| Package |
Version |
Version Problems |
Installability Problems |
Action |
|
alsa-lib
|
1.2.14-1+deb13u1
|
|
|
ACCEPTED
|
|
Reason: fix heap overflow issue [CVE-2026-25068]
Request:
1140507
µdebs: present
Closes:
1126629
CVEs referenced:
CVE-2026-25068
|
|
bash
|
5.2.37-2+b10
|
|
|
ACCEPTED
|
|
Reason: rebuild with updated glibc
Binary debdiffs:
amd64arm64armelarmhfi386ppc64elriscv64s390x
|
|
bettercap
|
2.33.0-1+deb13u1
|
|
|
ACCEPTED
|
|
Reason: fix mysql.server module remote DoS via crafted client handshake [CVE-2026-8276]
Request:
1141973
Closes:
1136448
CVEs referenced:
CVE-2026-8276
|
|
bglibs
|
2.04+dfsg-8+b9
|
|
|
ACCEPTED
|
|
Reason: rebuild with updated glibc
Binary debdiffs:
amd64arm64armelarmhfi386ppc64elriscv64s390x
|
|
busybox
|
1.37.0-6+b9
|
|
|
ACCEPTED
|
|
Reason: rebuild with updated glibc
µdebs: present
Binary debdiffs:
amd64arm64armelarmhfi386ppc64elriscv64s390x
|
|
catatonit
|
0.2.1-2+b14
|
|
|
ACCEPTED
|
|
Reason: rebuild with updated glibc
Binary debdiffs:
amd64arm64armelarmhfi386ppc64elriscv64s390x
|
|
cdebootstrap
|
0.7.9+b13
|
|
|
ACCEPTED
|
|
Reason: rebuild with updated glibc
Binary debdiffs:
amd64arm64armelarmhfi386ppc64elriscv64s390x
|
|
chkrootkit
|
0.58b-5+b8
|
|
|
ACCEPTED
|
|
Reason: rebuild with updated glibc
Binary debdiffs:
amd64arm64armelarmhfi386ppc64elriscv64s390x
|
|
chromium
|
150.0.7871.124-1~deb13u1
|
|
|
ACCEPTED
|
|
DSA:
6390
CVEs referenced:
CVE-2026-15764
CVE-2026-15765
CVE-2026-15766
CVE-2026-15767
CVE-2026-15768
CVE-2026-15769
CVE-2026-15770
CVE-2026-15771
CVE-2026-15772
CVE-2026-15773
CVE-2026-15774
CVE-2026-15775
CVE-2026-15776
CVE-2026-15777
CVE-2026-15778
Lintian issues:
source
|
|
chromium
|
150.0.7871.114-1~deb13u1
|
|
|
ACCEPTED
|
|
This upload was superseded by a more current one.
DSA:
6387
CVEs referenced:
CVE-2026-15107
CVE-2026-15108
CVE-2026-15109
CVE-2026-15110
CVE-2026-15111
CVE-2026-15112
CVE-2026-15113
CVE-2026-15114
CVE-2026-15115
CVE-2026-15116
CVE-2026-15117
CVE-2026-15118
CVE-2026-15119
CVE-2026-15120
CVE-2026-15121
CVE-2026-15122
CVE-2026-15123
CVE-2026-15124
CVE-2026-15125
CVE-2026-15126
CVE-2026-15127
CVE-2026-15128
CVE-2026-15129
CVE-2026-15130
CVE-2026-15131
CVE-2026-15132
CVE-2026-15133
|
|
condor
|
23.9.6+dfsg-2.1+b10
|
|
|
ACCEPTED
|
|
Reason: rebuild with updated glibc
Binary debdiffs:
arm64armelarmhfi386ppc64elriscv64s390x
|
|
curl
|
8.14.1-2+deb13u5
|
|
c-i failed:
dovecot-fts-xapian/1.9.1-1.1 [armel]
libmicrohttpd/1.0.1-4 [i386]
libsoup2.4/2.74.3-10.1 [s390x]
live-build/1:20250505+deb13u1 [i386]
mcds/1.9-2 [s390x]
