Candidates for DTSAs

The table below lists packages which are fixed in unstable, but unfixed in testing. Use the testing migration checker to find out why they have not entered testing yet.

List of vulnerable packages in testing

Package	Migration	Bug	Urgency	Remote
cjson	check	CVE-2023-26819	not yet assigned	no
corosync	check	CVE-2025-30472	not yet assigned	no
gimp	check	CVE-2025-6035	not yet assigned	no
glibc	check	CVE-2025-5702	not yet assigned	no
		CVE-2025-5745	not yet assigned	no
golang-1.24	check	CVE-2025-22873	not yet assigned	?
		CVE-2025-22874	not yet assigned	no
		CVE-2025-4673	not yet assigned	no
imagemagick	check	CVE-2025-43965	not yet assigned	no
		CVE-2025-46393	not yet assigned	no
jq	check	CVE-2025-48060	not yet assigned	no
libpgjava	check	CVE-2025-49146	not yet assigned	no
linux	check	CVE-2025-22122	not yet assigned	no
		CVE-2025-22123	not yet assigned	no
mariadb	check	CVE-2023-52969	not yet assigned	no
		CVE-2023-52970	not yet assigned	no
		CVE-2023-52971	not yet assigned	no
		CVE-2025-30693	not yet assigned	no
		CVE-2025-30722	not yet assigned	no
node-tar-fs	check	CVE-2025-48387	not yet assigned	no
python-flask-cors	check	CVE-2024-6839	not yet assigned	no
python3.13	check	CVE-2024-12718	not yet assigned	no
		CVE-2025-4138	not yet assigned	no
		CVE-2025-4330	not yet assigned	no
		CVE-2025-4435	not yet assigned	no
		CVE-2025-4516	not yet assigned	no
		CVE-2025-4517	not yet assigned	no
qtimageformats-opensource-src	check	CVE-2025-5683	not yet assigned	no
rust-lexical-core	check	TEMP-1082053-F368BB	not yet assigned	?
ublock-origin	check	CVE-2025-4215	not yet assigned	no
xorg-server	check	CVE-2025-49175	not yet assigned	no
		CVE-2025-49176	not yet assigned	no
		CVE-2025-49177	not yet assigned	no
		CVE-2025-49178	not yet assigned	no
		CVE-2025-49179	not yet assigned	no
		CVE-2025-49180	not yet assigned	no