Queue Overview for "proposed-updates"
TODO items
- Skip: kexec-tools unless fixed, mariadb
Removals
- #1088261: tk-html3 - unmaintained; security issues
- #1088282: criu [armhf] - fails to build on arm64 host
List of missing builds
List of missing packages relative to security archive
Resolution Pending (9 uploads for 9 packages)
| Package | Version | Version Problems | Installability Problems | Architectures | Action |
|---|---|---|---|---|---|
| ansible-core | 2.14.18-0+deb12u1 | Installability problems | Built: source | ? | |
|
Closes: 1082851 CVEs referenced: CVE-2024-11079 CVE-2024-8775 CVE-2024-9902 |
|||||
| base-files | 12.4+deb12u9 | Installability problems | Built: source | ? | |
| chromium | 131.0.6778.204-1~deb12u1 | Version problems testing (131.0.6778.139-1) | Installability problems | Built: allamd64arm64armhfi386source Missing: ppc64el |
|
|
DSA: 5834 CVEs referenced: CVE-2024-12692 CVE-2024-12693 CVE-2024-12694 CVE-2024-12695 Binary debdiffs: arm64 |
|||||
| containerd | 1.6.20~ds1-1+b2 | Installability problems | Built: amd64armeli386mips64elmipsel |
|
|
|
Distribution mismatch: bookworm, sid Reason: some builds fail (#1070411) |
|||||
| debootstrap | 1.0.128+nmu2+deb12u2 | Installability problems | Built: source | ? | |
|
µdebs: present Closes: 1091649 |
|||||
| dnsmasq | 2.90-4~deb12u1 | Installability problems | Built: source | ? | |
|
CVEs referenced: CVE-2023-28450 CVE-2023-50387 CVE-2023-50868 Lintian issues: source |
|||||
| golang-github-containers-buildah | 1.28.2+ds1-3+b3 | Installability problems | Built: amd64armeli386mips64elppc64els390x |
|
|
|
Reason: some builds fail (#1072147) |
|||||
| poco | 1.11.0-3+deb12u1 | Installability problems | Built: source | ? | |
|
CVEs referenced: CVE-2023-52389 |
|||||
| xen | 4.17.5+23-ga4e5191dc0-1 | Version problems testing (4.17.3+36-g54dacb5c02-1) libxen-dev/testing [amd64] (4.17.3+36-g54dacb5c02-1+b1) libxen-dev/testing [arm64] (4.17.3+36-g54dacb5c02-1+b1) libxen-dev/testing [armhf] (4.17.3+36-g54dacb5c02-1+b1) xen-doc/testing [amd64] (4.17.3+36-g54dacb5c02-1+b1) xen-doc/testing [arm64] (4.17.3+36-g54dacb5c02-1+b1) xen-doc/testing [armhf] (4.17.3+36-g54dacb5c02-1+b1) xen-hypervisor-4.17-amd64/testing [amd64] (4.17.3+36-g54dacb5c02-1+b1) xen-hypervisor-4.17-amd64-dbg/testing [amd64] (4.17.3+36-g54dacb5c02-1+b1) xen-hypervisor-4.17-arm64/testing [arm64] (4.17.3+36-g54dacb5c02-1+b1) xen-hypervisor-4.17-arm64-dbg/testing [arm64] (4.17.3+36-g54dacb5c02-1+b1) xen-hypervisor-4.17-armhf/testing [armhf] (4.17.3+36-g54dacb5c02-1+b1) xen-hypervisor-4.17-armhf-dbg/testing [armhf] (4.17.3+36-g54dacb5c02-1+b1) xen-hypervisor-common/testing [amd64] (4.17.3+36-g54dacb5c02-1+b1) xen-hypervisor-common/testing [arm64] (4.17.3+36-g54dacb5c02-1+b1) xen-hypervisor-common/testing [armhf] (4.17.3+36-g54dacb5c02-1+b1) xen-system-amd64/testing [amd64] (4.17.3+36-g54dacb5c02-1+b1) xen-system-arm64/testing [arm64] (4.17.3+36-g54dacb5c02-1+b1) xen-system-armhf/testing [armhf] (4.17.3+36-g54dacb5c02-1+b1) xen-utils-4.17/testing [amd64] (4.17.3+36-g54dacb5c02-1+b1) xen-utils-4.17/testing [arm64] (4.17.3+36-g54dacb5c02-1+b1) xen-utils-4.17/testing [armhf] (4.17.3+36-g54dacb5c02-1+b1) xen-utils-4.17-dbg/testing [amd64] (4.17.3+36-g54dacb5c02-1+b1) xen-utils-4.17-dbg/testing [arm64] (4.17.3+36-g54dacb5c02-1+b1) xen-utils-4.17-dbg/testing [armhf] (4.17.3+36-g54dacb5c02-1+b1) xen-utils-common/testing [amd64] (4.17.3+36-g54dacb5c02-1+b1) xen-utils-common/testing [arm64] (4.17.3+36-g54dacb5c02-1+b1) xen-utils-common/testing [armhf] (4.17.3+36-g54dacb5c02-1+b1) xenstore-utils/testing [amd64] (4.17.3+36-g54dacb5c02-1+b1) xenstore-utils/testing [arm64] (4.17.3+36-g54dacb5c02-1+b1) xenstore-utils/testing [armhf] (4.17.3+36-g54dacb5c02-1+b1) | Installability problems | Built: amd64arm64armhfsource |
|
|
DSA: 5836 CVEs referenced: CVE-2023-28746 CVE-2023-46841 CVE-2023-46842 CVE-2024-2193 CVE-2024-2201 CVE-2024-31142 CVE-2024-31143 CVE-2024-31145 CVE-2024-31146 CVE-2024-45817 CVE-2024-45818 CVE-2024-45819 |
|||||
Pending Processing (0 uploads for 0 packages)
