Packages with a history of security issues and whose packaged version is not up to date

[Santiago Ruano Rincón <santiagorr@riseup.net>]

Dear Debian fellows,

I am writing this email under the hypothesis that having the latest (or
longest supported) upstream version in the next release will: 1. make it
easier to provide security support during the whole release lifecycle,
and 2. it will be useful for users, as they could have the latest
features and bugfixes, in case of minor point release updates.

Here attached you can find a list of packages that have ever had a
security issue **and** whose packaged version is not "up to date",
according to the uscan results. It is sorted by the number of currently
open CVEs in sid (the first "column"), and by the number of security
issues ever (second "column").

So, this is a call for comments: is this kind of package list useful?
I'd say that the CVEs open in sid are not critical nor have a
high-severity, but it would be nice to have them fixed, as soon as
possible.  If having this list available somewhere is a good idea, could
it be "integrated" into UDD somehow? As a cgi-bin that outputs a json
file?

This is also a call for action/help proposal*: I would like to invite
the related maintainers and teams to evaluate if it is worth it to
package the latest upstream version of the listed packages, and try to
make it for trixie. I know that the time is really short, and this kind
of call could be improved and made it earlier for the next releases.

* I am personally willing to work on a subset of the listed packages.

I also know there could be "false positives", such as nginx or openjdk*,
but please take this as a draft list (and a draft script).

Attached you can find the script that produces this list.

Any thoughts?

Cheers,

 -- Santiago

975 newer packages available
num of open CVEs in sid, num of historical CVE, source name
80, 1118, gitlab, (17.3.5 -> 17.8.1),
22, 7146, linux, (6.13.2 -> 6.14~rc2),
16, 35, libstb, (0.0~git20240715.f7f20f39fe4f+ds -> 0.0~git20241109.5c20573),
11, 15, ruby3.1, (3.1.2 -> 3.1.6),
9, 20, nvidia-cuda-toolkit, (12.2.1 -> 12.8.0),
8, 110, nvidia-graphics-drivers, (545.23.06 -> 545.29.06),
8, 11, ruby-commonmarker, (0.23.10 -> 2.0.4),
8, 10, python-cmarkgfm, (0.8.0 -> 2024.11.20),
7, 364, virtualbox, (7.0.20-dfsg -> 7.1.6),
7, 45, nvidia-open-gpu-kernel-modules, (545.23.06 -> 570.86.16),
7, 15, gradle, (4.4.1 -> 8.12.1),
6, 34, kanboard, (1.2.31+ds2 -> 1.2.43),
6, 17, shiro, (1.3.2 -> 2.0.2),
6, 12, grpc, (1.59.5 -> 1.70.1),
5, 17, dogtag-pki, (11.2.1 -> 11.6.0~alpha3),
4, 365, wordpress, (6.6.1+dfsg1 -> 6.7.1),
