Queue Overview for "proposed-updates"

List of missing builds
List of missing packages relative to security archive

Resolution Pending (6 uploads for 6 packages)

Package Version Version Problems Installability Problems Architectures Action
alsa-lib 1.2.14-1+deb13u1 Installability problems Built: source ?

µdebs: present

Closes: 1126629

CVEs referenced: CVE-2026-25068

ansible-core 2.19.11-0+deb13u1 Installability problems Built: source ?

Closes: 1139175

CVEs referenced: CVE-2026-11332

Lintian issues: source

base-files 13.8+deb13u6 Installability problems Built: source ?
glibc 2.41-12+deb13u4 Installability problems Built: source ?

µdebs: present

Closes: 1134543 1134544 1135405

CVEs referenced: CVE-2026-5450 CVE-2026-5928

mbedtls 3.6.6-0.1~deb13u1 Installability problems Built: source ?

Closes: 1132577 1133841

CVEs referenced: CVE-2026-25834 CVE-2026-25835 CVE-2026-34872 CVE-2026-34873 CVE-2026-34874 CVE-2026-34875 CVE-2026-34876

xz-utils 5.8.3-0+deb13u1 Installability problems Built: source More info needed

Reason: unacceptable churn for simple fix? index issue fixed in 5.8.1-1+deb13u1

Request: 1140802

µdebs: present

Closes: 1132497

CVEs referenced: CVE-2026-34743

Pending Processing (0 uploads for 0 packages)

Processed (244 uploads for 195 packages)

Package Version Version Problems Installability Problems Action
apache2 2.4.68-1~deb13u1 Installability problems ACCEPTED

Reason: fix use-after-free issues [CVE-2026-29167 CVE-2026-48913]; fix cross-site scripting issue [CVE-2026-29170]; fix buffer overflow issues [CVE-2026-34355 CVE-2026-34356 CVE-2026-42536]; fix denial of serice issues [CVE-2026-42535 CVE-2026-44186 CVE-2026-49975]; fix out of bounds read issues [CVE-2026-43951 CVE-2026-44185]; fix file read issue [CVE-2026-44119]; fix buffer underwrite issue [CVE-2026-44631]

Request: 1139713

CVEs referenced: CVE-2026-29167 CVE-2026-29170 CVE-2026-34355 CVE-2026-34356 CVE-2026-42535 CVE-2026-42536 CVE-2026-43951 CVE-2026-44119 CVE-2026-44185 CVE-2026-44186 CVE-2026-44631 CVE-2026-48913 CVE-2026-49975

Binary debdiffs: all

apache2 2.4.67-1~deb13u3 Installability problems ACCEPTED

This upload was superseded by a more current one.

DSA: 6323

CVEs referenced: CVE-2026-49975

archlinux-keyring 0~20260420-1~deb13u1 Installability problems ACCEPTED

Reason: update keys

Request: 1139326

Lintian issues: source

atril 1.26.2-4+deb13u1 Installability problems ACCEPTED

DSA: 6349

Closes: 1139874

CVEs referenced: CVE-2026-46529

Binary debdiffs: amd64arm64armelarmhfi386ppc64elriscv64s390x

awstats 7.9-1+deb13u2 Installability problems ACCEPTED

Reason: prevent freezing on keyword stat

Request: 1138164

Closes: 1135203

beets 2.2.0-3+deb13u1 Installability problems ACCEPTED

Reason: fix XSS vulnerability [CVE-2026-42052]

Request: 1136681

Closes: 1135779

CVEs referenced: CVE-2026-42052

bind9 1:9.20.23-1~deb13u1 Installability problems c-i failed: shadowsocks-libev/3.3.5+ds-16 [armel] ACCEPTED

DSA: 6285

CVEs referenced: CVE-2026-3039 CVE-2026-3592 CVE-2026-3593 CVE-2026-5946 CVE-2026-5947 CVE-2026-5950

Binary debdiffs: amd64arm64armelarmhfi386ppc64elriscv64s390x

Lintian issues: amd64arm64armelarmhfi386ppc64elriscv64s390x

bird2 2.17.5-0+deb13u1 Installability problems ACCEPTED

DSA: 6347

Binary debdiffs: allamd64arm64armelarmhfi386ppc64elriscv64s390x

Lintian issues: source

calibre 8.5.0+ds-1+deb13u3 Installability problems amd64 arm64 armhf i386 ACCEPTED

Reason: fix unsafe e-book extraction and resource path handling [CVE-2026-30853 CVE-2026-33206]; prevent e-book viewer local file reads and SSRF/exfiltration [CVE-2026-33205]; avoid unsafe catalog rule evaluation; correct XPath and SQL query handling; fix reader-background endpoint path normalisation; improve exception diagnostics

Request: 1136055

Closes: 1135543

CVEs referenced: CVE-2026-30853 CVE-2026-33205 CVE-2026-33206

Binary debdiffs: amd64arm64armhfi386

ceph 18.2.7+ds-1+deb13u1 Installability problems ACCEPTED

DSA: 6321

Closes: 1120797 1126573

CVEs referenced: CVE-2024-31884 CVE-2024-47866

Binary debdiffs: s390x

Lintian issues: allamd64arm64ppc64elriscv64s390x

chromium 149.0.7827.196-1~deb13u1 Installability problems ACCEPTED

DSA: 6364

CVEs referenced: CVE-2026-13021 CVE-2026-13022 CVE-2026-13023 CVE-2026-13024 CVE-2026-13025 CVE-2026-13026 CVE-2026-13027 CVE-2026-13028 CVE-2026-13029 CVE-2026-13030 CVE-2026-13031 CVE-2026-13032 CVE-2026-13033 CVE-2026-13034 CVE-2026-13035 CVE-2026-13036 CVE-2026-13037 CVE-2026-13038

Lintian issues: source

chromium 149.0.7827.155-1~deb13u1 Installability problems ACCEPTED

This upload was superseded by a more current one.

DSA: 6352

CVEs referenced: CVE-2026-12437 CVE-2026-12438 CVE-2026-12439 CVE-2026-12440 CVE-2026-12441 CVE-2026-12442 CVE-2026-12443 CVE-2026-12444 CVE-2026-12445 CVE-2026-12446 CVE-2026-12447 CVE-2026-12448 CVE-2026-12449 CVE-2026-12450 CVE-2026-12451 CVE-2026-12452 CVE-2026-12453 CVE-2026-12454 CVE-2026-12455 CVE-2026-12456 CVE-2026-12457 CVE-2026-12458 CVE-2026-12459 CVE-2026-12460 CVE-2026-12461 CVE-2026-12462 CVE-2026-12463 CVE-2026-12464 CVE-2026-12465 CVE-2026-12466 CVE-2026-12467 CVE-2026-12468 CVE-2026-12469

chromium 149.0.7827.114-1~deb13u1 Installability problems ACCEPTED

This upload was superseded by a more current one.

DSA: 6344

CVEs referenced: CVE-2026-12007 CVE-2026-12008 CVE-2026-12009 CVE-2026-12010 CVE-2026-12011 CVE-2026-12012 CVE-2026-12013 CVE-2026-12014 CVE-2026-12015 CVE-2026-12016 CVE-2026-12017 CVE-2026-12018 CVE-2026-12019 CVE-2026-12020 CVE-2026-12022 CVE-2026-12023 CVE-2026-12024 CVE-2026-12025 CVE-2026-12026 CVE-2026-12027 CVE-2026-12028 CVE-2026-12029 CVE-2026-12030 CVE-2026-12031 CVE-2026-12032 CVE-2026-12033 CVE-2026-12034 CVE-2026-12035

chromium 149.0.7827.102-1~deb13u1 Installability problems ACCEPTED

This upload was superseded by a more current one.

DSA: 6337

CVEs referenced: CVE-2026-11628 CVE-2026-11629 CVE-2026-11630 CVE-2026-11631 CVE-2026-11632 CVE-2026-11633 CVE-2026-11634 CVE-2026-11635 CVE-2026-11636 CVE-2026-11637 CVE-2026-11638 CVE-2026-11639 CVE-2026-11640 CVE-2026-11641 CVE-2026-11642 CVE-2026-11643 CVE-2026-11644 CVE-2026-11645 CVE-2026-11646 CVE-2026-11647 CVE-2026-11648 CVE-2026-11649 CVE-2026-11650 CVE-2026-11651 CVE-2026-11652 CVE-2026-11653 CVE-2026-11654 CVE-2026-11655 CVE-2026-11656 CVE-2026-11657 CVE-2026-11658 CVE-2026-11659 CVE-2026-11660 CVE-2026-11661 CVE-2026-11662 CVE-2026-11663 CVE-2026-11664 CVE-2026-11665 CVE-2026-11666 CVE-2026-11667 CVE-2026-11668 CVE-2026-11669 CVE-2026-11670 CVE-2026-11671 CVE-2026-11672 CVE-2026-11673 CVE-2026-11674 CVE-2026-11675 CVE-2026-11676 CVE-2026-11677 CVE-2026-11678 CVE-2026-11679 CVE-2026-11680 CVE-2026-11681 CVE-2026-11682 CVE-2026-11683 CVE-2026-11684 CVE-2026-11685 CVE-2026-11686 CVE-2026-11687 CVE-2026-11688 CVE-2026-11689 CVE-2026-11690 CVE-2026-11691 CVE-2026-11692 CVE-2026-11693 CVE-2026-11694 CVE-2026-11695 CVE-2026-11696 CVE-2026-11697 CVE-2026-11698 CVE-2026-11699 CVE-2026-11700 CVE-2026-11701

chromium 149.0.7827.53-1~deb13u1 Installability problems ACCEPTED

This upload was superseded by a more current one.