Processed (92 uploads for 78 packages)
| Package | Version | Version Problems | Installability Problems | Action |
|---|---|---|---|---|
| allow-html-temp | 10.0.4-1~deb12u1 | Installability problems all | ACCEPTED | |
|
Reason: update for Thunderbird 128 compatibility Request: 1082118 Binary debdiffs: all Lintian issues: source
Lock-step with TB128
|
||||
| bochs | 2.7+dfsg-4+deb12u1 | Installability problems | ACCEPTED | |
|
Reason: build BIOS images for 386 CPUs Request: 1086347 Closes: 1082917 |
||||
| ceph | 16.2.15+ds-0+deb12u1 | Installability problems | ACCEPTED | |
|
DSA: 5825 Closes: 1088993 CVEs referenced: CVE-2022-3650 CVE-2023-43040 CVE-2024-48916 Binary debdiffs: allamd64arm64armelarmhfi386mips64elmipselppc64els390x Lintian issues: amd64arm64armelarmhfi386mips64elmipselppc64els390xsource |
||||
| chromium | 131.0.6778.139-1~deb12u1 | Installability problems | ACCEPTED | |
|
DSA: 5829 CVEs referenced: CVE-2024-12381 CVE-2024-12382 |
||||
| chromium | 131.0.6778.108-1~deb12u1 | Installability problems amd64 arm64 armhf i386 ppc64el | ACCEPTED | |
|
This upload was superseded by a more current one. DSA: 5824 CVEs referenced: CVE-2024-12053 |
||||
| chromium | 131.0.6778.85-1~deb12u1 | Installability problems | ACCEPTED | |
|
This upload was superseded by a more current one. DSA: 5817 CVEs referenced: CVE-2024-11110 CVE-2024-11111 CVE-2024-11112 CVE-2024-11113 CVE-2024-11114 CVE-2024-11115 CVE-2024-11116 CVE-2024-11117 CVE-2024-11395 |
||||
| chromium | 130.0.6723.116-1~deb12u1 | Installability problems | ACCEPTED | |
|
This upload was superseded by a more current one. DSA: 5810 CVEs referenced: CVE-2024-10826 CVE-2024-10827 |
||||
| criu | 3.17.1-2+deb12u1 | Installability problems | ACCEPTED | |
|
Reason: dynamically handle different libc at runtime than compilation time Missing builds: armhf Request: 1087931 Closes: 1081683 |
||||
| debian-security-support | 1:12+2024.12.22 | Installability problems | ACCEPTED | |
|
Reason: update list of packages receiving limited support in bookworm Request: 1091167 Closes: 1057343 1079693 1082885 1087718 Binary debdiffs: all Lintian issues: all |
||||
| dpdk | 22.11.7-1~deb12u1 | Installability problems | ACCEPTED | |
|
DSA: 5833 CVEs referenced: CVE-2024-11614 |
||||
| eas4tbsync | 4.11-1~deb12u1 | Installability problems all | ACCEPTED | |
|
Reason: update for Thunderbird 128 compatibility Request: 1082086 Binary debdiffs: all Lintian issues: source
Lock-step with TB128
|
||||
| espeak-ng | 1.51+dfsg-10+deb12u2 | Installability problems c-i failed: speech-dispatcher/0.11.4-2 [ppc64el] | ACCEPTED | |
|
Reason: fix dropping last byte of stdin input Request: 1091465 µdebs: present |
||||
| fastnetmon | 1.2.4-2+deb12u1 | Installability problems | ACCEPTED | |
|
DSA: 5837 CVEs referenced: CVE-2024-56072 CVE-2024-56073 |
||||
| firefox-esr | 128.5.0esr-1~deb12u1 | Installability problems | ACCEPTED | |
|
Missing builds: mips64el DSA: 5820 CVEs referenced: CVE-2024-11691 CVE-2024-11692 CVE-2024-11694 CVE-2024-11695 CVE-2024-11696 CVE-2024-11697 CVE-2024-11699 |
||||
| firefox-esr | 128.4.0esr-1~deb12u1 | Installability problems | ACCEPTED | |
|
This upload was superseded by a more current one. DSA: 5801 CVEs referenced: CVE-2024-10458 CVE-2024-10459 CVE-2024-10460 CVE-2024-10461 CVE-2024-10462 CVE-2024-10463 CVE-2024-10464 CVE-2024-10465 CVE-2024-10466 CVE-2024-10467 |
||||
| geoclue-2.0 | 2.6.0-2+deb12u1 | Installability problems | ACCEPTED | |
|
Reason: use beaconDB rather than the now retired Mozilla Location Service Request: 1091367 Closes: 1074427 |
||||
| ghostscript | 10.0.0~dfsg-11+deb12u6 | Installability problems | ACCEPTED | |
|
DSA: 5808 CVEs referenced: CVE-2024-46951 CVE-2024-46952 CVE-2024-46953 CVE-2024-46955 CVE-2024-46956 |
||||
| glib2.0 | 2.74.6-2+deb12u5 | Installability problems | ACCEPTED | |
|
Reason: fix buffer overflow when configured to use a SOCKS4a proxy with a very long username [CVE-2024-52533] Request: 1087658 µdebs: present Closes: 1087419 CVEs referenced: CVE-2024-52533 |
||||
| gsl | 2.7.1+dfsg-5+deb12u1 | Installability problems | ACCEPTED | |