4, 104, libxml2, (2.13.3+dfsg -> 2.13.5),
4, 36, openimageio, (2.5.16.0+dfsg -> 3.0.3.1),
4, 31, bouncycastle, (1.77 -> 1.80),
4, 15, resteasy, (3.6.2 -> 6.2.11),
4, 6, opensearch, (2.4.1+dfsg -> 2.19.0),
4, 5, libcoap3, (4.3.4 -> 4.3.5),
3, 68, trafficserver, (9.2.5+ds -> 10.0.3),
3, 24, zziplib, (0.13.72+dfsg.1 -> 0.13.78),
3, 19, ckeditor, (4.22.1+dfsg1 -> 4.25.1-lts),
3, 3, liboqs, (0.8.0 -> 0.12.0),
2, 52, openexr, (3.1.5 -> 3.3.2),
2, 37, jetty9, (9.4.56 -> 9.4.57),
2, 24, netty, (4.1.48 -> 4.1.118),
2, 21, wget, (1.24.5 -> 2-latest),
2, 19, fis-gtm, (7.1-005 -> 7.1-006),
2, 16, qt6-base, (6.7.2+dfsg -> 6.8.2),
2, 14, fort-validator, (1.6.5 -> 1.6.6),
2, 14, resteasy3.0, (3.0.26 -> 6.2.11),
2, 8, libpdfbox-java, (1.8.16 -> 3.0.4),
2, 6, logback, (1.2.11 -> 1.5.16),
2, 5, golang-github-lucas-clemente-quic-go, (0.46.0 -> 0.49.0),
2, 4, golang-github-gin-gonic-gin, (1.8.1 -> 1.10.0),
2, 4, golang-github-go-git-go-git, (5.12.0 -> 5.13.2),
2, 4, kotlin, (1.3.31+ds1 -> 2.1.10),
2, 4, libkdcraw, (24.12.0 -> 24.12.2),
2, 4, plantuml, (1.2020.2+ds -> 1.2025.0),
2, 2, cvc5, (1.1.2 -> 1.2.1),
2, 2, golang-github-jackc-pgx, (4.18.1 -> 5.7.2),
1, 163, cacti, (1.2.28+ds1 -> 1.2.29),
1, 52, 389-ds-base, (3.1.1+dfsg1 -> 3.1.2),
1, 50, wpa, (2.10 -> 2.11),
1, 37, u-boot, (2024.01+dfsg -> 2025.04~rc1),
1, 29, neutron, (25.0.0 -> 26.0.0~b2),
1, 25, shadow, (4.16.0 -> 4.17.2),
1, 21, libreswan, (5.0~rc2 -> 5.0~rc3),
1, 20, freeipa, (4.12.2 -> 4.12.3),
1, 18, qtbase-opensource-src-gles, (5.15.15+dfsg -> 5.15.16),
1, 17, fastdds, (3.1.0+ds -> 3.2.0-vulc~anexus),
1, 13, wabt, (1.0.34+dsfg2+~cs1.0.36 -> 1.0.36+~cs1.0.36),
1, 10, golang-go.crypto, (0.25.0 -> 0.33.0),
1, 10, golang-golang-x-net, (0.27.0 -> 0.35.0),
1, 9, protobuf, (3.25.4 -> 30.0~rc1),
1, 8, libowasp-antisamy-java, (1.7.4 -> 1.7.7),
1, 7, lxd, (5.0.2+git20231211.1364ae4 -> 5.21.3),
1, 7, mysql-connector-python, (9.1.0 -> 9.2.0),
1, 6, libxml-security-java, (2.1.8 -> 4.0.3),
1, 6, nix, (2.25.4+dfsg -> 2.26.2),
1, 5, node-express, (4.21.0+~cs10.0.6 -> 5.0.1+~cs10.0.6),
1, 5, node-katex, (0.16.10+~cs6.1.0 -> 0.16.21+~cs6.1.0),
1, 5, twitter-bootstrap4, (4.6.1+dfsg1 -> 5.3.3),
1, 4, async-http-client, (2.12.3 -> 3.0.1),
1, 4, mitmproxy, (8.1.1 -> 11.1.2),
1, 4, node-mongodb, (3.6.4+~cs12.9.20 -> 6.13.0+~cs12.9.20),
1, 3, cpp-httplib, (0.18.0+ds -> 0.18.7),
1, 3, golang-github-notaryproject-notation-go, (1.2.1 -> 1.3.0),
1, 3, hugo, (0.131.0 -> 0.143.1),
1, 3, ipmctl, (03.00.00.0485 -> 03.00.00.0499),
1, 3, jakarta-jmeter, (2.13 -> 5.6.3),
1, 3, jboss-xnio, (3.8.10 -> 3.8.16),
1, 3, m2crypto, (0.42.0 -> 0.43.0),
1, 3, mina2, (2.2.1 -> 2.2.4),
1, 3, ovn, (24.09.0 -> 24.09.2),