mutt-wizard/3.3.1-4 [armel]
mutt-wizard/3.3.1-4 [i386]
mutt-wizard/3.3.1-4 [riscv64]
nodejs/20.19.2+dfsg-1+deb13u2 [ppc64el]
nova/2:31.0.0-6+deb13u2 [arm64]
nova/2:31.0.0-6+deb13u2 [ppc64el]
openvswitch/3.5.0-1 [i386]
prometheus-mysqlrouter-exporter/6.0.0-4 [i386]
r-cran-curl/6.2.1+dfsg-1 [arm64]
resource-agents/1:4.16.0-3+deb13u2 [s390x]
ruby-build/20241225.2-1.1 [riscv64]
slurm-wlm/24.11.5-4 [armhf]
xmltooling/3.3.0-2 [i386]
xmltooling/3.3.0-2 [ppc64el]
|
ACCEPTED
|
|
Reason: fix OpenSSL engine loading return value; remove trailing whitespaces causing test failures
Request:
1142086
Closes:
1137539
CVEs referenced:
CVE-2026-3784
|
|
dar
|
2.7.17-1+b17
|
|
|
ACCEPTED
|
|
Reason: rebuild with updated curl
Binary debdiffs:
amd64arm64armelarmhfi386ppc64elriscv64s390x
|
|
dhcpcd
|
1:10.1.0-11+deb13u4
|
|
|
ACCEPTED
|
|
Reason: fix IPv6 Neighbor Discovery option parsing to discard advertisements with zero-length options [CVE-2026-14258]
Request:
1142049
CVEs referenced:
CVE-2026-14258
|
|
docker.io
|
26.1.5+dfsg1-9+b14
|
|
|
ACCEPTED
|
|
Reason: rebuild with updated glibc
Binary debdiffs:
amd64arm64armelarmhfi386ppc64elriscv64s390x
|
|
e2fsprogs
|
1.47.2-3+b12
|
|
|
ACCEPTED
|
|
Reason: rebuild with updated glibc
µdebs: present
Binary debdiffs:
amd64arm64armelarmhfi386ppc64elriscv64s390x
|
|
flask
|
3.1.1-1+deb13u1
|
|
c-i failed:
fastapi/0.115.11-4 [arm64]
|
ACCEPTED
|
|
Reason: ensure Vary: Cookie is set on session access [CVE-2026-27205]
Request:
1141544
Closes:
1128620
CVEs referenced:
CVE-2026-27205
|
|
glibc
|
2.41-12+deb13u4
|
|
c-i failed:
berkeley-express/1.5.3+dfsg-3 [i386]
blitz++/1:1.0.2+ds-4.1 [i386]
camlpdf/2.8.1-1 [i386]
chrony/4.6.1-3+deb13u2 [arm64]
cminpack/1.3.6-5 [i386]
containerd/1.7.24~ds1-6+deb13u1 [ppc64el]
cpdb-libs/2.0~b5-1.2 [i386]
curl/8.14.1-2+deb13u4 [armel]
curl/8.14.1-2+deb13u4 [i386]
curl/8.14.1-2+deb13u4 [s390x]
daligner/1.0+git20240119.335105d-3 [i386]
dazzdb/1.0+git20250217.a3eefd4-1 [i386]
dbus-broker/37-2 [riscv64]
dbuskit/0.1.1-13 [ppc64el]
dbuskit/0.1.1-13 [s390x]
dds/2.9.0-10 [i386]
debian-edu-config/2.12.903~deb13u1 [amd64]
debian-edu-config/2.12.903~deb13u1 [armhf]
dmalloc/5.5.2-14 [i386]
dnssec-trigger/0.17+repack-5.3 [s390x]
edflib/1.27-1 [i386]
editorconfig-core/0.12.9+~0.17.1-1 [s390x]
eztrace/2.1.1-6 [s390x]
fakechroot/2.20.1+ds-18 [armhf]
fakechroot/2.20.1+ds-18 [i386]
faketime/0.9.10+2024-06-05+gba9ed5b2-0.6 [ppc64el]
fastdds/3.1.2+ds-1 [armel]
fastdds/3.1.2+ds-1 [ppc64el]
figlet/2.2.5-3 [i386]
fpga-icestorm/0~20250207git7fbf8c0+dfsg1-1 [armhf]
ggd-utils/1.0.0+ds-1 [armhf]
