Release Critical Bugs

wnpp ITP: golang-github-checkpoint-restore-go-criu-v8 -- Golang bindings for CRIU

src:jpeg-xl jpeg-xl: libjxl 0.12.0 is now out

QA schroot contrib/setup.d scripts should be executable

src:metis-edf Should metis-edf be removed from unstable?

src:sqlcl-package Should sqlcl-package be removed from unstable?

dh-shell-completions please support elvish

upstream

release.debian.org trixie-pu: package brltty/6.7-3.1+deb13u4

src:rust-fips204 rust-fips204: autopkgtest failure on 32-bit

src:netty netty: CVE-2026-93488 CVE-2026-93491 CVE-2026-93492 CVE-2026-93493 CVE-2026-93494 CVE-2026-93558 CVE-2026-93560 CVE-2026-93561 CVE-2026-93562 CVE-2026-93563 CVE-2026-93564 CVE-2026-93565 CVE-2026-93566 CVE-2026-93567 CVE-2026-93568 CVE-2026-93569 CVE-2026-93572 CVE-2026-93573 CVE-2026-93574 CVE-2026-93575 CVE-2026-93576 CVE-2026-93578 CVE-2026-93579

upstream security

wnpp ITP: convey -- Send and receive email

src:node-braces node-braces: CVE-2026-93687

upstream security

wnpp RFP: csquad -- coordinate coding-agent teams in tmux

src:node-uri-js node-uri-js: CVE-2026-93690

upstream security

src:node-uri-js node-uri-js: CVE-2026-93751

upstream security

src:node-postcss node-postcss (node-source-map-js): CVE-2026-93749

fixed-upstream security upstream

src:node-got node-got: CVE-2026-93748

fixed-upstream security upstream

src:node-got node-got: CVE-2026-93750

upstream security

src:node-deepmerge node-deepmerge: CVE-2026-93753

fixed-upstream security upstream

src:async-http-client async-http-client: CVE-2026-85719 CVE-2026-85720 CVE-2026-85721

upstream security

src:redir redir: CVE-2020-37182

upstream security