Queue Overview for "proposed-updates"

Removals

List of missing builds
List of missing packages relative to security archive

Resolution Pending (14 uploads for 7 packages)

Package Version Version Problems Installability Problems Architectures Action
chromium 90.0.4430.212-1~deb10u1 Installability problems Built: allamd64armhfi386source Missing: arm64 Ok

DSA: 4917

CVEs referenced: CVE-2021-30506 CVE-2021-30507 CVE-2021-30508 CVE-2021-30509 CVE-2021-30510 CVE-2021-30511 CVE-2021-30512 CVE-2021-30513 CVE-2021-30514 CVE-2021-30515 CVE-2021-30516 CVE-2021-30517 CVE-2021-30518 CVE-2021-30519 CVE-2021-30520

Binary debdiffs: amd64armhfi386

Lintian issues: allamd64armhfi386source

chromium 90.0.4430.93-1~deb10u1 Installability problems Built: allamd64armhfi386source Missing: arm64 Ok

DSA: 4911

CVEs referenced: CVE-2021-21227 CVE-2021-21228 CVE-2021-21229 CVE-2021-21230 CVE-2021-21231 CVE-2021-21232 CVE-2021-21233

Binary debdiffs: amd64armhfi386

Lintian issues: allamd64armhfi386source

chromium 90.0.4430.85-1~deb10u1 Installability problems Built: allamd64i386source Missing: arm64armhf Ok

DSA: 4906

CVEs referenced: CVE-2021-21201 CVE-2021-21202 CVE-2021-21203 CVE-2021-21204 CVE-2021-21205 CVE-2021-21207 CVE-2021-21208 CVE-2021-21209 CVE-2021-21210 CVE-2021-21211 CVE-2021-21212 CVE-2021-21213 CVE-2021-21214 CVE-2021-21215 CVE-2021-21216 CVE-2021-21217 CVE-2021-21218 CVE-2021-21219 CVE-2021-21221 CVE-2021-21222 CVE-2021-21223 CVE-2021-21224 CVE-2021-21225 CVE-2021-21226

Binary debdiffs: amd64i386

Lintian issues: allamd64i386source

octavia 3.0.0-3+deb10u1 Installability problems Built: source More info needed

Reason: some changes need further discussion; too late for 10.2

Request: 941901

Closes: 941897

CVEs referenced: CVE-2019-17134

openvswitch 2.10.7+ds1-0+deb10u1 Installability problems Built: allamd64arm64armelarmhfi386mips64elmipselppc64elsource Missing: mipss390x Ok

DSA: 4852

Closes: 982493

CVEs referenced: CVE-2020-35498

Binary debdiffs: allamd64arm64armelarmhfi386mips64elmipselppc64el

Lintian issues: amd64arm64armelarmhfi386mips64elmipselppc64elsource

openvswitch 2.10.6+ds1-0+deb10u1 Installability problems Built: allamd64arm64armelarmhfi386mips64elmipselppc64elsource Missing: mipss390x Ok

DSA: 4836

Closes: 980132

CVEs referenced: CVE-2015-8011 CVE-2020-27827

Binary debdiffs: allamd64arm64armelarmhfi386mips64elmipselppc64el

Lintian issues: amd64arm64armelarmhfi386mips64elmipselppc64elsource

ring 20190215.1.f152c98~ds1-1+deb10u1 Installability problems Built: source ?

Closes: 986815

CVEs referenced: CVE-2021-21375

samba 2:4.9.5+dfsg-5+deb10u1 Installability problems Built: allsource Missing: amd64arm64armelarmhfi386mipsmips64elmipselppc64els390x Ok

DSA: 4513

CVEs referenced: CVE-2019-10197 

Blocked by #939419; cannot be accepted
thunderbird 1:78.11.0-1~deb10u1 Installability problems Built: allamd64arm64i386mips64elppc64els390xsource Missing: armelarmhf Ok

DSA: 4927

Binary debdiffs: amd64arm64i386mips64elppc64els390x

thunderbird 1:78.10.0-1~deb10u1 Installability problems Built: allamd64arm64i386mips64elppc64els390xsource Missing: armelarmhf Ok

DSA: 4897

Binary debdiffs: amd64arm64i386mips64elppc64els390x

thunderbird 1:78.9.0-1~deb10u1 Installability problems Built: allamd64arm64i386mips64elppc64els390xsource Missing: armelarmhf Ok

DSA: 4876

Binary debdiffs: amd64arm64i386mips64elppc64els390x

thunderbird 1:78.8.0-1~deb10u1 Installability problems Built: allamd64arm64armhfi386mips64elppc64els390xsource Missing: armel Ok

DSA: 4866

Binary debdiffs: amd64arm64armhfi386mips64elppc64els390x

Lintian issues: source

thunderbird 1:78.7.0-1~deb10u1 Installability problems Built: allamd64arm64i386mips64elppc64els390xsource Missing: armelarmhf Ok

DSA: 4842

xen 4.11.4+107-gef32c7afa2-1 Installability problems Built: allamd64arm64armhfi386source ?

DSA: 4931

CVEs referenced: CVE-2021-0089 CVE-2021-26313 CVE-2021-28690 CVE-2021-28692

Pending Processing (0 uploads for 0 packages)

Processed (161 uploads for 130 packages)

Package Version Version Problems Installability Problems Action
apt 1.8.2.3 Installability problems ACCEPTED

Reason: accept suite name changes for repositories by default (e.g. stable -> oldstable)

Request: 987210

Closes: 931566

Binary debdiffs: amd64i386

awstats 7.6+dfsg-2+deb10u1 Installability problems ACCEPTED

Reason: fix remote file access issues [CVE-2020-29600 CVE-2020-35176]

Request: 982996

Closes: 891469 977190

CVEs referenced: CVE-2017-1000501 CVE-2020-29600 CVE-2020-35176

base-files 10.3+deb10u10 Installability problems ACCEPTED

Reason: update /etc/debian_version for the 10.10 point release

berusky2 0.10-7+deb10u1 Installability problems ACCEPTED

Reason: fix segfault at startup

Request: 987719

Closes: 944431

bind9 1:9.11.5.P4+dfsg-5.1+deb10u5 Installability problems ACCEPTED

DSA: 4909

µdebs: present

CVEs referenced: CVE-2021-25214 CVE-2021-25215 CVE-2021-25216

Binary debdiffs: amd64arm64armelarmhfi386mipsmips64elmipselppc64els390x

bind9 1:9.11.5.P4+dfsg-5.1+deb10u4 Installability problems ACCEPTED

This upload was superseded by a more current one.