|
Reason: fix buffer overflow calculating the quantile value [CVE-2020-35357] Request: 1089299 Closes: 1052655 CVEs referenced: CVE-2020-35357 |
||||
| gst-plugins-base1.0 | 1.22.0-3+deb12u4 | Installability problems | ACCEPTED | |
|
Reason: don't try parsing extended header if not enough data is available (id3v2) [CVE-2024-47542] Missing builds: amd64 Request: 1091717 CVEs referenced: CVE-2024-47542 |
||||
| gst-plugins-base1.0 | 1.22.0-3+deb12u3 | Installability problems | ACCEPTED | |
|
This upload was superseded by a more current one. DSA: 5831 CVEs referenced: CVE-2024-47538 CVE-2024-47541 CVE-2024-47600 CVE-2024-47607 CVE-2024-47615 CVE-2024-47835 |
||||
| gst-plugins-good1.0 | 1.22.0-5+deb12u2 | Installability problems | ACCEPTED | |
|
DSA: 5838 CVEs referenced: CVE-2024-47537 CVE-2024-47539 CVE-2024-47540 CVE-2024-47543 CVE-2024-47544 CVE-2024-47545 CVE-2024-47546 CVE-2024-47596 CVE-2024-47597 CVE-2024-47598 CVE-2024-47599 CVE-2024-47601 CVE-2024-47602 CVE-2024-47603 CVE-2024-47606 CVE-2024-47613 CVE-2024-47774 CVE-2024-47775 CVE-2024-47776 CVE-2024-47777 CVE-2024-47778 CVE-2024-47834 |
||||
| gstreamer1.0 | 1.22.0-2+deb12u1 | Installability problems | ACCEPTED | |
|
DSA: 5832 CVEs referenced: CVE-2024-47606 Lintian issues: source |
||||
| guix | 1.4.0-3+deb12u2 | Installability problems | ACCEPTED | |
|
DSA: 5805 |
||||
| gunicorn | 20.1.0-6+deb12u1 | Installability problems | ACCEPTED | |
|
Reason: prevent HTTP request smuggling [CVE-2024-1135] Request: 1090853 Closes: 1069126 CVEs referenced: CVE-2024-1135 |
||||
| icinga2 | 2.13.6-2+deb12u2 | Installability problems | ACCEPTED | |
|
Reason: prevent TLS certificate bypass [CVE-2024-49369] Request: 1087411 Closes: 1087384 CVEs referenced: CVE-2024-49369 |
||||
| intel-microcode | 3.20241112.1~deb12u1 | Installability problems | ACCEPTED | |
|
Reason: new upstream security release [CVE-2024-21853 CVE-2024-23918 CVE-2024-24968 CVE-2024-23984] Request: 1089279 Closes: 1086483 CVEs referenced: CVE-2024-21853 CVE-2024-23918 CVE-2024-23984 CVE-2024-24968 |
||||
| jinja2 | 3.1.2-1+deb12u1 | Installability problems | ACCEPTED | |
|
Reason: prevent HTML attribute injection [CVE-2024-22195 CVE-2024-34064] Request: 1089556 CVEs referenced: CVE-2024-22195 CVE-2024-34064 |
||||
| kexec-tools | 1:2.0.25-3+deb12u2 | Installability problems | ACCEPTED | |
|
Reason: fix path for systemd units with merged /usr; drop depedencies no longer required Request: 1086622 µdebs: present Binary debdiffs: amd64arm64armelarmhfi386mips64elmipselppc64els390x Lintian issues: amd64arm64armelarmhfi386mips64elmipselppc64els390x |
||||
| lemonldap-ng | 2.16.1+ds-deb12u4 | Installability problems | ACCEPTED | |
|
Reason: fix privilege escalation when adaptive auth levels used [CVE-2024-52946]; fix XSS in upgrade plugin [CVE-2024-52947] Request: 1087200 CVEs referenced: CVE-2024-52946 CVE-2024-52947 |
||||
| libarchive | 3.6.2-1+deb12u2 | Installability problems | ACCEPTED | |
|
DSA: 5806 Closes: 1086155 CVEs referenced: CVE-2024-20696 |
||||
| libmedia-convert-perl | 1.4.0-1~bpo12+2 | Installability problems | REJECTED | |
|
Reason: incorrect upload target; upload hit stable-new, not backports |
||||
| libmodule-scandeps-perl | 1.31-2+deb12u1 | Installability problems | ACCEPTED | |
|
DSA: 5816 CVEs referenced: CVE-2024-10224 |
||||
| libpgjava | 42.5.5-0+deb12u1 | Installability problems | ACCEPTED | |
|
Reason: fix SQL injection issue [CVE-2024-1597] Request: 1090757 CVEs referenced: CVE-2024-1597 Binary debdiffs: all Lintian issues: all |
||||
| libsoup2.4 | 2.74.3-1+deb12u1 | Installability problems | ACCEPTED | |
|
Reason: prevent HTTP request smuggling [CVE-2024-52530]; fix buffer overflow in soup_header_parse_param_list_strict [CVE-2024-52531]; fix DoS reading from WebSocket clients [CVE-2024-52532] Request: 1089688 Closes: 1088812 1089238 1089240 CVEs referenced: CVE-2024-52530 CVE-2024-52531 CVE-2024-52532 |
||||
| linux | 6.1.119-1 | Installability problems | ACCEPTED | |
|
