Queue Overview for "proposed-updates"

List of missing builds
List of missing packages relative to security archive

Resolution Pending (6 uploads for 6 packages)

Package Version Version Problems Installability Problems Architectures Action
ansible-core 2.19.11-0+deb13u1 Installability problems Built: source ?

Closes: 1139175

CVEs referenced: CVE-2026-11332

Lintian issues: source

llvm-toolchain-22 1:22.1.8-1~deb13u1 Installability problems amd64 Built: allamd64source ?

Lintian issues: allamd64source

mbedtls 3.6.6-0.1~deb13u1 Installability problems Built: source ?

Closes: 1132577 1133841

CVEs referenced: CVE-2026-25834 CVE-2026-25835 CVE-2026-34872 CVE-2026-34873 CVE-2026-34874 CVE-2026-34875 CVE-2026-34876

node-lodash 4.17.21+dfsg+~cs8.31.198.20210220-9+deb13u1 Installability problems Built: source ?

Closes: 1126265

CVEs referenced: CVE-2025-13465 CVE-2026-2950 CVE-2026-4800

Lintian issues: source

u-boot 2025.01-3+deb13u1 Installability problems Built: source Ok

Reason: fix BOOTP/DHCP buffer overread [CVE-2024-42040]; fix FIT signature verification bypass [CVE-2026-46728]

Request: 1140663

Closes: 1081557 1136954

CVEs referenced: CVE-2024-42040 CVE-2026-46728

unixodbc 2.3.12-2+deb13u1 Installability problems Built: source ?

Closes: 1136221

Pending Processing (0 uploads for 0 packages)

Processed (46 uploads for 46 packages)

Package Version Version Problems Installability Problems Action
alsa-lib 1.2.14-1+deb13u1 Installability problems ACCEPTED

Reason: fix heap overflow issue [CVE-2026-25068]

Request: 1140507

µdebs: present

Closes: 1126629

CVEs referenced: CVE-2026-25068

bash 5.2.37-2+b10 Installability problems ACCEPTED

Reason: rebuild with updated glibc

Binary debdiffs: amd64arm64armelarmhfi386ppc64elriscv64s390x

bettercap 2.33.0-1+deb13u1 Installability problems ACCEPTED

Reason: fix mysql.server module remote DoS via crafted client handshake [CVE-2026-8276]

Request: 1141973

Closes: 1136448

CVEs referenced: CVE-2026-8276

bglibs 2.04+dfsg-8+b9 Installability problems ACCEPTED

Reason: rebuild with updated glibc

Binary debdiffs: amd64arm64armelarmhfi386ppc64elriscv64s390x

busybox 1.37.0-6+b9 Installability problems ACCEPTED

Reason: rebuild with updated glibc

µdebs: present

Binary debdiffs: amd64arm64armelarmhfi386ppc64elriscv64s390x

catatonit 0.2.1-2+b14 Installability problems ACCEPTED

Reason: rebuild with updated glibc

Binary debdiffs: amd64arm64armelarmhfi386ppc64elriscv64s390x

cdebootstrap 0.7.9+b13 Installability problems ACCEPTED

Reason: rebuild with updated glibc

Binary debdiffs: amd64arm64armelarmhfi386ppc64elriscv64s390x

chkrootkit 0.58b-5+b8 Installability problems ACCEPTED

Reason: rebuild with updated glibc

Binary debdiffs: amd64arm64armelarmhfi386ppc64elriscv64s390x

chromium 150.0.7871.114-1~deb13u1 Installability problems ACCEPTED

DSA: 6387

CVEs referenced: CVE-2026-15107 CVE-2026-15108 CVE-2026-15109 CVE-2026-15110 CVE-2026-15111 CVE-2026-15112 CVE-2026-15113 CVE-2026-15114 CVE-2026-15115 CVE-2026-15116 CVE-2026-15117 CVE-2026-15118 CVE-2026-15119 CVE-2026-15120 CVE-2026-15121 CVE-2026-15122 CVE-2026-15123 CVE-2026-15124 CVE-2026-15125 CVE-2026-15126 CVE-2026-15127 CVE-2026-15128 CVE-2026-15129 CVE-2026-15130 CVE-2026-15131 CVE-2026-15132 CVE-2026-15133