DSA: 4909

µdebs: present

CVEs referenced: CVE-2021-25214 CVE-2021-25215

Binary debdiffs: amd64arm64armelarmhfi386mipsppc64els390x

chromium 89.0.4389.114-1~deb10u1 Installability problems ACCEPTED

DSA: 4886

CVEs referenced: CVE-2021-21159 CVE-2021-21160 CVE-2021-21161 CVE-2021-21162 CVE-2021-21163 CVE-2021-21165 CVE-2021-21166 CVE-2021-21167 CVE-2021-21168 CVE-2021-21169 CVE-2021-21170 CVE-2021-21171 CVE-2021-21172 CVE-2021-21173 CVE-2021-21174 CVE-2021-21175 CVE-2021-21176 CVE-2021-21177 CVE-2021-21178 CVE-2021-21179 CVE-2021-21180 CVE-2021-21181 CVE-2021-21182 CVE-2021-21183 CVE-2021-21184 CVE-2021-21185 CVE-2021-21186 CVE-2021-21187 CVE-2021-21188 CVE-2021-21189 CVE-2021-21190 CVE-2021-21191 CVE-2021-21192 CVE-2021-21193 CVE-2021-21194 CVE-2021-21195 CVE-2021-21196 CVE-2021-21197 CVE-2021-21198 CVE-2021-21199

Lintian issues: allamd64arm64armhfi386source

clamav 0.103.2+dfsg-0+deb10u1 Installability problems ACCEPTED

Reason: new upstream stable release; fix denial of security issue [CVE-2021-1405]

Request: 987038

Closes: 960843 963853 972974 973619 986622

CVEs referenced: CVE-2021-1252 CVE-2021-1404 CVE-2021-1405

Binary debdiffs: allamd64arm64armelarmhfi386mipsmips64elmipselppc64els390x

Lintian issues: allamd64arm64armelarmhfi386mipsmips64elmipselppc64els390xsource

clevis 11-2+deb10u2 Installability problems ACCEPTED

Reason: fix support for TPMs that only support SHA256

Request: 989701

Closes: 989648

composer 1.8.4-1+deb10u1 Installability problems ACCEPTED

DSA: 4907

CVEs referenced: CVE-2021-29472

connman 1.36-2.1~deb10u2 Installability problems ACCEPTED

Reason: dnsproxy: Check the length of buffers before memcpy [CVE-2021-33833]

Request: 989772

Closes: 989662

CVEs referenced: CVE-2021-33833

crmsh 4.0.0~git20190108.3d56538-3+deb10u1 Installability problems ACCEPTED

Reason: fix code execution issue [CVE-2020-35459]

Request: 986014

Closes: 985376

CVEs referenced: CVE-2020-35459

curl 7.64.0-4+deb10u2 Installability problems ACCEPTED

DSA: 4881

Closes: 965280 965281 968831 977161 977162 977163

CVEs referenced: CVE-2020-8169 CVE-2020-8177 CVE-2020-8231 CVE-2020-8284 CVE-2020-8285 CVE-2020-8286 CVE-2021-22876 CVE-2021-22890

Lintian issues: allamd64arm64armelarmhfi386mipsmips64elmipselppc64els390xsource

dnspython 1.16.0-1+deb10u1 Installability problems ACCEPTED

Reason: XFR: do not attempt to compare to a non-existent "expiration" value

Request: 986673

Closes: 986645

docker.io 18.09.1+dfsg1-7.1+deb10u3 Installability problems ACCEPTED

DSA: 4865

CVEs referenced: CVE-2020-15157 CVE-2020-15257 CVE-2021-21284 CVE-2021-21285

Binary debdiffs: amd64arm64armelarmhfi386ppc64els390x

dput-ng 1.25+deb10u2 Installability problems ACCEPTED

Reason: fix crash in the sftp uploader in case of EACCES from the server; update codenames; make "dcut dm" work for non-uploading DMs; fix a TypeError in http upload exception handling; don't try and construct uploader email from system hostname in .dak-commands files

Request: 985792

Closes: 953357 984466 985618

Binary debdiffs: all

eterm 0.9.6-5+deb10u1 Installability problems ACCEPTED

Reason: fix code execution issue [CVE-2021-33477]

Request: 989702

Closes: 989041

CVEs referenced: CVE-2021-33477

Binary debdiffs: amd64arm64armelarmhfi386mipsmips64elmipselppc64els390x

Lintian issues: source

exactimage 1.0.2-1+deb10u1 Installability problems ACCEPTED

Reason: fix build with C++11 and OpenEXR 2.5.x

Request: 987529

Closes: 968829

Binary debdiffs: amd64arm64armelarmhfi386mipsmips64elmipselppc64els390x

exim4 4.92-8+deb10u6 Installability problems ACCEPTED

DSA: 4912

CVEs referenced: CVE-2020-28007 CVE-2020-28008 CVE-2020-28009 CVE-2020-28010 CVE-2020-28011 CVE-2020-28012 CVE-2020-28013 CVE-2020-28014 CVE-2020-28015 CVE-2020-28017 CVE-2020-28018 CVE-2020-28019 CVE-2020-28021 CVE-2020-28022 CVE-2020-28023 CVE-2020-28024 CVE-2020-28025 CVE-2020-28026 CVE-2021-27216

fig2dev 1:3.2.7a-5+deb10u4 Installability problems ACCEPTED

Reason: fix buffer overflow [CVE-2021-3561]; several output fixes; rebuild testsuite during build and in autopkgtest

Request: 988974

CVEs referenced: CVE-2021-3561

firefox-esr 78.11.0esr-1~deb10u1 Version problems testing (78.10.0esr-1) Installability problems ACCEPTED

DSA: 4925

CVEs referenced: CVE-2021-29967

Lintian issues: armhfi386mipsmipsel

firefox-esr 78.10.0esr-1~deb10u1 Installability problems ACCEPTED

This upload was superseded by a more current one.

DSA: 4895

CVEs referenced: CVE-2021-23961 CVE-2021-23994 CVE-2021-23995 CVE-2021-23998 CVE-2021-23999 CVE-2021-24002 CVE-2021-29945 CVE-2021-29946

Lintian issues: armhfi386mipsmipsel

firefox-esr 78.9.0esr-1~deb10u1 Installability problems ACCEPTED

This upload was superseded by a more current one.

