Updated Bugs

src:expat expat: CVE-2026-76956

upstream security

src:expat expat: CVE-2026-76957

upstream security

src:virtualbox virtualbox: CVE-2026-71113 CVE-2026-71114 CVE-2026-71115 CVE-2026-71116 CVE-2026-71125 CVE-2026-71126 CVE-2026-71127 CVE-2026-71128 CVE-2026-71129 CVE-2026-71130 CVE-2026-71131 CVE-2026-71132 CVE-2026-71134 CVE-2026-71135 CVE-2026-71136 CVE-2026-71137 CVE-2026-71138 CVE-2026-71139 CVE-2026-71140 CVE-2026-71141 CVE-2026-71151

upstream security

src:python-git python-git: CVE-2026-76217 CVE-2026-76218 CVE-2026-76219 CVE-2026-76220 CVE-2026-76221 CVE-2026-76222

upstream security

release.debian.org trixie-pu: package watcher/14.0.0-1+deb13u1

release.debian.org trixie-pu: package manila/1:20.0.0-3

src:sqlparse sqlparse: CVE-2026-54284 CVE-2026-59893 CVE-2026-59894 CVE-2026-71491

upstream security

src:libmodplug libmodplug: CVE-2026-75904

upstream security

src:node-extract-zip node-extract-zip: CVE-2026-19693

upstream security

src:open-iscsi open-iscsi: CVE-2026-18724 CVE-2026-18725 CVE-2026-18726 CVE-2026-18727 CVE-2026-18728

upstream security

src:python-libcst python-libcst: port to annotate-snippets 0.12

patch

src:r-cran-dynlm r-cran-dynlm: please do a no change upload to make it build reproducible

src:hx hx: port to gix 0.86

patch

src:r-cran-goplot r-cran-goplot: please do a no change upload to make it build reproducible

src:r-other-rajewsky-dropbead r-other-rajewsky-dropbead: please do a no change upload to make it build reproducible

src:r-cran-vcdextra r-cran-vcdextra: please do a no change upload to make it build reproducible

src:r-cran-dials r-cran-dials: please do a no change upload to make it build reproducible

src:r-cran-irkernel r-cran-irkernel: please do a no change upload to make it build reproducible