Lintian issues: source

condor 23.9.6+dfsg-2.1+b10 Installability problems ACCEPTED

Reason: rebuild with updated glibc

Binary debdiffs: arm64armelarmhfi386ppc64elriscv64s390x

dar 2.7.17-1+b17 Installability problems ACCEPTED

Reason: rebuild with updated glibc

Binary debdiffs: amd64arm64armelarmhfi386ppc64elriscv64s390x

dhcpcd 1:10.1.0-11+deb13u4 Installability problems ACCEPTED

Reason: fix IPv6 Neighbor Discovery option parsing to discard advertisements with zero-length options [CVE-2026-14258]

Request: 1142049

CVEs referenced: CVE-2026-14258

docker.io 26.1.5+dfsg1-9+b14 Installability problems ACCEPTED

Reason: rebuild with updated glibc

Binary debdiffs: amd64arm64armelarmhfi386ppc64elriscv64s390x

e2fsprogs 1.47.2-3+b12 Installability problems ACCEPTED

Reason: rebuild with updated glibc

µdebs: present

Binary debdiffs: amd64arm64armelarmhfi386ppc64elriscv64s390x

flask 3.1.1-1+deb13u1 Installability problems c-i running: fastapi/0.115.11-4 [arm64] ACCEPTED

Reason: ensure Vary: Cookie is set on session access [CVE-2026-27205]