DSA: 4874

CVEs referenced: CVE-2021-23981 CVE-2021-23982 CVE-2021-23984 CVE-2021-23987

Lintian issues: armhfi386mipsmipsel

fluidsynth 1.1.11-1+deb10u1 Installability problems ACCEPTED

Reason: fix use-after-free issue [CVE-2021-28421]

Request: 987494

Closes: 987168

CVEs referenced: CVE-2021-28421

Binary debdiffs: amd64arm64armelarmhfi386mipsmips64elmipselppc64els390x

freediameter 1.2.1-7+deb10u1 Installability problems ACCEPTED

Reason: fix denial of service issue [CVE-2020-6098]

Request: 986112

Closes: 985088

CVEs referenced: CVE-2020-6098

Binary debdiffs: amd64arm64armelarmhfi386mipsmips64elmipselppc64els390x

fwupd 1.2.14-1~deb10u1 Installability problems ACCEPTED

Reason: new upstream stable version

Binary debdiffs: amd64arm64armelarmhfi386mipsmips64elmipselppc64els390x

Lintian issues: source

fwupd 1.2.13-3+deb10u3 Installability problems ACCEPTED

This upload was superseded by a more current one.

Reason: fix generation of the vendor SBAT string; stop using dpkg-dev in fwupd.preinst

Closes: 986779

Binary debdiffs: amd64arm64armelarmhfi386mipsmips64elmipselppc64els390x

fwupd-amd64-signed 1.2.14+1~deb10u1 Installability problems ACCEPTED

Distribution mismatch: buster-proposed-updates

Reason: sync with fwupd

Binary debdiffs: amd64

fwupd-amd64-signed 1.2.13+3+deb10u3 Installability problems ACCEPTED

This upload was superseded by a more current one.

Distribution mismatch: buster-proposed-updates

Reason: sync with fwupd

Binary debdiffs: amd64

fwupd-arm64-signed 1.2.14+1~deb10u1 Installability problems ACCEPTED

Distribution mismatch: buster-proposed-updates

Reason: sync with fwupd

Binary debdiffs: arm64

fwupd-arm64-signed 1.2.13+3+deb10u3 Installability problems ACCEPTED

This upload was superseded by a more current one.

Distribution mismatch: buster-proposed-updates

Reason: sync with fwupd

Binary debdiffs: arm64

fwupd-armhf-signed 1.2.14+1~deb10u1 Installability problems ACCEPTED

Distribution mismatch: buster-proposed-updates

Reason: sync with fwupd

Binary debdiffs: armhf

fwupd-armhf-signed 1.2.13+3+deb10u3 Installability problems ACCEPTED

This upload was superseded by a more current one.

Distribution mismatch: buster-proposed-updates

Reason: sync with fwupd

Binary debdiffs: armhf

fwupd-i386-signed 1.2.14+1~deb10u1 Installability problems ACCEPTED

Distribution mismatch: buster-proposed-updates

Reason: sync with fwupd

Binary debdiffs: i386

fwupd-i386-signed 1.2.13+3+deb10u3 Installability problems ACCEPTED

This upload was superseded by a more current one.

Distribution mismatch: buster-proposed-updates

Reason: sync with fwupd

Binary debdiffs: i386

fwupdate 12-4+deb10u4 Installability problems ACCEPTED

Reason: improve SBAT support

Lintian issues: source

fwupdate-amd64-signed 12+4+deb10u4 Installability problems ACCEPTED

Distribution mismatch: buster-proposed-updates

Reason: sync with fwupdate

Binary debdiffs: amd64

fwupdate-arm64-signed 12+4+deb10u4 Installability problems ACCEPTED

Distribution mismatch: buster-proposed-updates

Reason: sync with fwupdate

Binary debdiffs: arm64

fwupdate-armhf-signed 12+4+deb10u4 Installability problems ACCEPTED

Distribution mismatch: buster-proposed-updates

Reason: sync with fwupdate

Binary debdiffs: armhf

fwupdate-i386-signed 12+4+deb10u4 Installability problems ACCEPTED

Distribution mismatch: buster-proposed-updates

Reason: sync with fwupdate

Binary debdiffs: i386

glib2.0 2.58.3-2+deb10u3 Installability problems ACCEPTED

Reason: fix several integer overflow issues [CVE-2021-27218 CVE-2021-27219]; fix a symlink attack affecting file-roller [CVE-2021-28153]

Request: 986001

µdebs: present

Closes: 982778 982779 984969

CVEs referenced: CVE-2021-27218 CVE-2021-27219 CVE-2021-28153

Lintian issues: allamd64arm64armelarmhfi386mipsmips64elmipselppc64els390xsource

gnutls28 3.6.7-4+deb10u7 Installability problems ACCEPTED

Reason: fix null-pointer dereference issue [CVE-2020-24659]; add several improvements to memory reallocation

Request: 988508

Closes: 969547

CVEs referenced: CVE-2020-24659 CVE-2021-20231 CVE-2021-20232

golang-1.11 1.11.6-1+deb10u4 Installability problems ACCEPTED

DSA: 4848

CVEs referenced: CVE-2020-15586 CVE-2020-16845 CVE-2020-7919 CVE-2021-3114

Lintian issues: allamd64arm64armelarmhfi386mipsmips64elmipselppc64els390xsource

golang-github-docker-docker-credential-helpers 0.6.1-2+deb10u1 Installability problems ACCEPTED

Reason: fix double free issue [CVE-2019-1020014]

Request: 934206

Closes: 933801

CVEs referenced: CVE-2019-1020014

Binary debdiffs: amd64arm64armelarmhfi386mipsmips64elmipselppc64els390x

graphviz 2.40.1-6+deb10u1 Installability problems ACCEPTED

DSA: 4914

Closes: 988000

CVEs referenced: CVE-2020-18032

Binary debdiffs: amd64arm64armelarmhfi386mipsmips64elmipselppc64els390x

gst-libav1.0 1.15.0.1+git20180723+db823502-2+deb10u1 Installability problems ACCEPTED

DSA: 4901

Binary debdiffs: amd64arm64armelarmhfi386mipsmips64elmipselppc64els390x

Lintian issues: amd64arm64armelarmhfi386mipsmips64elmipselppc64els390x

gst-plugins-bad1.0 1.14.4-1+deb10u2 Installability problems ACCEPTED

DSA: 4902

gst-plugins-base1.0 1.14.4-2+deb10u1 Installability problems ACCEPTED

DSA: 4903

gst-plugins-good1.0 1.14.4-1+deb10u1 Installability problems ACCEPTED

DSA: 4900

Closes: 986910 986911

CVEs referenced: CVE-2021-3497 CVE-2021-3498

Binary debdiffs: armelarmhfi386mipsmipsel

Lintian issues: allamd64arm64armelarmhfi386mipsmips64elmipselppc64els390x

gst-plugins-ugly1.0 1.14.4-1+deb10u1 Installability problems ACCEPTED

DSA: 4904

hivex 1.3.18-1+deb10u1 Installability problems ACCEPTED

DSA: 4913

Closes: 988024

CVEs referenced: CVE-2021-3504

Binary debdiffs: amd64arm64armelarmhfi386mipsmips64elmipselppc64els390x

Lintian issues: source

htmldoc 1.9.3-1+deb10u2 Installability problems ACCEPTED

DSA: 4928

CVEs referenced: CVE-2021-23158 CVE-2021-23165 CVE-2021-23180 CVE-2021-23191 CVE-2021-23206 CVE-2021-26252 CVE-2021-26259 CVE-2021-26948

Lintian issues: source

htmldoc 1.9.3-1+deb10u1 Installability problems ACCEPTED

This upload was superseded by a more current one.