DSA: 5818 µdebs: present Closes: 1062421 1085762 1086447 1087602 CVEs referenced: CVE-2022-45888 CVE-2023-52812 CVE-2024-26952 CVE-2024-26954 CVE-2024-35964 CVE-2024-36244 CVE-2024-36478 CVE-2024-36914 CVE-2024-36923 CVE-2024-38540 CVE-2024-38553 CVE-2024-41080 CVE-2024-42322 CVE-2024-43904 CVE-2024-43911 CVE-2024-44949 CVE-2024-49950 CVE-2024-49960 CVE-2024-49974 CVE-2024-49986 CVE-2024-49991 CVE-2024-50012 CVE-2024-50036 CVE-2024-50067 CVE-2024-50072 CVE-2024-50126 CVE-2024-50215 CVE-2024-50218 CVE-2024-50228 CVE-2024-50229 CVE-2024-50230 CVE-2024-50232 CVE-2024-50234 CVE-2024-50235 CVE-2024-50236 CVE-2024-50237 CVE-2024-50242 CVE-2024-50243 CVE-2024-50244 CVE-2024-50245 CVE-2024-50247 CVE-2024-50249 CVE-2024-50250 CVE-2024-50251 CVE-2024-50255 CVE-2024-50256 CVE-2024-50257 CVE-2024-50259 CVE-2024-50261 CVE-2024-50262 CVE-2024-50267 CVE-2024-50269 CVE-2024-50271 CVE-2024-50272 CVE-2024-50273 CVE-2024-50276 CVE-2024-50278 CVE-2024-50279 CVE-2024-50280 CVE-2024-50282 CVE-2024-50283 CVE-2024-50284 CVE-2024-50286 CVE-2024-50287 CVE-2024-50290 CVE-2024-50296 CVE-2024-50299 CVE-2024-50301 CVE-2024-50302 CVE-2024-53042 CVE-2024-53043 CVE-2024-53052 CVE-2024-53054 CVE-2024-53055 CVE-2024-53057 CVE-2024-53058 CVE-2024-53059 CVE-2024-53060 CVE-2024-53061 CVE-2024-53063 CVE-2024-53066 CVE-2024-53072 CVE-2024-53081 CVE-2024-53082 CVE-2024-53088 CVE-2024-53093 Binary debdiffs: allamd64arm64armelarmhfi386mips64elmipselppc64els390x Lintian issues: amd64arm64armhfi386mips64elmipselppc64els390x |
||||
| linux-signed-amd64 | 6.1.119+1 | Installability problems amd64 | ACCEPTED | |
|
DSA: 5818 µdebs: present Closes: 1062421 1085762 1086447 1087602 CVEs referenced: CVE-2022-45888 CVE-2023-52812 CVE-2024-26952 CVE-2024-26954 CVE-2024-35964 CVE-2024-36244 CVE-2024-36478 CVE-2024-36914 CVE-2024-36923 CVE-2024-38540 CVE-2024-38553 CVE-2024-41080 CVE-2024-42322 CVE-2024-43904 CVE-2024-43911 CVE-2024-44949 CVE-2024-49950 CVE-2024-49960 CVE-2024-49974 CVE-2024-49986 CVE-2024-49991 CVE-2024-50012 CVE-2024-50036 CVE-2024-50067 CVE-2024-50072 CVE-2024-50126 CVE-2024-50215 CVE-2024-50218 CVE-2024-50228 CVE-2024-50229 CVE-2024-50230 CVE-2024-50232 CVE-2024-50234 CVE-2024-50235 CVE-2024-50236 CVE-2024-50237 CVE-2024-50242 CVE-2024-50243 CVE-2024-50244 CVE-2024-50245 CVE-2024-50247 CVE-2024-50249 CVE-2024-50250 CVE-2024-50251 CVE-2024-50255 CVE-2024-50256 CVE-2024-50257 CVE-2024-50259 CVE-2024-50261 CVE-2024-50262 CVE-2024-50267 CVE-2024-50269 CVE-2024-50271 CVE-2024-50272 CVE-2024-50273 CVE-2024-50276 CVE-2024-50278 CVE-2024-50279 CVE-2024-50280 CVE-2024-50282 CVE-2024-50283 CVE-2024-50284 CVE-2024-50286 CVE-2024-50287 CVE-2024-50290 CVE-2024-50296 CVE-2024-50299 CVE-2024-50301 CVE-2024-50302 CVE-2024-53042 CVE-2024-53043 CVE-2024-53052 CVE-2024-53054 CVE-2024-53055 CVE-2024-53057 CVE-2024-53058 CVE-2024-53059 CVE-2024-53060 CVE-2024-53061 CVE-2024-53063 CVE-2024-53066 CVE-2024-53072 CVE-2024-53081 CVE-2024-53082 CVE-2024-53088 CVE-2024-53093 Binary debdiffs: amd64 Lintian issues: source |
||||
| linux-signed-arm64 | 6.1.119+1 | Installability problems arm64 | ACCEPTED | |
|
DSA: 5818 µdebs: present Closes: 1062421 1085762 1086447 1087602 CVEs referenced: CVE-2022-45888 CVE-2023-52812 CVE-2024-26952 CVE-2024-26954 CVE-2024-35964 CVE-2024-36244 CVE-2024-36478 CVE-2024-36914 CVE-2024-36923 CVE-2024-38540 CVE-2024-38553 CVE-2024-41080 CVE-2024-42322 CVE-2024-43904 CVE-2024-43911 CVE-2024-44949 CVE-2024-49950 CVE-2024-49960 CVE-2024-49974 CVE-2024-49986 CVE-2024-49991 CVE-2024-50012 CVE-2024-50036 CVE-2024-50067 CVE-2024-50072 CVE-2024-50126 CVE-2024-50215 CVE-2024-50218 CVE-2024-50228 CVE-2024-50229 CVE-2024-50230 CVE-2024-50232 CVE-2024-50234 CVE-2024-50235 CVE-2024-50236 CVE-2024-50237 CVE-2024-50242 CVE-2024-50243 CVE-2024-50244 CVE-2024-50245 CVE-2024-50247 CVE-2024-50249 CVE-2024-50250 CVE-2024-50251 CVE-2024-50255 CVE-2024-50256 CVE-2024-50257 CVE-2024-50259 CVE-2024-50261 CVE-2024-50262 CVE-2024-50267 CVE-2024-50269 CVE-2024-50271 CVE-2024-50272 CVE-2024-50273 CVE-2024-50276 CVE-2024-50278 CVE-2024-50279 CVE-2024-50280 CVE-2024-50282 CVE-2024-50283 CVE-2024-50284 CVE-2024-50286 CVE-2024-50287 CVE-2024-50290 CVE-2024-50296 CVE-2024-50299 CVE-2024-50301 CVE-2024-50302 CVE-2024-53042 CVE-2024-53043 CVE-2024-53052 CVE-2024-53054 CVE-2024-53055 CVE-2024-53057 CVE-2024-53058 CVE-2024-53059 CVE-2024-53060 CVE-2024-53061 CVE-2024-53063 CVE-2024-53066 CVE-2024-53072 CVE-2024-53081 CVE-2024-53082 CVE-2024-53088 CVE-2024-53093 Binary debdiffs: arm64 Lintian issues: source |