Request: 1141544

Closes: 1128620

CVEs referenced: CVE-2026-27205

glibc 2.41-12+deb13u4 Installability problems c-i failed: berkeley-express/1.5.3+dfsg-3 [i386] blis/1.1-2 [i386] blitz++/1:1.0.2+ds-4.1 [i386] camlpdf/2.8.1-1 [i386] cataclysm-dda/0.H-1 [i386] cffi/1:0.24.1-3 [i386] chrony/4.6.1-3+deb13u2 [arm64] cminpack/1.3.6-5 [i386] cminpack/1.3.6-5 [ppc64el] containerd/1.7.24~ds1-6+deb13u1 [ppc64el] cpdb-libs/2.0~b5-1.2 [armhf] cpdb-libs/2.0~b5-1.2 [i386] cpdb-libs/2.0~b5-1.2 [ppc64el] curl/8.14.1-2+deb13u4 [armel] curl/8.14.1-2+deb13u4 [armhf] curl/8.14.1-2+deb13u4 [i386] curl/8.14.1-2+deb13u4 [ppc64el] curl/8.14.1-2+deb13u4 [s390x] daligner/1.0+git20240119.335105d-3 [armhf] daligner/1.0+git20240119.335105d-3 [i386] dascrubber/1.1-4 [armhf] dascrubber/1.1-4 [i386] dazzdb/1.0+git20250217.a3eefd4-1 [armhf] dazzdb/1.0+git20250217.a3eefd4-1 [i386] dbus-broker/37-2 [riscv64] dbuskit/0.1.1-13 [ppc64el] dbuskit/0.1.1-13 [s390x] dds/2.9.0-10 [i386] debian-edu-config/2.12.903~deb13u1 [amd64] debian-edu-config/2.12.903~deb13u1 [armhf] dmalloc/5.5.2-14 [armhf] dmalloc/5.5.2-14 [i386] dmalloc/5.5.2-14 [ppc64el] dnssec-trigger/0.17+repack-5.3 [ppc64el] dnssec-trigger/0.17+repack-5.3 [riscv64] dnssec-trigger/0.17+repack-5.3 [s390x] edflib/1.27-1 [i386] editorconfig-core/0.12.9+~0.17.1-1 [s390x] esorex/3.13.7+ds-1 [armhf] esorex/3.13.7+ds-1 [i386] eztrace/2.1.1-6 [s390x] fakechroot/2.20.1+ds-18 [armhf] fakechroot/2.20.1+ds-18 [i386] faketime/0.9.10+2024-06-05+gba9ed5b2-0.6 [ppc64el] fastdds/3.1.2+ds-1 [armel] fastdds/3.1.2+ds-1 [ppc64el] fatrace/0.18.0-1 [amd64] festival/1:2.5.0-11 [i386] figlet/2.2.5-3 [armhf] figlet/2.2.5-3 [i386] fldiff/1.1+0-7 [i386] fldiff/1.1+0-7 [ppc64el] fpga-icestorm/0~20250207git7fbf8c0+dfsg1-1 [armhf] gap-io/4.9.1+ds-1 [riscv64] genext2fs/1.5.0-3 [riscv64] ggd-utils/1.0.0+ds-1 [armhf] gittuf/0.9.0-5 [armhf] glyr/1.0.10-2.1 [armhf] glyr/1.0.10-2.1 [s390x] gnome-shell/48.7-0+deb13u2 [riscv64] gobgp/3.36.0-2 [riscv64] golang-github-anacrolix-missinggo/2.1.0-7 [armel] golang-github-awslabs-soci-snapshotter/0.4.1-5 [riscv64] golang-github-go-enry-go-license-detector/4.3.0+git20221007.a3a1cc6-3 [riscv64] golang-github-xenolf-lego/4.9.1-2 [armhf] grpc/1.51.1-6 [arm64] gsocket/1.4.43-4 [armhf] gsocket/1.4.43-4 [ppc64el] guile-fibers/1.3.1-5 [riscv64] healpix-cxx/3.83.0-2 [armhf] hiredict/1.3.1-2 [arm64] hiredict/1.3.1-2 [ppc64el] hmmer/3.4+dfsg-2 [i386] hugo/0.131.0-1 [armhf] ibsim/0.12-1 [armhf] ibsim/0.12-1 [i386] igor/1.4.0+dfsg-5 [armhf] igor/1.4.0+dfsg-5 [i386] initramfs-tools/0.148.4 [ppc64el] intel-mkl/2020.4.304-6 [i386] ipcalc-ng/1.0.3-2 [armhf] isa-support/n/a [armhf] king-probe/02.21-1 [i386] ktimetracker/4:5.0.1-3 [s390x] ladspa-sdk/1.17-1 [armhf] ladspa-sdk/1.17-1 [i386] lebiniou/3.66.0-4 [ppc64el] lfortran/0.45.0-1 [armhf] libaccounts-glib/1.27-1 [ppc64el] libapache2-mod-fcgid/1:2.3.9-4 [s390x] liberasurecode/1.6.3-1 [armhf] liberasurecode/1.6.3-1 [i386] libgd2/2.3.3-13 [armhf] libgd2/2.3.3-13 [ppc64el] libimage-sane-perl/5-2 [amd64] libmicrohttpd/1.0.1-4 [i386] libmicrohttpd/1.0.1-4 [ppc64el] libpdl-transform-proj4-perl/2.098-1 [i386] libsoup2.4/2.74.3-10.1 [amd64] libwebm/1.0.0.31-1 [armhf] lua-bit32/5.3.0-6 [armhf] molly-brown/0.0~git20230820.2068c3b-2 [s390x] mpdecimal/4.0.1-5 [amd64] mutter/48.7-0+deb13u1 [amd64] netperfmeter/1.9.6-1 [i386] nodejs/20.19.2+dfsg-1+deb13u2 [ppc64el] notepadqq/2.0.0~beta1-4.1 [arm64] olm/3.2.16+dfsg-3 [i386] openafs/1.8.13.2-1 [riscv64] openrc/0.56-1 [i386] osk-sdl/0.67.1-4 [s390x] osm2pgrouting/2.3.8-3 [i386] pandas/2.2.3+dfsg-9 [arm64] php-luasandbox/4.1.2-1 [amd64] pirs/2.0.2+dfsg-12 [i386] plr/1:8.4.7-3 [riscv64] png23d/1.10-3 [i386] privoxy/4.0.0-2 [s390x] proda/1.0-14 [armhf] prometheus-alertmanager/0.28.1+ds-1 [armhf] prometheus-mysqlrouter-exporter/6.0.0-4 [armhf] prometheus-mysqlrouter-exporter/6.0.0-4 [i386] prometheus-mysqlrouter-exporter/6.0.0-4 [ppc64el] prometheus/2.53.3+ds1-2 [i386] pycares/4.4.0-2 [ppc64el] pymupdf/1.25.4+ds1-3+deb13u1 [armhf] pymupdf/1.25.4+ds1-3+deb13u1 [i386] r-bioc-rhdf5lib/1.28.0+dfsg-2 [amd64] r-cran-bio3d/2.4-5-1 [armhf] r-cran-dbscan/1.2.2+ds-2 [amd64] r-cran-dbscan/1.2.2+ds-2 [armhf] r-cran-gdtools/0.4.1-1 [amd64] r-cran-gdtools/0.4.1-1 [armhf] r-cran-glmmtmb/1.1.10+dfsg-1 [amd64] r-cran-glmmtmb/1.1.10+dfsg-1 [arm64] r-cran-hexbin/1.28.5-1 [armhf] r-cran-marginaleffects/0.25.0-1 [armhf] r-cran-phangorn/2.12.1+dfsg-1 [amd64] r-cran-phangorn/2.12.1+dfsg-1 [arm64] r-cran-phangorn/2.12.1+dfsg-1 [armhf] r-cran-raster/3.6-31-1 [amd64] r-cran-raster/3.6-31-1 [arm64] r-cran-raster/3.6-31-1 [armhf] r-cran-riskregression/2023.12.21+ds-1 [amd64] r-cran-riskregression/2023.12.21+ds-1 [arm64] r-cran-riskregression/2023.12.21+ds-1 [armhf] r-cran-seriation/1.5.7-1 [amd64] r-cran-seriation/1.5.7-1 [arm64] r-cran-seriation/1.5.7-1 [armhf] r-cran-sp/1:2.2-0+dfsg-1 [amd64] r-cran-sp/1:2.2-0+dfsg-1 [arm64] r-cran-sp/1:2.2-0+dfsg-1 [armhf] r-cran-tm/0.7-16-1 [amd64] r-cran-tm/0.7-16-1 [arm64] r-cran-tm/0.7-16-1 [armhf] resolvconf-admin/0.3-1 [amd64] resolvconf-admin/0.3-1 [arm64] resolvconf-admin/0.3-1 [armhf] resolvconf-admin/0.3-1 [i386] rust-bkt/0.6.1-2 [ppc64el] rust-just/1.40.0-1 [ppc64el] rust-ognibuild/0.0.34-1 [amd64] rustup/1.27.1-3 [amd64] sbcl/2:2.5.2-1 [armhf] sdate/0.7 [armhf] sdate/0.7 [i386] securefs/0.13.1+ds-1 [arm64] securefs/0.13.1+ds-1 [armhf] securefs/0.13.1+ds-1 [i386] seqan2/2.4.0+dfsg-16 [armhf] seqan2/2.4.0+dfsg-16 [i386] shapeit4/4.2.2+dfsg-1 [i386] sigma-align/1.1.3-9 [armhf] sigma-align/1.1.3-9 [i386] skimage/0.25.2-2 [armhf] slic3r-prusa/2.9.2+dfsg-1 [i386] slm/1.32-3 [amd64] slurm-wlm/24.11.5-4 [armhf] sqlalchemy/2.0.40+ds1-1 [amd64] sqlalchemy/2.0.40+ds1-1 [arm64] sqlalchemy/2.0.40+ds1-1 [armhf] sqlalchemy/2.0.40+ds1-1 [i386] sqlalchemy/2.0.40+ds1-1 [s390x] srpc/0.10.3-2 [armhf] startpar/0.66-1 [amd64] startpar/0.66-1 [arm64] startpar/0.66-1 [armhf] startpar/0.66-1 [i386] startpar/0.66-1 [riscv64] startpar/0.66-1 [s390x] statsprocessor/0.11+git20160316-5 [s390x] surf-alggeo/1.0.6+ds-7 [armhf] surf-alggeo/1.0.6+ds-7 [i386] surf-alggeo/1.0.6+ds-7 [s390x] sysbench/1.0.20+ds-7 [s390x] systemtap/5.1-5 [s390x] terminology/1.14.0-1 [armhf] terminology/1.14.0-1 [i386] terminology/1.14.0-1 [s390x] tgt/1:1.0.85-1.3 [armhf] tgt/1:1.0.85-1.3 [i386] toybox/0.8.9+dfsg-1.1 [amd64] toybox/0.8.9+dfsg-1.1 [arm64] toybox/0.8.9+dfsg-1.1 [armhf] toybox/0.8.9+dfsg-1.1 [i386] toybox/0.8.9+dfsg-1.1 [riscv64] toybox/0.8.9+dfsg-1.1 [s390x] tpm2-abrmd/3.0.0-1.2 [armhf] tup/0.8-1 [amd64] tup/0.8-1 [arm64] tup/0.8-1 [armhf] tup/0.8-1 [i386] tup/0.8-1 [riscv64] tup/0.8-1 [s390x] umockdev/0.19.1-3 [s390x] unrar-free/1:0.3.1-1 [armhf] unrar-free/1:0.3.1-1 [riscv64] upower/1.90.9-1 [amd64] upower/1.90.9-1 [riscv64] varnish-modules/0.25.0-2 [riscv64] varnish/7.7.0-3+deb13u1 [riscv64] vorbis-tools/1.4.3-1 [riscv64] xmobar/0.48.1-1 [s390x] ycmd/0+20240823+git8b61f19+ds-2 [s390x] ACCEPTED