Reason: fix buffer overflow issues [CVE-2019-19630 CVE-2021-20308]

Request: 988365

Closes: 984765

CVEs referenced: CVE-2019-19630 CVE-2021-20308

Binary debdiffs: amd64arm64armelarmhfi386mipsmips64elmipselppc64els390x

hyperkitty 1.2.2-1+deb10u1 Installability problems ACCEPTED

DSA: 4922

Closes: 989183

CVEs referenced: CVE-2021-33038

Lintian issues: source

ipmitool 1.8.18-6+deb10u1 Installability problems ACCEPTED

Reason: fix buffer overflow issues [CVE-2020-5208]

Request: 983110

Closes: 950761

CVEs referenced: CVE-2020-5208

Binary debdiffs: amd64arm64armelarmhfi386mipsmips64elmipselppc64els390x

ircii 20190117-1+deb10u1 Installability problems ACCEPTED

Reason: fix denial of service issue [CVE-2021-29376]

Request: 988492

Closes: 986214

CVEs referenced: CVE-2021-29376

isc-dhcp 4.4.1-2+deb10u1 Installability problems ACCEPTED

Reason: fix buffer overrun issue [CVE-2021-25217]

Request: 989420

µdebs: present

Closes: 989157

CVEs referenced: CVE-2021-25217

isync 1.3.0-2.2~deb10u1 Installability problems ACCEPTED

Reason: reject funny mailbox names from IMAP LIST/LSUB [CVE-2021-20247]; fix handling of unexpected APPENDUID response code [CVE-2021-3578]

Request: 989668

Closes: 983351 989564

CVEs referenced: CVE-2021-20247 CVE-2021-3578

Binary debdiffs: amd64arm64armelarmhfi386mipsmips64elmipselppc64els390x

jackson-databind 2.9.8-3+deb10u3 Installability problems ACCEPTED

Reason: fix external entity expansion issue [CVE-2020-25649] and several serialization-related issues [CVE-2020-24616 CVE-2020-24750 CVE-2020-35490 CVE-2020-35491 CVE-2020-35728 CVE-2020-36179 CVE-2020-36180 CVE-2020-36181 CVE-2020-36182 CVE-2020-36183 CVE-2020-36184 CVE-2020-36185 CVE-2020-36186 CVE-2020-36187 CVE-2020-36188 CVE-2020-36189 CVE-2021-20190]

Request: 987489

CVEs referenced: CVE-2020-24616 CVE-2020-24750 CVE-2020-25649 CVE-2020-35490 CVE-2020-35491 CVE-2020-35728 CVE-2020-36179 CVE-2020-36180 CVE-2020-36181 CVE-2020-36182 CVE-2020-36183 CVE-2020-36184 CVE-2020-36185 CVE-2020-36186 CVE-2020-36187 CVE-2020-36188 CVE-2020-36189 CVE-2021-20190

Binary debdiffs: all

Lintian issues: all

klibc 2.0.6-1+deb10u1 Installability problems ACCEPTED

Reason: malloc: Set errno on failure; fix several overflow issues [CVE-2021-31873 CVE-2021-31870 CVE-2021-31872]; cpio: Fix possible crash on 64-bit systems [CVE-2021-31871]; {set,long}jmp [s390x]: save/restore the correct FPU registers

Request: 989509

Closes: 943425 989505

CVEs referenced: CVE-2021-31870 CVE-2021-31871 CVE-2021-31872 CVE-2021-31873

Binary debdiffs: amd64arm64armelarmhfi386mipsmips64elmipselppc64els390x

Lintian issues: amd64arm64armelarmhfi386mipsmips64elmipselppc64els390x

lasso 2.6.0-2+deb10u1 Installability problems ACCEPTED

DSA: 4926

CVEs referenced: CVE-2021-28091

Binary debdiffs: amd64arm64armelarmhfi386mipsmips64elmipselppc64els390x

Lintian issues: mipsmips64elmipsel

ldb 2:1.5.1+really1.4.6-3+deb10u1 Installability problems ACCEPTED

DSA: 4884

Closes: 985935 985936

CVEs referenced: CVE-2020-10730 CVE-2020-27840 CVE-2021-20277

lib3mf 1.8.1+ds-3+deb10u1 Installability problems ACCEPTED

DSA: 4887

Closes: 985092

CVEs referenced: CVE-2021-21772

libbusiness-us-usps-webtools-perl 1.122-1+deb10u1 Installability problems ACCEPTED

Reason: update to new US-USPS API

Request: 988977

Closes: 988330

libgcrypt20 1.8.4-5+deb10u1 Installability problems ACCEPTED

Reason: fix weak ElGamal encryption with keys not generated by GnuPG/libgcrypt [CVE-2021-33560]

Request: 989422

µdebs: present

CVEs referenced: CVE-2021-33560

Binary debdiffs: allamd64arm64armelarmhfi386mipsmips64elmipselppc64els390x

Lintian issues: source

libgetdata 0.10.0-5+deb10u1 Installability problems ACCEPTED

Reason: fix use after free issue [CVE-2021-20204]

Request: 988482

CVEs referenced: CVE-2021-20204

Binary debdiffs: amd64arm64armelarmhfi386mipsmips64elmipselppc64els390x

libhibernate3-java 3.6.10.Final-9+deb10u1 Installability problems ACCEPTED

DSA: 4908

CVEs referenced: CVE-2020-25638

Lintian issues: source

libimage-exiftool-perl 11.16-1+deb10u1 Installability problems ACCEPTED

DSA: 4910

Closes: 987505

CVEs referenced: CVE-2021-22204

libmateweather 1.20.2-1+deb10u1 Installability problems ACCEPTED

Reason: adapt to renaming of America/Godthab to America/Nuuk in tzdata

Request: 989023

Lintian issues: allamd64arm64armelarmhfi386mipsmips64elmipselppc64els390x

librsvg 2.44.10-2.1+deb10u3 Installability problems ACCEPTED

Reason: fix another build failure with rustc 1.41

Missing builds: ppc64el

Binary debdiffs: amd64arm64armhfi386mipsmips64elmipsels390x

librsvg 2.44.10-2.1+deb10u2 Installability problems ACCEPTED

This upload was superseded by a more current one.

