The table below lists packages which are fixed in unstable, but unfixed in testing. Use the testing migration checker to find out why they have not entered testing yet.
| Package | Migration | Bug | Urgency | Remote | |
|---|---|---|---|---|---|
| caddy | check | CVE-2026-45135 | not yet assigned | no | |
| CVE-2026-45692 | not yet assigned | no | |||
| CVE-2026-52844 | not yet assigned | no | |||
| CVE-2026-52845 | not yet assigned | no | |||
| CVE-2026-52846 | not yet assigned | no | |||
| chromium | check | CVE-2026-15899 | not yet assigned | no | |
| CVE-2026-15900 | not yet assigned | no | |||
| CVE-2026-15901 | not yet assigned | no | |||
| CVE-2026-15902 | not yet assigned | no | |||
| CVE-2026-15903 | not yet assigned | no | |||
| CVE-2026-15904 | not yet assigned | no | |||
| CVE-2026-15905 | not yet assigned | no | |||
| CVE-2026-16413 | not yet assigned | no | |||
| CVE-2026-16414 | not yet assigned | no | |||
| CVE-2026-16415 | not yet assigned | no | |||
| CVE-2026-16416 | not yet assigned | no | |||
| CVE-2026-16417 | not yet assigned | no | |||
| CVE-2026-16418 | not yet assigned | no | |||
| CVE-2026-16419 | not yet assigned | no | |||
| CVE-2026-16420 | not yet assigned | no | |||
| CVE-2026-16421 | not yet assigned | no | |||
| CVE-2026-16422 | not yet assigned | no | |||
| CVE-2026-16423 | not yet assigned | no | |||
| CVE-2026-16424 | not yet assigned | no | |||
| curl | check | CVE-2026-10536 | not yet assigned | no | |
| CVE-2026-11352 | not yet assigned | no | |||
| CVE-2026-11564 | not yet assigned | no | |||
| CVE-2026-11586 | not yet assigned | no | |||
| CVE-2026-11856 | not yet assigned | no | |||
| CVE-2026-12064 | not yet assigned | no | |||
| CVE-2026-8286 | not yet assigned | no | |||
| CVE-2026-8458 | not yet assigned | no | |||
| CVE-2026-8924 | not yet assigned | no | |||
| CVE-2026-8925 | not yet assigned | no | |||
| CVE-2026-8926 | not yet assigned | no | |||
| CVE-2026-8927 | not yet assigned | no | |||
| CVE-2026-8932 | not yet assigned | no | |||
| CVE-2026-9079 | not yet assigned | no | |||
| CVE-2026-9080 | not yet assigned | no | |||
| CVE-2026-9545 | not yet assigned | no | |||
| CVE-2026-9546 | not yet assigned | no | |||
| exim4 | check | TEMP-0000000-373EF6 | not yet assigned | ? | |
| TEMP-0000000-D87062 | not yet assigned | ? | |||
| firefox-esr | check | CVE-2026-15718 | not yet assigned | no | (fixed in stable?) |
| CVE-2026-15719 | not yet assigned | no | (fixed in stable?) | ||
| CVE-2026-16349 | not yet assigned | no | (fixed in stable?) | ||
| CVE-2026-16350 | not yet assigned | no | (fixed in stable?) | ||
| CVE-2026-16351 | not yet assigned | no | (fixed in stable?) | ||
| CVE-2026-16352 | not yet assigned | no | (fixed in stable?) | ||
| CVE-2026-16353 | not yet assigned | no | (fixed in stable?) | ||
| CVE-2026-16354 | not yet assigned | no | (fixed in stable?) | ||
| CVE-2026-16355 | not yet assigned | no | (fixed in stable?) | ||
| CVE-2026-16356 | not yet assigned | no | (fixed in stable?) | ||
| CVE-2026-16357 | not yet assigned | no | (fixed in stable?) | ||
| CVE-2026-16358 | not yet assigned | no | (fixed in stable?) | ||
| CVE-2026-16359 | not yet assigned | no | (fixed in stable?) | ||
| CVE-2026-16360 | not yet assigned | no | (fixed in stable?) | ||
| CVE-2026-16361 | not yet assigned | no | (fixed in stable?) | ||
| CVE-2026-16362 | not yet assigned | no | (fixed in stable?) | ||
| CVE-2026-16363 | not yet assigned | no | (fixed in stable?) | ||