1, 3, percona-toolkit, (3.2.1 -> 3.7.0),
1, 3, ruby-devise-two-factor, (4.0.2 -> 6.1.0),
1, 2, golang-github-gomarkdown-markdown, (0.0~git20231115.a660076 -> 0.0~git20250207.7a1f277),
1, 2, kmail-account-wizard, (24.12.0 -> 24.12.2),
1, 2, node-braces, (3.0.3+~3.0.4 -> 3.0.3+~3.0.5),
1, 2, python-multipart, (0.0.17 -> 0.0.20),
1, 2, python-redis, (4.3.4 -> 5.3.0b5),
1, 2, rclone, (1.60.1+dfsg -> 1.69.0),
1, 2, squirrel3, (3.1 -> 3.2),
1, 1, dante, (1.4.3+dfsg -> 1.4.4),
1, 1, gobgp, (3.33.0 -> 3.34.0),
1, 1, golang-github-cli-go-gh-v2, (2.6.0 -> 2.11.2),
1, 1, golang-github-dvsekhvalnov-jose2go, (1.5 -> 1.8.0),
1, 1, golang-github-gin-contrib-cors, (1.4.0 -> 1.7.3),
1, 1, golang-github-go-resty-resty, (2.10.0 -> 3.0.0~beta1),
1, 1, golang-github-golang-jwt-jwt, (5.0.0+really4.5.0 -> 5.2.1),
1, 1, golang-github-gorilla-schema, (1.2.0 -> 1.4.1),
1, 1, golang-github-hashicorp-go-retryablehttp, (0.7.1 -> 0.7.7),
1, 1, hotspot, (1.3.0 -> 1.5.1),
1, 1, jayway-jsonpath, (2.0.0 -> 2.9.0),
1, 1, jline3, (3.3.1 -> 3.29.0),
1, 1, libjdom2-intellij-java, (2.0.6+git20180529 -> 2.0.6+git20180917),
1, 1, libjs-bootbox, (5.5.3~ds -> 6.0.0),
1, 1, materialize, (1.1.0~alpha+ds -> 2.2.1),
1, 1, node-markdown-to-jsx, (7.2.0+dfsg -> 7.7.3),
1, 1, node-nunjucks, (3.2.3+dfsg+~cs1.0.1 -> 3.2.4+~cs1.0.1),
1, 1, node-serialize-javascript, (6.0.1 -> 6.0.2),
1, 1, openipmi, (2.0.33 -> 2.0.36),
1, 1, pcl, (1.14.0+dfsg -> 1.14.1),
1, 1, rbenv, (1.1.2 -> 1.3.2),
1, 1, rear, (2.7+dfsg -> 2.9),
1, 1, ruby-fugit, (1.8.1 -> 1.11.1),
1, 1, ruby-protocol-http1, (0.14.6 -> 0.30.0),
1, 1, ruby-webrick, (1.8.1 -> 1.9.1),
1, 1, rust-hickory-proto, (0.24.1 -> 0.25.0~alpha.5),
1, 1, rust-idna, (0.4.0 -> 1.0.3),
1, 1, rust-lexical-core, (0.7.6 -> 1.0.5),
1, 1, rust-pprof, (0.13.0 -> 0.14.0),
1, 1, rust-rsa, (0.9.7 -> 0.10.0~pre.3),
0, 244, mediawiki, (1.39.10 -> 1.39.11),
0, 212, vim, (9.1.0967 -> 9.1.1101),
0, 167, xpdf, (3.04+git20250103 -> 3.04+git20250204),
0, 158, openjdk-11, (11.0.26+4 -> 11.0.27+1),
0, 155, bind9, (9.21.3 -> 9.21.4),
0, 154, glibc, (2.40 -> 2.41),
0, 133, poppler, (25.01.0 -> 25.02.0),
0, 122, cups, (2.4.10 -> 2.4.11),
0, 113, nodejs, (22.12.0+dfsg -> 22.13.1),
0, 99, tor, (0.4.8.13 -> 0.4.9.1-alpha),
0, 92, hdf5, (1.14.5+repack -> 1.14.6),
0, 87, zoneminder, (1.36.33+dfsg1 -> 1.36.35),
0, 79, tomcat9, (9.0.95 -> 9.0.99),
0, 78, nss, (3.107 -> 3.108),
0, 78, openjdk-17, (17.0.14+7 -> 17.0.15+1),
0, 74, ansible, (11.1.0+dfsg -> 11.2.0),
0, 72, libarchive, (3.7.4 -> 3.7.7),
0, 71, perl, (5.40.0 -> 5.40.1),
0, 70, libreoffice, (25.2.1~rc1 -> 25.2.1),
0, 69, jackson-databind, (2.14.0+ds -> 2.18.2),