Reason: fix build failures with newer rustc, and ppc64el and s390x with the fix for CVE-2019-20446

Request: 966028

CVEs referenced: CVE-2019-20446

librsvg 2.44.10-2.1+deb10u1 Installability problems ACCEPTED

This upload was superseded by a more current one.

Reason: fix denial of service via "billion laughs" attack [CVE-2019-20446]

Request: 966028

CVEs referenced: CVE-2019-20446

libwebp 0.6.1-2+deb10u1 Installability problems ACCEPTED

DSA: 4930

CVEs referenced: CVE-2018-25009 CVE-2018-25010 CVE-2018-25011 CVE-2018-25013 CVE-2018-25014 CVE-2020-36328 CVE-2020-36329 CVE-2020-36330 CVE-2020-36331 CVE-2020-36332

Binary debdiffs: amd64arm64armelarmhfi386mipsmips64elmipselppc64els390x

Lintian issues: amd64arm64armelarmhfi386mipsmips64elmipselppc64els390x

libx11 2:1.6.7-1+deb10u2 Installability problems ACCEPTED

DSA: 4920

µdebs: present

CVEs referenced: CVE-2021-31535

Binary debdiffs: all

Lintian issues: source

libxml2 2.9.4+dfsg1-7+deb10u2 Installability problems ACCEPTED

Reason: fix out-of-bounds read in xmllint [CVE-2020-24977]; fix use-after-free issues in xmllint [CVE-2021-3516 CVE-2021-3518]; validate UTF8 in xmlEncodeEntities [CVE-2021-3517]; propagate error in xmlParseElementChildrenContentDeclPriv; fix exponential entity expansion attack [CVE-2021-3541]

Request: 989768

Closes: 969529 987737 987738 987739 988123 988603

CVEs referenced: CVE-2020-24977 CVE-2021-3516 CVE-2021-3517 CVE-2021-3518 CVE-2021-3537 CVE-2021-3541

liferea 1.12.6-1+deb10u1 Installability problems ACCEPTED

Reason: fix compatibility with webkit2gtk >= 2.32

Request: 987958

Closes: 987448

Lintian issues: source

linux 4.19.194-1 Installability problems ACCEPTED

Reason: new upstream stable release; increase ABI to 17; [rt] Update to 4.19.193-rt81

µdebs: present

Closes: 986949 988352 989451

CVEs referenced: CVE-2020-24586 CVE-2020-24587 CVE-2020-24588 CVE-2020-25670 CVE-2020-25671 CVE-2020-25672 CVE-2020-26139 CVE-2020-26147 CVE-2020-26558 CVE-2020-29374 CVE-2021-0129 CVE-2021-23133 CVE-2021-23134 CVE-2021-28688 CVE-2021-28964 CVE-2021-28971 CVE-2021-28972 CVE-2021-29154 CVE-2021-29155 CVE-2021-29264 CVE-2021-29647 CVE-2021-29650 CVE-2021-31829 CVE-2021-31916 CVE-2021-32399 CVE-2021-33034 CVE-2021-3483 CVE-2021-3506 CVE-2021-3564 CVE-2021-3573 CVE-2021-3587

Binary debdiffs: allamd64arm64armelarmhfi386mipsmips64elmipselppc64els390x

Lintian issues: allamd64arm64armelarmhfi386mipsmips64elmipselppc64els390xsource

linux-latest 105+deb10u12 Installability problems ACCEPTED

Reason: update to 4.19.0-17 ABI

Binary debdiffs: amd64arm64armelarmhfi386mipsmips64elmipselppc64els390x

linux-signed-amd64 4.19.194+1 Installability problems ACCEPTED

Distribution mismatch: buster-proposed-updates

Reason: new upstream stable release; increase ABI to 17; [rt] Update to 4.19.193-rt81

µdebs: present

Closes: 986949 988352 989451

CVEs referenced: CVE-2020-24586 CVE-2020-24587 CVE-2020-24588 CVE-2020-25670 CVE-2020-25671 CVE-2020-25672 CVE-2020-26139 CVE-2020-26147 CVE-2020-26558 CVE-2020-29374 CVE-2021-0129 CVE-2021-23133 CVE-2021-23134 CVE-2021-28688 CVE-2021-28964 CVE-2021-28971 CVE-2021-28972 CVE-2021-29154 CVE-2021-29155 CVE-2021-29264 CVE-2021-29647 CVE-2021-29650 CVE-2021-31829 CVE-2021-31916 CVE-2021-32399 CVE-2021-33034 CVE-2021-3483 CVE-2021-3506 CVE-2021-3564 CVE-2021-3573 CVE-2021-3587

Binary debdiffs: amd64

Lintian issues: amd64

linux-signed-arm64 4.19.194+1 Installability problems ACCEPTED

Distribution mismatch: buster-proposed-updates

Reason: new upstream stable release; increase ABI to 17; [rt] Update to 4.19.193-rt81

µdebs: present

Closes: 986949 988352 989451

CVEs referenced: CVE-2020-24586 CVE-2020-24587 CVE-2020-24588 CVE-2020-25670 CVE-2020-25671 CVE-2020-25672 CVE-2020-26139 CVE-2020-26147 CVE-2020-26558 CVE-2020-29374 CVE-2021-0129 CVE-2021-23133 CVE-2021-23134 CVE-2021-28688 CVE-2021-28964 CVE-2021-28971 CVE-2021-28972 CVE-2021-29154 CVE-2021-29155 CVE-2021-29264 CVE-2021-29647 CVE-2021-29650 CVE-2021-31829 CVE-2021-31916 CVE-2021-32399 CVE-2021-33034 CVE-2021-3483 CVE-2021-3506 CVE-2021-3564 CVE-2021-3573 CVE-2021-3587

Binary debdiffs: arm64

Lintian issues: arm64

linux-signed-i386 4.19.194+1 Installability problems ACCEPTED

Distribution mismatch: buster-proposed-updates

Reason: new upstream stable release; increase ABI to 17; [rt] Update to 4.19.193-rt81

µdebs: present

Closes: 986949 988352 989451

CVEs referenced: CVE-2020-24586 CVE-2020-24587 CVE-2020-24588 CVE-2020-25670 CVE-2020-25671 CVE-2020-25672 CVE-2020-26139 CVE-2020-26147 CVE-2020-26558 CVE-2020-29374 CVE-2021-0129 CVE-2021-23133 CVE-2021-23134 CVE-2021-28688 CVE-2021-28964 CVE-2021-28971 CVE-2021-28972 CVE-2021-29154 CVE-2021-29155 CVE-2021-29264 CVE-2021-29647 CVE-2021-29650 CVE-2021-31829 CVE-2021-31916 CVE-2021-32399 CVE-2021-33034 CVE-2021-3483 CVE-2021-3506 CVE-2021-3564 CVE-2021-3573 CVE-2021-3587