Reason: fix buffer overflow/underflow issues [CVE-2026-5928 CVE-2026-5450]; compatibility with linux 7.0 headers

Request: 1141178

µdebs: present

Closes: 1134543 1134544 1135405

CVEs referenced: CVE-2026-5450 CVE-2026-5928

Binary debdiffs: amd64arm64armelarmhfi386ppc64elriscv64s390x

Lintian issues: allppc64el

gnupg2 2.4.7-21+deb13u1+b5 Installability problems ACCEPTED

Reason: rebuild with updated glibc

µdebs: present

Binary debdiffs: amd64arm64armelarmhfi386ppc64elriscv64s390x

imagemagick 8:7.1.1.43+dfsg1-1+deb13u11 Installability problems c-i failed: lebiniou/3.66.0-4 [ppc64el] ruby-rmagick/6.0.1-3 [amd64] ruby-rmagick/6.0.1-3 [arm64] ruby-rmagick/6.0.1-3 [armel] ruby-rmagick/6.0.1-3 [armhf] ruby-rmagick/6.0.1-3 [i386] ruby-rmagick/6.0.1-3 [ppc64el] ruby-rmagick/6.0.1-3 [riscv64] ruby-rmagick/6.0.1-3 [s390x] sphinx/8.1.3-5 [ppc64el] sphinx/8.1.3-5 [s390x] ACCEPTED

DSA: 6383

CVEs referenced: CVE-2026-53466 CVE-2026-53467 CVE-2026-55577 CVE-2026-55594 CVE-2026-55597 CVE-2026-55628 CVE-2026-56361 CVE-2026-56363 CVE-2026-56364 CVE-2026-56365 CVE-2026-56367 CVE-2026-56368 CVE-2026-56370 CVE-2026-56371 CVE-2026-56376 CVE-2026-56377 CVE-2026-56378

Binary debdiffs: amd64arm64armelarmhfi386ppc64elriscv64s390x

Lintian issues: allamd64arm64armelarmhfi386ppc64elriscv64s390x

integrit 4.1-7+b14 Installability problems ACCEPTED

Reason: rebuild with updated glibc

Binary debdiffs: amd64arm64armelarmhfi386ppc64elriscv64s390x

libcap2 2.75-10+deb13u1+b3 Installability problems ACCEPTED

Reason: rebuild with updated glibc

µdebs: present

Binary debdiffs: amd64arm64armelarmhfi386ppc64elriscv64s390x

libdatetime-timezone-perl 1:2.65-1+2026c Installability problems ACCEPTED

Reason: update to Olson 2026c; Alberta, CA permanently -06; Morocco, permanently 00

Request: 1141842

libnet-cidr-set-perl 0.15-1+deb13u1 Installability problems ACCEPTED

Reason: fix IPv4/IPv6 CIDR parsing validation [CVE-2026-49940 CVE-2026-49941 CVE-2026-49942]