DSA: 6325

CVEs referenced: CVE-2026-10881 CVE-2026-10882 CVE-2026-10883 CVE-2026-10884 CVE-2026-10885 CVE-2026-10886 CVE-2026-10887 CVE-2026-10888 CVE-2026-10889 CVE-2026-10890 CVE-2026-10891 CVE-2026-10892 CVE-2026-10893 CVE-2026-10894 CVE-2026-10895 CVE-2026-10896 CVE-2026-10897 CVE-2026-10898 CVE-2026-10899 CVE-2026-10900 CVE-2026-10901 CVE-2026-10902 CVE-2026-10903 CVE-2026-10904 CVE-2026-10905 CVE-2026-10906 CVE-2026-10907 CVE-2026-10908 CVE-2026-10909 CVE-2026-10910 CVE-2026-10911 CVE-2026-10912 CVE-2026-10913 CVE-2026-10914 CVE-2026-10915 CVE-2026-10916 CVE-2026-10917 CVE-2026-10918 CVE-2026-10919 CVE-2026-10920 CVE-2026-10921 CVE-2026-10922 CVE-2026-10923 CVE-2026-10924 CVE-2026-10925 CVE-2026-10926 CVE-2026-10927 CVE-2026-10928 CVE-2026-10929 CVE-2026-10930 CVE-2026-10931 CVE-2026-10932 CVE-2026-10933 CVE-2026-10934 CVE-2026-10935 CVE-2026-10936 CVE-2026-10937 CVE-2026-10938 CVE-2026-10939 CVE-2026-10940 CVE-2026-10941 CVE-2026-10942 CVE-2026-10943 CVE-2026-10944 CVE-2026-10945 CVE-2026-10946 CVE-2026-10947 CVE-2026-10948 CVE-2026-10949 CVE-2026-10950 CVE-2026-10951 CVE-2026-10952 CVE-2026-10953 CVE-2026-10954 CVE-2026-10955 CVE-2026-10956 CVE-2026-10957 CVE-2026-10958 CVE-2026-10959 CVE-2026-10960 CVE-2026-10961 CVE-2026-10962 CVE-2026-10963 CVE-2026-10964 CVE-2026-10965 CVE-2026-10966 CVE-2026-10967 CVE-2026-10968 CVE-2026-10969 CVE-2026-10970 CVE-2026-10971 CVE-2026-10972 CVE-2026-10973 CVE-2026-10974 CVE-2026-10975 CVE-2026-10976 CVE-2026-10977 CVE-2026-10978 CVE-2026-10979 CVE-2026-10980 CVE-2026-10981 CVE-2026-10982 CVE-2026-10983 CVE-2026-10984 CVE-2026-10985 CVE-2026-10986 CVE-2026-10987 CVE-2026-10988 CVE-2026-10989 CVE-2026-10990 CVE-2026-10991 CVE-2026-10992 CVE-2026-10993 CVE-2026-10994 CVE-2026-10995 CVE-2026-10996 CVE-2026-10997 CVE-2026-10998 CVE-2026-10999 CVE-2026-11000 CVE-2026-11001 CVE-2026-11002 CVE-2026-11003 CVE-2026-11004 CVE-2026-11005 CVE-2026-11006 CVE-2026-11007 CVE-2026-11008 CVE-2026-11009 CVE-2026-11010 CVE-2026-11011 CVE-2026-11012 CVE-2026-11013 CVE-2026-11014 CVE-2026-11015 CVE-2026-11016 CVE-2026-11017 CVE-2026-11018 CVE-2026-11019 CVE-2026-11020 CVE-2026-11021 CVE-2026-11022 CVE-2026-11023 CVE-2026-11024 CVE-2026-11025 CVE-2026-11026 CVE-2026-11027 CVE-2026-11028 CVE-2026-11029 CVE-2026-11030 CVE-2026-11031 CVE-2026-11032 CVE-2026-11033 CVE-2026-11034 CVE-2026-11035 CVE-2026-11036 CVE-2026-11037 CVE-2026-11038 CVE-2026-11039 CVE-2026-11040 CVE-2026-11041 CVE-2026-11042 CVE-2026-11043 CVE-2026-11044 CVE-2026-11045 CVE-2026-11046 CVE-2026-11047 CVE-2026-11048 CVE-2026-11049 CVE-2026-11050 CVE-2026-11051 CVE-2026-11052 CVE-2026-11053 CVE-2026-11054 CVE-2026-11055 CVE-2026-11056 CVE-2026-11057 CVE-2026-11058 CVE-2026-11059 CVE-2026-11060 CVE-2026-11061 CVE-2026-11062 CVE-2026-11063 CVE-2026-11064 CVE-2026-11065 CVE-2026-11066 CVE-2026-11067 CVE-2026-11068 CVE-2026-11069 CVE-2026-11070 CVE-2026-11071 CVE-2026-11072 CVE-2026-11073 CVE-2026-11074 CVE-2026-11075 CVE-2026-11076 CVE-2026-11077 CVE-2026-11078 CVE-2026-11079 CVE-2026-11080 CVE-2026-11081 CVE-2026-11082 CVE-2026-11083 CVE-2026-11084 CVE-2026-11085 CVE-2026-11086 CVE-2026-11087 CVE-2026-11088 CVE-2026-11089 CVE-2026-11090 CVE-2026-11091 CVE-2026-11092 CVE-2026-11093 CVE-2026-11094 CVE-2026-11095 CVE-2026-11096 CVE-2026-11097 CVE-2026-11098 CVE-2026-11099 CVE-2026-11100 CVE-2026-11101 CVE-2026-11102 CVE-2026-11103 CVE-2026-11104 CVE-2026-11105 CVE-2026-11106 CVE-2026-11107 CVE-2026-11108 CVE-2026-11109 CVE-2026-11110 CVE-2026-11111 CVE-2026-11112 CVE-2026-11113 CVE-2026-11114 CVE-2026-11115 CVE-2026-11116 CVE-2026-11117 CVE-2026-11118 CVE-2026-11119 CVE-2026-11120 CVE-2026-11121 CVE-2026-11122 CVE-2026-11123 CVE-2026-11124 CVE-2026-11125 CVE-2026-11126 CVE-2026-11127 CVE-2026-11128 CVE-2026-11129 CVE-2026-11130 CVE-2026-11131 CVE-2026-11132 CVE-2026-11133 CVE-2026-11134 CVE-2026-11135 CVE-2026-11136 CVE-2026-11137 CVE-2026-11138 CVE-2026-11139 CVE-2026-11140 CVE-2026-11141 CVE-2026-11142 CVE-2026-11143 CVE-2026-11144 CVE-2026-11145 CVE-2026-11146 CVE-2026-11147 CVE-2026-11148 CVE-2026-11149 CVE-2026-11150 CVE-2026-11151 CVE-2026-11152 CVE-2026-11153 CVE-2026-11154 CVE-2026-11155 CVE-2026-11156 CVE-2026-11157 CVE-2026-11158 CVE-2026-11159 CVE-2026-11160 CVE-2026-11161 CVE-2026-11162 CVE-2026-11163 CVE-2026-11164 CVE-2026-11165 CVE-2026-11166 CVE-2026-11167 CVE-2026-11168 CVE-2026-11169 CVE-2026-11170 CVE-2026-11171 CVE-2026-11172 CVE-2026-11173 CVE-2026-11174 CVE-2026-11175 CVE-2026-11176 CVE-2026-11177 CVE-2026-11178 CVE-2026-11179 CVE-2026-11180 CVE-2026-11181 CVE-2026-11182 CVE-2026-11183 CVE-2026-11184 CVE-2026-11185 CVE-2026-11186 CVE-2026-11187 CVE-2026-11188 CVE-2026-11189 CVE-2026-11190 CVE-2026-11191 CVE-2026-11192 CVE-2026-11193 CVE-2026-11194 CVE-2026-11195 CVE-2026-11196 CVE-2026-11197 CVE-2026-11198 CVE-2026-11199 CVE-2026-11200 CVE-2026-11201 CVE-2026-11202 CVE-2026-11203 CVE-2026-11204 CVE-2026-11205 CVE-2026-11206 CVE-2026-11207 CVE-2026-11208 CVE-2026-11209 CVE-2026-11210 CVE-2026-11211 CVE-2026-11212 CVE-2026-11213 CVE-2026-11214 CVE-2026-11215 CVE-2026-11216 CVE-2026-11217 CVE-2026-11218 CVE-2026-11219 CVE-2026-11220 CVE-2026-11221 CVE-2026-11222 CVE-2026-11223 CVE-2026-11224 CVE-2026-11225 CVE-2026-11226 CVE-2026-11227 CVE-2026-11228 CVE-2026-11229 CVE-2026-11230 CVE-2026-11231 CVE-2026-11232 CVE-2026-11233 CVE-2026-11234 CVE-2026-11235 CVE-2026-11236 CVE-2026-11237 CVE-2026-11238 CVE-2026-11239 CVE-2026-11240 CVE-2026-11241 CVE-2026-11242 CVE-2026-11243 CVE-2026-11244 CVE-2026-11245 CVE-2026-11246 CVE-2026-11247 CVE-2026-11248 CVE-2026-11249 CVE-2026-11250 CVE-2026-11251 CVE-2026-11252 CVE-2026-11253 CVE-2026-11254 CVE-2026-11255 CVE-2026-11256 CVE-2026-11257 CVE-2026-11258 CVE-2026-11259 CVE-2026-11260 CVE-2026-11261 CVE-2026-11262 CVE-2026-11263 CVE-2026-11264 CVE-2026-11265 CVE-2026-11266 CVE-2026-11267 CVE-2026-11268 CVE-2026-11269 CVE-2026-11270 CVE-2026-11271 CVE-2026-11272 CVE-2026-11273 CVE-2026-11274 CVE-2026-11275 CVE-2026-11276 CVE-2026-11277 CVE-2026-11278 CVE-2026-11279 CVE-2026-11280 CVE-2026-11281 CVE-2026-11282 CVE-2026-11283 CVE-2026-11284 CVE-2026-11285 CVE-2026-11286 CVE-2026-11287 CVE-2026-11288 CVE-2026-11289 CVE-2026-11290 CVE-2026-11291 CVE-2026-11292 CVE-2026-11293 CVE-2026-11294 CVE-2026-11295 CVE-2026-11296 CVE-2026-11297 CVE-2026-11298 CVE-2026-11299 CVE-2026-11300 CVE-2026-11301 CVE-2026-11302 CVE-2026-11303 CVE-2026-11304 CVE-2026-11305 CVE-2026-11306 CVE-2026-11307 CVE-2026-11308 CVE-2026-11309

chromium 148.0.7778.215-1~deb13u1 Installability problems ACCEPTED

This upload was superseded by a more current one.

DSA: 6316

CVEs referenced: CVE-2026-10000 CVE-2026-10001 CVE-2026-10002 CVE-2026-10003 CVE-2026-10004 CVE-2026-10005 CVE-2026-10006 CVE-2026-10007 CVE-2026-10008 CVE-2026-10009 CVE-2026-10010 CVE-2026-10011 CVE-2026-10012 CVE-2026-10013 CVE-2026-10014 CVE-2026-10015 CVE-2026-10016 CVE-2026-10017 CVE-2026-10018 CVE-2026-10019 CVE-2026-10020 CVE-2026-10021 CVE-2026-10022 CVE-2026-9872 CVE-2026-9873 CVE-2026-9874 CVE-2026-9875 CVE-2026-9876 CVE-2026-9877 CVE-2026-9878 CVE-2026-9879 CVE-2026-9880 CVE-2026-9881 CVE-2026-9882 CVE-2026-9883 CVE-2026-9884 CVE-2026-9885 CVE-2026-9886 CVE-2026-9887 CVE-2026-9888 CVE-2026-9889 CVE-2026-9890 CVE-2026-9891 CVE-2026-9892 CVE-2026-9893 CVE-2026-9894 CVE-2026-9895 CVE-2026-9896 CVE-2026-9897 CVE-2026-9898 CVE-2026-9899 CVE-2026-9900 CVE-2026-9901 CVE-2026-9902 CVE-2026-9903 CVE-2026-9904 CVE-2026-9905 CVE-2026-9906 CVE-2026-9907 CVE-2026-9908 CVE-2026-9909 CVE-2026-9910 CVE-2026-9911 CVE-2026-9912 CVE-2026-9913 CVE-2026-9914 CVE-2026-9915 CVE-2026-9916 CVE-2026-9917 CVE-2026-9918 CVE-2026-9919 CVE-2026-9920 CVE-2026-9921 CVE-2026-9922 CVE-2026-9923 CVE-2026-9924 CVE-2026-9925 CVE-2026-9926 CVE-2026-9927 CVE-2026-9928 CVE-2026-9929 CVE-2026-9930 CVE-2026-9931 CVE-2026-9932 CVE-2026-9933 CVE-2026-9934 CVE-2026-9935 CVE-2026-9936 CVE-2026-9937 CVE-2026-9938 CVE-2026-9939 CVE-2026-9940 CVE-2026-9941 CVE-2026-9942 CVE-2026-9943 CVE-2026-9944 CVE-2026-9945 CVE-2026-9946 CVE-2026-9947 CVE-2026-9948 CVE-2026-9949 CVE-2026-9950 CVE-2026-9951 CVE-2026-9952 CVE-2026-9953 CVE-2026-9954 CVE-2026-9955 CVE-2026-9956 CVE-2026-9957 CVE-2026-9958 CVE-2026-9959 CVE-2026-9960 CVE-2026-9961 CVE-2026-9962 CVE-2026-9963 CVE-2026-9964 CVE-2026-9965 CVE-2026-9966 CVE-2026-9967 CVE-2026-9968 CVE-2026-9969 CVE-2026-9970 CVE-2026-9971 CVE-2026-9972 CVE-2026-9973 CVE-2026-9974 CVE-2026-9975 CVE-2026-9976 CVE-2026-9977 CVE-2026-9978 CVE-2026-9979 CVE-2026-9980 CVE-2026-9981 CVE-2026-9982 CVE-2026-9983 CVE-2026-9984 CVE-2026-9985 CVE-2026-9986 CVE-2026-9987 CVE-2026-9988 CVE-2026-9989 CVE-2026-9990 CVE-2026-9991 CVE-2026-9992 CVE-2026-9993 CVE-2026-9994 CVE-2026-9995 CVE-2026-9996 CVE-2026-9997 CVE-2026-9998 CVE-2026-9999

chromium 148.0.7778.178-1~deb13u1 Installability problems ACCEPTED

This upload was superseded by a more current one.

DSA: 6287

CVEs referenced: CVE-2026-9110 CVE-2026-9111 CVE-2026-9112 CVE-2026-9113 CVE-2026-9114 CVE-2026-9115 CVE-2026-9116 CVE-2026-9117 CVE-2026-9118 CVE-2026-9119 CVE-2026-9120 CVE-2026-9121 CVE-2026-9122 CVE-2026-9123 CVE-2026-9124 CVE-2026-9126

chromium 148.0.7778.167-1~deb13u1 Installability problems ACCEPTED

This upload was superseded by a more current one.

DSA: 6273

CVEs referenced: CVE-2026-8509 CVE-2026-8510 CVE-2026-8511 CVE-2026-8512 CVE-2026-8513 CVE-2026-8514 CVE-2026-8515 CVE-2026-8516 CVE-2026-8517 CVE-2026-8518 CVE-2026-8519 CVE-2026-8520 CVE-2026-8521 CVE-2026-8522 CVE-2026-8523 CVE-2026-8524 CVE-2026-8525 CVE-2026-8526 CVE-2026-8527 CVE-2026-8528 CVE-2026-8529 CVE-2026-8530 CVE-2026-8531 CVE-2026-8532 CVE-2026-8533 CVE-2026-8534 CVE-2026-8535 CVE-2026-8536 CVE-2026-8537 CVE-2026-8538 CVE-2026-8539 CVE-2026-8540 CVE-2026-8541 CVE-2026-8542 CVE-2026-8543 CVE-2026-8544 CVE-2026-8545 CVE-2026-8546 CVE-2026-8547 CVE-2026-8548 CVE-2026-8549 CVE-2026-8550 CVE-2026-8551 CVE-2026-8552 CVE-2026-8553 CVE-2026-8554 CVE-2026-8555 CVE-2026-8556 CVE-2026-8557 CVE-2026-8558 CVE-2026-8559 CVE-2026-8560 CVE-2026-8561 CVE-2026-8562 CVE-2026-8563 CVE-2026-8564 CVE-2026-8565 CVE-2026-8566 CVE-2026-8567 CVE-2026-8568 CVE-2026-8569 CVE-2026-8570 CVE-2026-8571 CVE-2026-8572 CVE-2026-8573 CVE-2026-8574 CVE-2026-8575 CVE-2026-8576 CVE-2026-8577 CVE-2026-8578 CVE-2026-8579 CVE-2026-8580 CVE-2026-8581 CVE-2026-8582 CVE-2026-8583 CVE-2026-8584 CVE-2026-8585 CVE-2026-8586 CVE-2026-8587

chromium 148.0.7778.96-1~deb13u1 Installability problems ACCEPTED

This upload was superseded by a more current one.

