Within 90 days

wnpp RFP: ouch -- Easy to use compression and decompression tool written in rust

wnpp ITP: gweather-locations -- gweather location data

src:rpm rpm: CVE-2026-44604

upstream security

nginx QUIC connection failures after reload

nzbget FTBFS with openssl 4.0

konsole konsole unacceptable performance

dash in some cases command -v uses relative pathnames than absolutes as mandated by POSIX

upstream

phosh Startup off applications trigger “Application failed to start” notification

src:pypdf pypdf: CVE-2026-48155

upstream fixed-upstream security

pbuilder binNMU changes ownership of debian/changelog

sphinxsearch please clear /var/{lib,log}/sphinxsearch on postrm/purge phase

src:openimageio openimageio: CVE-2026-43903 CVE-2026-43904 CVE-2026-43905 CVE-2026-43906 CVE-2026-43907 CVE-2026-43908 CVE-2026-43909 CVE-2026-43996

upstream security

src:netty netty: CVE-2026-42577 CVE-2026-42578 CVE-2026-42579 CVE-2026-42580 CVE-2026-42581 CVE-2026-42582 CVE-2026-42583 CVE-2026-42584 CVE-2026-42585 CVE-2026-42586 CVE-2026-42587 CVE-2026-44893 CVE-2026-44894 CVE-2026-45416 CVE-2026-45536 CVE-2026-45673 CVE-2026-45674 CVE-2026-46340 CVE-2026-47244 CVE-2026-47691 CVE-2026-48006 CVE-2026-48043 CVE-2026-48059 CVE-2026-48748 CVE-2026-50009 CVE-2026-50010 CVE-2026-50011 CVE-2026-50020 CVE-2026-50560

upstream security

nzbget postrm should purge /var/log/nzbget

rbldnsd please "rm -rf /var/lib/rbldns/" on postrm/purge

wnpp O: rss-bridge -- web service generating ATOM feeds for websites that don't have them

zsnapd please "rm -rf /var/log/zsnapd" on purge

thunderbird Build fails on Trixie due to Python 3.13 incompatibility

src:libsoup3 libsoup3: CVE-2026-6324

upstream fixed-upstream security

src:atuin Built-Using/Static-Built-Using incomplete