||||
| linux-signed-i386 | 6.1.119+1 | Installability problems i386 | ACCEPTED | |
|
DSA: 5818 µdebs: present Closes: 1062421 1085762 1086447 1087602 CVEs referenced: CVE-2022-45888 CVE-2023-52812 CVE-2024-26952 CVE-2024-26954 CVE-2024-35964 CVE-2024-36244 CVE-2024-36478 CVE-2024-36914 CVE-2024-36923 CVE-2024-38540 CVE-2024-38553 CVE-2024-41080 CVE-2024-42322 CVE-2024-43904 CVE-2024-43911 CVE-2024-44949 CVE-2024-49950 CVE-2024-49960 CVE-2024-49974 CVE-2024-49986 CVE-2024-49991 CVE-2024-50012 CVE-2024-50036 CVE-2024-50067 CVE-2024-50072 CVE-2024-50126 CVE-2024-50215 CVE-2024-50218 CVE-2024-50228 CVE-2024-50229 CVE-2024-50230 CVE-2024-50232 CVE-2024-50234 CVE-2024-50235 CVE-2024-50236 CVE-2024-50237 CVE-2024-50242 CVE-2024-50243 CVE-2024-50244 CVE-2024-50245 CVE-2024-50247 CVE-2024-50249 CVE-2024-50250 CVE-2024-50251 CVE-2024-50255 CVE-2024-50256 CVE-2024-50257 CVE-2024-50259 CVE-2024-50261 CVE-2024-50262 CVE-2024-50267 CVE-2024-50269 CVE-2024-50271 CVE-2024-50272 CVE-2024-50273 CVE-2024-50276 CVE-2024-50278 CVE-2024-50279 CVE-2024-50280 CVE-2024-50282 CVE-2024-50283 CVE-2024-50284 CVE-2024-50286 CVE-2024-50287 CVE-2024-50290 CVE-2024-50296 CVE-2024-50299 CVE-2024-50301 CVE-2024-50302 CVE-2024-53042 CVE-2024-53043 CVE-2024-53052 CVE-2024-53054 CVE-2024-53055 CVE-2024-53057 CVE-2024-53058 CVE-2024-53059 CVE-2024-53060 CVE-2024-53061 CVE-2024-53063 CVE-2024-53066 CVE-2024-53072 CVE-2024-53081 CVE-2024-53082 CVE-2024-53088 CVE-2024-53093 Binary debdiffs: i386 Lintian issues: source |
||||
| live-boot | 1:20230131+deb12u1 | Installability problems | ACCEPTED | |
|
Reason: attempt DHCP on all connected interfaces Request: 1088638 Closes: 1069048 |
||||
| llvm-toolchain-19 | 1:19.1.4-1~deb12u1 | Installability problems c-i failed: llvm-toolchain-19/1:19.1.4-1~deb12u1 [amd64] llvm-toolchain-19/1:19.1.4-1~deb12u1 [arm64] | ACCEPTED | |
|
Reason: new source package, to support builds of chromium Request: 1088699 Binary debdiffs: arm64-neededarmel-neededarmhf-neededi386-neededmips64el-neededmipsel-neededppc64el-neededs390x-needed Lintian issues: allamd64arm64-neededarmel-neededarmhf-neededi386-neededmips64el-neededmipsel-neededppc64el-neededs390x-needed |
||||
| mailmindr | 1.7.1-1~deb12u1 | Installability problems | ACCEPTED | |
|
Reason: update for Thunderbird 128 compatibility Request: 1082115 Binary debdiffs: all Lintian issues: source
Lock-step with TB128
|
||||
| mariadb | 1:10.11.9-0+deb12u1 | Installability problems | ACCEPTED | |
|
Reason: new upstream stable release; fix security issue [CVE-2024-21096] Missing builds: s390x Request: 1080370 CVEs referenced: CVE-2024-21096 Binary debdiffs: allamd64arm64armelarmhfi386mips64elmipselppc64el |
||||
| mpg123 | 1.31.2-1+deb12u1 | Installability problems | ACCEPTED | |
|
DSA: 5811 Closes: 1086443 CVEs referenced: CVE-2024-10573 |
||||
| needrestart | 3.6-4+deb12u3 | Installability problems | ACCEPTED | |
|
DSA: 5815 |
||||
| needrestart | 3.6-4+deb12u2 | Installability problems | ACCEPTED | |
|
This upload was superseded by a more current one. DSA: 5815 CVEs referenced: CVE-2024-11003 CVE-2024-48990 CVE-2024-48991 CVE-2024-48992 Binary debdiffs: all |
||||
| nfs-utils | 1:2.6.2-4+deb12u1 | Installability problems | ACCEPTED | |
|
Reason: fix referrals when --enable-junction=no Request: 1089700 |
||||
| nss | 2:3.87.1-1+deb12u1 | Installability problems | ACCEPTED | |
|
DSA: 5807 CVEs referenced: CVE-2024-0743 CVE-2024-6602 CVE-2024-6609 |
||||
| nvidia-graphics-drivers | 535.216.01-1~deb12u1 | Installability problems | ACCEPTED | |
|
Reason: upstream stable release [CVE-2024-0126] Request: 1087493 Closes: 1073744 1074350 1077841 1078424 1078425 1078462 1078489 1084844 1085968 CVEs referenced: CVE-2024-0126 |