DSA: 6250

CVEs referenced: CVE-2026-7896 CVE-2026-7897 CVE-2026-7898 CVE-2026-7899 CVE-2026-7900 CVE-2026-7901 CVE-2026-7902 CVE-2026-7903 CVE-2026-7904 CVE-2026-7905 CVE-2026-7906 CVE-2026-7907 CVE-2026-7908 CVE-2026-7909 CVE-2026-7910 CVE-2026-7911 CVE-2026-7912 CVE-2026-7913 CVE-2026-7914 CVE-2026-7915 CVE-2026-7916 CVE-2026-7917 CVE-2026-7918 CVE-2026-7919 CVE-2026-7920 CVE-2026-7921 CVE-2026-7922 CVE-2026-7923 CVE-2026-7924 CVE-2026-7925 CVE-2026-7926 CVE-2026-7927 CVE-2026-7928 CVE-2026-7929 CVE-2026-7930 CVE-2026-7931 CVE-2026-7932 CVE-2026-7933 CVE-2026-7934 CVE-2026-7935 CVE-2026-7936 CVE-2026-7937 CVE-2026-7938 CVE-2026-7939 CVE-2026-7940 CVE-2026-7941 CVE-2026-7942 CVE-2026-7943 CVE-2026-7944 CVE-2026-7945 CVE-2026-7946 CVE-2026-7947 CVE-2026-7948 CVE-2026-7949 CVE-2026-7950 CVE-2026-7951 CVE-2026-7952 CVE-2026-7953 CVE-2026-7954 CVE-2026-7955 CVE-2026-7956 CVE-2026-7957 CVE-2026-7958 CVE-2026-7959 CVE-2026-7960 CVE-2026-7961 CVE-2026-7962 CVE-2026-7963 CVE-2026-7964 CVE-2026-7965 CVE-2026-7966 CVE-2026-7967 CVE-2026-7968 CVE-2026-7969 CVE-2026-7970 CVE-2026-7971 CVE-2026-7972 CVE-2026-7973 CVE-2026-7974 CVE-2026-7975 CVE-2026-7976 CVE-2026-7977 CVE-2026-7978 CVE-2026-7979 CVE-2026-7980 CVE-2026-7981 CVE-2026-7982 CVE-2026-7983 CVE-2026-7984 CVE-2026-7985 CVE-2026-7986 CVE-2026-7987 CVE-2026-7988 CVE-2026-7989 CVE-2026-7990 CVE-2026-7991 CVE-2026-7992 CVE-2026-7993 CVE-2026-7994 CVE-2026-7995 CVE-2026-7996 CVE-2026-7997 CVE-2026-7998 CVE-2026-7999 CVE-2026-8000 CVE-2026-8001 CVE-2026-8002 CVE-2026-8003 CVE-2026-8004 CVE-2026-8005 CVE-2026-8006 CVE-2026-8007 CVE-2026-8008 CVE-2026-8009 CVE-2026-8010 CVE-2026-8011 CVE-2026-8012 CVE-2026-8013 CVE-2026-8014 CVE-2026-8015 CVE-2026-8016 CVE-2026-8017 CVE-2026-8018 CVE-2026-8019 CVE-2026-8020 CVE-2026-8021 CVE-2026-8022

chrony 4.6.1-3+deb13u2 Installability problems ACCEPTED

Reason: ensure that if-up/down hook scripts exit successfully

Request: 1141322

Closes: 1011533

ckermit 416~beta12-1+deb13u1 Installability problems ACCEPTED

Reason: Block remote control of the local kermit by default [CVE-2025-68920]; disable unnecessary OpenSSL version check

Request: 1129707

Closes: 1118629 1123025

CVEs referenced: CVE-2025-68920

Binary debdiffs: amd64arm64armelarmhfi386ppc64elriscv64s390x

composer 2.8.8-1+deb13u3 Installability problems ACCEPTED

Reason: fix support for new GitHub token format [-2026-45793]

Request: 1136642

CVEs referenced: CVE-2026-45793

courier 1.4.1-3+deb13u2 Installability problems ACCEPTED

Reason: fix webadmin paths to imapd and imapd-ssl

Closes: 1132026

Binary debdiffs: amd64arm64armelarmhfi386ppc64elriscv64s390x

Lintian issues: source

curl 8.14.1-2+deb13u4 Installability problems c-i failed: curl/8.14.1-2+deb13u4 [armel] curl/8.14.1-2+deb13u4 [armhf] curl/8.14.1-2+deb13u4 [i386] curl/8.14.1-2+deb13u4 [riscv64] dgit/12.16 [armel] di-netboot-assistant/0.79 [i386] ganeti/3.1.0~rc2-3 [armhf] glyr/1.0.10-2.1 [armhf] glyr/1.0.10-2.1 [i386] live-build/1:20250505+deb13u1 [i386] node-sockjs/0.3.24+~0.3.33-6 [riscv64] nodejs/20.19.2+dfsg-1+deb13u2 [amd64] nodejs/20.19.2+dfsg-1+deb13u2 [arm64] nodejs/20.19.2+dfsg-1+deb13u2 [ppc64el] nodejs/20.19.2+dfsg-1+deb13u2 [s390x] openvswitch/3.5.0-1 [armhf] openvswitch/3.5.0-1 [i386] privoxy/4.0.0-2 [amd64] privoxy/4.0.0-2 [arm64] privoxy/4.0.0-2 [armhf] privoxy/4.0.0-2 [i386] privoxy/4.0.0-2 [ppc64el] privoxy/4.0.0-2 [riscv64] prometheus-hacluster-exporter/1.4.0-1 [armhf] prometheus-hacluster-exporter/1.4.0-1 [riscv64] prometheus-mysqlrouter-exporter/6.0.0-4 [armel] prometheus-mysqlrouter-exporter/6.0.0-4 [armhf] prometheus-mysqlrouter-exporter/6.0.0-4 [i386] prometheus-mysqlrouter-exporter/6.0.0-4 [riscv64] puppetdb/8.4.1-4 [riscv64] puppetserver/8.7.0-5 [arm64] slic3r-prusa/2.9.2+dfsg-1 [i386] slic3r-prusa/2.9.2+dfsg-1 [riscv64] slurm-wlm/24.11.5-4 [armhf] ulfius/2.7.15-2.2 [i386] vorbis-tools/1.4.3-1 [riscv64] xmltooling/3.3.0-2 [i386] xmltooling/3.3.0-2 [riscv64] ACCEPTED

Reason: fix bearer token redirect leaks [CVE-2025-14524 CVE-2026-3783]; correct OpenSSL CA cache reuse [CVE-2025-14819]; fix HTTP Negotiate and proxy connection reuse [CVE-2026-1965 CVE-2026-3784 CVE-2026-5545]; prevent clear-text STARTTLS connection reuse [CVE-2026-4873]; fix SMB use-after-free and wrong share reuse [CVE-2026-3805 CVE-2026-5773]; clear redirected host/proxy/netrc credentials [CVE-2026-6253 CVE-2026-6429]; prevent stale cookie leaks [CVE-2026-6276]; clear proxy Digest state when switching proxies [CVE-2026-7168]

Request: 1136033

CVEs referenced: CVE-2025-10148 CVE-2025-13034 CVE-2025-14524 CVE-2025-14819 CVE-2026-1965 CVE-2026-3783 CVE-2026-3784 CVE-2026-3805 CVE-2026-4873 CVE-2026-5545 CVE-2026-5773 CVE-2026-6253 CVE-2026-6276 CVE-2026-6429 CVE-2026-7168

cyborg 14.0.0-3+deb13u1 Installability problems ACCEPTED

DSA: 6315

Closes: 1136006

CVEs referenced: CVE-2026-40213 CVE-2026-40214

Binary debdiffs: all

dar 2.7.17-1+b15 Installability problems ACCEPTED

Reason: rebuild with updated openssl

Binary debdiffs: amd64arm64armelarmhfi386ppc64elriscv64s390x

dar 2.7.17-1+b14 Installability problems ACCEPTED

Reason: rebuild with updated libgcrypt20

Missing builds: amd64 arm64 armel armhf i386 ppc64el riscv64 s390x

dcmtk 3.6.9-5+deb13u2 Installability problems ACCEPTED

Reason: fix buffer overflow issue [CVE-2026-12805]

Request: 1140693

Closes: 1113993 1122926 1123584 1133001 1139181 1140562

CVEs referenced: CVE-2025-14607 CVE-2025-14841 CVE-2025-9732 CVE-2026-10194 CVE-2026-12805 CVE-2026-5663

Binary debdiffs: i386s390x

dcmtk 3.6.9-5+deb13u1 Installability problems ACCEPTED

This upload was superseded by a more current one.

Reason: fix NULL pointer dereference issues [CVE-2022-4981 CVE-2025-14841]; fix memory corruption issues [CVE-2025-2357 CVE-2025-9732 CVE-2025-14607]; fix command injection issue [CVE-2026-5663]; fix buffer overflow issue [CVE-2026-10194]

Request: 1139722

Closes: 1113993 1122926 1123584 1133001 1139181

CVEs referenced: CVE-2022-4981 CVE-2025-14607 CVE-2025-14841 CVE-2025-2357 CVE-2025-9732 CVE-2026-10194 CVE-2026-5663

debusine 0.11.3+deb13u1 Installability problems ACCEPTED

Reason: enforce file upload permissions; restrict artifact relation creation/deletion [CVE-2026-11852]; harden sbuild repository command quoting; reject unsafe .dsc/.changes checksum paths [CVE-2026-11853]

Request: 1139556

CVEs referenced: CVE-2026-11852 CVE-2026-11853

Lintian issues: source

deepdiff 8.1.1-4+deb13u1 Installability problems ACCEPTED

Reason: fix class pollution issue [CVE-2025-58367]; fix denial of service issue [CVE-2026-33155]

Request: 1141284

Closes: 1131472

CVEs referenced: CVE-2025-58367 CVE-2026-33155

dhcpcd 1:10.1.0-11+deb13u3 Installability problems ACCEPTED

Reason: fix memory safety issues [CVE-2025-70102 CVE-2026-56113 CVE-2026-56114]; fix IPv6 Router Advertisement information leakage [CVE-2026-56116]; correct control socket lifetime handling [CVE-2026-56117]

Request: 1140795

Closes: 1140767

CVEs referenced: CVE-2025-70102 CVE-2026-56113 CVE-2026-56114 CVE-2026-56116 CVE-2026-56117

Lintian issues: source

distrobuilder 3.2-2+b8 Installability problems ACCEPTED

Reason: rebuild with updated incus

Binary debdiffs: amd64arm64armelarmhfi386ppc64elriscv64s390x

dnsdist 1.9.15-0+deb13u1 Installability problems ACCEPTED

DSA: 6367

CVEs referenced: CVE-2026-40011 CVE-2026-40208 CVE-2026-40209 CVE-2026-40210 CVE-2026-40211 CVE-2026-42004 CVE-2026-42005

dolphin 4:25.04.3-1+deb13u1 Installability problems ACCEPTED

Reason: fix sanbox escape issue [CVE-2026-41525]

Request: 1141297

CVEs referenced: CVE-2026-41525

dovecot 1:2.4.1+dfsg1-6+deb13u6 Installability problems ACCEPTED

DSA: 6313

Closes: 1136444

CVEs referenced: CVE-2026-27851 CVE-2026-33603 CVE-2026-40016 CVE-2026-40020 CVE-2026-42006

errands 46.2.8-1+deb13u1 Installability problems ACCEPTED

Reason: fix verification of TLS certificates CalDAV servers [CVE-2025-71063]

Request: 1137317

Closes: 1123738

CVEs referenced: CVE-2025-71063

evince 48.1-3+deb13u1 Installability problems ACCEPTED

DSA: 6286

CVEs referenced: CVE-2026-46529

execnet 2.1.1-1+deb13u1 Installability problems ACCEPTED

Reason: disable unreliable build-time tests

Request: 1139254

Closes: 854494

Binary debdiffs: all

exim4 4.98.2-1+deb13u3 Installability problems ACCEPTED

DSA: 6309

fastnetmon 1.2.9-0+deb13u1 Installability problems ACCEPTED

DSA: 6375

Closes: 1138646

CVEs referenced: CVE-2026-48683 CVE-2026-48684 CVE-2026-48685 CVE-2026-48686 CVE-2026-48687 CVE-2026-48688 CVE-2026-48689 CVE-2026-48690 CVE-2026-48691 CVE-2026-48694 CVE-2026-48695 CVE-2026-48696

Binary debdiffs: amd64arm64armelarmhfi386ppc64elriscv64s390x

Lintian issues: amd64arm64armelarmhfi386ppc64elriscv64s390xsource

ffmpeg 7:7.1.5-0+deb13u1 Installability problems ACCEPTED

DSA: 6361

CVEs referenced: CVE-2026-8461

Binary debdiffs: amd64arm64armelarmhfi386ppc64elriscv64s390x

ffmpeg 7:7.1.4-0+deb13u1 Installability problems ACCEPTED

This upload was superseded by a more current one.

DSA: 6268

Binary debdiffs: amd64arm64armelarmhfi386ppc64elriscv64s390x

Lintian issues: allamd64arm64armelarmhfi386ppc64elriscv64s390x

firefox-esr 140.12.0esr-1~deb13u1 Installability problems ACCEPTED

DSA: 6350

CVEs referenced: CVE-2026-12289 CVE-2026-12290 CVE-2026-12291 CVE-2026-12292 CVE-2026-12294 CVE-2026-12295 CVE-2026-12296 CVE-2026-12297 CVE-2026-12298 CVE-2026-12299 CVE-2026-12302 CVE-2026-12304 CVE-2026-12305 CVE-2026-12306 CVE-2026-12307 CVE-2026-12308 CVE-2026-12309 CVE-2026-12310 CVE-2026-12311 CVE-2026-12312 CVE-2026-12313 CVE-2026-12314 CVE-2026-12315 CVE-2026-12324 CVE-2026-12325 CVE-2026-12327 CVE-2026-12328 CVE-2026-12329 CVE-2026-12330

Lintian issues: armhfi386riscv64source

firefox-esr 140.11.0esr-1~deb13u1 Installability problems ACCEPTED

This upload was superseded by a more current one.

DSA: 6283

CVEs referenced: CVE-2026-8388 CVE-2026-8391 CVE-2026-8401 CVE-2026-8946 CVE-2026-8947 CVE-2026-8950 CVE-2026-8953 CVE-2026-8954 CVE-2026-8955 CVE-2026-8956 CVE-2026-8957 CVE-2026-8958 CVE-2026-8961 CVE-2026-8962 CVE-2026-8968 CVE-2026-8970 CVE-2026-8974 CVE-2026-8975

Lintian issues: amd64arm64armhfi386riscv64

fldigi 4.2.06-1+deb13u1 Installability problems ACCEPTED

Reason: force LC_NUMERIC=C.UTF-8 to use proper decimal separator in API and ADIF log files

Request: 1138728

Closes: 1114613

freecad 1.0.0+dfsg-8+deb13u2 Installability problems amd64-needed arm64-needed armhf-needed ppc64el-needed s390x-needed ACCEPTED

Reason: fix FTBFS on arm64

Missing builds: all riscv64

Request: 1141386

Binary debdiffs: amd64arm64armhfppc64els390x

Lintian issues: amd64arm64armhfppc64els390x

freecad 1.0.0+dfsg-8+deb13u1 Installability problems ACCEPTED

This upload was superseded by a more current one.

