced: CVE-2024-33899 |
||||
| ring | 20230206.0~ds2-1.1+deb12u1 | Installability problems | ACCEPTED | |
|
DSA: 5956 CVEs referenced: CVE-2023-27585 |
||||
| roundcube | 1.6.5+dfsg-1+deb12u5 | Installability problems | ACCEPTED | |
|
DSA: 5934 Closes: 1107073 CVEs referenced: CVE-2024-42009 CVE-2025-49113 |
||||
| rubygems | 3.3.15-2+deb12u1 | Installability problems | ACCEPTED | |
|
Reason: fix credential leak issue [CVE-2025-27221]; fix regular expression related denial of service issue [CVE-2023-28755] Request: 1103926 CVEs referenced: CVE-2023-28755 CVE-2025-27221 |
||||
| rust-cbindgen-web | 0.26.0-3~deb12u1+b1 | Installability problems | REJECTED | |
|
Reason: false positive |
||||
| samba | 2:4.17.12+dfsg-0+deb12u2 | Installability problems | ACCEPTED | |
|
Reason: fix various bugs following a change to Microsoft AD Request: 1109095 Closes: 1108904 Binary debdiffs: allamd64arm64armelarmhfi386mips64elmipselppc64els390x |
||||
| sash | 3.8-5+b26 | Installability problems | ACCEPTED | |
|
Reason: rebuild against glibc 2.36-9+deb12u12 Request: 1106777 Binary debdiffs: amd64arm64armelarmhfi386mips64elmipselppc64els390x |
||||
| setuptools | 66.1.1-1+deb12u2 | Installability problems | ACCEPTED | |
|
Reason: fix arbitrary file write issue [CVE-2025-47273] Request: 1106721 CVEs referenced: CVE-2025-47273 |
||||
| simplesamlphp | 1.19.7-1+deb12u2 | Installability problems | ACCEPTED | |
|
Reason: fix signature verification issue [CVE-2025-27773] Request: 1105113 Closes: 1100595 CVEs referenced: CVE-2025-27773 |
||||
| slurm-wlm | 22.05.8-4+deb12u3 | Installability problems | ACCEPTED | |
|
DSA: 5961 Closes: 1104929 CVEs referenced: CVE-2025-43904 Binary debdiffs: amd64arm64armelarmhfi386mips64elmipselppc64els390x |
||||
| snapd | 2.57.6-1+b6 | Installability problems | ACCEPTED | |
|
Reason: rebuild against glibc 2.36-9+deb12u12 Request: 1106777 |
||||
| sudo | 1.9.13p3-1+deb12u2 | Installability problems | ACCEPTED | |
|
DSA: 5954 CVEs referenced: CVE-2025-32462 |
||||
| supermin | 5.2.2-1+b10 | Installability problems | ACCEPTED | |
|
Reason: rebuild against glibc 2.36-9+deb12u12 Request: 1106777 |
||||
| systemd | 252.38-1~deb12u1 | Installability problems c-i failed: dpdk/22.11.8-1~deb12u1 [arm64] tor/0.4.7.16-1 [arm64] | ACCEPTED | |
|
DSA: 5931 µdebs: present CVEs referenced: CVE-2025-4598 Binary debdiffs: amd64arm64armelarmhfi386mips64elmipselppc64els390x |
||||
| tcpdf | 6.6.2+dfsg1-1+deb12u1 | Installability problems | ACCEPTED | |
|
DSA: 5933 CVEs referenced: CVE-2024-22640 CVE-2024-22641 CVE-2024-32489 CVE-2024-51058 CVE-2024-56519 CVE-2024-56520 CVE-2024-56522 CVE-2024-56527 |
||||
| thunderbird | 1:128.12.0esr-1~deb12u1 | Installability problems | ACCEPTED | |
|
Missing builds: mips64el s390x DSA: 5959 Lintian issues: i386 |
||||
| thunderbird | 1:128.11.0esr-1~deb12u1 | Installability problems | ACCEPTED | |
|
This upload was superseded by a more current one. DSA: 5932 Lintian issues: i386 |
||||
| thunderbird | 1:128.10.1esr-1~deb12u1 | Installability problems | ACCEPTED | |
|
This upload was superseded by a more current one. DSA: 5921 Lintian issues: i386 |
||||
| tini | 0.19.0-1+b3 | Installability problems | ACCEPTED | |
