Updated Bugs

ripit cdtext only read from first cdrom (/dev/sr0) even if multiple cd-drives are present

upstream

src:openjfx openjfx: CVE-2026-91385 CVE-2026-91402

security

src:undertow undertow: CVE-2026-114370

security upstream

src:mod-qos mod-qos: CVE-2026-114457 CVE-2026-114458 CVE-2026-114459 CVE-2026-114460

security upstream

src:busybox busybox: CVE-2026-88829

security upstream

src:busybox busybox: CVE-2026-88842

security upstream

nvidia-kernel-support please ship NVIDIA's runtime D3 (RTD3) udev rule so the dGPU can power off when idle

src:rex rex: CVE-2026-94140

upstream security

src:python-virtualenv python-virtualenv: CVE-2026-113713 CVE-2026-113714 CVE-2026-113715 CVE-2026-113716 CVE-2026-113717 CVE-2026-113718 CVE-2026-113719 CVE-2026-113720 CVE-2026-113721 CVE-2026-113722 CVE-2026-113723 CVE-2026-113724 CVE-2026-113725 CVE-2026-113726 CVE-2026-113732 CVE-2026-113776

upstream security

src:python-aiohttp python-aiohttp: CVE-2026-111063 CVE-2026-111064 CVE-2026-111065 CVE-2026-111066 CVE-2026-111748 CVE-2026-111749 CVE-2026-111750

upstream security

src:python-filelock python-filelock: CVE-2026-112906 CVE-2026-112909 CVE-2026-112911 CVE-2026-112912 CVE-2026-112914 CVE-2026-112915 CVE-2026-112934 CVE-2026-112935 CVE-2026-112937 CVE-2026-112939 CVE-2026-112940 CVE-2026-112941

upstream security

src:ntpsec ntpsec: CVE-2026-102483 CVE-2026-102484 CVE-2026-102485 CVE-2026-102486

upstream security

src:opendjk-8 opendjk-8: CVE-2026-91395 CVE-2026-91396 CVE-2026-91397 CVE-2026-91398 CVE-2026-91400 CVE-2026-83374 CVE-2026-91487 CVE-2026-83376 CVE-2026-83380 CVE-2026-91403 CVE-2026-91410 CVE-2026-91411 CVE-2026-91415 CVE-2026-91417 CVE-2026-91418 CVE-2026-91451 CVE-2026-91452 CVE-2026-91453 CVE-2026-91461 CVE-2026-91462 CVE-2026-91463 CVE-2026-91464 CVE-2026-91484 CVE-2026-83381 CVE-2026-83387 CVE-2026-83395 CVE-2026-83400 CVE-2026-87290 CVE-2026-87292 CVE-2026-87293 CVE-2026-87294 CVE-2026-87367 CVE-2026-91332 CVE-2026-91334 CVE-2026-91335 CVE-2026-91373 CVE-2026-91374 CVE-2026-91375 CVE-2026-91379 CVE-2026-91380 CVE-2026-91381 CVE-2026-91382

upstream security

src:sslh sslh: echosrv heap overflow in start_listen_sockets() makes tests segfault on armhf

upstream patch

ftp.debian.org RM: python-cogent-doc -- ROM; Building the documentation is currently not possible; Quarto is not in Debian.

mono embedded Brotli 1.0.9 vulnerable to CVE-2026-111497

upstream security

godot3 embedded Brotli 1.1.0 vulnerable to CVE-2026-111497

upstream security

src:mpd mpd: stop using libmms

src:nfs-ganesha nfs-ganesha: FTBFS on armhf: common_utils.h:908:59: error: format ‘%ld’ expects argument of type ‘long int’, but argument 8 has type ‘long long int’

ftbfs

wnpp ITP: libipuz -- Library for parsing ipuz files, for crossword puzzles, sudokus