| CVE-2026-16368 | not yet assigned | no | (fixed in stable?) | ||
| CVE-2026-16369 | not yet assigned | no | (fixed in stable?) | ||
| CVE-2026-16371 | not yet assigned | no | (fixed in stable?) | ||
| CVE-2026-16374 | not yet assigned | no | (fixed in stable?) | ||
| CVE-2026-16375 | not yet assigned | no | (fixed in stable?) | ||
| CVE-2026-16377 | not yet assigned | no | (fixed in stable?) | ||
| CVE-2026-16379 | not yet assigned | no | (fixed in stable?) | ||
| CVE-2026-16381 | not yet assigned | no | (fixed in stable?) | ||
| CVE-2026-16383 | not yet assigned | no | (fixed in stable?) | ||
| CVE-2026-16387 | not yet assigned | no | (fixed in stable?) | ||
| CVE-2026-16390 | not yet assigned | no | (fixed in stable?) | ||
| CVE-2026-16391 | not yet assigned | no | (fixed in stable?) | ||
| CVE-2026-16396 | not yet assigned | no | (fixed in stable?) | ||
| CVE-2026-16405 | not yet assigned | no | (fixed in stable?) | ||
| CVE-2026-16412 | not yet assigned | no | (fixed in stable?) | ||
| gopls | check | CVE-2026-42503 | not yet assigned | no | |
| libheif | check | CVE-2026-32738 | not yet assigned | no | |
| CVE-2026-32739 | not yet assigned | no | |||
| CVE-2026-32740 | not yet assigned | no | |||
| CVE-2026-32741 | not yet assigned | no | |||
| CVE-2026-32814 | not yet assigned | no | |||
| CVE-2026-32882 | not yet assigned | no | |||
| CVE-2026-3950 | not yet assigned | no | |||
| CVE-2026-41069 | not yet assigned | no | |||
| CVE-2026-41071 | not yet assigned | no | |||
| CVE-2026-47178 | not yet assigned | no | |||
| CVE-2026-47247 | not yet assigned | no | |||
| CVE-2026-47251 | not yet assigned | no | |||
| CVE-2026-47254 | not yet assigned | no | |||
| CVE-2026-47709 | not yet assigned | no | |||
| CVE-2026-47714 | not yet assigned | no | |||
| CVE-2026-48029 | not yet assigned | ? | |||
| CVE-2026-49271 | not yet assigned | no | |||
| CVE-2026-50142 | not yet assigned | ? | |||
| libmojolicious-perl | check | CVE-2026-15747 | not yet assigned | no | |
| libnet-dns-perl | check | CVE-2026-64193 | not yet assigned | no | |
| CVE-2026-64194 | not yet assigned | no | |||
| libunicode-linebreak-perl | check | CVE-2026-8594 | not yet assigned | no | |
| linux | check | CVE-2026-64187 | not yet assigned | no | |
| CVE-2026-64189 | not yet assigned | no | |||
| CVE-2026-64192 | not yet assigned | no | |||
| CVE-2026-64205 | not yet assigned | no | |||
| CVE-2026-64206 | not yet assigned | no | |||
| CVE-2026-64207 | not yet assigned | no | |||
| CVE-2026-64600 | not yet assigned | ? | |||
| mbedtls | check | CVE-2026-25832 | not yet assigned | ? | |
| CVE-2026-35336 | not yet assigned | ? | |||
| CVE-2026-49300 | not yet assigned | ? | |||
| CVE-2026-50579 | not yet assigned | ? | |||
| CVE-2026-50580 | not yet assigned | ? | |||
| CVE-2026-50581 | not yet assigned | ? | |||
| CVE-2026-50583 | not yet assigned | ? | |||
| CVE-2026-50584 | not yet assigned | ? | |||
| CVE-2026-50585 | not yet assigned | ? | |||
| CVE-2026-50586 | not yet assigned | ? | |||
| CVE-2026-50587 | not yet assigned | ? | |||
| CVE-2026-50588 | not yet assigned | ? | |||
| CVE-2026-50640 | not yet assigned | ? | |||
| CVE-2026-50713 | not yet assigned | ? | |||
| CVE-2026-54435 | not yet assigned | ? | |||
| CVE-2026-54441 | not yet assigned | ? | |||
| node-tar | check | CVE-2026-53655 | not yet assigned | no | |
| CVE-2026-59871 | not yet assigned | no | |||
| CVE-2026-59873 | not yet assigned | no | |||
