The table below lists packages which are fixed in unstable, but unfixed in testing. Use the testing migration checker to find out why they have not entered testing yet.
| Package | Migration | Bug | Urgency | Remote | |
|---|---|---|---|---|---|
| edk2 | check | CVE-2024-38798 | not yet assigned | no | |
| firefox-esr | check | CVE-2025-14327 | not yet assigned | no | (fixed in stable?) |
| CVE-2026-0877 | not yet assigned | no | (fixed in stable?) | ||
| CVE-2026-0878 | not yet assigned | no | (fixed in stable?) | ||
| CVE-2026-0879 | not yet assigned | no | (fixed in stable?) | ||
| CVE-2026-0880 | not yet assigned | no | (fixed in stable?) | ||
| CVE-2026-0882 | not yet assigned | no | (fixed in stable?) | ||
| CVE-2026-0883 | not yet assigned | no | (fixed in stable?) | ||
| CVE-2026-0884 | not yet assigned | no | (fixed in stable?) | ||
| CVE-2026-0885 | not yet assigned | no | (fixed in stable?) | ||
| CVE-2026-0886 | not yet assigned | no | (fixed in stable?) | ||
| CVE-2026-0887 | not yet assigned | no | (fixed in stable?) | ||
| CVE-2026-0890 | not yet assigned | no | (fixed in stable?) | ||
| CVE-2026-0891 | not yet assigned | no | (fixed in stable?) | ||
| freerdp3 | check | CVE-2026-22851 | not yet assigned | no | |
| CVE-2026-22852 | not yet assigned | no | |||
| CVE-2026-22853 | not yet assigned | no | |||
| CVE-2026-22854 | not yet assigned | no | |||
| CVE-2026-22855 | not yet assigned | no | |||
| CVE-2026-22856 | not yet assigned | no | |||
| CVE-2026-22857 | not yet assigned | no | |||
| CVE-2026-22858 | not yet assigned | no | |||
| CVE-2026-22859 | not yet assigned | no | |||
| libarchive | check | CVE-2025-5918 | not yet assigned | no | |
| linux | check | CVE-2025-68351 | not yet assigned | no | |
| CVE-2025-68353 | not yet assigned | no | |||
| CVE-2025-68357 | not yet assigned | no | |||
| CVE-2025-68365 | not yet assigned | no | |||
| CVE-2025-68368 | not yet assigned | no | |||
| CVE-2025-68725 | not yet assigned | no | |||
| CVE-2025-68736 | not yet assigned | no | |||
| CVE-2025-68745 | not yet assigned | no | |||
| CVE-2025-68767 | not yet assigned | no | |||
| CVE-2025-68768 | not yet assigned | no | |||
| CVE-2025-68769 | not yet assigned | no | |||
| CVE-2025-68770 | not yet assigned | no | |||
| CVE-2025-68771 | not yet assigned | no | |||
| CVE-2025-68772 | not yet assigned | no | |||
| CVE-2025-68773 | not yet assigned | no | |||
| CVE-2025-68774 | not yet assigned | no | |||
| CVE-2025-68775 | not yet assigned | no | |||
| CVE-2025-68776 | not yet assigned | no | |||
| CVE-2025-68777 | not yet assigned | no | |||
| CVE-2025-68778 | not yet assigned | no | |||
| CVE-2025-68780 | not yet assigned | no | |||
| CVE-2025-68781 | not yet assigned | no | |||
| CVE-2025-68782 | not yet assigned | no | |||
| CVE-2025-68783 | not yet assigned | no | |||
| CVE-2025-68784 | not yet assigned | no | |||
| CVE-2025-68785 | not yet assigned | no | |||
| CVE-2025-68786 | not yet assigned | no | |||
| CVE-2025-68787 | not yet assigned | no | |||
| CVE-2025-68788 | not yet assigned | no | |||
| CVE-2025-68789 | not yet assigned | no | |||
| CVE-2025-68791 | not yet assigned | no | |||
| CVE-2025-68792 | not yet assigned | no | |||
| CVE-2025-68793 | not yet assigned | no | |||
| CVE-2025-68794 | not yet assigned | no | |||
| CVE-2025-68795 | not yet assigned | no | |||
| CVE-2025-68796 | not yet assigned | no | |||
| CVE-2025-68797 | not yet assigned | no | |||
| CVE-2025-68798 | not yet assigned | no | |||
| CVE-2025-68799 | not yet assigned | no | |||
| CVE-2025-68800 | not yet assigned | no | |||
| CVE-2025-68801 | not yet assigned | no | |||
| CVE-2025-68802 | not yet assigned | no | |||
| CVE-2025-68803 | not yet assigned | no | |||
| CVE-2025-68804 | not yet assigned | no | |||
| CVE-2025-68805 | not yet assigned | no | |||
| CVE-2025-68806 | not yet assigned | no | |||
| CVE-2025-68807 | not yet assigned | no | |||
| CVE-2025-68808 | not yet assigned | no | |||
| CVE-2025-68809 | not yet assigned | no | |||
| CVE-2025-68810 | not yet assigned | no | |||
| CVE-2025-68811 | not yet assigned | no | |||