gittuf/0.9.0-5 [armhf]
glyr/1.0.10-2.1 [armhf]
glyr/1.0.10-2.1 [s390x]
gnome-shell/48.7-0+deb13u2 [riscv64]
gobgp/3.36.0-2 [riscv64]
golang-github-anacrolix-missinggo/2.1.0-7 [armel]
golang-github-awslabs-soci-snapshotter/0.4.1-5 [riscv64]
golang-github-go-enry-go-license-detector/4.3.0+git20221007.a3a1cc6-3 [riscv64]
golang-github-xenolf-lego/4.9.1-2 [armhf]
gsocket/1.4.43-4 [armhf]
gsocket/1.4.43-4 [ppc64el]
guile-fibers/1.3.1-5 [riscv64]
hiredict/1.3.1-2 [ppc64el]
hmmer/3.4+dfsg-2 [i386]
ibsim/0.12-1 [i386]
initramfs-tools/0.148.4 [ppc64el]
intel-mkl/2020.4.304-6 [i386]
king-probe/02.21-1 [i386]
ktimetracker/4:5.0.1-3 [s390x]
ladspa-sdk/1.17-1 [i386]
lebiniou/3.66.0-4 [ppc64el]
libapache2-mod-fcgid/1:2.3.9-4 [s390x]
liberasurecode/1.6.3-1 [i386]
libgd2/2.3.3-13 [ppc64el]
libimage-sane-perl/5-2 [amd64]
libmicrohttpd/1.0.1-4 [i386]
libpdl-transform-proj4-perl/2.098-1 [i386]
libsoup2.4/2.74.3-10.1 [amd64]
molly-brown/0.0~git20230820.2068c3b-2 [s390x]
mpdecimal/4.0.1-5 [amd64]
mutter/48.7-0+deb13u1 [amd64]
netperfmeter/1.9.6-1 [i386]
nodejs/20.19.2+dfsg-1+deb13u2 [ppc64el]
notepadqq/2.0.0~beta1-4.1 [arm64]
olm/3.2.16+dfsg-3 [i386]
openrc/0.56-1 [i386]
osk-sdl/0.67.1-4 [s390x]
osm2pgrouting/2.3.8-3 [i386]
php-luasandbox/4.1.2-1 [amd64]
png23d/1.10-3 [i386]
privoxy/4.0.0-2 [s390x]
prometheus-alertmanager/0.28.1+ds-1 [armhf]
prometheus-mysqlrouter-exporter/6.0.0-4 [armhf]
prometheus-mysqlrouter-exporter/6.0.0-4 [i386]
prometheus/2.53.3+ds1-2 [i386]
pycares/4.4.0-2 [ppc64el]
pyinstaller/6.13.0+ds-2 [i386]
r-bioc-rhdf5lib/1.28.0+dfsg-2 [amd64]
r-cran-bio3d/2.4-5-1 [armhf]
r-cran-hexbin/1.28.5-1 [armhf]
r-cran-marginaleffects/0.25.0-1 [armhf]
r-cran-phangorn/2.12.1+dfsg-1 [armhf]
r-cran-riskregression/2023.12.21+ds-1 [arm64]
r-cran-seriation/1.5.7-1 [amd64]
r-cran-seriation/1.5.7-1 [armhf]
r-cran-tm/0.7-16-1 [amd64]
r-cran-tm/0.7-16-1 [armhf]
rust-bkt/0.6.1-2 [ppc64el]
rust-just/1.40.0-1 [ppc64el]
rustup/1.27.1-3 [amd64]
securefs/0.13.1+ds-1 [i386]
shapeit4/4.2.2+dfsg-1 [i386]
sigma-align/1.1.3-9 [armhf]
skimage/0.25.2-2 [armhf]
slm/1.32-3 [amd64]
slurm-wlm/24.11.5-4 [armhf]
sqlalchemy/2.0.40+ds1-1 [s390x]
srpc/0.10.3-2 [armhf]
startpar/0.66-1 [amd64]
startpar/0.66-1 [i386]
startpar/0.66-1 [s390x]
statsprocessor/0.11+git20160316-5 [s390x]
surf-alggeo/1.0.6+ds-7 [armhf]
surf-alggeo/1.0.6+ds-7 [s390x]
sysbench/1.0.20+ds-7 [s390x]
systemtap/5.1-5 [s390x]
terminology/1.14.0-1 [s390x]
tgt/1:1.0.85-1.3 [i386]
toybox/0.8.9+dfsg-1.1 [armhf]
toybox/0.8.9+dfsg-1.1 [i386]
toybox/0.8.9+dfsg-1.1 [s390x]
tup/0.8-1 [i386]