0, 67, wolfssl, (5.7.2 -> 5.7.6),
0, 63, golang-1.19, (1.19.8 -> 1.19.13),
0, 63, virtuoso-opensource, (7.2.12+dfsg -> 7.2.14),
0, 57, mupdf, (1.25.1+ds1 -> 1.25.4),
0, 57, sqlite3, (3.46.1 -> 3.49.0),
0, 55, redis, (7.2.5 -> 8.0-m04-int),
0, 50, redmine, (5.1.3+ds -> 6.0.3),
0, 49, git, (2.48.0~rc1+next.20250101 -> 2.48.1),
0, 47, freeradius, (3.2.6+dfsg -> 3.2.7),
0, 47, opensc, (0.26.0 -> 0.26.1),
0, 46, w3m, (0.5.3+git20230121 -> 0.5.3+git20230718),
0, 45, file, (5.45 -> 5.46),
0, 44, libvncserver, (0.9.14+dfsg -> 0.9.15),
0, 40, matrix-synapse, (1.121.0 -> 1.124.0),
0, 40, pdns-recursor, (5.1.3 -> 5.2.0),
0, 38, icu, (72.1 -> 76.1),
0, 37, lucene-solr, (3.6.2+dfsg -> 8.11.4),
0, 37, strongswan, (5.9.13 -> 6.0.0),
0, 36, pdns, (4.9.3 -> 4.9.4),
0, 34, firmware-nonfree, (20241210 -> 20250109),
0, 34, qtbase-opensource-src, (5.15.15+dfsg -> 5.15.16),
0, 31, opencv, (4.6.0+dfsg -> 4.11.0),
0, 31, rsync, (3.3.0+ds1 -> 3.4.1),
0, 30, activemq, (5.17.6+dfsg -> 6.1.5),
0, 29, jruby, (9.4.8.0+ds -> 9.4.12.0),
0, 28, condor, (23.6.2+dfsg -> 24.4.0),
0, 28, libxslt, (1.1.39 -> 1.1.42),
0, 27, heimdal, (7.8.git20221117.28daf24+dfsg -> 7.8.git20240113.1b4565a),
0, 27, simplesamlphp, (1.19.7 -> 2.1.7),
0, 26, glance, (29.0.0 -> 30.0.0~b2),
0, 26, hoteldruid, (3.0.6 -> 3.0.7),
0, 25, libjpeg-turbo, (2.1.5 -> 3.1.0),
0, 25, openjdk-21, (21.0.6+7 -> 21.0.7+1),
0, 24, nextcloud-desktop, (3.15.2 -> 3.15.3),
0, 23, ruby-rack, (3.0.8 -> 3.1.10),
0, 22, binaryen, (108 -> 122),
0, 22, rustc, (1.84.0+dfsg1 -> 1.84.1),
0, 22, xrdp, (0.10.1 -> 0.10.2),
0, 21, rabbitmq-server, (4.0.5 -> 4.1.0-beta.4),
0, 20, chicken, (5.3.0 -> 5.4.0),
0, 20, libx11, (1.8.10 -> 1.8.11),
0, 20, ocsinventory-server, (2.8.1+dfsg1+~2.11.1 -> 2.8.1+~2.12.3),
0, 20, sql-ledger, (3.2.6 -> 3.2.12),
0, 19, scilab, (2024.1.0+dfsg -> 2025.0.0),
0, 19, sssd, (2.10.1 -> 2.10.2),
0, 18, coreutils, (9.5 -> 9.6),
0, 18, golang-1.22, (1.22.3 -> 1.22.12),
0, 18, libxfont, (2.0.6 -> 2.0.7),
0, 18, singularity-container, (4.1.5+ds3 -> 4.2.2),
0, 18, xscreensaver, (6.08+dfsg1 -> 6.09),
0, 17, ldap-account-manager, (9.0 -> 9.0.),
0, 17, netcdf, (4.9.2 -> 4.9.3),
0, 17, open-build-service, (2.9.4 -> 2.10.23),
0, 17, tigervnc, (1.14.1+dfsg -> 1.14.90),
0, 16, libgit2, (1.8.4+ds -> 1.9.0),
0, 16, xymon, (4.3.30 -> 4.4~alpha1),
0, 15, erlang, (27.2+dfsg -> 27.2.2),
0, 15, libapache2-mod-auth-openidc, (2.4.16.6 -> 2.4.16.7),
0, 15, ntpsec, (1.2.3+dfsg1 -> 1.2.3-rc1),
0, 15, tryton-server, (7.0.24 -> 7.0.25),
0, 14, hplip, (3.22.10+dfsg0 -> 3.24.4),
0, 14, modsecurity-crs, (3.3.7 -> 4.11.0),
0, 14, php-dompdf, (3.0.2+dfsg -> 3.1.0),
0, 14, php-laravel-framework, (10.48.25+dfsg -> 11.41.3),