| CVE-2026-59874 | not yet assigned | no | |||
| CVE-2026-59875 | not yet assigned | no | |||
| node-xmldom | check | CVE-2026-41672 | not yet assigned | no | |
| CVE-2026-41673 | not yet assigned | no | |||
| CVE-2026-41674 | not yet assigned | no | |||
| CVE-2026-41675 | not yet assigned | no | |||
| nss | check | CVE-2026-16389 | not yet assigned | no | |
| ntfs-3g | check | CVE-2026-42616 | not yet assigned | ? | |
| CVE-2026-42617 | not yet assigned | ? | |||
| CVE-2026-42618 | not yet assigned | ? | |||
| CVE-2026-46569 | not yet assigned | ? | |||
| CVE-2026-46570 | not yet assigned | ? | |||
| CVE-2026-46571 | not yet assigned | ? | |||
| CVE-2026-46572 | not yet assigned | ? | |||
| CVE-2026-56135 | not yet assigned | ? | |||
| CVE-2026-56136 | not yet assigned | ? | |||
| openjdk-25 | check | CVE-2026-41254 | not yet assigned | no | |
| CVE-2026-46917 | not yet assigned | no | |||
| CVE-2026-46968 | not yet assigned | no | |||
| CVE-2026-47010 | not yet assigned | no | |||
| CVE-2026-47021 | not yet assigned | no | |||
| CVE-2026-47027 | not yet assigned | no | |||
| CVE-2026-47059 | not yet assigned | no | |||
| CVE-2026-47063 | not yet assigned | no | |||
| CVE-2026-60147 | not yet assigned | no | |||
| openjdk-26 | check | CVE-2026-41254 | not yet assigned | no | |
| CVE-2026-46917 | not yet assigned | no | |||
| CVE-2026-46968 | not yet assigned | no | |||
| CVE-2026-47010 | not yet assigned | no | |||
| CVE-2026-47021 | not yet assigned | no | |||
| CVE-2026-47027 | not yet assigned | no | |||
| CVE-2026-47059 | not yet assigned | no | |||
| CVE-2026-47063 | not yet assigned | no | |||
| CVE-2026-60147 | not yet assigned | no | |||
| openssh | check | CVE-2026-59995 | not yet assigned | no | |
| CVE-2026-59996 | not yet assigned | no | |||
| CVE-2026-59997 | not yet assigned | no | |||
| CVE-2026-59998 | not yet assigned | no | |||
| CVE-2026-59999 | not yet assigned | no | |||
| CVE-2026-60000 | not yet assigned | no | |||
| CVE-2026-60001 | not yet assigned | no | |||
| CVE-2026-60002 | not yet assigned | no | |||
| pdns-recursor | check | CVE-2026-52688 | not yet assigned | ? | |
| CVE-2026-62686 | not yet assigned | ? | |||
| pillow | check | CVE-2026-54058 | not yet assigned | no | |
| CVE-2026-54059 | not yet assigned | no | |||
| CVE-2026-54060 | not yet assigned | no | |||
| CVE-2026-55379 | not yet assigned | no | |||
| CVE-2026-55380 | not yet assigned | no | |||
| CVE-2026-59197 | not yet assigned | no | |||
| CVE-2026-59198 | not yet assigned | no | |||
| CVE-2026-59199 | not yet assigned | no | |||
| CVE-2026-59200 | not yet assigned | no | |||
| CVE-2026-59203 | not yet assigned | no | |||
| CVE-2026-59204 | not yet assigned | no | |||
| CVE-2026-59205 | not yet assigned | no | |||
| pyasn1 | check | CVE-2026-59884 | not yet assigned | no | |
| CVE-2026-59885 | not yet assigned | no | |||
| CVE-2026-59886 | not yet assigned | no | |||
| python-click | check | CVE-2026-7246 | not yet assigned | no | |
| requests | check | CVE-2026-25645 | not yet assigned | no | |
| srt | check | CVE-2026-55868 | not yet assigned | ? | |
| CVE-2026-55869 | not yet assigned | ? | |||
| unbound | check | CVE-2026-14586 | not yet assigned | ? | |
| CVE-2026-32665 | not yet assigned | ? | |||
| CVE-2026-40691 | not yet assigned | ? | |||
| CVE-2026-41637 | not yet assigned | ? | |||
| CVE-2026-42955 | not yet assigned | ? | |||
| CVE-2026-44621 | not yet assigned | ? | |||
| CVE-2026-44687 | not yet assigned | ? | |||