||||
| nvidia-open-gpu-kernel-modules | 535.216.01-1~deb12u1 | Installability problems amd64 arm64 | ACCEPTED | |
|
Reason: new upstream LTS release [CVE-2024-0126] Request: 1087482 Closes: 1085976 CVEs referenced: CVE-2024-0126 |
||||
| oar | 2.5.9-1+deb12u1 | Installability problems | ACCEPTED | |
|
Reason: add missing dependency on libcgi-fast-perl; fix oar user creation on new installations; fix SVG functions with PHP 8 Request: 1068762 Closes: 1068444 1068711 1068713 Binary debdiffs: allamd64arm64armelarmhfi386mips64elmipselppc64els390x |
||||
| openssh | 1:9.2p1-2+deb12u4 | Installability problems | ACCEPTED | |
|
Reason: always use internal mkdtemp implementation; fix gssapi-keyex declaration; add ssh-gssapi automated test; don't prefer host-bound public key signatures if there was no initial host key; make sntrup761x25519-sha512 key exchange algorithm available without the @openssh.com suffix too Request: 1088969 µdebs: present Closes: 1001186 1041521 1064898 1088248 1088873 Binary debdiffs: amd64arm64armelarmhfi386mips64elmipselppc64els390x Lintian issues: source |
||||
| pgtcl | 1:3.0.0-1+deb12u1 | Installability problems | ACCEPTED | |
|
Reason: install library in default Tcl auto_path Request: 1089599 Closes: 1089166 Binary debdiffs: amd64arm64armelarmhfi386mips64elmipselppc64els390x |
||||
| php8.2 | 8.2.26-1~deb12u1 | Installability problems | ACCEPTED | |
|
DSA: 5819 CVEs referenced: CVE-2024-11233 CVE-2024-11234 CVE-2024-11236 CVE-2024-8929 CVE-2024-8932 Lintian issues: allamd64arm64armelarmhfi386mips64elmipselppc64els390x |
||||
| postgresql-15 | 15.10-0+deb12u1 | Installability problems | ACCEPTED | |
|
DSA: 5812 CVEs referenced: CVE-2024-10978 Binary debdiffs: allamd64arm64armelarmhfi386mips64elmipselppc64els390x Lintian issues: amd64arm64armelarmhfi386mips64elmipselppc64els390x |
||||
| postgresql-15 | 15.9-0+deb12u1 | Installability problems | ACCEPTED | |
|
This upload was superseded by a more current one. DSA: 5812 CVEs referenced: CVE-2024-10976 CVE-2024-10977 CVE-2024-10978 CVE-2024-10979 Binary debdiffs: allamd64arm64armelarmhfi386mips64elppc64els390x Lintian issues: amd64arm64armelarmhfi386mips64elppc64els390x |
||||
| proftpd-dfsg | 1.3.8+dfsg-4+deb12u4 | Installability problems | ACCEPTED | |
|
DSA: 5827 Closes: 1082326 CVEs referenced: CVE-2024-48651 |
||||
| prometheus-node-exporter-collectors | 0.0~git20230203.6f710f8-1+deb12u2 | Installability problems | ACCEPTED | |
|
Reason: reinstate missing `apt_package_cache_timestamp_seconds` metrics; fix apt_upgrades_pending and apt_upgrades_held metrics; improve heuristic for apt update last run time Request: 1086879 Closes: 1077694 Lintian issues: all |
||||
| pypy3 | 7.3.11+dfsg-2+deb12u3 | Installability problems all | ACCEPTED | |
|
Reason: fix email address parsing issue [CVE-2023-27043]; fix possible Server Side Request Forgery issue [CVE-2024-11168]; fix private IP address range parsing [CVE-2024-4032]; fix regular expression based Denial of Service issue [CVE-2024-6232]; fix header injection issue [CVE-2024-6923]; fix denial of service issue [CVE-2024-7592 CVE-2024-8088]; fix command injection issue [CVE-2024-9287] Request: 1091325 CVEs referenced: CVE-2023-27043 CVE-2024-11168 CVE-2024-4032 CVE-2024-6232 CVE-2024-6923 CVE-2024-7592 CVE-2024-8088 CVE-2024-9287 Lintian issues: amd64arm64armelarmhfi386mips64elmipselppc64els390x |
||||
| python-aiohttp | 3.8.4-1+deb12u1 | Installability problems | ACCEPTED | |
|
DSA: 5828 Closes: 1057163 1057164 1062709 1070364 1088109 CVEs referenced: CVE-2023-47627 CVE-2023-49081 CVE-2023-49082 CVE-2024-23334 CVE-2024-30251 CVE-2024-52304 |
||||
| python-django | 3:3.2.19-1+deb12u2 | Installability problems c-i failed: python-django-storages/1.13.2-1 [amd64] python-django-storages/1.13.2-1 [arm64] python-django-storages/1.13.2-1 [armel] python-django-storages/1.13.2-1 [armhf] python-django-storages/1.13.2-1 [i386] python-django-storages/1.13.2-1 [ppc64el] python-django-storages/1.13.2-1 [s390x] | ACCEPTED | |
|