0, 14, ruby-rails-html-sanitizer, (1.4.4 -> 1.6.2),
0, 14, runc, (1.1.15+ds1 -> 1.2.4),
0, 13, cimg, (3.5.0+dfsg -> 3.5.2),
0, 13, cyrus-imapd, (3.10.0~rc2 -> 3.10.1),
0, 13, ioquake3, (1.36+u20241011.cc18246+dfsg -> 1.36+u20241224.3fb9006),
0, 13, janus, (1.1.2 -> 1.3.0),
0, 13, libonig, (6.9.9 -> 6.9.10),
0, 13, openrefine, (3.8.7 -> 3.9-beta1),
0, 13, python-aiohttp, (3.10.11 -> 3.11.12),
0, 12, advancecomp, (2.5 -> 2.6),
0, 12, containerd, (1.7.24~ds1 -> 1.7.25),
0, 12, etcd, (3.5.16 -> 3.5.18),
0, 12, gnome-shell, (47.3 -> 48~beta),
0, 12, jpeg-xl, (0.10.4 -> 0.11.1),
0, 12, jupyter-notebook, (6.4.13 -> 7.4.0~a3),
0, 12, libphp-phpmailer, (6.9.1 -> 6.9.3),
0, 12, passenger, (6.0.24+ds -> 6.0.25),
0, 12, systemtap, (5.1 -> 5.2),
0, 12, veyon, (4.7.5+repack1 -> 4.9.2),
0, 11, civicrm, (5.68.1+dfsg1 -> 5.82.0),
0, 11, graphviz, (2.42.4 -> 12.2.1),
0, 11, inspircd, (3.17.0 -> 4.5.0),
0, 11, libphp-adodb, (5.22.7 -> 5.22.8),
0, 11, libslirp, (4.8.0 -> 4.9.0),
0, 11, pcs, (0.11.9 -> 0.12.0b1),
0, 11, pure-ftpd, (1.0.50 -> 1.0.52),
0, 11, screen, (4.9.1 -> 5.0.0),
0, 10, ipython, (8.30.0 -> 8.32.0),
0, 10, munin, (2.999.16 -> 2.999.18),
0, 10, node-marked, (4.2.3+ds+~4.0.7 -> 15.0.7+~6.0.0),
0, 10, npm, (9.2.0~ds1 -> 11.1.0),
0, 10, onevpl-intel-gpu, (24.3.4 -> 25.1.1),
0, 10, opensmtpd, (7.5.0p0 -> 7.6.0p1),
0, 10, pacemaker, (2.1.8 -> 3.0.0),
0, 10, ppp, (2.5.1 -> 2.5.2),
0, 10, transmission, (4.0.6+dfsg -> 4.1.0~beta1),
0, 9, inkscape, (1.2.2 -> 1.4),
0, 9, librecad, (2.2.0.2 -> refs/tags/v2.2.1),
0, 9, mailutils, (3.17 -> 3.18),
0, 9, mesa, (24.3.4 -> 25.0.0~rc2),
0, 9, mojarra, (2.2.8 -> 2.4.0),
0, 9, monit, (5.34.3 -> 5.34.4),
0, 9, nats-server, (2.10.24 -> 2.10.26~RC2),
0, 9, nim, (1.6.14 -> 2.2.2),
0, 9, python-cryptography, (43.0.0 -> 44.0.1),
0, 9, sysstat, (12.7.5 -> 12.7.6),
0, 9, telegram-desktop, (4.14.9+ds -> 5.10.7),
0, 9, uclibc, (1.0.35 -> 1.0.51),
0, 9, xerces-c, (3.2.4+debian -> 3.3.0),
0, 8, ansible-core, (2.18.1 -> 2.18.2),
0, 8, darktable, (4.8.1 -> 5.0.1),
0, 8, derby, (10.14.2.0 -> 10.17.1.0),
0, 8, fex, (20160919 -> 20160919_2),
0, 8, jupyter-server, (2.14.2 -> 2.15.0),
0, 8, netdata, (2.0.3+dfsg -> 2.2.5),
0, 8, nettle, (3.10 -> 3.10.1),
0, 8, node-tar, (6.2.1+~cs7.0.8 -> 7.4.3+~cs7.0.8),
0, 8, node-url-parse, (1.5.10+~1.4.8 -> 1.5.10+~1.4.11),
0, 8, python-pip, (25.0+dfsg -> 25.0.1),
0, 8, ruby-sidekiq, (7.3.2+dfsg -> 7.3.8),
0, 8, rust-hyper, (1.5.2 -> 1.6.0),
0, 8, zoph, (1.0.1 -> 1.4),
0, 7, gdcm, (3.0.24 -> 3.0.25),
0, 7, konversation, (24.12.1 -> 24.12.2),
0, 7, ldns, (1.8.4 -> 1.8.4-rc.1),
0, 7, libapache-poi-java, (4.0.1 -> 5.0.0),