| CVE-2025-68812 | not yet assigned | no | |||
| CVE-2025-68813 | not yet assigned | no | |||
| CVE-2025-68814 | not yet assigned | no | |||
| CVE-2025-68815 | not yet assigned | no | |||
| CVE-2025-68816 | not yet assigned | no | |||
| CVE-2025-68817 | not yet assigned | no | |||
| CVE-2025-68818 | not yet assigned | no | |||
| CVE-2025-68819 | not yet assigned | no | |||
| CVE-2025-68820 | not yet assigned | no | |||
| CVE-2025-68821 | not yet assigned | no | |||
| CVE-2025-68822 | not yet assigned | no | |||
| CVE-2025-68823 | not yet assigned | no | |||
| CVE-2025-71064 | not yet assigned | no | |||
| CVE-2025-71065 | not yet assigned | no | |||
| CVE-2025-71066 | not yet assigned | no | |||
| CVE-2025-71067 | not yet assigned | no | |||
| CVE-2025-71068 | not yet assigned | no | |||
| CVE-2025-71069 | not yet assigned | no | |||
| CVE-2025-71070 | not yet assigned | no | |||
| CVE-2025-71071 | not yet assigned | no | |||
| CVE-2025-71072 | not yet assigned | no | |||
| CVE-2025-71073 | not yet assigned | no | |||
| CVE-2025-71074 | not yet assigned | no | |||
| CVE-2025-71075 | not yet assigned | no | |||
| CVE-2025-71076 | not yet assigned | no | |||
| CVE-2025-71077 | not yet assigned | no | |||
| CVE-2025-71102 | not yet assigned | no | |||
| CVE-2025-71104 | not yet assigned | no | |||
| CVE-2025-71105 | not yet assigned | no | |||
| CVE-2025-71107 | not yet assigned | no | |||
| CVE-2025-71108 | not yet assigned | no | |||
| CVE-2025-71109 | not yet assigned | no | |||
| CVE-2025-71111 | not yet assigned | no | |||
| CVE-2025-71112 | not yet assigned | no | |||
| CVE-2025-71113 | not yet assigned | no | |||
| CVE-2025-71114 | not yet assigned | no | |||
| CVE-2025-71115 | not yet assigned | no | |||
| CVE-2025-71116 | not yet assigned | no | |||
| CVE-2025-71117 | not yet assigned | no | |||
| CVE-2025-71118 | not yet assigned | no | |||
| CVE-2025-71119 | not yet assigned | no | |||
| CVE-2025-71120 | not yet assigned | no | |||
| CVE-2025-71121 | not yet assigned | no | |||
| CVE-2025-71122 | not yet assigned | no | |||
| CVE-2025-71123 | not yet assigned | no | |||
| CVE-2025-71124 | not yet assigned | no | |||
| CVE-2025-71125 | not yet assigned | no | |||
| CVE-2025-71126 | not yet assigned | no | |||
| net-snmp | check | CVE-2025-68615 | not yet assigned | no | (fixed in stable?) |
| node-nodemailer | check | CVE-2025-14874 | not yet assigned | no | |
| node-undici | check | CVE-2026-22036 | not yet assigned | no | |
| nodejs | check | CVE-2025-55130 | not yet assigned | ? | |
| CVE-2025-55131 | not yet assigned | ? | |||
| CVE-2025-55132 | not yet assigned | ? | |||
| CVE-2025-59465 | not yet assigned | ? | |||
| CVE-2025-59466 | not yet assigned | ? | |||
| CVE-2026-21637 | not yet assigned | ? | |||
| openvpn | check | CVE-2025-15497 | not yet assigned | ? | |
| python-filelock | check | CVE-2025-68146 | not yet assigned | no | |
| python-keystonemiddleware | check | CVE-2026-22797 | not yet assigned | ? | |
| python-urllib3 | check | CVE-2025-66418 | not yet assigned | no | |
| CVE-2026-21441 | not yet assigned | no | |||
| qemu | check | CVE-2025-11234 | not yet assigned | no | |
| CVE-2025-12464 | not yet assigned | no | |||
| CVE-2026-0665 | not yet assigned | ? | |||
| thunderbird | check | CVE-2025-14327 | not yet assigned | no | |
| CVE-2026-0877 | not yet assigned | no | |||
| CVE-2026-0878 | not yet assigned | no | |||
| CVE-2026-0879 | not yet assigned | no | |||
| CVE-2026-0880 | not yet assigned | no | |||
| CVE-2026-0882 | not yet assigned | no | |||
| CVE-2026-0883 | not yet assigned | no | |||
| CVE-2026-0884 | not yet assigned | no | |||
| CVE-2026-0885 | not yet assigned | no | |||
| CVE-2026-0886 | not yet assigned | no | |||
| CVE-2026-0887 | not yet assigned | no | |||
| CVE-2026-0890 | not yet assigned | no | |||
| CVE-2026-0891 | not yet assigned | no | |||
| wget2 | check | CVE-2025-69194 | not yet assigned | no | |
| CVE-2025-69195 | not yet assigned | no | |||
| wireshark | check | CVE-2026-0959 | not yet assigned | no | |
| CVE-2026-0961 | not yet assigned | no | |||
| CVE-2026-0962 | not yet assigned | no |