Request: 1140005

CVEs referenced: CVE-2026-49940 CVE-2026-49941 CVE-2026-49942

libxfont 1:2.0.6-1+deb13u1 Installability problems ACCEPTED

DSA: 6388

µdebs: present

Closes: 1141702

CVEs referenced: CVE-2026-56001 CVE-2026-56002 CVE-2026-56003

Binary debdiffs: amd64arm64armelarmhfi386ppc64elriscv64s390x

Lintian issues: source

linux 6.12.95-1 Installability problems c-i running: genext2fs/1.5.0-3 [riscv64] ACCEPTED

DSA: 6381

µdebs: present

Closes: 1136179 1139686

CVEs referenced: CVE-2025-23131 CVE-2026-31419 CVE-2026-31732 CVE-2026-43010 CVE-2026-43216 CVE-2026-43355 CVE-2026-46242 CVE-2026-52975 CVE-2026-53070 CVE-2026-53101 CVE-2026-53139 CVE-2026-53142 CVE-2026-53151 CVE-2026-53157 CVE-2026-53167 CVE-2026-53179 CVE-2026-53325 CVE-2026-53341 CVE-2026-53359 CVE-2026-53361 CVE-2026-53362

Binary debdiffs: allamd64arm64armelarmhfi386ppc64elriscv64s390x

Lintian issues: allamd64arm64armelarmhfi386ppc64elriscv64s390xsource

linux-signed-amd64 6.12.95+1 Installability problems amd64 ACCEPTED

DSA: 6381

µdebs: present

Closes: 1136179 1139686

CVEs referenced: CVE-2025-23131 CVE-2026-31419 CVE-2026-31732 CVE-2026-43010 CVE-2026-43216 CVE-2026-43355 CVE-2026-46242 CVE-2026-52975 CVE-2026-53070 CVE-2026-53101 CVE-2026-53139 CVE-2026-53142 CVE-2026-53151 CVE-2026-53157 CVE-2026-53167 CVE-2026-53179 CVE-2026-53325 CVE-2026-53341 CVE-2026-53359 CVE-2026-53361 CVE-2026-53362

Binary debdiffs: amd64

Lintian issues: amd64source

linux-signed-arm64 6.12.95+1 Installability problems arm64 ACCEPTED

DSA: 6381

µdebs: present

Closes: 1136179 1139686

CVEs referenced: CVE-2025-23131 CVE-2026-31419 CVE-2026-31732 CVE-2026-43010 CVE-2026-43216 CVE-2026-43355 CVE-2026-46242 CVE-2026-52975 CVE-2026-53070 CVE-2026-53101 CVE-2026-53139 CVE-2026-53142 CVE-2026-53151 CVE-2026-53157 CVE-2026-53167 CVE-2026-53179 CVE-2026-53325 CVE-2026-53341 CVE-2026-53359 CVE-2026-53361 CVE-2026-53362

Binary debdiffs: arm64

Lintian issues: arm64source

lxc 6.0.4-4+deb13u3+b2 Installability problems ACCEPTED

Reason: rebuild with updated glibc

Binary debdiffs: amd64arm64armelarmhfi386ppc64elriscv64s390x

mariadb 1:11.8.8-0+deb13u1 Installability problems c-i running: slurm-wlm/24.11.5-4 [armhf] ACCEPTED

Reason: new upstream stable release; fix code execution issues [CVE-2026-44168 CVE-2026-48163 CVE-2026-48165]; fix authorization bypass [CVE-2026-44169]; fix path traversal issue [CVE-2026-44171]; fix SQL injection issue [CVE-2026-44172]; fix incomplete privilege check issue [CVE-2026-44173]; fix "Illegal mix of collations" error; fix "Mroonga hangs on invalid index flag"; fix crash in information_schema.table_constraints

Request: 1140853

Closes: 1104533 1110683 1126850 1127431 1137221

CVEs referenced: CVE-2026-44168 CVE-2026-44169 CVE-2026-44170 CVE-2026-44171 CVE-2026-44172 CVE-2026-44173 CVE-2026-48163 CVE-2026-48165

Binary debdiffs: allamd64arm64armelarmhfi386ppc64elriscv64s390x

Lintian issues: armhf

onionshare 2.6.3-1+deb13u2 Installability problems ACCEPTED

Reason: Prevent writing files in Receive mode when file uploads are disabled [CVE-2026-54707]; Prevent empty folder from being created when no file is uploaded [CVE-2026-54706]