Reason: fix fanuc post processor

Request: 1130115

Closes: 1117850

Binary debdiffs: amd64arm64armhfppc64els390x

Lintian issues: amd64arm64armhfppc64els390x

frr 10.3-3+deb13u1 Installability problems ACCEPTED

DSA: 6322

CVEs referenced: CVE-2025-61099 CVE-2025-61100 CVE-2025-61101 CVE-2025-61102 CVE-2025-61103 CVE-2025-61104 CVE-2025-61105 CVE-2025-61106 CVE-2025-61107 CVE-2026-28532 CVE-2026-37457 CVE-2026-37458 CVE-2026-5107

Binary debdiffs: amd64arm64armelarmhfi386ppc64elriscv64s390x

fwupd 2.0.20-1~deb13u1 Installability problems ACCEPTED

Distribution mismatch: stable-updates

Reason: enable UEFI CA/db/KEK updates for the 2026 Secure Boot certificate transition; fix UEFI PK/KEK/dbx enumeration; fix Thunderbolt controller deployment; correct firmware update regressions; update fwupd hardware support and tests

Request: 1139251

Closes: 1138871

Binary debdiffs: allamd64arm64armelarmhfi386ppc64elriscv64s390x

Lintian issues: allamd64arm64armelarmhfi386ppc64elriscv64s390xsource

gambas3 3.20.2-1+deb13u1 Installability problems ACCEPTED

Reason: fix Qt component loading

Request: 1136271

Closes: 1136260

Binary debdiffs: i386s390x

gdown 5.2.0+dfsg-2+deb13u1 Installability problems ACCEPTED

Reason: fix arbitray file write issue [CVE-2026-40491]

Request: 1139573

CVEs referenced: CVE-2026-40491

geoip 1.6.12-11.2~deb13u1 Version problems testing (1.6.12-11.1) geoip-bin/testing [amd64] (1.6.12-11.1+b2) geoip-bin/testing [arm64] (1.6.12-11.1+b2) geoip-bin/testing [armhf] (1.6.12-11.1+b2) geoip-bin/testing [i386] (1.6.12-11.1+b2) geoip-bin/testing [ppc64el] (1.6.12-11.1+b2) geoip-bin/testing [riscv64] (1.6.12-11.1+b2) geoip-bin/testing [s390x] (1.6.12-11.1+b2) libgeoip-dev/testing [amd64] (1.6.12-11.1+b2) libgeoip-dev/testing [arm64] (1.6.12-11.1+b2) libgeoip-dev/testing [armhf] (1.6.12-11.1+b2) libgeoip-dev/testing [i386] (1.6.12-11.1+b2) libgeoip-dev/testing [ppc64el] (1.6.12-11.1+b2) libgeoip-dev/testing [riscv64] (1.6.12-11.1+b2) libgeoip-dev/testing [s390x] (1.6.12-11.1+b2) libgeoip1t64/testing [amd64] (1.6.12-11.1+b2) libgeoip1t64/testing [arm64] (1.6.12-11.1+b2) libgeoip1t64/testing [armhf] (1.6.12-11.1+b2) libgeoip1t64/testing [i386] (1.6.12-11.1+b2) libgeoip1t64/testing [ppc64el] (1.6.12-11.1+b2) libgeoip1t64/testing [riscv64] (1.6.12-11.1+b2) libgeoip1t64/testing [s390x] (1.6.12-11.1+b2) Installability problems ACCEPTED

Reason: reinstate generator scripts, relied upon by geoip-database

Request: 1141419

Binary debdiffs: amd64arm64armelarmhfi386ppc64elriscv64s390x

Lintian issues: amd64arm64armelarmhfi386ppc64elriscv64s390x

geoip-database 20250401+really20191224-0+deb13u1 Installability problems ACCEPTED

Reason: revert to a DFSG-compatible version

Missing builds: all

Request: 1141421

Closes: 1134158

giflib 5.2.2-1+deb13u1 Installability problems ACCEPTED

Reason: fix memory corruption issues [CVE-2026-23868 CVE-2026-26740]

Request: 1140102

Closes: 1130495 1131368

CVEs referenced: CVE-2026-23868 CVE-2026-26740

Binary debdiffs: amd64arm64armelarmhfi386ppc64elriscv64s390x

gimp 3.0.4-3+deb13u9 Installability problems ACCEPTED

Reason: fix integer overflow issues [CVE-2026-4154 CVE-2026-40915]

Request: 1139632

CVEs referenced: CVE-2026-40915 CVE-2026-4154

gnupg2 2.4.7-21+deb13u1+b4 Installability problems ACCEPTED

Reason: rebuild with updated libgcrypt20

µdebs: present

Binary debdiffs: amd64arm64armelarmhfi386ppc64elriscv64s390x

gnustep-sqlclient 1.9.0-6+deb13u1 Installability problems ACCEPTED

Reason: remove Multi-Arch: same

Request: 1138221

Closes: 1133733

Binary debdiffs: amd64arm64armelarmhfi386ppc64elriscv64s390x

gnutls28 3.8.9-3+deb13u4 Installability problems c-i running: libmicrohttpd/1.0.1-4 [arm64] ACCEPTED

DSA: 6281

Closes: 1135319

CVEs referenced: CVE-2026-33845 CVE-2026-33846 CVE-2026-3832 CVE-2026-3833 CVE-2026-42009 CVE-2026-42010 CVE-2026-42011 CVE-2026-42012 CVE-2026-42013 CVE-2026-42014 CVE-2026-42015 CVE-2026-5260 CVE-2026-5419

Binary debdiffs: amd64arm64armelarmhfi386ppc64elriscv64s390x

Lintian issues: amd64arm64armelarmhfi386ppc64elriscv64s390x

graphite2 1.3.14-2+deb13u1 Installability problems ACCEPTED

Reason: fix out-of-bounds write [CVE-2026-50593]

Request: 1139173

CVEs referenced: CVE-2026-50593

Binary debdiffs: allamd64arm64armelarmhfi386ppc64elriscv64s390x

gsasl 2.2.2-1.1+deb13u2 Installability problems ACCEPTED

DSA: 6348

gsasl 2.2.2-1.1+deb13u1 Installability problems ACCEPTED

This upload was superseded by a more current one.

DSA: 6271

gst-libav1.0 1.26.2-1+deb13u1 Installability problems amd64 arm64 armel armhf i386 ppc64el riscv64 s390x ACCEPTED

DSA: 6353

CVEs referenced: CVE-2026-52717

Binary debdiffs: amd64arm64armelarmhfi386ppc64elriscv64s390x

gst-plugins-bad1.0 1.26.2-3+deb13u2 Installability problems ACCEPTED

DSA: 6362

CVEs referenced: CVE-2026-52718 CVE-2026-52719 CVE-2026-53701

gst-plugins-good1.0 1.26.2-1+deb13u2 Installability problems ACCEPTED

DSA: 6359

CVEs referenced: CVE-2026-1940 CVE-2026-3083 CVE-2026-3085 CVE-2026-39043 CVE-2026-39044

gst-plugins-good1.0 1.26.2-1+deb13u1 Installability problems ACCEPTED

This upload was superseded by a more current one.

DSA: 6318

CVEs referenced: CVE-2026-46469 CVE-2026-46470 CVE-2026-5056

Binary debdiffs: i386s390x

Lintian issues: amd64arm64armelarmhfi386ppc64elriscv64s390x

haproxy 3.0.11-1+deb13u3 Installability problems ACCEPTED

DSA: 6291

CVEs referenced: CVE-2026-33555

haveged 1.9.19-12+deb13u1 Installability problems ACCEPTED

DSA: 6292

µdebs: present

Closes: 1137096

CVEs referenced: CVE-2026-41054

horizon 3:25.3.0-3+deb13u1 Installability problems ACCEPTED

Reason: fix escaping of special characters in project

Request: 1139601

Closes: 1138845

imagemagick 8:7.1.1.43+dfsg1-1+deb13u10 Installability problems ACCEPTED

DSA: 6356

Closes: 1140176

CVEs referenced: CVE-2026-48724 CVE-2026-48734 CVE-2026-48994 CVE-2026-49218 CVE-2026-49219 CVE-2026-53460 CVE-2026-53461 CVE-2026-53463 CVE-2026-53464

Lintian issues: allamd64arm64armelarmhfi386ppc64elriscv64s390x

imagemagick 8:7.1.1.43+dfsg1-1+deb13u9 Installability problems ACCEPTED

This upload was superseded by a more current one.

DSA: 6298

CVEs referenced: CVE-2026-33901 CVE-2026-42050 CVE-2026-42326 CVE-2026-45031 CVE-2026-45358 CVE-2026-45359 CVE-2026-45624 CVE-2026-45664 CVE-2026-46520 CVE-2026-46521 CVE-2026-46522 CVE-2026-46523 CVE-2026-46557 CVE-2026-46559 CVE-2026-46692 CVE-2026-46693 CVE-2026-47165 CVE-2026-47166

Lintian issues: allamd64arm64armelarmhfi386ppc64elriscv64s390x

incus 6.0.4-2+deb13u8 Installability problems ACCEPTED

DSA: 6370

CVEs referenced: CVE-2026-48749 CVE-2026-48750 CVE-2026-48751 CVE-2026-48752 CVE-2026-48755 CVE-2026-48756 CVE-2026-48769 CVE-2026-55621 CVE-2026-55622

ironic 1:29.0.5-0+deb13u2 Installability problems ACCEPTED

DSA: 6341

Closes: 1138842

CVEs referenced: CVE-2026-44917 CVE-2026-46447 CVE-2026-48681

Binary debdiffs: all

ironic 1:29.0.5-0+deb13u1 Installability problems ACCEPTED

This upload was superseded by a more current one.

Reason: fix credential forwarding from configuration molds [CVE-2026-42997]; fix IPMI console command injection [CVE-2026-42510]; sandbox kickstart template rendering [CVE-2026-44916]; prevent conductor thread exhaustion from file special devices [CVE-2026-44919]; restrict unsafe file image paths; improve image download validation and checksumming; correct Redfish power, boot and firmware workflows; fix inspection rule validation and hook failures; avoid stuck service/deploy states

Request: 1135911

Closes: 1135255 1135898 1136005 1136655

CVEs referenced: CVE-2026-42510 CVE-2026-42997 CVE-2026-44916 CVE-2026-44919

Binary debdiffs: all

isc-kea 2.6.3-1+deb13u1 Installability problems ACCEPTED

Reason: fix denial of service issue [CVE-2026-3608]

Request: 1139931

CVEs referenced: CVE-2026-3608

Binary debdiffs: s390x

isenkram 0.69+deb13u1 Installability problems ACCEPTED

Reason: handle usr-merge migration in update-fw-list; update generated firmware lists

Request: 1133880

Closes: 1133426

Binary debdiffs: all

jackson-core 2.14.1-2~deb13u1 Installability problems ACCEPTED

DSA: 6336

CVEs referenced: CVE-2025-49128 CVE-2025-52999

Binary debdiffs: all

Lintian issues: allsource

jackson-databind 2.14.0+ds-1+deb13u1 Installability problems ACCEPTED

DSA: 6336

Closes: 1135410

CVEs referenced: CVE-2025-52999

Binary debdiffs: all

Lintian issues: source

jackson-dataformat-smile 2.7.8-5+deb13u1 Installability problems ACCEPTED

DSA: 6336

Binary debdiffs: all

Lintian issues: all

jpeg-xl 0.11.2-0.1~deb13u2 Installability problems ACCEPTED

DSA: 6342

Closes: 1138575

CVEs referenced: CVE-2025-70103

kdenlive 24.12.3-2+deb13u1 Installability problems ACCEPTED

DSA: 6299

Closes: 1136172

CVEs referenced: CVE-2026-45184

keystone 2:27.0.0-3+deb13u4 Installability problems ACCEPTED

DSA: 6331

Closes: 1135645

CVEs referenced: CVE-2026-42998 CVE-2026-42999 CVE-2026-43000 CVE-2026-43001 CVE-2026-44394

keystone 2:27.0.0-3+deb13u3 Installability problems ACCEPTED

This upload was superseded by a more current one.

Reason: fix behaviour of user_enabled_invert [CVE-2026-40683]; prevent unauthorized EC2 credential creation and deletion [CVE-2026-33551]

Request: 1135936

Closes: 1133118 1133884

CVEs referenced: CVE-2026-33551 CVE-2026-40683

kitty 0.41.1-2+deb13u1 Installability problems ACCEPTED

DSA: 6307

Closes: 1137210

CVEs referenced: CVE-2026-33633 CVE-2026-33642

krb5 1.21.3-5+deb13u1 Installability problems ACCEPTED

DSA: 6293

Closes: 1135317

CVEs referenced: CVE-2026-40355 CVE-2026-40356

libapache-session-browseable-perl 1.3.16-1+deb13u1 Installability problems ACCEPTED

Reason: improve entropy source [CVE-2026-8503]

Request: 1136625

CVEs referenced: CVE-2026-8503

Binary debdiffs: all

libass 1:0.17.3-1+deb13u1 Installability problems ACCEPTED

Reason: fix out of bounds read and write issues

Request: 1140695

Binary debdiffs: armelarmhf

libbytes-random-secure-perl 0.29-4~deb13u1 Installability problems ACCEPTED

Reason: fix incorrect usage of seed in PRNG [CVE-2026-11625]

Request: 1140807

CVEs referenced: CVE-2026-11625

Lintian issues: all

libcaca 0.99.beta20-5+deb13u1 Installability problems ACCEPTED

Reason: prevent undefined behaviour in overflow check [CVE-2026-42046]

Request: 1138539

Closes: 1136952

CVEs referenced: CVE-2026-42046

Binary debdiffs: amd64arm64armelarmhfi386ppc64elriscv64s390x

libconfig-inifiles-perl 3.000003-3+deb13u1 Installability problems ACCEPTED

DSA: 6354

CVEs referenced: CVE-2026-11527

libcrypt-pbkdf2-perl 0.261630-1~deb13u1 Installability problems ACCEPTED

Reason: change default hash algorithm to HMAC-SHA256 and default iterations to 600,000 [CVE-2026-9641]; generate salts using Crypt::URandom [CVE-2026-9638]; use a constant-time comparison in `validate` to avoid timing attacks [CVE-2017-20240]

Request: 1139897

Closes: 1139867

CVEs referenced: CVE-2017-20240 CVE-2026-9638 CVE-2026-9641

Binary debdiffs: all

Lintian issues: source

libcrypt-urandom-perl 0.54-1+deb13u1 Installability problems ACCEPTED

Reason: fix buffer overflow issue [CVE-2026-2474]

Request: 1139698

CVEs referenced: CVE-2026-2474

Binary debdiffs: amd64arm64armelarmhfi386ppc64elriscv64s390x

libdbi-perl 1.647-1+deb13u1 Installability problems c-i running: libdata-session-perl/1.18-2 [armhf] ACCEPTED

DSA: 6338

CVEs referenced: CVE-2026-10879 CVE-2026-9698

Binary debdiffs: amd64arm64armelarmhfi386ppc64elriscv64s390x

libgcrypt20 1.11.0-7+deb13u1 Installability problems ACCEPTED

DSA: 6294

µdebs: present

CVEs referenced: CVE-2026-41989

Binary debdiffs: amd64arm64armelarmhfi386ppc64elriscv64s390x

libgd-perl 2.78-1+deb13u1 Installability problems ACCEPTED

DSA: 6345

CVEs referenced: CVE-2026-11526

Binary debdiffs: amd64arm64armelarmhfi386ppc64elriscv64s390x

libhtml-parser-perl 3.83-2~deb13u1 Installability problems ACCEPTED

Reason: fix heap-use-after-free in _decode_entities [CVE-2026-8829]

Request: 1139921

CVEs referenced: CVE-2026-8829

Binary debdiffs: amd64arm64armelarmhfi386ppc64elriscv64s390x

libhttp-daemon-perl 6.16-1+deb13u1 Installability problems ACCEPTED

DSA: 6358

Closes: 1138050

CVEs referenced: CVE-2026-8450

libinput 1.28.1-1+deb13u1 Installability problems ACCEPTED

DSA: 6339

µdebs: present

CVEs referenced: CVE-2026-50292

libnet-cidr-lite-perl 0.22-3~deb13u2 Installability problems ACCEPTED

Reason: fix IP/CIDR parser validation: reject non-ASCII digits and trailing newlines [CVE-2026-55190]; reject zero-padded CIDR masks [CVE-2026-45191]

Request: 1140833

CVEs referenced: CVE-2026-45190 CVE-2026-45191 CVE-2026-55190

librabbitmq 0.15.0-1+deb13u1 Installability problems ACCEPTED

DSA: 6343

CVEs referenced: CVE-2026-44235 CVE-2026-44236

Binary debdiffs: amd64arm64armelarmhfi386ppc64elriscv64s390x

libreoffice 4:25.2.3-2+deb13u6 Installability problems armel armhf ppc64el s390x c-i running: h2orestart/0.7.2-1 [armel] ACCEPTED

Reason: gracefully handle failure in graphite2

Request: 1140107

CVEs referenced: CVE-2026-50593

Binary debdiffs: allarmhf

Lintian issues: source

libreoffice 4:25.2.3-2+deb13u5 Installability problems armel armhf ppc64el s390x ACCEPTED

This upload was superseded by a more current one.