tup/0.8-1 [s390x]
umockdev/0.19.1-3 [s390x]
upower/1.90.9-1 [amd64]
varnish-modules/0.25.0-2 [riscv64]
varnish/7.7.0-3+deb13u1 [riscv64]
xmobar/0.48.1-1 [s390x]
ycmd/0+20240823+git8b61f19+ds-2 [s390x]
|
ACCEPTED
|
|
Reason: fix buffer overflow/underflow issues [CVE-2026-5928 CVE-2026-5450]; compatibility with linux 7.0 headers
Request:
1141178
µdebs: present
Closes:
1134543
1134544
1135405
CVEs referenced:
CVE-2026-5450
CVE-2026-5928
Binary debdiffs:
amd64arm64armelarmhfi386ppc64elriscv64s390x
Lintian issues:
allppc64el
|
|
gnupg2
|
2.4.7-21+deb13u1+b5
|
|
|
ACCEPTED
|
|
Reason: rebuild with updated glibc
µdebs: present
Binary debdiffs:
amd64arm64armelarmhfi386ppc64elriscv64s390x
|
|
imagemagick
|
8:7.1.1.43+dfsg1-1+deb13u11
|
|
c-i failed:
lebiniou/3.66.0-4 [ppc64el]
ruby-rmagick/6.0.1-3 [amd64]
ruby-rmagick/6.0.1-3 [arm64]
ruby-rmagick/6.0.1-3 [armel]
ruby-rmagick/6.0.1-3 [armhf]
ruby-rmagick/6.0.1-3 [i386]
ruby-rmagick/6.0.1-3 [ppc64el]
ruby-rmagick/6.0.1-3 [riscv64]
ruby-rmagick/6.0.1-3 [s390x]
sphinx/8.1.3-5 [ppc64el]
sphinx/8.1.3-5 [s390x]
|
ACCEPTED
|
|
DSA:
6383
CVEs referenced:
CVE-2026-53466
CVE-2026-53467
CVE-2026-55577
CVE-2026-55594
CVE-2026-55597
CVE-2026-55628
CVE-2026-56361
CVE-2026-56363
CVE-2026-56364
CVE-2026-56365
CVE-2026-56367
CVE-2026-56368
CVE-2026-56370
CVE-2026-56371
CVE-2026-56376
CVE-2026-56377
CVE-2026-56378
Binary debdiffs:
amd64arm64armelarmhfi386ppc64elriscv64s390x
Lintian issues:
allamd64arm64armelarmhfi386ppc64elriscv64s390x
|
|
integrit
|
4.1-7+b14
|
|
|
ACCEPTED
|
|
Reason: rebuild with updated glibc
Binary debdiffs:
amd64arm64armelarmhfi386ppc64elriscv64s390x
|
|
libcap2
|
2.75-10+deb13u1+b3
|
|
|
ACCEPTED
|
|
Reason: rebuild with updated glibc
µdebs: present
Binary debdiffs:
amd64arm64armelarmhfi386ppc64elriscv64s390x
|
|
libdatetime-timezone-perl
|
1:2.65-1+2026c
|
|
|
ACCEPTED
|
|
Reason: update to Olson 2026c; Alberta, CA permanently -06; Morocco, permanently 00
Request:
1141842
|
|
libnet-cidr-set-perl
|
0.15-1+deb13u1
|
|
|
ACCEPTED
|
|
Reason: fix IPv4/IPv6 CIDR parsing validation [CVE-2026-49940 CVE-2026-49941 CVE-2026-49942]
Request:
1140005
CVEs referenced:
CVE-2026-49940
CVE-2026-49941
CVE-2026-49942
|
|
libxfont
|
1:2.0.6-1+deb13u1
|
|
|
ACCEPTED
|
|
DSA:
6388
µdebs: present
Closes:
1141702
CVEs referenced:
CVE-2026-56001
CVE-2026-56002
CVE-2026-56003
Binary debdiffs:
amd64arm64armelarmhfi386ppc64elriscv64s390x
Lintian issues:
source
|
|
linux
|
6.12.95-1
|
|
|
ACCEPTED
|
|
DSA:
6381
µdebs: present
Closes:
1136179
1139686
CVEs referenced:
CVE-2025-23131