Binary debdiffs: i386

Lintian issues: i386

lxml 4.3.2-1+deb10u3 Installability problems ACCEPTED

DSA: 4880

Closes: 985643

CVEs referenced: CVE-2021-28957

lz4 1.8.3-1+deb10u1 Installability problems ACCEPTED

DSA: 4919

Closes: 987856

CVEs referenced: CVE-2021-3520

Lintian issues: source

mariadb-10.3 1:10.3.29-0+deb10u1 Installability problems ACCEPTED

Reason: new upstream release; security fixes [CVE-2021-2154 CVE-2021-2166 CVE-2021-27928]; fix Innotop support; ship caching_sha2_password.so

Request: 988255

Closes: 941986 962597 977383

CVEs referenced: CVE-2021-2154 CVE-2021-2166 CVE-2021-27928

Binary debdiffs: allamd64arm64armelarmhfi386mipsmips64elmipselppc64els390x

Lintian issues: amd64arm64armelarmhfi386mipsmips64elmipselppc64els390x

mediawiki 1:1.31.14-1~deb10u1 Installability problems ACCEPTED

DSA: 4889

CVEs referenced: CVE-2021-20270 CVE-2021-27291 CVE-2021-30152 CVE-2021-30153 CVE-2021-30154 CVE-2021-30155 CVE-2021-30157 CVE-2021-30158 CVE-2021-30159

mqtt-client 1.14-1+deb10u1 Installability problems ACCEPTED

Reason: fix denial of service issue [CVE-2019-0222]

Request: 988936

Closes: 988109

CVEs referenced: CVE-2019-0222

Binary debdiffs: all

Lintian issues: source

mumble 1.3.0~git20190125.440b173+dfsg-2+deb10u1 Installability problems ACCEPTED

Reason: fix remote code execution issue [CVE-2021-27229]

Request: 987859

Closes: 982904

CVEs referenced: CVE-2021-27229

mupdf 1.14.0+ds1-4+deb10u3 Installability problems ACCEPTED

Reason: fix use-after-free issue [CVE-2020-16600] and double free issue [CVE-2021-3407]

Request: 989530

Closes: 983684 989526

CVEs referenced: CVE-2020-16600 CVE-2021-3407

netty 1:4.1.33-1+deb10u2 Installability problems ACCEPTED

DSA: 4885

CVEs referenced: CVE-2019-20444 CVE-2019-20445 CVE-2020-11612 CVE-2020-7238 CVE-2021-21290 CVE-2021-21295 CVE-2021-21409

Lintian issues: all

nginx 1.14.2-2+deb10u4 Installability problems ACCEPTED

DSA: 4921

Closes: 989095

CVEs referenced: CVE-2021-23017

nmap 7.70+dfsg1-6+deb10u2 Installability problems ACCEPTED

Reason: update included MAC prefix list

Request: 985791

Closes: 953986

node-glob-parent 3.1.0-1+deb10u1 Installability problems ACCEPTED

Reason: fix regular expression denial of service issue [CVE-2020-28469]

Request: 987048

CVEs referenced: CVE-2020-28469

node-handlebars 3:4.1.0-1+deb10u3 Installability problems ACCEPTED

Reason: fix code execution issues [CVE-2019-20920 CVE-2021-23369]

Request: 987042

CVEs referenced: CVE-2019-20920 CVE-2021-23369

node-hosted-git-info 2.7.1-1+deb10u1 Installability problems ACCEPTED

Reason: fix regular expression denial of service issue [CVE-2021-23362]

Request: 985943

CVEs referenced: CVE-2021-23362

node-redis 2.8.0-1+deb10u1 Installability problems ACCEPTED

Reason: fix regular expression denial of service issue [CVE-2021-29469]

Request: 987548

CVEs referenced: CVE-2021-29469

node-ws 1.1.0+ds1.e6ddaae4-5+deb10u1 Installability problems ACCEPTED

Reason: fix regular expression-related denial of service issue [CVE-2021-32640]

Request: 989129

CVEs referenced: CVE-2021-32640

nvidia-graphics-drivers 418.197.02-1 Installability problems ACCEPTED

Reason: fix improper access control vulnerability [CVE-2021-1076]

Request: 987725

Closes: 984881 987216

CVEs referenced: CVE-2021-1076

Binary debdiffs: amd64armhfi386

Lintian issues: amd64i386

nvidia-graphics-drivers-legacy-390xx 390.143-1~deb10u1 Installability problems ACCEPTED

Reason: fix improper access control vulnerability [CVE-2021-1076]; fix installation failure on Linux 5.11 release candidates

Request: 987726

Closes: 984881 987218

CVEs referenced: CVE-2021-1076

Binary debdiffs: amd64armhfi386

Lintian issues: amd64armhfi386

opendmarc 1.3.2-6+deb10u2 Installability problems ACCEPTED

Reason: fix heap overflow issue [CVE-2020-12460]

Request: 987531

Closes: 966464

CVEs referenced: CVE-2020-12460

Lintian issues: source

openjdk-11 11.0.11+9-1~deb10u1 Installability problems ACCEPTED

DSA: 4899

Binary debdiffs: allamd64arm64armelarmhfi386mipsmips64elmipselppc64els390x

Lintian issues: source

openjdk-11-jre-dcevm 11.0.11+9-2~deb10u2 Installability problems ACCEPTED

DSA: 4899

Lintian issues: source

openjdk-11-jre-dcevm 11.0.11+9-2~deb10u1 Installability problems ACCEPTED

This upload was superseded by a more current one.