DSA: 6346

CVEs referenced: CVE-2026-6039 CVE-2026-6040 CVE-2026-6045 CVE-2026-8356 CVE-2026-8357 CVE-2026-8358

Binary debdiffs: all

libslirp 4.8.0-1+deb13u1 Installability problems ACCEPTED

Reason: fix memory disclosure issue [CVE-2026-9539]

Request: 1140797

CVEs referenced: CVE-2026-9539

Binary debdiffs: armhf

libssh2 1.11.1-1+deb13u1 Installability problems ACCEPTED

DSA: 6365

Closes: 1135647 1140401

CVEs referenced: CVE-2025-15661 CVE-2026-55199 CVE-2026-55200 CVE-2026-7598

libtasn1-6 4.20.0-2+deb13u1 Installability problems ACCEPTED

Reason: fix buffer overflow issue [CVE-2025-13151]

Request: 1140295

Closes: 1125063

CVEs referenced: CVE-2025-13151

libvncserver 0.9.15+dfsg-1+deb13u2 Installability problems ACCEPTED

Reason: fix buffer overflow and out-of-bounds write [CVE-2026-44988 CVE-2026-50538]

Request: 1140224

Closes: 1138174 1138253

CVEs referenced: CVE-2026-44988 CVE-2026-50538

libxml-libxml-perl 2.0207+dfsg+really+2.0134-5+deb13u1 Installability problems s390x c-i running: libwebservice-musicbrainz-perl/1.0.7-1 [armhf] ACCEPTED

Reason: fix out-of-bounds read [CVE-2026-8177]

Request: 1140835

Closes: 1136300

CVEs referenced: CVE-2026-8177

Binary debdiffs: amd64arm64armelarmhfi386ppc64elriscv64s390x

libxml2 2.12.7+dfsg+really2.9.14-2.1+deb13u3 Installability problems c-i failed: ruby-libxml/5.0.3-1 [armel] ACCEPTED

Reason: fix RelaxNG include recursion limits [CVE-2026-0989]; prevent XML and SGML catalog recursion/resource exhaustion [CVE-2025-8732 CVE-2026-0990 CVE-2026-0992]; fix xmllint shell memory leak [CVE-2026-1757]; correct XML writer and Schematron error-path leaks; avoid RelaxNG validation use-after-free; update regression tests

Request: 1139255

Closes: 1125691 1125695 1125696

CVEs referenced: CVE-2025-49794 CVE-2025-8732 CVE-2026-0989 CVE-2026-0990 CVE-2026-0992 CVE-2026-1757

Binary debdiffs: amd64arm64armelarmhfi386ppc64elriscv64s390x

Lintian issues: amd64arm64armelarmhfi386ppc64elriscv64s390xsource

libxpm 1:3.5.17-1+deb13u1 Installability problems ACCEPTED

Reason: fix out of bounds read issue [CVE-2026-4367]

Request: 1139576

Closes: 1134690

CVEs referenced: CVE-2026-4367

Lintian issues: source

linux 6.12.94-1 Installability problems ACCEPTED

DSA: 6355

µdebs: present

Closes: 1130365

CVEs referenced: CVE-2025-22069 CVE-2025-68251 CVE-2025-68768 CVE-2026-23247 CVE-2026-23272 CVE-2026-23346 CVE-2026-23394 CVE-2026-23469 CVE-2026-31420 CVE-2026-31560 CVE-2026-31613 CVE-2026-31663 CVE-2026-31717 CVE-2026-43116 CVE-2026-43219 CVE-2026-43303 CVE-2026-43331 CVE-2026-45850 CVE-2026-45930 CVE-2026-46158 CVE-2026-46170 CVE-2026-46203 CVE-2026-46216 CVE-2026-46316 CVE-2026-46320 CVE-2026-46321 CVE-2026-46322 CVE-2026-46331 CVE-2026-52909 CVE-2026-52910

Binary debdiffs: allamd64arm64armelarmhfi386ppc64elriscv64s390x

Lintian issues: allamd64arm64armelarmhfi386ppc64elriscv64s390xsource

linux 6.12.90-2 Installability problems ACCEPTED

This upload was superseded by a more current one.

DSA: 6305

µdebs: present

CVEs referenced: CVE-2026-43494

linux 6.12.90-1 Installability problems ACCEPTED

This upload was superseded by a more current one.

DSA: 6295

µdebs: present

Closes: 1136790

CVEs referenced: CVE-2026-23171 CVE-2026-46300

linux 6.12.88-1 Installability problems ACCEPTED

This upload was superseded by a more current one.

DSA: 6274

µdebs: present

Closes: 1119093 1131025 1135313

CVEs referenced: CVE-2026-31499 CVE-2026-43088 CVE-2026-43109 CVE-2026-43220

linux-signed-amd64 6.12.94+1 Installability problems amd64 ACCEPTED

DSA: 6355

µdebs: present

Closes: 1130365

CVEs referenced: CVE-2025-22069 CVE-2025-68251 CVE-2025-68768 CVE-2026-23247 CVE-2026-23272 CVE-2026-23346 CVE-2026-23394 CVE-2026-23469 CVE-2026-31420 CVE-2026-31560 CVE-2026-31613 CVE-2026-31663 CVE-2026-31717 CVE-2026-43116 CVE-2026-43219 CVE-2026-43303 CVE-2026-43331 CVE-2026-45850 CVE-2026-45930 CVE-2026-46158 CVE-2026-46170 CVE-2026-46203 CVE-2026-46216 CVE-2026-46316 CVE-2026-46320 CVE-2026-46321 CVE-2026-46322 CVE-2026-46331 CVE-2026-52909 CVE-2026-52910

Binary debdiffs: amd64

Lintian issues: amd64source

linux-signed-amd64 6.12.90+2 Installability problems ACCEPTED

This upload was superseded by a more current one.

DSA: 6305

µdebs: present

CVEs referenced: CVE-2026-43494

linux-signed-amd64 6.12.90+1 Installability problems ACCEPTED

This upload was superseded by a more current one.

DSA: 6295

µdebs: present

Closes: 1136790

CVEs referenced: CVE-2026-23171 CVE-2026-46300

linux-signed-amd64 6.12.88+1 Installability problems ACCEPTED

This upload was superseded by a more current one.

DSA: 6274

µdebs: present

Closes: 1119093 1131025 1135313

CVEs referenced: CVE-2026-31499 CVE-2026-43088 CVE-2026-43109 CVE-2026-43220

linux-signed-arm64 6.12.94+1 Installability problems arm64 ACCEPTED

DSA: 6355

µdebs: present

Closes: 1130365

CVEs referenced: CVE-2025-22069 CVE-2025-68251 CVE-2025-68768 CVE-2026-23247 CVE-2026-23272 CVE-2026-23346 CVE-2026-23394 CVE-2026-23469 CVE-2026-31420 CVE-2026-31560 CVE-2026-31613 CVE-2026-31663 CVE-2026-31717 CVE-2026-43116 CVE-2026-43219 CVE-2026-43303 CVE-2026-43331 CVE-2026-45850 CVE-2026-45930 CVE-2026-46158 CVE-2026-46170 CVE-2026-46203 CVE-2026-46216 CVE-2026-46316 CVE-2026-46320 CVE-2026-46321 CVE-2026-46322 CVE-2026-46331 CVE-2026-52909 CVE-2026-52910

Binary debdiffs: arm64

Lintian issues: arm64source

linux-signed-arm64 6.12.90+2 Installability problems ACCEPTED

This upload was superseded by a more current one.

DSA: 6305

µdebs: present

CVEs referenced: CVE-2026-43494

linux-signed-arm64 6.12.90+1 Installability problems ACCEPTED

This upload was superseded by a more current one.

DSA: 6295

µdebs: present

Closes: 1136790

CVEs referenced: CVE-2026-23171 CVE-2026-46300

linux-signed-arm64 6.12.88+1 Installability problems ACCEPTED

This upload was superseded by a more current one.

DSA: 6274

µdebs: present

Closes: 1119093 1131025 1135313

CVEs referenced: CVE-2026-31499 CVE-2026-43088 CVE-2026-43109 CVE-2026-43220

linuxcnc 1:2.9.4-2+deb13u1 Installability problems ACCEPTED

Reason: sanitize module names

Request: 1141042

Closes: 1140943

Binary debdiffs: i386

lxd 5.0.2+git20231211.1364ae4-9+deb13u7 Installability problems ACCEPTED

DSA: 6373

CVEs referenced: CVE-2026-48749 CVE-2026-48750 CVE-2026-48751 CVE-2026-48752 CVE-2026-48755 CVE-2026-48769 CVE-2026-55621 CVE-2026-55622 CVE-2026-9639 CVE-2026-9640

Lintian issues: all

lxml-html-clean 0.4.4-1~deb13u1 Installability problems ACCEPTED

Reason: fix filter bypass issue [CVE-2026-28348]; fix tag injection issue [CVE-2026-28350]

Request: 1140353

CVEs referenced: CVE-2026-28348 CVE-2026-28350

Binary debdiffs: all

Lintian issues: source

mariadb 1:11.8.8-0+deb13u1 Installability problems ACCEPTED

Reason: new upstream stable release; fix code execution issues [CVE-2026-44168 CVE-2026-48163 CVE-2026-48165]; fix authorization bypass [CVE-2026-44169]; fix shell interpolation vulnerability [CVE-2026-44170]; fix path traversal issue [CVE-2026-44171]; fix SQL injection issue [CVE-2026-44172]; fix incomplete privilege check issue [CVE-2026-44173]; fix "Illegal mix of collations" error; fix "Mroonga hangs on invalid index flag"; fix crash in information_schema.table_constraints

Request: 1140853

Closes: 1104533 1110683 1126850 1127431 1137221

CVEs referenced: CVE-2026-44168 CVE-2026-44169 CVE-2026-44170 CVE-2026-44171 CVE-2026-44172 CVE-2026-44173 CVE-2026-48163 CVE-2026-48165

Binary debdiffs: allamd64arm64armelarmhfi386ppc64elriscv64s390x

Lintian issues: armhf

mesa 25.0.7-2+deb13u1 Installability problems c-i running: camitk/5.2.0-5 [armhf] libqglviewer/2.8.0+dfsg1-2.1 [armhf] openxr-sdk-source/1.1.47~ds-2 [armhf] ACCEPTED

Reason: fix WebGPU/SPIR-V allocation handling [CVE-2026-40393]

Request: 1140473

CVEs referenced: CVE-2026-40393

Binary debdiffs: amd64arm64armelarmhfi386ppc64elriscv64s390x

Lintian issues: amd64arm64armelarmhfi386ppc64elriscv64s390x

miniupnpd 2.3.9-2+deb13u1 Installability problems ACCEPTED

Reason: fix integer underflow issue [CVE-2026-5720]

Request: 1140436

Closes: 1134334

CVEs referenced: CVE-2026-5720

mistral 20.0.0-2+deb13u1 Installability problems ACCEPTED

DSA: 6333

Closes: 1138843 1138849

CVEs referenced: CVE-2026-41283

Binary debdiffs: all

modsecurity 3.0.14-1+deb13u1 Installability problems ACCEPTED

Reason: prevent denial of service in hexDecode handling [CVE-2026-30923]; prevent denial of service in SSN/CPF/SVNR verification [CVE-2026-42268]

Request: 1137277

CVEs referenced: CVE-2026-30923 CVE-2026-42268

Binary debdiffs: i386s390x

mutt 2.2.13-1+deb13u1 Installability problems ACCEPTED

Reason: fix buffer truncation issues [CVE-2026-43859 CVE-2026-43860 CVE-2026-43861]; fix mishandling of imap_auth_gss security level [CVE-2026-43862]; fix denial of service issue [CVE-2026-43863]; fix NULL pointer dereference issue [CVE-2026-43864]

Request: 1139927

Closes: 1135699

CVEs referenced: CVE-2026-43859 CVE-2026-43860 CVE-2026-43861 CVE-2026-43862 CVE-2026-43863 CVE-2026-43864

Binary debdiffs: amd64arm64armelarmhfi386ppc64elriscv64s390x

mxml 3.3.1-1+deb13u1 Installability problems ACCEPTED

Reason: fix out-of-bounds read [CVE-2026-5037]

Request: 1140382

Closes: 1132328

CVEs referenced: CVE-2026-5037

Binary debdiffs: armelarmhf

nagios4 4.4.6-4.1+deb13u1 Installability problems ACCEPTED

DSA: 6308

Closes: 1136340

Binary debdiffs: allamd64arm64armelarmhfi386ppc64elriscv64s390x

nbconvert 7.16.6-1+deb13u1 Installability problems ACCEPTED

Reason: fix arbitrary file write issue [CVE-2026-39377]; fix arbitrary file read issue [CVE-2026-39378]

Request: 1140449

Closes: 1134889 1134890

CVEs referenced: CVE-2026-39377 CVE-2026-39378

netatalk 4.2.3~ds-1+deb13u2 Installability problems ACCEPTED

DSA: 6280

CVEs referenced: CVE-2026-44047 CVE-2026-44048 CVE-2026-44049 CVE-2026-44050 CVE-2026-44051 CVE-2026-44052 CVE-2026-44054 CVE-2026-44055 CVE-2026-44057 CVE-2026-44060 CVE-2026-44062 CVE-2026-44064 CVE-2026-44066 CVE-2026-44068 CVE-2026-44076 CVE-2026-45354 CVE-2026-45355 CVE-2026-45356 CVE-2026-45698 CVE-2026-45699

neutron 2:26.0.3-0+deb13u2 Installability problems ACCEPTED

DSA: 6340

Closes: 1135272 1138844

CVEs referenced: CVE-2026-50266

Binary debdiffs: all

neutron 2:26.0.0-9+deb13u1 Installability problems ACCEPTED

This upload was superseded by a more current one.