Request: 1141858

Closes: 1139716 1139717

CVEs referenced: CVE-2026-54706 CVE-2026-54707

Lintian issues: source

opam 2.3.0-1+deb13u2 Installability problems ACCEPTED

DSA: 6386

CVEs referenced: CVE-2026-57825

pgextwlist 1.19-1+deb13u1 Installability problems ACCEPTED

DSA: 6385

CVEs referenced: CVE-2023-39417

Lintian issues: source

php-guzzlehttp-psr7 2.7.1-1+deb13u2 Installability problems ACCEPTED

Reason: fix CRLF injection in HTTP start-line parsing [CVE-2026-55766]

Request: 1140425

CVEs referenced: CVE-2026-55766

postfix 3.10.12-0+deb13u2 Installability problems c-i running: mlmmj/1.5.2-1 [s390x] ACCEPTED

DSA: 6382

python-ecdsa 0.19.1-1+deb13u1 Installability problems ACCEPTED

Reason: prevent exceptions when handling truncated DER [CVE-2026-33936]

Request: 1140299

Closes: 1132164

CVEs referenced: CVE-2026-33936

qemu 10.0.11+ds-0+deb13u1+b1 Installability problems ACCEPTED

Reason: rebuild with updated glibc

Binary debdiffs: amd64arm64armelarmhfi386ppc64elriscv64s390x

refpolicy 2:2.20250213-13~deb13u1 Installability problems ACCEPTED

Reason: enable usbguard SELinux policy and fix its confinement; fix SELinux policy for PAM login records, chromium clipboard, pulseaudio, systemd-nspawn/passwd-agent, dhcpc/ntp, and sympa file labelling

Request: 1131142

Binary debdiffs: all

sash 3.8-7+b13 Installability problems ACCEPTED

Reason: rebuild with updated glibc

Binary debdiffs: amd64arm64armelarmhfi386ppc64elriscv64s390x

sg3-utils 1.48-3~deb13u1 Installability problems ACCEPTED

Reason: fix missing sg_inq output fields

Request: 1141147

Closes: 1109923

snapd 2.68.3-3+deb13u1+b7 Installability problems ACCEPTED

Reason: rebuild with updated glibc

Binary debdiffs: amd64arm64armelarmhfi386ppc64elriscv64s390x

sqlite3 3.46.1-7+deb13u2 Installability problems c-i running: mistral/20.0.0-2+deb13u1 [s390x] systemtap/5.1-5 [s390x] tup/0.8-1 [i386] tup/0.8-1 [s390x] ACCEPTED

Reason: fix FTS5 handling of corrupt records [CVE-2026-11822 CVE-2026-11824]

Request: 1141424

CVEs referenced: CVE-2026-11822 CVE-2026-11824

tini 0.19.0-3+b8 Installability problems ACCEPTED

Reason: rebuild with updated glibc

Binary debdiffs: amd64arm64armelarmhfi386ppc64elriscv64s390x

tripwire 2.4.3.7-6+b18 Installability problems ACCEPTED

Reason: rebuild with updated glibc

Binary debdiffs: amd64arm64armelarmhfi386ppc64elriscv64s390x

tsocks 1.8beta5+ds1-3+b8 Installability problems ACCEPTED

Reason: rebuild with updated glibc

Binary debdiffs: amd64arm64armelarmhfi386ppc64elriscv64s390x

user-mode-linux 6.12um1+b19 Installability problems ACCEPTED

Reason: rebuild with updated linux

Binary debdiffs: amd64i386

xfsprogs 6.13.0-2+deb13u1 Installability problems ACCEPTED

Reason: avoid unnecessary "permission denied" logging in other services

Request: 1128511

µdebs: present

Closes: 1116595

Binary debdiffs: amd64arm64armelarmhfi386ppc64elriscv64s390x

zsh 5.9-8+b24 Installability problems ACCEPTED

Reason: rebuild with updated glibc

Binary debdiffs: amd64arm64armelarmhfi386ppc64elriscv64s390x