Reason: fix regular expression-based denial of service issue [CVE-2023-36053], denial of service issues [CVE-2024-38875 CVE-2024-39614 CVE-2024-41990 CVE-2024-41991], user enumeration issue [CVE-2024-39329], directory traversal issue [CVE-2024-39330], excessive memory consumption issue [CVE-2024-41989], SQL injection issue [CVE-2024-42005] Request: 1079454 CVEs referenced: CVE-2023-36053 CVE-2024-38875 CVE-2024-39329 CVE-2024-39330 CVE-2024-39614 CVE-2024-41989 CVE-2024-41990 CVE-2024-41991 CVE-2024-42005 Binary debdiffs: all Lintian issues: all |
||||
| python-werkzeug | 2.2.2-3+deb12u1 | Installability problems | ACCEPTED | |
|
Reason: fix denial of service when file upload begins with CR or LF [CVE-2023-46136]; fix arbitrary code execution on developer's machine via the debugger [CVE-2024-34069]; fix denial of service when processing multipart/form-data requests [CVE-2024-49767] Request: 1089079 Closes: 1054553 1070711 1086062 CVEs referenced: CVE-2023-46136 CVE-2024-34069 CVE-2024-49767 |
||||
| python3.11 | 3.11.2-6+deb12u5 | Installability problems | ACCEPTED | |
|
Reason: reject malformed addresses in email.parseaddr() [CVE-2023-27043]; encode newlines in headers in the email module [CVE-2024-6923]; quadratic complexity parsing cookies with backslashes [CVE-2024-7592]; venv activation scripts did't quote paths [CVE-2024-9287]; urllib functions improperly validated bracketed hosts [CVE-2024-11168] Request: 1089071 Closes: 1059298 CVEs referenced: CVE-2023-27043 CVE-2024-11168 CVE-2024-6923 CVE-2024-7592 CVE-2024-9287 Lintian issues: amd64arm64armelarmhfi386mips64elmipselppc64els390x |
||||
| qemu | 1:7.2+dfsg-7+deb12u9 | Installability problems | ACCEPTED | |
|
Reason: update to upstream bugfix release Missing builds: arm64 Request: 1088273 Binary debdiffs: amd64armelarmhfi386mips64elmipselppc64els390x |
||||
| qemu | 1:7.2+dfsg-7+deb12u8 | Installability problems | ACCEPTED | |
|
This upload was superseded by a more current one. Reason: new upstream bugfix release [CVE-2024-7409] Request: 1086572 CVEs referenced: CVE-2024-7409 Binary debdiffs: amd64armelarmhfi386mips64elppc64els390x Lintian issues: amd64 |
||||
| quicktext | 5.16-1~deb12u1 | Installability problems | ACCEPTED | |
|
Reason: update for Thunderbird 128 compatibility Request: 1082111 Binary debdiffs: all Lintian issues: source
Lock-step with TB128
|
||||
| redis | 5:7.0.15-1~deb12u2 | Installability problems | ACCEPTED | |
|
Reason: fix denial of service with malform ACL selectors [CVE-2024-31227]; fix denial of service through unbound pattern matching [CVE-2024-31228]; fix stack overflow [CVE-202431449] Request: 1088709 Closes: 1084805 CVEs referenced: CVE-2024-31227 CVE-2024-31228 CVE-2024-31449 |
||||
| renderdoc | 1.24+dfsg-1+deb12u1 | Installability problems | ACCEPTED | |
|
Reason: fix integer overflows [CVE-2023-33863 CVE-2023-33864]; fix symlink attack vector [CVE-2023-33865] Request: 1089542 Closes: 1037208 CVEs referenced: CVE-2023-33863 CVE-2023-33864 CVE-2023-33865 |
||||
| ruby-doorkeeper | 5.5.0-2+deb12u1 | Installability problems | ACCEPTED | |
|
Reason: prevent skipping of authorization steps [CVE-2023-34246] Request: 1089568 Closes: 1038950 CVEs referenced: CVE-2023-34246 Binary debdiffs: all |
||||
| simplesamlphp | 1.19.7-1+deb12u1 | Installability problems | ACCEPTED | |
|
DSA: 5822 CVEs referenced: CVE-2024-52596 |
||||
| smarty3 | 3.1.47-2+deb12u1 | Installability problems | ACCEPTED | |
|
DSA: 5826 CVEs referenced: CVE-2023-28447 CVE-2024-35226 |
||||
| smarty4 | 4.3.0-1+deb12u2 | Installability problems | ACCEPTED | |
|
DSA: 5830 Closes: 1072529 CVEs referenced: CVE-2024-35226 |
||||
| srt | 1.5.1-1+deb12u1 | Installability problems | ACCEPTED | |
|
Reason: fix dependencies for consumers of the -dev packages Request: 1087067 Closes: 1086751 Binary debdiffs: allamd64arm64armelarmhfi386mips64elmipselppc64els390x |
||||
| symfony | 5.4.23+dfsg-1+deb12u4 | Installability problems | ACCEPTED | |
|
DSA: 5813 CVEs referenced: CVE-2024-50342 CVE-2024-51996 |
||||
| symfony | 5.4.23+dfsg-1+deb12u3 | Installability problems | ACCEPTED | |