Reason: fix tagging policy bypass

Request: 1138225

Closes: 1138172

nghttp2 1.64.0-1.1+deb13u1 Installability problems c-i running: nodejs/20.19.2+dfsg-1+deb13u2 [amd64] nodejs/20.19.2+dfsg-1+deb13u2 [arm64] nodejs/20.19.2+dfsg-1+deb13u2 [ppc64el] nodejs/20.19.2+dfsg-1+deb13u2 [s390x] ACCEPTED

DSA: 6266

Closes: 1131369

CVEs referenced: CVE-2026-27135

nginx 1.26.3-3+deb13u7 Installability problems ACCEPTED

DSA: 6374

Closes: 1140359 1140361

CVEs referenced: CVE-2026-42055 CVE-2026-48142

Lintian issues: allamd64arm64armelarmhfi386ppc64elriscv64s390x

nginx 1.26.3-3+deb13u6 Installability problems ACCEPTED

This upload was superseded by a more current one.

DSA: 6326

CVEs referenced: CVE-2026-42946 CVE-2026-9256

Lintian issues: allamd64arm64armelarmhfi386ppc64elriscv64s390x

nginx 1.26.3-3+deb13u5 Installability problems ACCEPTED

This upload was superseded by a more current one.

DSA: 6278

CVEs referenced: CVE-2026-40460 CVE-2026-40701 CVE-2026-42934 CVE-2026-42945 CVE-2026-42946

Lintian issues: all

node-shell-quote 1.7.4+~1.7.1-1+deb13u1 Installability problems c-i failed: node-browserify/17.0.0+ds-5 [riscv64] ACCEPTED

DSA: 6300

Closes: 1137372

CVEs referenced: CVE-2026-9277

nss 2:3.110-1+deb13u3 Installability problems ACCEPTED

Reason: improve handling of escape sequences in pk11uri_ParseAttributes [CVE-2026-12318]

Request: 1141246

CVEs referenced: CVE-2026-12318

nss 2:3.110-1+deb13u2 Installability problems ACCEPTED

This upload was superseded by a more current one.

DSA: 6290

CVEs referenced: CVE-2026-6766 CVE-2026-6767 CVE-2026-6772

ojalgo 55.0.0+ds-1+deb13u1 Installability problems ACCEPTED

Reason: reduce frequency of built-time test failures

Request: 1140607

Closes: 1140433

okular 4:25.04.2-1+deb13u1 Installability problems ACCEPTED

DSA: 6332

opencc 1.1.9+ds1-1+deb13u1 Installability problems ACCEPTED

Reason: fix out-of-bounds read issue [CVE-2025-15536]

Request: 1140450

Closes: 1126286

CVEs referenced: CVE-2025-15536

Binary debdiffs: amd64arm64armelarmhfi386ppc64elriscv64s390x

openjpeg2 2.5.3-2.1~deb13u2 Installability problems ACCEPTED

DSA: 6277

Closes: 1133832

CVEs referenced: CVE-2026-6192

Lintian issues: amd64arm64armelarmhfi386ppc64elriscv64s390xsource

openslide 3.4.1+dfsg-7+deb13u1 Installability problems ACCEPTED

Reason: fix possible code execution issue [CVE-2026-48977]

Request: 1140493

Closes: 1140003

CVEs referenced: CVE-2026-48977

Binary debdiffs: amd64arm64armelarmhfi386ppc64elriscv64s390x

openssl 3.5.6-1~deb13u2 Installability problems c-i failed: apt/3.0.3 [armhf] fastdds/3.1.2+ds-1 [arm64] fastdds/3.1.2+ds-1 [armel] golang-github-github-smimesign/0.2.0+dfsg-3 [armhf] golang-github-mendersoftware-openssl/1.1.0-4 [arm64] grpc/1.51.1-6 [arm64] grpc/1.51.1-6 [i386] hiredict/1.3.1-2 [arm64] hiredict/1.3.1-2 [i386] hiredict/1.3.1-2 [riscv64] lambda-align/1.0.3-6 [i386] node-sshpk/1.17.0+dfsg-2 [riscv64] nodejs/20.19.2+dfsg-1+deb13u2 [amd64] nodejs/20.19.2+dfsg-1+deb13u2 [arm64] nodejs/20.19.2+dfsg-1+deb13u2 [ppc64el] nodejs/20.19.2+dfsg-1+deb13u2 [s390x] privoxy/4.0.0-2 [amd64] privoxy/4.0.0-2 [arm64] privoxy/4.0.0-2 [armhf] privoxy/4.0.0-2 [riscv64] privoxy/4.0.0-2 [s390x] r-cran-s2/1.1.7-2 [riscv64] readpe/0.84-2 [riscv64] ruby3.3/3.3.8-2 [arm64] rust-ognibuild/0.0.34-1 [amd64] rust-ognibuild/0.0.34-1 [armel] seqkit/2.9.0+ds-1 [armhf] slic3r-prusa/2.9.2+dfsg-1 [i386] slic3r-prusa/2.9.2+dfsg-1 [riscv64] srpc/0.10.3-2 [armel] vlc-plugin-bittorrent/2.15-2 [riscv64] xmltooling/3.3.0-2 [i386] xmltooling/3.3.0-2 [riscv64] ACCEPTED

DSA: 6335

µdebs: present

CVEs referenced: CVE-2026-34180 CVE-2026-34181 CVE-2026-34182 CVE-2026-34183 CVE-2026-42764 CVE-2026-42766 CVE-2026-42767 CVE-2026-42768 CVE-2026-42769 CVE-2026-42770 CVE-2026-45445 CVE-2026-45446 CVE-2026-45447 CVE-2026-7383 CVE-2026-9076

openvpn 2.6.14-1+deb13u3 Installability problems ACCEPTED

DSA: 6376

CVEs referenced: CVE-2026-11771 CVE-2026-12932 CVE-2026-12996 CVE-2026-13117 CVE-2026-13122 CVE-2026-13698

Lintian issues: amd64arm64armelarmhfi386ppc64elriscv64s390x

openvpn 2.6.14-1+deb13u2 Installability problems ACCEPTED

This upload was superseded by a more current one.

DSA: 6289

CVEs referenced: CVE-2026-35058 CVE-2026-40215

Lintian issues: amd64arm64armelarmhfi386ppc64elriscv64s390x

pdns 4.9.16-0+deb13u1 Installability problems ACCEPTED

DSA: 6368

CVEs referenced: CVE-2026-42005

pdns 4.9.15-0+deb13u1 Installability problems ACCEPTED

This upload was superseded by a more current one.

DSA: 6284

CVEs referenced: CVE-2026-42000 CVE-2026-42001 CVE-2026-42002 CVE-2026-42396

pdns-recursor 5.2.11-0+deb13u1 Installability problems ACCEPTED

DSA: 6369

CVEs referenced: CVE-2026-33612 CVE-2026-40012 CVE-2026-42005 CVE-2026-42387 CVE-2026-42388 CVE-2026-42390 CVE-2026-52690

php-guzzlehttp-psr7 2.7.1-1+deb13u1 Installability problems ACCEPTED

Reason: fix Host authority validation [CVE-2026-48998]; reject control characters in URI hosts [CVE-2026-49214]; harden ServerRequest globals handling; normalise global header values; encode literal plus signs in query helpers

Request: 1139278

Closes: 1138265

CVEs referenced: CVE-2026-48998 CVE-2026-49214

Binary debdiffs: all

php-league-csv 9.23.0+dfsg-1+deb13u1 Installability problems ACCEPTED

Reason: fix build time test with PHP >=8.4.14

Request: 1138226

Closes: 1137038

php-twig 3.27.0-0+deb13u1 Installability problems ACCEPTED

DSA: 6311

CVEs referenced: CVE-2026-24425 CVE-2026-46627 CVE-2026-46628 CVE-2026-46629 CVE-2026-46633 CVE-2026-46634 CVE-2026-46635 CVE-2026-46636 CVE-2026-46637 CVE-2026-46638 CVE-2026-46639 CVE-2026-46640 CVE-2026-47730 CVE-2026-47732 CVE-2026-48805 CVE-2026-48806 CVE-2026-48807 CVE-2026-48808

Binary debdiffs: all

Lintian issues: source

php-twig 3.26.0-0+deb13u1 Installability problems ACCEPTED

This upload was superseded by a more current one.

Distribution mismatch: trixie-security

Reason: security update

CVEs referenced: CVE-2026-24425 CVE-2026-46627 CVE-2026-46628 CVE-2026-46629 CVE-2026-46633 CVE-2026-46634 CVE-2026-46635 CVE-2026-46637 CVE-2026-46638 CVE-2026-46639 CVE-2026-46640 CVE-2026-47730 CVE-2026-47732

Binary debdiffs: all

php8.4 8.4.23-1~deb13u1 Version problems testing (8.4.22-1) Installability problems ACCEPTED

DSA: 6377

CVEs referenced: CVE-2026-14355

Binary debdiffs: arm64

php8.4 8.4.21-1~deb13u1 Installability problems ACCEPTED

This upload was superseded by a more current one.

DSA: 6256

CVEs referenced: CVE-2025-14179 CVE-2026-29078 CVE-2026-29079 CVE-2026-6104 CVE-2026-6722 CVE-2026-6735 CVE-2026-7258 CVE-2026-7259 CVE-2026-7261 CVE-2026-7262 CVE-2026-7263 CVE-2026-7568

Binary debdiffs: amd64arm64armelarmhfi386ppc64elriscv64s390x

pillow 11.1.0-5+deb13u4 Installability problems c-i failed: cctbx/2024.10+ds2+~3.22.1+ds1-5 [s390x] gavodachs/2.11+dfsg-2 [armhf] gavodachs/2.11+dfsg-2 [i386] paperwork/2.2.5-3 [amd64] pytest-regressions/2.5.0+ds-2 [i386] satpy/0.55.0-1 [armhf] satpy/0.55.0-1 [i386] tryton-modules-product-image/7.0.2-1 [amd64] tryton-modules-product-image/7.0.2-1 [arm64] tryton-modules-product-image/7.0.2-1 [i386] tryton-modules-product-image/7.0.2-1 [ppc64el] tryton-modules-product-image/7.0.2-1 [s390x] ACCEPTED

Reason: followup fix for CVE-2026-42310

Request: 1141397

Closes: 1141330

CVEs referenced: CVE-2026-42310

pillow 11.1.0-5+deb13u3 Installability problems ACCEPTED

This upload was superseded by a more current one.

DSA: 6357

CVEs referenced: CVE-2026-42308 CVE-2026-42310 CVE-2026-42311

poco 1.13.0-6+deb13u1 Installability problems ACCEPTED

Reason: fix segmentation fault [CVE-2025-6375]

Request: 1140455

Closes: 1108157

CVEs referenced: CVE-2025-6375

Binary debdiffs: amd64arm64armelarmhfi386ppc64els390x

poetry 2.1.2+dfsg-1+deb13u1 Installability problems ACCEPTED

Reason: fix arbitrary file write issue [CVE-2026-34591]

Request: 1141377

Closes: 1132609

CVEs referenced: CVE-2026-34591

poppler 25.03.0-5+deb13u4 Installability problems c-i running: camlpdf/2.8.1-1 [i386] ACCEPTED

Reason: fix invalid signature creation issue

Request: 1141293

Closes: 1127146

Lintian issues: allamd64arm64armelarmhfi386ppc64elriscv64s390x

poppler 25.03.0-5+deb13u3 Installability problems ACCEPTED

This upload was superseded by a more current one.

DSA: 6334

Closes: 1117046 1117853 1138708

CVEs referenced: CVE-2025-43718 CVE-2025-52885 CVE-2026-10118

Lintian issues: allamd64arm64armelarmhfi386ppc64elriscv64s390x

postfix 3.10.11-0+deb13u1 Installability problems ACCEPTED

Reason: new upstream stable release

Request: 1141410

Binary debdiffs: amd64arm64armelarmhfi386ppc64elriscv64s390x

Lintian issues: amd64arm64armelarmhfi386ppc64elriscv64s390xsource

postfix 3.10.10-0+deb13u1 Installability problems ACCEPTED

This upload was superseded by a more current one.

