The table below lists packages which are fixed in unstable, but unfixed in testing. Use the testing migration checker to find out why they have not entered testing yet.
| Package | Migration | Bug | Urgency | Remote | |
|---|---|---|---|---|---|
| beets | check | CVE-2026-42052 | not yet assigned | no | |
| chromium | check | CVE-2026-12437 | not yet assigned | no | (fixed in stable?) |
| CVE-2026-12438 | not yet assigned | no | (fixed in stable?) | ||
| CVE-2026-12439 | not yet assigned | no | (fixed in stable?) | ||
| CVE-2026-12440 | not yet assigned | no | (fixed in stable?) | ||
| CVE-2026-12441 | not yet assigned | no | (fixed in stable?) | ||
| CVE-2026-12442 | not yet assigned | no | (fixed in stable?) | ||
| CVE-2026-12443 | not yet assigned | no | (fixed in stable?) | ||
| CVE-2026-12444 | not yet assigned | no | (fixed in stable?) | ||
| CVE-2026-12445 | not yet assigned | no | (fixed in stable?) | ||
| CVE-2026-12446 | not yet assigned | no | (fixed in stable?) | ||
| CVE-2026-12447 | not yet assigned | no | (fixed in stable?) | ||
| CVE-2026-12448 | not yet assigned | no | (fixed in stable?) | ||
| CVE-2026-12449 | not yet assigned | no | (fixed in stable?) | ||
| CVE-2026-12450 | not yet assigned | no | (fixed in stable?) | ||
| CVE-2026-12451 | not yet assigned | no | (fixed in stable?) | ||
| CVE-2026-12452 | not yet assigned | no | (fixed in stable?) | ||
| CVE-2026-12453 | not yet assigned | no | (fixed in stable?) | ||
| CVE-2026-12454 | not yet assigned | no | (fixed in stable?) | ||
| CVE-2026-12455 | not yet assigned | no | (fixed in stable?) | ||
| CVE-2026-12456 | not yet assigned | no | (fixed in stable?) | ||
| CVE-2026-12457 | not yet assigned | no | (fixed in stable?) | ||
| CVE-2026-12458 | not yet assigned | no | (fixed in stable?) | ||
| CVE-2026-12459 | not yet assigned | no | (fixed in stable?) | ||
| CVE-2026-12460 | not yet assigned | no | (fixed in stable?) | ||
| CVE-2026-12461 | not yet assigned | no | (fixed in stable?) | ||
| CVE-2026-12462 | not yet assigned | no | (fixed in stable?) | ||
| CVE-2026-12463 | not yet assigned | no | (fixed in stable?) | ||
| CVE-2026-12464 | not yet assigned | no | (fixed in stable?) | ||
| CVE-2026-12465 | not yet assigned | no | (fixed in stable?) | ||
| CVE-2026-12466 | not yet assigned | no | (fixed in stable?) | ||
| CVE-2026-12467 | not yet assigned | no | (fixed in stable?) | ||
| CVE-2026-12468 | not yet assigned | no | (fixed in stable?) | ||
| CVE-2026-12469 | not yet assigned | no | (fixed in stable?) | ||
| curl | check | CVE-2026-10536 | not yet assigned | ? | |
| CVE-2026-11352 | not yet assigned | ? | |||
| CVE-2026-11564 | not yet assigned | ? | |||
| CVE-2026-11586 | not yet assigned | ? | |||
| CVE-2026-11856 | not yet assigned | ? | |||
| CVE-2026-12064 | not yet assigned | ? | |||
| CVE-2026-8286 | not yet assigned | ? | |||
| CVE-2026-8458 | not yet assigned | ? | |||
| CVE-2026-8924 | not yet assigned | ? | |||
| CVE-2026-8925 | not yet assigned | ? | |||
| CVE-2026-8926 | not yet assigned | ? | |||