|
Reason: rebuild against glibc 2.36-9+deb12u12 Request: 1106777 Binary debdiffs: amd64arm64armelarmhfi386mips64elmipselppc64els390x |
||||
| trafficserver | 9.2.5+ds-0+deb12u3 | Installability problems | ACCEPTED | |
|
DSA: 5948 CVEs referenced: CVE-2024-53868 CVE-2025-31698 CVE-2025-49763 |
||||
| tripwire | 2.4.3.7-4+b13 | Installability problems | ACCEPTED | |
|
Reason: rebuild against glibc 2.36-9+deb12u12 Request: 1106777 Binary debdiffs: amd64arm64armelarmhfi386mips64elmipselppc64els390x |
||||
| tsocks | 1.8beta5+ds1-1+b3 | Installability problems | ACCEPTED | |
|
Reason: rebuild against glibc 2.36-9+deb12u12 Request: 1106777 Binary debdiffs: amd64arm64armelarmhfi386mips64elmipselppc64els390x |
||||
| udisks2 | 2.9.4-4+deb12u1 | Installability problems | ACCEPTED | |
|
DSA: 5943 |
||||
| varnish | 7.1.1-2+deb12u1 | Installability problems | ACCEPTED | |
|
DSA: 5918 |
||||
| webkit2gtk | 2.48.3-1~deb12u1 | Installability problems | ACCEPTED | |
|
Missing builds: mipsel DSA: 5937 Binary debdiffs: amd64arm64armelarmhfi386mips64elppc64els390x Lintian issues: mips64el |
||||
| webpy | 1:0.62-4+deb12u1 | Installability problems | ACCEPTED | |
|
Reason: fix SQL injection issue [CVE-2025-3818] Request: 1106756 Closes: 1103780 CVEs referenced: CVE-2025-3818 |
||||
| wpa | 2:2.10-12+deb12u3 | Installability problems | ACCEPTED | |
|
Reason: fix inappropriate reuse of PKEX elements [CVE-2022-37660] Request: 1102675 µdebs: present CVEs referenced: CVE-2022-37660 Binary debdiffs: amd64arm64armelarmhfi386mips64elmipselppc64els390x |
||||
| xfce4-weather-plugin | 0.11.3-1~deb12u1 | Installability problems | ACCEPTED | |
|
Reason: migrate to new APIs; update translations Request: 1101144 Binary debdiffs: amd64arm64armelarmhfi386mips64elmipselppc64els390x Lintian issues: source |
||||
| xorg-server | 2:21.1.7-3+deb12u10 | Installability problems | ACCEPTED | |
|
DSA: 5947 µdebs: present CVEs referenced: CVE-2025-49175 CVE-2025-49176 CVE-2025-49177 CVE-2025-49178 CVE-2025-49179 CVE-2025-49180 Binary debdiffs: amd64arm64armelarmhfi386mips64elmipselppc64els390x Lintian issues: source |
||||
| xrdp | 0.9.21.1-1+deb12u1 | Installability problems | ACCEPTED | |
|
Reason: fix session restrictions bypass issue [CVE-2023-40184]; fix out-of-bounds read issue [CVE-2023-42822]; fix login restrictions bypass issue [CVE-2024-39917] Closes: 1051061 1053284 1076769 CVEs referenced: CVE-2023-40184 CVE-2023-42822 CVE-2024-39917 Lintian issues: amd64arm64armelarmhfi386mips64elmipselppc64els390x |
||||
| ydotool | 0.1.8-3+b2 | Installability problems | ACCEPTED | |
|
Reason: rebuild against glibc 2.36-9+deb12u12 Request: 1106777 Binary debdiffs: ppc64el |
||||
| yelp | 42.2-1+deb12u1 | Installability problems | ACCEPTED | |
|
DSA: 5927 CVEs referenced: CVE-2025-3155 Binary debdiffs: amd64arm64armelarmhfi386mips64elmipselppc64els390x |
||||
| yelp-xsl | 42.1-2+deb12u1 | Installability problems | ACCEPTED | |
|
DSA: 5927 CVEs referenced: CVE-2025-3155 |
||||
| zsh | 5.9-4+b7 | Installability problems | ACCEPTED | |
|
Reason: rebuild against glibc 2.36-9+deb12u12 Request: 1106777 Binary debdiffs: amd64arm64armelarmhfi386mips64elmipselppc64els390x |
||||