CVE-2026-31419
CVE-2026-31732
CVE-2026-43010
CVE-2026-43216
CVE-2026-43355
CVE-2026-46242
CVE-2026-52975
CVE-2026-53070
CVE-2026-53101
CVE-2026-53139
CVE-2026-53142
CVE-2026-53151
CVE-2026-53157
CVE-2026-53167
CVE-2026-53179
CVE-2026-53325
CVE-2026-53341
CVE-2026-53359
CVE-2026-53361
CVE-2026-53362
Binary debdiffs:
allamd64arm64armelarmhfi386ppc64elriscv64s390x
Lintian issues:
allamd64arm64armelarmhfi386ppc64elriscv64s390xsource
|
|
linux-signed-amd64
|
6.12.95+1
|
|
amd64
|
ACCEPTED
|
|
DSA:
6381
µdebs: present
Closes:
1136179
1139686
CVEs referenced:
CVE-2025-23131
CVE-2026-31419
CVE-2026-31732
CVE-2026-43010
CVE-2026-43216
CVE-2026-43355
CVE-2026-46242
CVE-2026-52975
CVE-2026-53070
CVE-2026-53101
CVE-2026-53139
CVE-2026-53142
CVE-2026-53151
CVE-2026-53157
CVE-2026-53167
CVE-2026-53179
CVE-2026-53325
CVE-2026-53341
CVE-2026-53359
CVE-2026-53361
CVE-2026-53362
Binary debdiffs:
amd64
Lintian issues:
amd64source
|
|
linux-signed-arm64
|
6.12.95+1
|
|
arm64
|
ACCEPTED
|
|
DSA:
6381
µdebs: present
Closes:
1136179
1139686
CVEs referenced:
CVE-2025-23131
CVE-2026-31419
CVE-2026-31732
CVE-2026-43010
CVE-2026-43216
CVE-2026-43355
CVE-2026-46242
CVE-2026-52975
CVE-2026-53070
CVE-2026-53101
CVE-2026-53139
CVE-2026-53142
CVE-2026-53151
CVE-2026-53157
CVE-2026-53167
CVE-2026-53179
CVE-2026-53325
CVE-2026-53341
CVE-2026-53359
CVE-2026-53361
CVE-2026-53362
Binary debdiffs:
arm64
Lintian issues:
arm64source
|
|
lwip
|
2.2.1+dfsg1-1+deb13u1
|
|
|
ACCEPTED
|
|
Reason: fix SNMPv3 authentication buffer overflow [CVE-2026-8836]
Request:
1138224
CVEs referenced:
CVE-2026-8836
|
|
lxc
|
6.0.4-4+deb13u3+b2
|
|
|
ACCEPTED
|
|
Reason: rebuild with updated glibc
Binary debdiffs:
amd64arm64armelarmhfi386ppc64elriscv64s390x
|
|
mariadb
|
1:11.8.8-0+deb13u1
|
|
c-i running:
slurm-wlm/24.11.5-4 [armhf]
|
ACCEPTED
|
|
Reason: new upstream stable release; fix code execution issues [CVE-2026-44168 CVE-2026-48163 CVE-2026-48165]; fix authorization bypass [CVE-2026-44169]; fix path traversal issue [CVE-2026-44171]; fix SQL injection issue [CVE-2026-44172]; fix incomplete privilege check issue [CVE-2026-44173]; fix "Illegal mix of collations" error; fix "Mroonga hangs on invalid index flag"; fix crash in information_schema.table_constraints
Request:
1140853
Closes:
1104533
1110683
1126850
1127431
1137221
CVEs referenced:
CVE-2026-44168
CVE-2026-44169
CVE-2026-44170
CVE-2026-44171
CVE-2026-44172
CVE-2026-44173
CVE-2026-48163
CVE-2026-48165
Binary debdiffs:
allamd64arm64armelarmhfi386ppc64elriscv64s390x
Lintian issues:
armhf
|
|
ntfs-3g
|