| CVE-2026-8927 | not yet assigned | ? | |||
| CVE-2026-8932 | not yet assigned | ? | |||
| CVE-2026-9079 | not yet assigned | ? | |||
| CVE-2026-9080 | not yet assigned | ? | |||
| CVE-2026-9545 | not yet assigned | ? | |||
| CVE-2026-9546 | not yet assigned | ? | |||
| CVE-2026-9547 | not yet assigned | ? | |||
| dcmtk | check | CVE-2026-12805 | not yet assigned | no | |
| docker.io | check | CVE-2026-33747 | not yet assigned | no | |
| CVE-2026-33748 | not yet assigned | no | |||
| CVE-2026-41567 | not yet assigned | no | |||
| CVE-2026-41568 | not yet assigned | no | |||
| CVE-2026-42306 | not yet assigned | no | |||
| dulwich | check | CVE-2026-42563 | not yet assigned | no | |
| CVE-2026-47712 | not yet assigned | no | |||
| CVE-2026-47734 | not yet assigned | no | |||
| CVE-2026-52726 | not yet assigned | no | |||
| edk2 | check | CVE-2024-38798 | not yet assigned | no | |
| ffmpeg | check | CVE-2026-8461 | not yet assigned | no | |
| glibc | check | CVE-2026-5450 | not yet assigned | no | |
| CVE-2026-5928 | not yet assigned | no | |||
| gnupg2 | check | CVE-2026-57062 | not yet assigned | no | |
| golang-github-go-git-go-git-v6 | check | CVE-2026-41506 | not yet assigned | no | |
| CVE-2026-45022 | not yet assigned | no | |||
| CVE-2026-45570 | not yet assigned | no | |||
| CVE-2026-45571 | not yet assigned | no | |||
| guzzle | check | CVE-2026-55568 | not yet assigned | no | |
| CVE-2026-55767 | not yet assigned | no | |||
| imagemagick | check | CVE-2026-53460 | not yet assigned | no | |
| CVE-2026-53461 | not yet assigned | no | |||
| CVE-2026-53462 | not yet assigned | no | |||
| CVE-2026-53463 | not yet assigned | no | |||
| CVE-2026-53464 | not yet assigned | no | |||
| CVE-2026-53465 | not yet assigned | no | |||
| TEMP-1140176-50C86A | not yet assigned | ? | |||
| jupyter-server | check | CVE-2025-61669 | not yet assigned | no | |
| CVE-2026-35397 | not yet assigned | no | |||
| CVE-2026-40110 | not yet assigned | no | |||
| CVE-2026-40934 | not yet assigned | no | |||
| CVE-2026-44727 | not yet assigned | no | |||
| linux | check | CVE-2026-46331 | not yet assigned | no | |
| CVE-2026-52908 | not yet assigned | no | |||
| CVE-2026-52909 | not yet assigned | no | |||
| CVE-2026-52917 | not yet assigned | ? | |||
| CVE-2026-52924 | not yet assigned | ? | |||
| CVE-2026-52929 | not yet assigned | ? | |||
| CVE-2026-52930 | not yet assigned | ? | |||
| CVE-2026-52935 | not yet assigned | ? | |||
| CVE-2026-52939 | not yet assigned | ? | |||
| CVE-2026-52940 | not yet assigned | ? | |||
| CVE-2026-52942 | not yet assigned | ? | |||
| CVE-2026-52946 | not yet assigned | ? | |||
| CVE-2026-52947 | not yet assigned | ? | |||
| CVE-2026-52948 | not yet assigned | ? | |||
| mariadb | check | CVE-2026-44168 | not yet assigned | no | |
| CVE-2026-44169 | not yet assigned | no | |||
| CVE-2026-44171 | not yet assigned | no | |||
| CVE-2026-44172 | not yet assigned | no | |||
| CVE-2026-44173 | not yet assigned | no | |||
| CVE-2026-48163 | not yet assigned | no | |||
| CVE-2026-48165 | not yet assigned | no | |||