0, 7, libdbd-mysql-perl, (4.053 -> 5.011),
0, 7, libpdfbox2-java, (2.0.29 -> 3.0.4),
0, 7, libtpms, (0.9.2 -> 0.10.0-rc1),
0, 7, node-lodash, (4.17.21+dfsg+~cs8.34.36.20210220 -> 4.17.21+~cs8.34.36.20210220),
0, 7, python-pysaml2, (7.5.0 -> 7.5.2),
0, 7, slirp4netns, (1.2.1 -> 1.3.2),
0, 7, wine, (10.0~rc2~repack -> 10.0),
0, 6, apache-jena, (4.9.0 -> 5.3.0),
0, 6, apache-log4j2, (2.19.0 -> 2.24.3),
0, 6, argyll, (3.1.0+repack -> 3.3.0),
0, 6, atril, (1.26.2 -> 1.28.1),
0, 6, bacula, (13.0.4 -> 15.0.2),
0, 6, collectd, (5.12.0 -> 6.0.0.rc3),
0, 6, dpic, (2023.06.01 -> 2024.01.01),
0, 6, enscript, (1.6.5.90 -> 1.6.6),
0, 6, lcms2, (2.16 -> 2.17),
0, 6, less, (643 -> 668),
0, 6, libtirpc, (1.3.4+ds -> 1.3.6),
0, 6, links2, (2.29 -> 2.30),
0, 6, mxml, (4.0.3 -> 4.0.4),
0, 6, nagios4, (4.4.6 -> 4.5.9),
0, 6, org-mode, (9.7.19+dfsg -> 9.7.21),
0, 6, php-pear, (1.10.13+submodules+notgz+2022032202 -> 1.10.16),
0, 6, pixman, (0.44.0 -> 0.44.2),
0, 6, procps, (4.0.4 -> 4.0.5),
0, 6, racket, (8.14+dfsg1 -> 8.15),
0, 6, rar, (7.10~b1 -> 7.10b3),
0, 6, ruby-loofah, (2.22.0 -> 2.24.0),
0, 6, rust-sized-chunks, (0.6.5 -> 0.7.0),
0, 6, smarty4, (4.5.4 -> 4.5.5),
0, 6, sofia-sip, (1.12.11+20110422.1+1e14eea~dfsg -> 1.12.12~1.13.45bc),
0, 6, tt-rss, (21~git20210204.b4cbc79+dfsg -> 0.0~git20250208.169ff6d),
0, 6, virtualbox-guest-additions-iso, (7.0.20 -> 7.1.6),
0, 5, backup-manager, (0.7.14 -> 0.7.15),
0, 5, borgbackup, (1.4.0 -> 2.0.0~b14),
0, 5, gss-ntlmssp, (1.2.0 -> 1.3.1),
0, 5, keepass2, (2.57+dfsg -> 2.57.1),
0, 5, kexec-tools, (2.0.29 -> 2.0.30),
0, 5, ktorrent, (24.12.0 -> 24.12.2),
0, 5, lftp, (4.9.2 -> 4.9.3),
0, 5, lldpd, (1.0.18 -> 1.0.19),
0, 5, neovim, (0.9.5 -> 0.10.4),
0, 5, netbeans, (12.1 -> 25~rc2),
0, 5, node-handlebars, (4.7.7+~4.1.0 -> 4.7.8+~4.1.0),
0, 5, node-postcss, (8.4.49+~cs9.2.32 -> 8.5.1+~cs9.2.32),
0, 5, node-ua-parser-js, (0.8.1+ds+~0.7.36 -> 2.0.2+~0.7.39),
0, 5, node-yarnpkg, (4.0.2+dfsg -> 4.6.0),
0, 5, paramiko, (3.5.0 -> 3.5.1),
0, 5, plasma-workspace, (6.2.91 -> 6.3.0),
0, 5, poco, (1.13.0 -> 1.14.1),
0, 5, py-lmdb, (1.4.1 -> 1.6.2),
0, 5, python-git, (3.1.37 -> 3.1.44),
0, 5, python-gnupg, (0.5.2 -> 0.5.4),
0, 5, pytorch, (2.5.1+dfsg -> 2.6.0),
0, 5, qtsvg-opensource-src, (5.15.15 -> 5.15.16),
0, 5, ruby-doorkeeper, (5.6.6 -> 5.8.1),
0, 5, rust-cargo, (0.84.0 -> 0.85.0),
0, 5, rust-smallvec, (1.13.2 -> 2.0.0-alpha.10),
0, 5, rust-xcb, (1.4.0 -> 1.5.0),
0, 5, thrift, (0.20.0 -> 0.21.0),
0, 5, xdm, (1.1.11 -> 1.1.16),
0, 4, alien-arena, (7.71.3+dfsg -> 7.71.7),
0, 4, ark, (24.12.1 -> 24.12.2),
0, 4, caddy, (2.6.2 -> 2.9.1),
0, 4, catfish, (4.16.4 -> 4.20.0),