|
This upload was superseded by a more current one. DSA: 5809 CVEs referenced: CVE-2024-50340 CVE-2024-50342 CVE-2024-50343 CVE-2024-50345 |
||||
| systemd | 252.33-1~deb12u1 | Installability problems c-i failed: libsoup3/3.2.2-2 [arm64] | ACCEPTED | |
|
Reason: new upstream stable release Request: 1088790 µdebs: present Binary debdiffs: amd64arm64armelarmhfi386mips64elmipselppc64els390x Lintian issues: armel |
||||
| systemd | 252.32-1~deb12u1 | Installability problems | ACCEPTED | |
|
This upload was superseded by a more current one. Reason: new upstream stable release Request: 1087654 µdebs: present |
||||
| tango | 9.3.4+dfsg1-2+deb12u1 | Installability problems | ACCEPTED | |
|
Reason: make the property_* tables compatible with MariaDB 10.11 at install time; add autopkgtest Request: 1089157 Closes: 1062979 Binary debdiffs: all Lintian issues: allamd64arm64armelarmhfi386mips64elmipselppc64els390x |
||||
| tbsync | 4.12-1~deb12u1 | Installability problems all | ACCEPTED | |
|
Reason: update for Thunderbird 128 compatibility Request: 1082029 Binary debdiffs: all Lintian issues: source
Lock-step with TB128
|
||||
| texlive-bin | 2022.20220321.62855-5.1+deb12u2 | Installability problems | ACCEPTED | |
|
Reason: fix data loss when using discretionaries with priorities; fix heap buffer overflow [CVE-2024-25262] Request: 1085395 Closes: 1041441 CVEs referenced: CVE-2024-25262 Lintian issues: armhf |
||||
| thunderbird | 1:128.5.0esr-1~deb12u1 | Installability problems | ACCEPTED | |
|
Missing builds: i386 mips64el s390x DSA: 5821 |
||||
| thunderbird | 1:128.4.3esr-1~deb12u1 | Installability problems | ACCEPTED | |
|
This upload was superseded by a more current one. DSA: 5814 |
||||
| thunderbird | 1:128.4.0esr-1~deb12u1 | Installability problems | ACCEPTED | |
|
This upload was superseded by a more current one. DSA: 5803 |
||||
| tzdata | 2024b-0+deb12u1 | Installability problems | ACCEPTED | |
|
Reason: new upstream release; improve historical data for some zones; confirm lack of leap second for 2024 Request: 1088145 Binary debdiffs: all |
||||
| ucf | 3.0043+nmu1+deb12u1 | Installability problems | ACCEPTED | |
|
Reason: initialise variable subsequently passed to eval Request: 1091196 Closes: 1089015 |
||||
| util-linux | 2.38.1-5+deb12u3 | Installability problems | ACCEPTED | |
|
Reason: fix wider mitigation for CVE-2024-28085 Request: 1088008 µdebs: present CVEs referenced: CVE-2024-28085 |
||||
| webkit2gtk | 2.46.5-1~deb12u1 | Installability problems | ACCEPTED | |
|
Missing builds: mipsel DSA: 5835 Binary debdiffs: amd64arm64armelarmhfi386mips64elppc64els390x Lintian issues: mips64el |
||||
| webkit2gtk | 2.46.4-1~deb12u1 | Installability problems | ACCEPTED | |
|
This upload was superseded by a more current one. DSA: 5823 Binary debdiffs: amd64arm64armelarmhfi386mips64elppc64els390x Lintian issues: mips64el |
||||
| webkit2gtk | 2.46.3-1~deb12u1 | Installability problems | ACCEPTED | |
|
This upload was superseded by a more current one. DSA: 5804 Binary debdiffs: amd64arm64armelarmhfi386mips64elppc64els390x Lintian issues: mips64el |
||||
| xsane | 0.999-12.1~deb12u1 | Installability problems | ACCEPTED | |
|
Reason: add Recommends for firefox-esr as well as firefox Request: 1083004 Closes: 1076101 Binary debdiffs: amd64arm64armelarmhfi386mips64elmipselppc64els390x |
||||
| zfs-linux | 2.1.11-1+deb12u1 | Installability problems | ACCEPTED | |
|
Reason: add missing symbols in libzfs4linux and libzpool5linux; fix dnode dirty test [CVE-2023-49298]; fix sharenfx IPv6 address parsing [CVE-2013-20001]; fixes related to NULL pointer, memory allocation, etc. Request: 1086617 CVEs referenced: CVE-2013-20001 CVE-2023-49298 Lintian issues: allamd64arm64armelarmhfi386mips64elmipselppc64els390x |
||||
| zookeeper | 3.8.0-11+deb12u2 | Installability problems | ACCEPTED | |
|
Reason: fix information disclosure in persistent watchers handling [CVE-2024-23944] Request: 1068888 Closes: 1066947 CVEs referenced: CVE-2024-23944 Binary debdiffs: all Lintian issues: all |
||||