Within 90 days

src:openimageio openimageio: CVE-2026-43903 CVE-2026-43904 CVE-2026-43905 CVE-2026-43906 CVE-2026-43907 CVE-2026-43908 CVE-2026-43909 CVE-2026-43996

upstream security

src:netty netty: CVE-2026-42577 CVE-2026-42578 CVE-2026-42579 CVE-2026-42580 CVE-2026-42581 CVE-2026-42582 CVE-2026-42583 CVE-2026-42584 CVE-2026-42585 CVE-2026-42586 CVE-2026-42587 CVE-2026-44893 CVE-2026-44894 CVE-2026-45416 CVE-2026-45536 CVE-2026-45673 CVE-2026-45674 CVE-2026-46340 CVE-2026-47244 CVE-2026-47691 CVE-2026-48006 CVE-2026-48043 CVE-2026-48059 CVE-2026-48748 CVE-2026-50009 CVE-2026-50010 CVE-2026-50011 CVE-2026-50020 CVE-2026-50560

upstream security

nzbget postrm should purge /var/log/nzbget

rbldnsd please "rm -rf /var/lib/rbldns/" on postrm/purge

wnpp O: rss-bridge -- web service generating ATOM feeds for websites that don't have them

zsnapd please "rm -rf /var/log/zsnapd" on purge

thunderbird Build fails on Trixie due to Python 3.13 incompatibility

src:libsoup3 libsoup3: CVE-2026-6324

upstream fixed-upstream security

sponsorship-requests RFS: abduco/0.6-1 [RFP] -- lightweight session attach/detach manager

src:plexus-i18n Updating the plexus-i18n Uploaders list

pushpin pushpin - upcoming rust-miniz-oxide update.

patch

rauc FTBFS with openssl 4.0

src:maven-clean-plugin Updating the maven-clean-plugin Uploaders list

src:maven-shared-io Updating the maven-shared-io Uploaders list

src:plexus-archiver Updating the plexus-archiver Uploaders list

src:maven-jar-plugin Updating the maven-jar-plugin Uploaders list

grub-common Release candidate kernels are sorted before released kernels

patch upstream

fastdds FTBFS with openssl 4.0

e2guardian FTBFS with openssl 4.0

tpm2-pkcs11 FTBFS with openssl 4.0