Reason: new upstream stable release; fix denial of service issue [CVE-2026-43964]; keep daemon running during upgrades

Request: 1139680

Closes: 1120869 1135718

CVEs referenced: CVE-2026-43964

postgresql-17 17.10-0+deb13u1 Installability problems c-i failed: isc-kea/2.6.3-1 [ppc64el] londiste-sql/3.8-6 [i386] pgfaceting/0.2.0-4 [i386] pgfaceting/0.2.0-4 [s390x] pgl-ddl-deploy/2.2.1-2 [amd64] pgl-ddl-deploy/2.2.1-2 [arm64] pgl-ddl-deploy/2.2.1-2 [ppc64el] pgl-ddl-deploy/2.2.1-2 [s390x] pgq-node/3.5-7 [i386] ACCEPTED

DSA: 6270

CVEs referenced: CVE-2026-6472 CVE-2026-6473 CVE-2026-6474 CVE-2026-6475 CVE-2026-6476 CVE-2026-6477 CVE-2026-6478 CVE-2026-6479 CVE-2026-6637 CVE-2026-6638

Binary debdiffs: alli386s390x

protobuf 3.21.12-11+deb13u1 Installability problems c-i running: osmpbf/1.5.1-1 [arm64] osmpbf/1.5.1-1 [i386] ACCEPTED

Reason: fix parser recursion limits [CVE-2024-7254 CVE-2025-4565 CVE-2026-0994 CVE-2026-6409]

Request: 1141310

Closes: 1082381 1108057 1126302 1134895

CVEs referenced: CVE-2024-7254 CVE-2025-4565 CVE-2026-0994 CVE-2026-6409

Binary debdiffs: i386s390x

psd-tools 1.10.7+dfsg.1-1+deb13u1 Installability problems ACCEPTED

Reason: fix denial of service issue [CVE-2026-27809]

Request: 1140505

Closes: 1129098

CVEs referenced: CVE-2026-27809

Binary debdiffs: i386s390x

pupnp 1:1.14.20-1+deb13u1 Installability problems ACCEPTED

Reason: fix SSRF port confusion issue [CVE-2026-41682]

Request: 1140543

CVEs referenced: CVE-2026-41682

Binary debdiffs: armelarmhf

pymdown-extensions 10.13-1+deb13u1 Installability problems ACCEPTED

Reason: fix regular expression-based denial of service issue [CVE-2025-68142]

Request: 1140547

Closes: 1123672

CVEs referenced: CVE-2025-68142

pyopenssl 25.0.0-1+deb13u1 Installability problems ACCEPTED

Reason: fix handling of exceptions and connection cancelling [CVE-2026-27448]; fix buffer overflow in DTLS cookie callback [CVE-2026-27459]

Missing builds: all

Request: 1140553

CVEs referenced: CVE-2026-27448 CVE-2026-27459

pytest-httpbin 2.1.0-1+deb13u1 Installability problems ACCEPTED

Reason: disable unreliable build-time test

Request: 1138577

Closes: 1137653

python-daphne 4.1.2-2+deb13u1 Installability problems ACCEPTED

Reason: fix denial of service issue [CVE-2026-44545]; fix header injection issue [CVE-2026-44546]

Request: 1141383

Closes: 1138864

CVEs referenced: CVE-2026-44545 CVE-2026-44546

python-django 3:4.2.28-0+deb13u2 Installability problems c-i running: slm/1.32-3 [riscv64] ACCEPTED

Distribution mismatch: stable-proposed-updates

Reason: update test suite following changes in python3.13

Request: 1137724

Closes: 1137039

CVEs referenced: CVE-2025-6069

python-dynaconf 3.1.7-2+deb13u1 Installability problems ACCEPTED

Reason: fix Server-Side Template Injection issue [CVE-2026-33154]

Request: 1140626

Closes: 1131476

CVEs referenced: CVE-2026-33154

python-grpc-tools 1.14.1-8+deb13u1 Installability problems ACCEPTED

Reason: fix TypeError in command.build_package_protos

Request: 1136656

Closes: 1132763

Binary debdiffs: s390x

Lintian issues: amd64arm64armelarmhfi386ppc64elriscv64s390x

python-handy-archives 0.2.0-5+deb13u1 Installability problems ACCEPTED

Reason: fix end of central diretory locator for Zip64

Request: 1137103

Closes: 1137041

python-idna 3.10-1+deb13u1 Installability problems c-i failed: httpx/0.28.1-1 [armhf] ACCEPTED

Reason: fix denial of service issue [CVE-2026-45409]

Request: 1140848

Closes: 1139164

CVEs referenced: CVE-2026-45409

python-iniparse 0.5.1-1+deb13u1 Installability problems ACCEPTED

Reason: fix race condition in build-time tests

Request: 1139261

Closes: 1137634

python-jwcrypto 1.5.6-1.1~deb13u1 Installability problems ACCEPTED

Reason: fix denial of service issue [CVE-2026-39373]

Request: 1140850

Closes: 1133006

CVEs referenced: CVE-2026-39373

python-marshmallow 3.26.2-0+deb13u1 Installability problems ACCEPTED

Reason: fix denial of service issue [CVE-2025-68480]

Request: 1140910

Closes: 1123888

CVEs referenced: CVE-2025-68480

Binary debdiffs: all

python-memray 1.17.0+dfsg-1+deb13u1 Installability problems ACCEPTED

Reason: fix cross-site scripting issue [CVE-2026-32722]

Request: 1140671

Closes: 1131372

CVEs referenced: CVE-2026-32722

python-oslo.messaging 16.1.0-3+deb13u1 Installability problems ACCEPTED

DSA: 6341

Closes: 1138848

CVEs referenced: CVE-2026-44393

python-urllib3 2.3.0-3+deb13u2 Installability problems c-i running: breezy/3.3.11-1 [riscv64] finalcif/137+dfsg-4 [amd64] finalcif/137+dfsg-4 [armhf] patroni/4.0.7-3~deb13u1 [arm64] pyaps3/0.3.6-1 [armhf] pyaps3/0.3.6-1 [i386] python-podman/5.4.0.1-2 [armhf] python-truststore/0.10.1-1 [amd64] yt-dlp/2025.04.30-1 [i386] yt-dlp/2025.04.30-1 [riscv64] ACCEPTED

DSA: 6363

Closes: 1136653

CVEs referenced: CVE-2026-44431

python-virtualenv 20.31.2+ds-1+deb13u1 Installability problems c-i failed: poetry/2.1.2+dfsg-1 [riscv64] ACCEPTED

Reason: fix time-of-check / time-of-use issues [CVE-2026-22702]

Request: 1140948

Closes: 1125191

CVEs referenced: CVE-2026-22702

python-webob 1:1.8.10-0+deb13u1 Version problems testing (1:1.8.9-2) Installability problems ACCEPTED

Reason: fix open redirect issue [CVE-2026-44889]

Missing builds: all

Request: 1141382

CVEs referenced: CVE-2026-44889

python-xmltodict 0.13.0-1.1~deb13u1 Installability problems c-i running: python-moto/5.1.1-4 [armel] ACCEPTED

Reason: fix XML injectin issue [CVE-2025-9375]

Request: 1141370

Closes: 1113825

CVEs referenced: CVE-2025-9375

python3.13 3.13.5-2+deb13u3 Installability problems amd64-needed arm64-needed armhf-needed s390x-needed ACCEPTED

Reason: fix a crash in SNI callback when the SSL object is gone; fix reference leaks in ssl.SSLContext objects; avoid garbage collecting objects too early when sharing __dict__; fix "CR/LF bytes were not rejected by HTTP client proxy tunnel headers or host" [CVE-2026-1502]; fix denial of service issues [CVE-2026-3276 CVE-2026-9669]; fix insufficient escaping issue [CVE-2026-6019]; fix path traversal issue [CVE-2026-7774]; fix server-side request forgery issue [CVE-2026-8328]

Missing builds: all armel i386 ppc64el riscv64

Request: 1139577

Closes: 1108039 1138157

CVEs referenced: CVE-2026-1502 CVE-2026-3276 CVE-2026-6019 CVE-2026-7774 CVE-2026-8328 CVE-2026-9669

Lintian issues: amd64arm64armhfs390x

qemu 1:10.0.11+ds-0+deb13u1 Installability problems amd64-needed arm64-needed armel-needed armhf-needed i386-needed ppc64el-needed s390x-needed install upgrade ACCEPTED

Reason: new upstream stable release; security fixes [CVE-2026-48002 CVE-2026-48003 CVE-2026-48004 CVE-2026-48914 CVE-2026-48915 CVE-2026-6425 CVE-2026-8343]

Missing builds: all riscv64

Request: 1140902

Closes: 1139923

CVEs referenced: CVE-2026-48002 CVE-2026-48003 CVE-2026-48004 CVE-2026-48914 CVE-2026-48915 CVE-2026-6425 CVE-2026-8343

Binary debdiffs: amd64arm64armelarmhfi386ppc64els390x

Lintian issues: amd64arm64armelarmhfi386ppc64els390x

qemu 1:10.0.10+ds-0+deb13u1 Installability problems ACCEPTED

This upload was superseded by a more current one.

Reason: new upstream stable release; security fixes [CVE-2024-6519 CVE-2026-2243 CVE-2026-3195 CVE-2026-3196 CVE-2026-3842 CVE-2026-3886 CVE-2026-3890 CVE-2026-41435 CVE-2026-41436 CVE-2026-41437 CVE-2026-41438 CVE-2026-41439 CVE-2026-41440 CVE-2026-5744 CVE-2026-5761 CVE-2026-5763 CVE-2026-6502 CVE-2026-8341]

Request: 1139679

Closes: 1085299 1128478 1129349 1129604 1129605

CVEs referenced: CVE-2024-6519 CVE-2026-2243 CVE-2026-3195 CVE-2026-3196 CVE-2026-3842 CVE-2026-3886 CVE-2026-3890 CVE-2026-41435 CVE-2026-41436 CVE-2026-41437 CVE-2026-41438 CVE-2026-41439 CVE-2026-41440 CVE-2026-5744 CVE-2026-5761 CVE-2026-5763 CVE-2026-6502 CVE-2026-8341

qtmir 0.8.0~git20250407.ea2f477-1+deb13u1 Installability problems ACCEPTED

Reason: fix Lomiri rendering, scaling, focus handling, and session crash issues; correct stale window and dead surface cleanup; ensure Xwayland applications inherit DISPLAY; improve Asahi Linux rendering provider selection

Request: 1136699

Binary debdiffs: amd64arm64armelarmhfi386ppc64elriscv64s390x

rauc 1.13-3+deb13u1 Installability problems ACCEPTED

Reason: fix improper signing of large bundles [CVE-2026-34155]

Request: 1140966

CVEs referenced: CVE-2026-34155

redis 5:8.0.2-3+deb13u2 Installability problems ACCEPTED

DSA: 6279

CVEs referenced: CVE-2025-67733 CVE-2026-21863

Lintian issues: source

request-tracker5 5.0.7+dfsg-4+deb13u3 Installability problems ACCEPTED

DSA: 6324

CVEs referenced: CVE-2026-41073 CVE-2026-41075 CVE-2026-41076 CVE-2026-44229 CVE-2026-44230 CVE-2026-44231 CVE-2026-6841

resource-agents 1:4.16.0-3+deb13u2 Installability problems ACCEPTED

Reason: fix syntax error

Request: 1136163

Closes: 1133386

Lintian issues: allamd64arm64armelarmhfi386ppc64elriscv64s390xsource

rhino 1.7.15.1-0.1~deb13u1 Version problems testing (1.7.15-1) Installability problems ACCEPTED

Reason: fix denial of service issue [CVE-2025-66453]

Request: 1141349

Closes: 1121953

CVEs referenced: CVE-2025-66453

rlottie 0.1+dfsg-4.2+deb13u2 Installability problems ACCEPTED

Reason: fix out-of-bounds read issue [CVE-2026-10305]; fix denial of service issues [CVE-2026-47319 CVE-2026-47320]

Request: 1141368

Closes: 1138919 1138920 1139179

CVEs referenced: CVE-2026-10305 CVE-2026-47319 CVE-2026-47320

Lintian issues: amd64arm64armelarmhfi386ppc64elriscv64s390x

roundcube 1.6.16+dfsg-0+deb13u1 Installability problems ACCEPTED

DSA: 6301

Closes: 1137507

CVEs referenced: CVE-2026-48842 CVE-2026-48843 CVE-2026-48844 CVE-2026-48845 CVE-2026-48846 CVE-2026-48847 CVE-2026-48848 CVE-2026-48849

rsync 3.4.1+ds1-5+deb13u4 Installability problems c-i running: dgit/12.16 [armel] nova/2:31.0.0-6+deb13u2 [amd64] ACCEPTED

Reason: reject excessively long HTTP proxy response lines [CVE-2026-45232]

Request: 1138659

CVEs referenced: CVE-2026-45232

rsync 3.4.1+ds1-5+deb13u3 Installability problems ACCEPTED

This upload was superseded by a more current one.

DSA: 6282

CVEs referenced: CVE-2026-29518 CVE-2026-43617 CVE-2026-43618 CVE-2026-43619 CVE-2026-43620

rtl-433 25.02-1+deb13u1 Installability problems ACCEPTED

Reason: fix buffer overflow issue [CVE-2025-34450]

Request: 1141179

Closes: 1126178

CVEs referenced: CVE-2025-34450

ruby-css-parser 1.19.0-1+deb13u1 Installability problems ACCEPTED

Reason: fix validation of HTTPS certificates for remote CSS [CVE-2026-44312]

Request: 1138988

CVEs referenced: CVE-2026-44312

rust-time 0.3.37-1+deb13u1 Installability problems c-i running: rust-zxcvbn/3.1.0-1 [arm64] ACCEPTED

Reason: fix denial of service [CVE-2026-25727]

Request: 1128925

Closes: 1128404

CVEs referenced: CVE-2026-25727

Binary debdiffs: amd64arm64armelarmhfi386ppc64elriscv64s390x

samba 2:4.22.10+dfsg-0+deb13u1 Installability problems amd64-needed arm64-needed armel-needed armhf-needed i386-needed ppc64el-needed riscv64-needed s390x-needed c-i failed: rust-trivialdb/0.1.7-3 [armel] ACCEPTED

Reason: new upstream stable release

Missing builds: all

Request: 1139677

CVEs referenced: CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 CVE-2026-3238 CVE-2026-4408 CVE-2026-4480

Binary debdiffs: amd64arm64armelarmhfi386ppc64elriscv64s390x

Lintian issues: amd64arm64armelarmhfi386ppc64elriscv64s390x

samba 2:4.22.8+dfsg-0+deb13u2 Installability problems ACCEPTED

This upload was superseded by a more current one.