| CVE-2026-49261 | not yet assigned | no | |||
| neovim | check | CVE-2026-11487 | not yet assigned | no | |
| nginx | check | CVE-2026-42055 | not yet assigned | no | |
| CVE-2026-48142 | not yet assigned | no | |||
| node-brace-expansion | check | CVE-2026-45149 | not yet assigned | no | |
| node-css-loader | check | CVE-2026-9358 | not yet assigned | no | |
| node-form-data | check | CVE-2026-12143 | not yet assigned | no | |
| node-ip-address | check | CVE-2026-42338 | not yet assigned | no | |
| node-qs | check | CVE-2026-8723 | not yet assigned | no | |
| node-tmp | check | CVE-2026-44705 | not yet assigned | no | |
| node-undici | check | CVE-2026-11525 | not yet assigned | no | |
| CVE-2026-12151 | not yet assigned | no | |||
| CVE-2026-6733 | not yet assigned | no | |||
| CVE-2026-6734 | not yet assigned | no | |||
| CVE-2026-9678 | not yet assigned | no | |||
| CVE-2026-9679 | not yet assigned | no | |||
| CVE-2026-9697 | not yet assigned | no | |||
| node-ws | check | CVE-2026-48779 | not yet assigned | no | |
| node-xmldom | check | CVE-2026-41672 | not yet assigned | no | |
| CVE-2026-41673 | not yet assigned | no | |||
| CVE-2026-41674 | not yet assigned | no | |||
| CVE-2026-41675 | not yet assigned | no | |||
| nova | check | CVE-2026-46448 | not yet assigned | no | |
| ocaml | check | CVE-2026-28364 | not yet assigned | no | |
| optee-os | check | CVE-2026-40290 | not yet assigned | no | |
| CVE-2026-45614 | not yet assigned | no | |||
| CVE-2026-45702 | not yet assigned | no | |||
| python-daphne | check | CVE-2026-44545 | not yet assigned | no | |
| CVE-2026-44546 | not yet assigned | no | |||
| python-memray | check | CVE-2026-32722 | not yet assigned | no | |
| qemu | check | CVE-2026-41435 | not yet assigned | ? | |
| CVE-2026-41436 | not yet assigned | ? | |||
| CVE-2026-41437 | not yet assigned | ? | |||
| CVE-2026-41438 | not yet assigned | ? | |||
| CVE-2026-41439 | not yet assigned | ? | |||
| CVE-2026-41440 | not yet assigned | ? | |||
| CVE-2026-8341 | not yet assigned | ? | |||
| ruby-concurrent | check | CVE-2026-54904 | not yet assigned | ? | |
| CVE-2026-54905 | not yet assigned | ? | |||
| CVE-2026-54906 | not yet assigned | ? | |||
| rust-postgres-protocol | check | TEMP-1139876-2010E8 | not yet assigned | ? | |
| TEMP-1139876-F3C684 | not yet assigned | ? | |||
| sqlite3 | check | CVE-2026-11822 | not yet assigned | no | |
| CVE-2026-11824 | not yet assigned | no | |||
| swift | check | CVE-2026-50221 | not yet assigned | no | |
| util-linux | check | CVE-2026-53612 | not yet assigned | ? | |
| CVE-2026-53613 | not yet assigned | ? | |||
| CVE-2026-53614 | not yet assigned | ? | |||
| xrdp | check | CVE-2026-32105 | not yet assigned | no | |
| CVE-2026-32107 | not yet assigned | no | |||
| CVE-2026-32623 | not yet assigned | no | |||
| CVE-2026-32624 | not yet assigned | no | |||
| CVE-2026-33145 | not yet assigned | no | |||
| CVE-2026-33516 | not yet assigned | no | |||
| CVE-2026-33689 | not yet assigned | no | |||
| CVE-2026-35512 | not yet assigned | no |