0, 4, clementine, (1.4.1+git27-g658f34ec4+dfsg -> 1.4.1+git32-g2e6af22d7),
0, 4, courier-authlib, (0.71.4 -> 0.72.3),
0, 4, dietlibc, (0.34~cvs20160606 -> 0.35),
0, 4, gitolite3, (3.6.12 -> 3.6.13),
0, 4, golang-github-tidwall-gjson, (1.17.1 -> 1.18.0),
0, 4, golang-golang-x-image, (0.18.0 -> 0.24.0),
0, 4, h2database, (2.2.220 -> 2.3.232),
0, 4, hiki, (1.0.0 -> refs/tags/1.0.0),
0, 4, influxdb, (1.6.7~rc0 -> 2.7.11),
0, 4, ironic, (26.1.1 -> 2015.1.4),
0, 4, jupyterlab, (4.0.11+ds1+~cs12.29.18 -> 4.3.5+~cs12.29.18),
0, 4, jython, (2.7.3+repack1 -> 2.7.4),
0, 4, libimager-perl, (1.025+dfsg -> 1.026),
0, 4, libmina-sshd-java, (2.13.2 -> 2.14.0),
0, 4, miniupnpc, (2.2.8 -> 2.3.0),
0, 4, mod-wsgi, (5.0.1 -> 5.0.2),
0, 4, node-moment, (2.29.4+ds -> 2.30.1),
0, 4, node-prismjs, (1.29.0+dfsg+~1.26.0 -> 1.29.0+~1.26.5),
0, 4, node-xmldom, (0.9.6 -> 0.9.7),
0, 4, opencryptoki, (3.23.0+dfsg -> 3.24.0),
0, 4, pgbouncer, (1.23.1 -> 1.24.0),
0, 4, php-cas, (1.6.0 -> 1.6.1),
0, 4, pygments, (2.18.0+dfsg -> 2.19.1),
0, 4, python-keystonemiddleware, (10.7.1 -> 10.8.0),
0, 4, qpid-proton, (0.37.0 -> 0.40.0),
0, 4, rpcbind, (1.2.6 -> 1.2.7),
0, 4, ruby-carrierwave, (3.0.7 -> 3.1.1),
0, 4, sabnzbdplus, (4.4.0+dfsg -> 4.4.1),
0, 4, shaarli, (0.13.0+dfsg -> 0.14.0),
0, 4, svgpp, (1.3.0+dfsg1 -> 1.3.1),
0, 4, thunar, (4.20.1 -> 4.20.2),
0, 4, tomcat-native, (1.3.1 -> 2.0.8),
0, 4, tuned, (2.24.1 -> 2.25.1),
0, 4, xmlrpc-c, (1.59.03 -> 1.60.04),
0, 4, xmlsec1, (1.2.41 -> 1.3.7),
0, 4, xz-utils, (5.6.3 -> 5.7.1alpha),
0, 3, android-platform-frameworks-native, (10.0.0+r36 -> 15.0.0+r17),
0, 3, ardour, (8.10.0+ds -> 8.11.0),
0, 3, backintime, (1.5.2 -> 1.5.3-rc1),
0, 3, dnsjava, (3.6.2 -> 3.6.3),
0, 3, docker-registry, (2.8.3+ds1 -> 3.0.0~rc3),
0, 3, epic4, (2.10.10 -> 3.0),
0, 3, fava, (1.23.1+dfsg -> 1.30.1),
0, 3, gh, (2.46.0 -> 2.66.1),
0, 3, gnulib, (20250102 -> 20250210~39ed3d9),
0, 3, gnustep-base, (1.30.0 -> 1.31.0),
0, 3, guava-libraries, (32.0.1 -> 33.4.0),
0, 3, ippsample, (0.0~git20220607.72f89b3 -> 0.0~git20250207.94d1b3e),
0, 3, ircd-hybrid, (8.2.43+dfsg.1 -> 8.2.46),
0, 3, jackrabbit, (2.20.11 -> 2.23.1-beta),
0, 3, jsoup, (1.15.3 -> 1.18.3),
0, 3, jss, (5.5.0 -> 5.6.0~alpha1),
0, 3, libcap2, (2.66 -> 2.73),
0, 3, libpf4j-java, (3.12.0+dfsg -> 3.13.0),
0, 3, libtoxcore, (0.2.19 -> 0.2.20),
0, 3, libxrender, (0.9.10 -> 0.9.12),
0, 3, libxv, (1.0.11 -> 1.0.13),
0, 3, libxvmc, (1.0.12 -> 1.0.14),
0, 3, liferea, (1.15.8 -> 1.16~rc1),
0, 3, lwip, (2.2.0+dfsg1 -> 2.2.1),
0, 3, mariadb, (11.4.4 -> 11.4.5),
0, 3, micropython, (1.24.0+ds -> 1.24.1),
0, 3, minetest, (5.8.0+dfsg -> 5.11.0-rc1),
0, 3, mistune, (3.0.2 -> 3.1.1),
