Created Bugs

src:containerd containerd: CVE-2026-95837 CVE-2026-95838

security upstream

ftp.debian.org RM: libgtksourceviewmm -- ROM; unmaintained & unused

release.debian.org trixie-pu: package libgpod/0.8.3-22+deb13u1

wnpp RFP: strata -- A fast keyboard-first file manager for Linux

src:complexity complexity: please make the build reproducible

patch

src:golang-github-anacrolix-log golang-github-anacrolix-log: please make the build reproducible

patch

release.debian.org trixie-pu: package sos/4.9.1-1+deb13u1

wnpp ITP: rtrd -- OpenBSD's RPKI-to-Router (RTR) daemon

ftp.debian.org RM: qemu-system qemu-system-arm qemu-system-common qemu-system-gui qemu-system-mips qemu-system-misc qemu-system-modules-opengl qemu-system-modules-spice qemu-system-ppc qemu-system-riscv qemu-system-s390x qemu-system-sparc qemu-system-x86 qemu-user qemu-user-binfmt [armhf i386] -- RoQA, ANAIS; qemu no longer supports 32-bit

moreinfo

ftp.debian.org RM: diffpdf [i386] -- ROM; libpoppler-qt6-dev not available on i386

src:phoenix phoenix: Should not be in Debian without a maintainer

src:python-asteval python-asteval: CVE-2026-102734

security upstream

src:python-oauthlib python-oauthlib: CVE-2026-49264 CVE-2026-49265

security upstream

wnpp ITP: fnlfmt -- Code formatter for Fennel

src:node-axios node-axios: CVE-2026-101899

security upstream fixed-upstream

src:nltk nltk: CVE-2026-109956

security upstream

src:m17n-lib m17n-lib: CVE-2026-109854

security upstream