| CVE-2026-44690 | not yet assigned | ? | |||
| CVE-2026-46582 | not yet assigned | ? | |||
| CVE-2026-50045 | not yet assigned | ? | |||
| CVE-2026-50046 | not yet assigned | ? | |||
| CVE-2026-50243 | not yet assigned | ? | |||
| CVE-2026-50248 | not yet assigned | ? | |||
| CVE-2026-50251 | not yet assigned | ? | |||
| CVE-2026-50252 | not yet assigned | ? | |||
| CVE-2026-52863 | not yet assigned | ? | |||
| CVE-2026-54478 | not yet assigned | ? | |||
| CVE-2026-55708 | not yet assigned | ? | |||
| CVE-2026-55717 | not yet assigned | ? | |||
| CVE-2026-55973 | not yet assigned | ? | |||
| CVE-2026-55990 | not yet assigned | ? | |||
| CVE-2026-55991 | not yet assigned | ? | |||
| CVE-2026-56416 | not yet assigned | ? | |||
| CVE-2026-56444 | not yet assigned | ? | |||
| vim | check | CVE-2026-52858 | not yet assigned | no | |
| CVE-2026-52860 | not yet assigned | no | |||
| CVE-2026-55693 | not yet assigned | no | |||
| CVE-2026-55892 | not yet assigned | no | |||
| CVE-2026-55895 | not yet assigned | no | |||
| CVE-2026-57451 | not yet assigned | no | |||
| CVE-2026-57452 | not yet assigned | no | |||
| CVE-2026-57454 | not yet assigned | no | |||
| CVE-2026-57455 | not yet assigned | no | |||
| CVE-2026-57456 | not yet assigned | no | |||
| CVE-2026-59856 | not yet assigned | no | |||
| CVE-2026-59857 | not yet assigned | no | |||
| CVE-2026-59858 | not yet assigned | no | |||
| webkit2gtk | check | CVE-2024-4367 | not yet assigned | no | |
| CVE-2026-39872 | not yet assigned | no | |||
| CVE-2026-43663 | not yet assigned | no | |||
| CVE-2026-43676 | not yet assigned | no | |||
| CVE-2026-43699 | not yet assigned | no | |||
| CVE-2026-43701 | not yet assigned | no | |||
| CVE-2026-43705 | not yet assigned | no | |||
| CVE-2026-43707 | not yet assigned | no | |||
| CVE-2026-43712 | not yet assigned | no | |||
| CVE-2026-43713 | not yet assigned | no | |||
| CVE-2026-43715 | not yet assigned | no | |||
| CVE-2026-43716 | not yet assigned | no | |||
| CVE-2026-43720 | not yet assigned | no | |||
| CVE-2026-43721 | not yet assigned | no | |||
| CVE-2026-43725 | not yet assigned | no | |||
| CVE-2026-43726 | not yet assigned | no | |||
| CVE-2026-43727 | not yet assigned | no | |||
| CVE-2026-43731 | not yet assigned | no | |||
| CVE-2026-43732 | not yet assigned | no | |||
| CVE-2026-43734 | not yet assigned | no | |||
| CVE-2026-43740 | not yet assigned | no | |||
| CVE-2026-43742 | not yet assigned | no | |||
| CVE-2026-43745 | not yet assigned | no | |||
| wordpress | check | CVE-2026-60137 | not yet assigned | no | |
| CVE-2026-63030 | not yet assigned | no | |||
| xrdp | check | CVE-2026-32105 | not yet assigned | no | |
| CVE-2026-32107 | not yet assigned | no | |||
| CVE-2026-32623 | not yet assigned | no | |||
| CVE-2026-32624 | not yet assigned | no | |||
| CVE-2026-33145 | not yet assigned | no | |||
| CVE-2026-33516 | not yet assigned | no | |||
| CVE-2026-33689 | not yet assigned | no | |||
| CVE-2026-35512 | not yet assigned | no | |||
| CVE-2026-41252 | not yet assigned | no | |||
| CVE-2026-41521 | not yet assigned | no | |||
| CVE-2026-42218 | not yet assigned | no | |||
| CVE-2026-44178 | not yet assigned | no | |||
| CVE-2026-44978 | not yet assigned | no | |||
| CVE-2026-54538 | not yet assigned | no | |||
| CVE-2026-55238 | not yet assigned | no | |||
| CVE-2026-55626 | not yet assigned | no | |||
| CVE-2026-55639 | not yet assigned | no | |||
| CVE-2026-55645 | not yet assigned | no |