DSA: 6297

CVEs referenced: CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 CVE-2026-3238 CVE-2026-4408 CVE-2026-4480

Binary debdiffs: amd64arm64armelarmhfi386ppc64elriscv64s390x

Lintian issues: amd64arm64armelarmhfi386ppc64elriscv64s390x

shim 16.1-2~deb13u1 Installability problems ACCEPTED

Reason: new upstream release; build with default gcc; set SBAT revocation level to 2025021800

Request: 1131861

Lintian issues: source

shim-helpers-amd64-signed 1+16.1+2~deb13u1 Installability problems amd64 ACCEPTED

Distribution mismatch: trixie-proposed-updates

Reason: update to shim 16.1-2~deb13u1

Binary debdiffs: amd64

shim-helpers-arm64-signed 1+16.1+2~deb13u1 Installability problems arm64 ACCEPTED

Distribution mismatch: trixie-proposed-updates

Reason: update to shim 16.1-2~deb13u1

Binary debdiffs: arm64

shim-signed 1.51~1+deb13u1 Installability problems ACCEPTED

Reason: ensure Secure Boot compatibility with 2023 Microsoft UEFI CA; check for likely boot issues before installation; combine and verify multiple shim signatures; update signed shim binaries

Request: 1140760

Binary debdiffs: amd64arm64

Lintian issues: source

skanpage 25.04.2-1+deb13u1 Installability problems ACCEPTED

Reason: fix data leakage issue [CVE-2025-55174]

Request: 1139665

Closes: 1121443

CVEs referenced: CVE-2025-55174

smartdns 46.1+dfsg-1.1~deb13u1 Version problems testing (46.1+dfsg-1) smartdns/testing [arm64] (46.1+dfsg-1+b1) Installability problems ACCEPTED

Reason: fix buffer overflow issue [CVE-2026-1425]

Request: 1141358

Closes: 1126538

CVEs referenced: CVE-2026-1425

Binary debdiffs: s390x

sogo 5.12.1-3+deb13u2 Installability problems ACCEPTED

DSA: 6366

Closes: 1130878 1131605 1131606

CVEs referenced: CVE-2025-71276 CVE-2026-3054 CVE-2026-33550 CVE-2026-46445 CVE-2026-46446 CVE-2026-8496 CVE-2026-8851

spip 4.4.15+dfsg-0+deb13u1 Installability problems ACCEPTED

DSA: 6296

CVEs referenced: CVE-2026-8429 CVE-2026-8430

Binary debdiffs: all

squid 6.13-2+deb13u2 Installability problems c-i failed: squid/6.13-2+deb13u2 [s390x] ACCEPTED

DSA: 6360

CVEs referenced: CVE-2026-33515 CVE-2026-33526 CVE-2026-47729 CVE-2026-50012

Binary debdiffs: i386s390x

Lintian issues: allamd64arm64armelarmhfi386ppc64elriscv64s390xsource

squirrel3 3.1-8.2+deb13u1 Installability problems ACCEPTED

Reason: fix sandbox escape [CVE-2021-41556]

Request: 1140351

Closes: 1016212

CVEs referenced: CVE-2021-41556

Binary debdiffs: amd64arm64armelarmhfi386ppc64elriscv64s390x

sshfs-fuse 3.7.3-1.2~deb13u1 Installability problems c-i running: gsocket/1.4.43-4 [riscv64] ACCEPTED

Reason: add contain_symlinks option to prevent symlink escape attacks [CVE-2026-47187]; reject hostname option injection via bracketed mount source [CVE-2026-48711]

Request: 1138705

Closes: 1138293

CVEs referenced: CVE-2026-47187 CVE-2026-48711

Binary debdiffs: amd64arm64armelarmhfi386ppc64elriscv64s390x

starlette 0.46.1-3+deb13u2 Installability problems c-i failed: fastapi/0.115.11-4 [s390x] ACCEPTED

DSA: 6302

Closes: 1137375

CVEs referenced: CVE-2026-48710

starman 0.4018-0+deb13u1 Installability problems ACCEPTED

Reason: fix request smuggling issue [CVE-2026-40560]

Missing builds: all

Request: 1141398

Closes: 1135229

CVEs referenced: CVE-2026-40560

strongswan 6.0.1-6+deb13u6 Installability problems ACCEPTED

DSA: 6330

CVEs referenced: CVE-2026-47895

swift 2.35.1-0+deb13u2 Installability problems ACCEPTED

DSA: 6314

Closes: 1138170

CVEs referenced: CVE-2026-49017

Lintian issues: source

symfony 6.4.41+dfsg-0+deb13u1 Installability problems c-i failed: php-twig/3.20.0-2 [armel] php-twig/3.20.0-2 [armhf] php-twig/3.20.0-2 [riscv64] symfony/6.4.41+dfsg-0+deb13u1 [armel] ACCEPTED

DSA: 6312

CVEs referenced: CVE-2024-50340 CVE-2026-45063 CVE-2026-45064 CVE-2026-45065 CVE-2026-45066 CVE-2026-45067 CVE-2026-45068 CVE-2026-45069 CVE-2026-45071 CVE-2026-45072 CVE-2026-45073 CVE-2026-45077 CVE-2026-45133 CVE-2026-45304 CVE-2026-45305 CVE-2026-45754 CVE-2026-46626 CVE-2026-48489 CVE-2026-48736 CVE-2026-48760 CVE-2026-48761 CVE-2026-48784

Binary debdiffs: all

Lintian issues: allsource

symfony 6.4.40+dfsg-0+deb13u1 Installability problems ACCEPTED

This upload was superseded by a more current one.

Distribution mismatch: trixie-security

Reason: security update

CVEs referenced: CVE-2024-50340 CVE-2026-45063 CVE-2026-45064 CVE-2026-45065 CVE-2026-45066 CVE-2026-45067 CVE-2026-45068 CVE-2026-45069 CVE-2026-45071 CVE-2026-45072 CVE-2026-45073 CVE-2026-45077 CVE-2026-45133 CVE-2026-45304 CVE-2026-45305 CVE-2026-45754 CVE-2026-46626

Binary debdiffs: all

Lintian issues: all

thunderbird 1:140.12.0esr-1~deb13u1 Installability problems ACCEPTED

DSA: 6351

Lintian issues: i386riscv64source

thunderbird 1:140.11.0esr-1~deb13u1 Installability problems ACCEPTED

This upload was superseded by a more current one.

DSA: 6288

Lintian issues: i386riscv64

thunderbird 1:140.10.2esr-1~deb13u1 Installability problems ACCEPTED

This upload was superseded by a more current one.

DSA: 6267

Lintian issues: i386riscv64

tigervnc 1.15.0+dfsg-2.1~deb13u1 Version problems testing (1.15.0+dfsg-2) tigervnc-common/testing [amd64] (1.15.0+dfsg-2+b1) tigervnc-common/testing [arm64] (1.15.0+dfsg-2+b1) tigervnc-common/testing [armhf] (1.15.0+dfsg-2+b1) tigervnc-common/testing [i386] (1.15.0+dfsg-2+b1) tigervnc-common/testing [ppc64el] (1.15.0+dfsg-2+b1) tigervnc-common/testing [riscv64] (1.15.0+dfsg-2+b1) tigervnc-common/testing [s390x] (1.15.0+dfsg-2+b1) tigervnc-scraping-server/testing [amd64] (1.15.0+dfsg-2+b1) tigervnc-scraping-server/testing [arm64] (1.15.0+dfsg-2+b1) tigervnc-scraping-server/testing [armhf] (1.15.0+dfsg-2+b1) tigervnc-scraping-server/testing [i386] (1.15.0+dfsg-2+b1) tigervnc-scraping-server/testing [ppc64el] (1.15.0+dfsg-2+b1) tigervnc-scraping-server/testing [riscv64] (1.15.0+dfsg-2+b1) tigervnc-scraping-server/testing [s390x] (1.15.0+dfsg-2+b1) tigervnc-standalone-server/testing [amd64] (1.15.0+dfsg-2+b1) tigervnc-standalone-server/testing [arm64] (1.15.0+dfsg-2+b1) tigervnc-standalone-server/testing [armhf] (1.15.0+dfsg-2+b1) tigervnc-standalone-server/testing [i386] (1.15.0+dfsg-2+b1) tigervnc-standalone-server/testing [ppc64el] (1.15.0+dfsg-2+b1) tigervnc-standalone-server/testing [riscv64] (1.15.0+dfsg-2+b1) tigervnc-standalone-server/testing [s390x] (1.15.0+dfsg-2+b1) tigervnc-tools/testing [amd64] (1.15.0+dfsg-2+b1) tigervnc-tools/testing [arm64] (1.15.0+dfsg-2+b1) tigervnc-tools/testing [armhf] (1.15.0+dfsg-2+b1) tigervnc-tools/testing [i386] (1.15.0+dfsg-2+b1) tigervnc-tools/testing [ppc64el] (1.15.0+dfsg-2+b1) tigervnc-tools/testing [riscv64] (1.15.0+dfsg-2+b1) tigervnc-tools/testing [s390x] (1.15.0+dfsg-2+b1) tigervnc-viewer/testing [amd64] (1.15.0+dfsg-2+b1) tigervnc-viewer/testing [arm64] (1.15.0+dfsg-2+b1) tigervnc-viewer/testing [armhf] (1.15.0+dfsg-2+b1) tigervnc-viewer/testing [i386] (1.15.0+dfsg-2+b1) tigervnc-viewer/testing [ppc64el] (1.15.0+dfsg-2+b1) tigervnc-viewer/testing [riscv64] (1.15.0+dfsg-2+b1) tigervnc-viewer/testing [s390x] (1.15.0+dfsg-2+b1) tigervnc-xorg-extension/testing [amd64] (1.15.0+dfsg-2+b1) tigervnc-xorg-extension/testing [arm64] (1.15.0+dfsg-2+b1) tigervnc-xorg-extension/testing [armhf] (1.15.0+dfsg-2+b1) tigervnc-xorg-extension/testing [i386] (1.15.0+dfsg-2+b1) tigervnc-xorg-extension/testing [ppc64el] (1.15.0+dfsg-2+b1) tigervnc-xorg-extension/testing [riscv64] (1.15.0+dfsg-2+b1) tigervnc-xorg-extension/testing [s390x] (1.15.0+dfsg-2+b1) Installability problems riscv64 s390x ACCEPTED

Reason: prevent other users reading x0vncserver screen [CVE-2026-34352]

Request: 1141381

Closes: 1132166

CVEs referenced: CVE-2026-34352

Binary debdiffs: amd64arm64armelarmhfi386ppc64elriscv64s390x

tomcat10 10.1.55-1~deb13u1 Installability problems ACCEPTED

DSA: 6328

CVEs referenced: CVE-2026-24880 CVE-2026-25854 CVE-2026-29129 CVE-2026-29145 CVE-2026-29146 CVE-2026-32990 CVE-2026-34483 CVE-2026-34487 CVE-2026-34500 CVE-2026-41284 CVE-2026-41293 CVE-2026-42498 CVE-2026-43512 CVE-2026-43513 CVE-2026-43514 CVE-2026-43515

Binary debdiffs: all

Lintian issues: all

tomcat11 11.0.22-1~deb13u1 Installability problems ACCEPTED

DSA: 6329

CVEs referenced: CVE-2026-24734 CVE-2026-24880 CVE-2026-25854 CVE-2026-29129 CVE-2026-29145 CVE-2026-29146 CVE-2026-32990 CVE-2026-34483 CVE-2026-34487 CVE-2026-34500 CVE-2026-41284 CVE-2026-41293 CVE-2026-42498 CVE-2026-43512 CVE-2026-43513 CVE-2026-43514 CVE-2026-43515

Binary debdiffs: all

Lintian issues: allsource

tor 0.4.9.11-0+deb13u1 Installability problems ACCEPTED

DSA: 6372

unbound 1.22.0-2+deb13u3 Installability problems ACCEPTED

DSA: 6304

Closes: 1137187

CVEs referenced: CVE-2026-32792 CVE-2026-33278 CVE-2026-40622 CVE-2026-41292 CVE-2026-42534 CVE-2026-42923 CVE-2026-42944 CVE-2026-42959 CVE-2026-42960 CVE-2026-44390 CVE-2026-44608

user-mode-linux 6.12um1+b18 Installability problems ACCEPTED

Reason: rebuild with updated linux

Binary debdiffs: amd64i386

user-mode-linux 6.12um1+b17 Installability problems ACCEPTED

Reason: rebuild with updated linux

Missing builds: amd64 i386

user-mode-linux 6.12um1+b16 Installability problems ACCEPTED

Reason: rebuild with updated linux

Missing builds: amd64 i386

user-mode-linux 6.12um1+b15 Installability problems ACCEPTED

Reason: rebuild with updated linux

Missing builds: amd64 i386

varnish 7.7.0-3+deb13u1 Installability problems ACCEPTED

DSA: 6303

CVEs referenced: CVE-2025-8671

Binary debdiffs: allamd64arm64armelarmhfi386ppc64elriscv64s390x

vitrage 14.0.0-4+deb13u1 Installability problems ACCEPTED

Reason: fix remote code execution vulnerability [CVE-2026-28370]

Request: 1139646

Closes: 1139452

CVEs referenced: CVE-2026-28370

wireless-regdb 2026.05.30-1~deb13u1 Installability problems ACCEPTED

Reason: new upstream stable release; update regulatory information for several countries

Request: 1139581

µdebs: present

Lintian issues: source

wireshark 4.4.16-0+deb13u1 Installability problems amd64-needed arm64-needed armel-needed armhf-needed i386-needed ppc64el-needed riscv64-needed s390x-needed install upgrade ACCEPTED

Reason: new upstream stable release; fix denial of service issue [CVE-2026-9759]

Missing builds: all

Request: 1141200

CVEs referenced: CVE-2026-9759

Binary debdiffs: amd64arm64armelarmhfi386ppc64elriscv64s390x

Lintian issues: amd64arm64armelarmhfi386ppc64elriscv64s390x

xorg-server 2:21.1.16-1.3+deb13u3 Installability problems ACCEPTED

DSA: 6371

µdebs: present

Closes: 1138680

CVEs referenced: CVE-2026-50256 CVE-2026-50257 CVE-2026-50258 CVE-2026-50259 CVE-2026-50260 CVE-2026-50261 CVE-2026-50262 CVE-2026-50263 CVE-2026-50264

Lintian issues: source

xz-utils 5.8.1-1+deb13u1 Installability problems c-i failed: apt/3.0.3 [armhf] aptly/1.6.1+ds1-3 [s390x] initramfs-tools/0.148.4 [armhf] live-build/1:20250505+deb13u1 [i386] needrestart/3.11-1 [amd64] needrestart/3.11-1 [ppc64el] ACCEPTED

Reason: fix buffer overflow issue [CVE-2026-34743]

Request: 1141258

µdebs: present

Closes: 1132497

CVEs referenced: CVE-2026-34743

yelp 42.2-4+deb13u1 Installability problems ACCEPTED

DSA: 6319

Closes: 1136299