1:2022.10.3-5+deb13u2
|
|
|
ACCEPTED
|
|
DSA:
6389
µdebs: present
CVEs referenced:
CVE-2026-42616
CVE-2026-42617
CVE-2026-42618
CVE-2026-46569
CVE-2026-46570
CVE-2026-46571
CVE-2026-46572
CVE-2026-56135
CVE-2026-56136
|
|
onionshare
|
2.6.3-1+deb13u2
|
|
|
ACCEPTED
|
|
Reason: Prevent writing files in Receive mode when file uploads are disabled [CVE-2026-54707]; Prevent empty folder from being created when no file is uploaded [CVE-2026-54706]
Request:
1141858
Closes:
1139716
1139717
CVEs referenced:
CVE-2026-54706
CVE-2026-54707
Lintian issues:
source
|
|
opam
|
2.3.0-1+deb13u2
|
|
|
ACCEPTED
|
|
DSA:
6386
CVEs referenced:
CVE-2026-57825
|
|
openvpn-dco-dkms
|
0.0+git20241121-1+deb13u1
|
|
|
ACCEPTED
|
|
Reason: fix use-after-free in peer teardown
Request:
1140837
Closes:
1140548
Lintian issues:
all
|
|
patool
|
4.0.0-1+deb13u1
|
|
|
ACCEPTED
|
|
Reason: fix path traversal vulnerability [CVE-2026-29509]
Request:
1141607
CVEs referenced:
CVE-2026-29509
|
|
pgextwlist
|
1.19-1+deb13u1
|
|
|
ACCEPTED
|
|
DSA:
6385
CVEs referenced:
CVE-2023-39417
Lintian issues:
source
|
|
php-guzzlehttp-psr7
|
2.7.1-1+deb13u2
|
|
|
ACCEPTED
|
|
Reason: fix CRLF injection in HTTP start-line parsing [CVE-2026-55766]
Request:
1140425
CVEs referenced:
CVE-2026-55766
|
|
postfix
|
3.10.12-0+deb13u2
|
|
c-i running:
mlmmj/1.5.2-1 [s390x]
|
ACCEPTED
|
|
DSA:
6382
|
|
python-ecdsa
|
0.19.1-1+deb13u1
|
|
|
ACCEPTED
|
|
Reason: prevent exceptions when handling truncated DER [CVE-2026-33936]
Request:
1140299
Closes:
1132164
CVEs referenced:
CVE-2026-33936
|
|
python3.13
|
3.13.5-2+deb13u4
|
|
c-i failed:
ycmd/0+20240823+git8b61f19+ds-2 [riscv64]
|
ACCEPTED
|
|
Reason: fix use-after-free in dict.clear() with embedded values, resolving regression from previous version
Request:
1142261
Closes:
1141977
Lintian issues:
amd64arm64armelarmhfi386ppc64elriscv64s390x
|
|
qemu
|
10.0.11+ds-0+deb13u1+b1
|
|
|
ACCEPTED
|
|
Reason: rebuild with updated glibc
Binary debdiffs:
amd64arm64armelarmhfi386ppc64elriscv64s390x
|
|
refpolicy
|
2:2.20250213-13~deb13u1
|
|
|
ACCEPTED
|
|
Reason: enable usbguard SELinux policy and fix its confinement; fix SELinux policy for PAM login records, chromium clipboard, pulseaudio, systemd-nspawn/passwd-agent, dhcpc/ntp, and sympa file labelling
Request:
1131142
Binary debdiffs:
all
|
|
sash
|
3.8-7+b13
|
|
|
ACCEPTED
|
|
Reason: rebuild with updated glibc
Binary debdiffs:
amd64arm64armelarmhfi386ppc64elriscv64s390x
|
|
sg3-utils
|
1.48-3~deb13u1
|
|
|
ACCEPTED
|
|
Reason: fix missing sg_inq output fields
Request:
1141147
Closes:
1109923
|
|
snapd
|
2.68.3-3+deb13u1+b7
|
|
|
ACCEPTED
|
|
Reason: rebuild with updated glibc
Binary debdiffs:
amd64arm64armelarmhfi386ppc64elriscv64s390x
|
|
sqlite3
|
3.46.1-7+deb13u2
|
|
c-i running:
mistral/20.0.0-2+deb13u1 [s390x]
systemtap/5.1-5 [s390x]
tup/0.8-1 [i386]
tup/0.8-1 [s390x]
|
ACCEPTED
|
|
Reason: fix FTS5 handling of corrupt records [CVE-2026-11822 CVE-2026-11824]
Request:
1141424
CVEs referenced:
CVE-2026-11822
CVE-2026-11824
|
|
tini
|
0.19.0-3+b8
|
|
|
ACCEPTED
|
|
Reason: rebuild with updated glibc
Binary debdiffs:
amd64arm64armelarmhfi386ppc64elriscv64s390x
|
|
tripwire
|
2.4.3.7-6+b18
|
|
|
ACCEPTED
|
|
Reason: rebuild with updated glibc
Binary debdiffs:
amd64arm64armelarmhfi386ppc64elriscv64s390x
|
|
tsocks
|
1.8beta5+ds1-3+b8
|
|
|
ACCEPTED
|
|
Reason: rebuild with updated glibc
Binary debdiffs:
amd64arm64armelarmhfi386ppc64elriscv64s390x
|
|
u-boot
|
2025.01-3+deb13u1
|
|
|
ACCEPTED
|
|
Reason: fix BOOTP/DHCP buffer overread [CVE-2024-42040]; fix FIT signature verification bypass [CVE-2026-46728]
Request:
1140663
Closes:
1081557
1136954
CVEs referenced:
CVE-2024-42040
CVE-2026-46728
|
|
unixodbc
|
2.3.12-2+deb13u1
|
|
|
ACCEPTED
|
|
Reason: fix memory leaks on dlclose()
Request:
1141620
Closes:
1136221
Binary debdiffs:
amd64arm64armelarmhfi386ppc64elriscv64s390x
|
|
user-mode-linux
|
6.12um1+b19
|
|
|
ACCEPTED
|
|
Reason: rebuild with updated linux
Binary debdiffs:
amd64i386
|
|
wolfssl
|
5.7.2-0.1+deb13u2
|
|
|
ACCEPTED
|
|
Reason: fix digest, MAC, and AES-GCM validation [CVE-2026-5194 CVE-2026-6329 CVE-2026-6331 CVE-2026-55967]; fix PKCS7 bounds, overflow, and certificate handling [CVE-2026-6094 CVE-2026-6678 CVE-2026-6681 CVE-2026-7511]; ensure certificate validation [CVE-2026-55960 CVE-2026-55961 CVE-2026-6450 CVE-2026-6731]; fix TLS handshake state and algorithms [CVE-2026-55962 CVE-2026-6092 CVE-2026-6325]
Request:
1141816
CVEs referenced:
CVE-2026-5194
CVE-2026-55960
CVE-2026-55961
CVE-2026-55962
CVE-2026-55967
CVE-2026-6092
CVE-2026-6094
CVE-2026-6325
CVE-2026-6329
CVE-2026-6331
CVE-2026-6450
CVE-2026-6678
CVE-2026-6681
CVE-2026-6731
CVE-2026-7511
Lintian issues:
amd64arm64armelarmhfi386ppc64elriscv64s390x
|
|
xfsprogs
|
6.13.0-2+deb13u1
|
|
|
ACCEPTED
|
|
Reason: avoid unnecessary "permission denied" logging in other services
Request:
1128511
µdebs: present
Closes:
1116595
Binary debdiffs:
amd64arm64armelarmhfi386ppc64elriscv64s390x
|
|
zsh
|
5.9-8+b24
|
|
|
ACCEPTED
|
|
Reason: rebuild with updated glibc
Binary debdiffs:
amd64arm64armelarmhfi386ppc64elriscv64s390x
|