DSA: 4899

openjpeg2 2.3.0-2+deb10u2 Installability problems ACCEPTED

DSA: 4882

Closes: 950000 950184 965220 983663

CVEs referenced: CVE-2020-15389 CVE-2020-27814 CVE-2020-27823 CVE-2020-27824 CVE-2020-27841 CVE-2020-27842 CVE-2020-27843 CVE-2020-27845 CVE-2020-6851 CVE-2020-8112

openssl 1.1.1d-0+deb10u6 Installability problems ACCEPTED

DSA: 4875

µdebs: present

CVEs referenced: CVE-2021-3449

openvpn 2.4.7-1+deb10u1 Installability problems ACCEPTED

Reason: fix "illegal client float" issue [CVE-2020-11810]; ensure key state is authenticated before sending push reply [CVE-2020-15078]; increase listen() backlog queue to 32

Request: 987731

Closes: 968942 987380

CVEs referenced: CVE-2020-11810 CVE-2020-15078

Lintian issues: source

php-horde-text-filter 2.3.5-3+deb10u2 Installability problems ACCEPTED

Reason: fix cross-site scripting issue [CVE-2021-26929]

Request: 989024

Closes: 982769

CVEs referenced: CVE-2021-26929

php-pear 1:1.10.6+submodules+notgz-1.1+deb10u2 Installability problems ACCEPTED

DSA: 4894

Closes: 980428

CVEs referenced: CVE-2020-36193

plinth 19.1+deb10u2 Installability problems ACCEPTED

Reason: use session to verify first boot welcome step

Request: 986224

postgresql-11 11.12-0+deb10u1 Installability problems ACCEPTED

DSA: 4915

CVEs referenced: CVE-2021-32027 CVE-2021-32028 CVE-2021-32029

Binary debdiffs: all

prosody 0.11.2-1+deb10u2 Installability problems ACCEPTED

DSA: 4916

Closes: 988756

CVEs referenced: CVE-2021-32918

Lintian issues: amd64arm64armelarmhfi386mipsmips64elmipselppc64els390x

prosody 0.11.2-1+deb10u1 Installability problems ACCEPTED

This upload was superseded by a more current one.

DSA: 4916

Binary debdiffs: amd64arm64armelarmhfi386mipsmips64elmipselppc64els390x

pygments 2.3.1+dfsg-1+deb10u2 Installability problems ACCEPTED

DSA: 4878

Closes: 985574

CVEs referenced: CVE-2021-27291

python-bleach 3.1.2-0+deb10u2 Installability problems ACCEPTED

DSA: 4892

Closes: 986251

CVEs referenced: CVE-2021-23980

Lintian issues: allsource

rails 2:5.2.2.1+dfsg-1+deb10u3 Installability problems ACCEPTED

DSA: 4929

Closes: 988214

CVEs referenced: CVE-2021-22880 CVE-2021-22885 CVE-2021-22904

ruby-kramdown 1.17.0-1+deb10u2 Installability problems ACCEPTED

DSA: 4890

Closes: 985569

CVEs referenced: CVE-2021-28834

ruby-rack-cors 1.0.2-1+deb10u1 Installability problems ACCEPTED

DSA: 4918

Closes: 944849

CVEs referenced: CVE-2019-18978

ruby-websocket-extensions 0.1.2-1+deb10u1 Installability problems ACCEPTED

Reason: fix denial of service issue [CVE-2020-7663]

Request: 988454

Closes: 964274

CVEs referenced: CVE-2020-7663

rust-rustyline 3.0.0-2+deb10u3 Installability problems ACCEPTED

Reason: allow building with both rustc 1.34 and 1.41

Request: 988453

Binary debdiffs: amd64arm64armelarmhfi386mipsmips64elmipselppc64els390x

Lintian issues: source

rust-rustyline 3.0.0-2+deb10u2 Installability problems ACCEPTED

This upload was superseded by a more current one.

Reason: reset timestamp on .cargo-vcs-info.json to avoid a lintian auto-reject

Request: 988453

Closes: 989636

Binary debdiffs: amd64arm64armhfi386mipsmips64elmipselppc64els390x

rust-rustyline 3.0.0-2+deb10u1 Installability problems ACCEPTED

This upload was superseded by a more current one.

Reason: fix build with newer rustc

Request: 988453

Closes: 988025

rxvt-unicode 9.22-6+deb10u1 Installability problems ACCEPTED

Reason: disable ESC G Q escape sequence [CVE-2021-33477]

Request: 988962

Closes: 988763

CVEs referenced: CVE-2021-33477

Binary debdiffs: all

sabnzbdplus 2.3.6+dfsg-1+deb10u1 Installability problems ACCEPTED

Reason: fix code execution vulnerability [CVE-2020-13124]

Request: 984604

CVEs referenced: CVE-2020-13124

scrollz 2.2.3-2+deb10u1 Installability problems REJECTED

Distribution mismatch: None

Reason: RoM; incorrect versioning

scrollz 2.2.3-1+deb10u1 Installability problems ACCEPTED

Reason: fix denial of service issue [CVE-2021-29376]

Request: 989623

Closes: 986215

CVEs referenced: CVE-2021-29376

Binary debdiffs: amd64arm64armelarmhfi386mipsmips64elmipselppc64els390x

shibboleth-sp 3.0.4+dfsg1-1+deb10u2 Installability problems ACCEPTED

DSA: 4905

Closes: 987608

shim 15.4-5~deb10u1 Installability problems ACCEPTED

Reason: exit cleanly if installed on a non-EFI system; don't fail if debconf calls return errors

Missing lock-step packages: shim-signed

Binary debdiffs: amd64arm64i386

Lintian issues: amd64arm64i386

shim 15.4-3~deb10u1 Installability problems ACCEPTED

This upload was superseded by a more current one.

Reason: add maintainer scripts to the template packages to manage installing and removing fbXXX.efi and mmXXX.efi when we install/remove the shim-helpers-$arch-signed packages

Closes: 966845

Binary debdiffs: amd64arm64i386

Lintian issues: amd64arm64i386

shim 15.4-2~deb10u1 Installability problems ACCEPTED

This upload was superseded by a more current one.

Reason: don't call QueryVariableInfo() on EFI 1.10 machines (e.g. older Intel Macs); fix handling of ignore_db and user_insecure_mode

Binary debdiffs: amd64arm64i386

Lintian issues: amd64arm64i386

shim 15.4-1~deb10u1 Installability problems ACCEPTED

This upload was superseded by a more current one.

Reason: new upstream release; fix SBAT and ARM64 support; fix i386 binary relocations

Binary debdiffs: amd64arm64i386

Lintian issues: amd64arm64i386

shim 15.3-1~deb10u3 Installability problems ACCEPTED

This upload was superseded by a more current one.

Reason: only include the upstream version in the Debian SBAT metadata, helping reproducibility

Binary debdiffs: amd64arm64i386

Lintian issues: amd64arm64i386

shim 15.3-1~deb10u2 Installability problems ACCEPTED

This upload was superseded by a more current one.

Reason: new upstream release; add SBAT support

Binary debdiffs: amd64arm64i386

Lintian issues: amd64arm64i386

shim 15.3-1~deb10u1 Installability problems ACCEPTED

This upload was superseded by a more current one.

Reason: new upstream release; add SBAT support

shim-helpers-amd64-signed 1+15.4+5~deb10u1 Installability problems ACCEPTED

Distribution mismatch: buster-proposed-updates

Reason: sync with shim

Binary debdiffs: amd64

shim-helpers-amd64-signed 1+15.4+3~deb10u1 Installability problems REJECTED

Distribution mismatch: None

Reason: sync with shim 

Corresponds to superseded shim version
shim-helpers-amd64-signed 1+15.4+2~deb10u1 Installability problems ACCEPTED

This upload was superseded by a more current one.

Distribution mismatch: buster-proposed-updates

Reason: sync with shim

Binary debdiffs: amd64

shim-helpers-arm64-signed 1+15.4+5~deb10u1 Installability problems ACCEPTED

Distribution mismatch: buster-proposed-updates

Reason: sync with shim

Binary debdiffs: arm64

shim-helpers-arm64-signed 1+15.4+3~deb10u1 Installability problems REJECTED

Distribution mismatch: None

Reason: sync with shim 

Corresponds to superseded shim version
shim-helpers-arm64-signed 1+15.4+2~deb10u1 Installability problems ACCEPTED

This upload was superseded by a more current one.

Distribution mismatch: buster-proposed-updates

Reason: sync with shim

Binary debdiffs: arm64

shim-helpers-i386-signed 1+15.4+5~deb10u1 Installability problems ACCEPTED

Distribution mismatch: buster-proposed-updates

Reason: sync with shim

Binary debdiffs: i386

shim-helpers-i386-signed 1+15.4+3~deb10u1 Installability problems REJECTED

Distribution mismatch: None

Reason: sync with shim 

Corresponds to superseded shim version
shim-helpers-i386-signed 1+15.4+2~deb10u1 Installability problems ACCEPTED

This upload was superseded by a more current one.

Distribution mismatch: buster-proposed-updates

Reason: sync with shim

Binary debdiffs: i386

shim-signed 1.36~1+deb10u1 Installability problems ACCEPTED

Reason: exit cleanly if installed on a non-EFI system; don't fail if debconf calls return errors; fix documentation links; build against shim-unsigned 15.4-5~deb10u1; add explicit dependency from shim-signed to shim-signed-common

Binary debdiffs: allamd64arm64i386

Lintian issues: source

shim-signed 1.34~1+deb10u1 Installability problems ACCEPTED

This upload was superseded by a more current one.

Reason: update for new shim; multiple bugfixes in postinst and postrm handling; provide unsigned binaries for arm64 (see NEWS.Debian)

Closes: 936002 987339

Binary debdiffs: allamd64arm64i386

Lintian issues: amd64arm64i386

spamassassin 3.4.2-1+deb10u3 Installability problems ACCEPTED

DSA: 4879

Closes: 985962

CVEs referenced: CVE-2020-1946

speedtest-cli 2.0.2-1+deb10u2 Installability problems ACCEPTED

Reason: handle case where ignoreids is empty or contains empty ids

Closes: 986637

squid 4.6-1+deb10u6 Installability problems ACCEPTED

DSA: 4924

Closes: 988891 988892 988893 989043

CVEs referenced: CVE-2021-28651 CVE-2021-28652 CVE-2021-28662 CVE-2021-31806 CVE-2021-31807 CVE-2021-31808

squid 4.6-1+deb10u5 Installability problems ACCEPTED

This upload was superseded by a more current one.

DSA: 4873

Closes: 985068

CVEs referenced: CVE-2020-25097

tnef 1.4.12-1.2+deb10u1 Installability problems ACCEPTED

Reason: fix buffer over-read issue [CVE-2019-18849]

Request: 987246

Closes: 944851

CVEs referenced: CVE-2019-18849

Binary debdiffs: amd64arm64armelarmhfi386mipsmips64elmipselppc64els390x

Lintian issues: amd64arm64armelarmhfi386mipsmips64elmipselppc64els390x

tomcat9 9.0.31-1~deb10u4 Installability problems ACCEPTED

DSA: 4891

CVEs referenced: CVE-2021-25122 CVE-2021-25329

uim 1:1.8.8-4+deb10u5 Installability problems ACCEPTED

Reason: libuim-data: Copy Breaks from uim-data, fixing some upgrade scenarios

Request: 988314

Closes: 988275

Binary debdiffs: all

underscore 1.9.1~dfsg-1+deb10u1 Installability problems ACCEPTED

DSA: 4883

Closes: 986171

user-mode-linux 4.19-1um-1+deb10u1+b1 Installability problems ACCEPTED

Reason: rebuild against Linux kernel 4.19.194-1

Binary debdiffs: amd64i386

velocity 1.7-5+deb10u1 Installability problems ACCEPTED

Reason: fix potential arbitrary code execution issue [CVE-2020-13936]

Request: 988455

Closes: 985220

CVEs referenced: CVE-2020-13936

Binary debdiffs: all

Lintian issues: all

webkit2gtk 2.32.1-1~deb10u1 Installability problems ACCEPTED

DSA: 4923

Binary debdiffs: allamd64arm64armelarmhfi386mipsmips64elmipselppc64els390x

Lintian issues: mipsmips64elmipsel

webkit2gtk 2.30.6-1~deb10u1 Installability problems ACCEPTED

This upload was superseded by a more current one.

DSA: 4877

CVEs referenced: CVE-2020-27918 CVE-2020-29623 CVE-2020-9947 CVE-2021-1765 CVE-2021-1789 CVE-2021-1799 CVE-2021-1801 CVE-2021-1870

Binary debdiffs: allamd64arm64armelarmhfi386mipsmips64elmipselppc64els390x

Lintian issues: mipsmips64elmipsel

wml 2.12.2~ds1-3~deb10u1 Installability problems ACCEPTED

Reason: fix regression in Unicode handling

Request: 989132

wordpress 5.0.12+dfsg1-0+deb10u1 Installability problems ACCEPTED

DSA: 4896

Closes: 987065

CVEs referenced: CVE-2021-29447 CVE-2021-29450

Lintian issues: source

wpa 2:2.7+git20190128+0c1e29f-6+deb10u3 Installability problems ACCEPTED

DSA: 4898

µdebs: present

Closes: 976106 981971

CVEs referenced: CVE-2020-12695 CVE-2021-0326 CVE-2021-27803

xen 4.11.4+99-g8bce4698f6-1 Installability problems ACCEPTED

DSA: 4888

CVEs referenced: CVE-2021-26933 CVE-2021-27379

Lintian issues: source

xfce4-weather-plugin 0.8.10-1+deb10u1 Installability problems ACCEPTED

Reason: move to version 2.0 met.no API

Request: 987164

Closes: 969747 970259

Binary debdiffs: amd64arm64armelarmhfi386mipsmips64elmipselppc64els390x

xorg-server 2:1.20.4-1+deb10u3 Installability problems ACCEPTED

DSA: 4893

µdebs: present

CVEs referenced: CVE-2021-3472

Lintian issues: source