0, 3, multipath-tools, (0.9.9 -> 0.11.1),
0, 3, mustache.js, (3.0.1 -> 4.2.0),
0, 3, nbdkit, (1.40.5 -> 1.42.0),
0, 3, node-connect, (3.7.0+~3.4.35 -> 3.7.0+~3.4.38),
0, 3, node-dompurify, (3.1.7+dfsg+~3.0.5 -> 3.2.4+~3.2.0),
0, 3, node-extend, (3.0.2+~3.0.1 -> 3.0.2+~3.0.4),
0, 3, node-fetch, (3.3.2+~cs14.1.11 -> 3.3.2+~cs14.1.11),
0, 3, node-jquery, (3.6.1+dfsg+~3.5.14 -> 3.7.1+~3.5.32),
0, 3, node-loader-utils, (3.2.1+~2.0.3 -> 3.3.1+~2.0.6),
0, 3, node-object-path, (0.11.8+~0.11.1 -> 0.11.8+~0.11.4),
0, 3, node-qs, (6.13.0+ds+~6.9.16 -> 6.14.0+~6.9.18),
0, 3, openfortivpn, (1.22.1 -> 1.23.0),
0, 3, owncloud-client, (5.2.1.13040+dfsg -> 5.3.2.15463),
0, 3, php-htmlpurifier, (4.11.0 -> 4.14.0),
0, 3, plexus-utils2, (3.4.2 -> 4.0.2),
0, 3, policycoreutils, (3.7 -> 3.8),
0, 3, puppet-module-puppetlabs-mysql, (15.0.0 -> 16.2.0),
0, 3, puppetdb, (8.4.1 -> 8.8.1),
0, 3, pycryptodome, (3.20.0+dfsg -> 3.21.0),
0, 3, python-oslo.utils, (7.3.0 -> 8.0.0),
0, 3, qt6-svg, (6.7.2 -> 6.8.2),
0, 3, renderdoc, (1.27+dfsg -> 1.36),
0, 3, ruby-bson, (4.15.0 -> 5.0.2),
0, 3, ruby-devise, (4.9.3 -> 4.9.4),
0, 3, ruby-git, (1.13.1 -> 2.3.3),
0, 3, ruby-mail, (2.8.1+dfsg1 -> 2.8.1+dfsg1),
0, 3, ruby-zip, (2.3.2 -> 3.0.0.rc1),
0, 3, rust-gix-path, (0.10.11 -> 0.10.14),
0, 3, semi, (1.14.7~0.20230104 -> 1.14.7~0.20240606),
0, 3, snowflake, (2.5.1 -> 2.10.1),
0, 3, starlette, (0.41.3 -> 0.45.3),
0, 3, syncthing, (1.27.7~ds1 -> 1.29.3~rc.1),
0, 3, tgt, (1.0.85 -> 1.0.94),
0, 3, timidity, (2.14.0 -> 2.15.0),
0, 3, udisks2, (2.10.1 -> 2.10.90),
0, 3, vpnc, (0.5.3+git20241126 -> 0.5.3+git20241220),
0, 3, wine-development, (8.21~repack -> 10.1),
0, 3, zfs-linux, (2.2.7 -> 2.3.0),
0, 3, zint, (2.13.0 -> 2.14.0),
0, 2, android-platform-frameworks-base, (14~beta1 -> 15.0.0_r17),
0, 2, apktool, (2.7.0+dfsg -> 2.11.0),
0, 2, arb, (6.0.6 -> 7.0),
0, 2, arpwatch, (2.1a15 -> 3.7),
0, 2, bind-dyndb-ldap, (11.10 -> 11.11),
0, 2, blueman, (2.4.3 -> 2.4.4),
0, 2, c-icap, (0.5.10 -> 0.6.3),
0, 2, c3p0, (0.9.1.2 -> 0.9.5.5),
0, 2, capstone, (5.0.5 -> 6.0.0-Alpha3),
0, 2, checkstyle, (8.36.1 -> 10.21.2),
0, 2, commons-beanutils, (1.9.4 -> 1.10.0),
0, 2, commons-email, (1.5 -> 1.6.0),
0, 2, corosync, (3.1.8 -> 3.1.9),
0, 2, crun, (1.19.1 -> 1.20),
0, 2, dar, (2.7.15 -> 2.7.16),
0, 2, datatables.js, (1.11.5+dfsg -> 2.2.2),
0, 2, devil, (1.7.8 -> 1.8.0),
0, 2, duplicity, (3.0.3.2 -> 3.0.4),
0, 2, eclipse-wtp, (3.35 -> 3.36),
0, 2, editorconfig-core, (0.12.9+~0.15.1 -> 0.12.9+~0.17.1),
0, 2, exaile, (4.1.3+dfsg -> 4.1.4~beta1),
0, 2, freeglut, (3.4.0 -> 3.6.0),
0, 2, ghostwriter, (24.12.0+ds -> 24.12.2),
0, 2, global, (6.6.13 -> 6.6.14),
0, 2, gnome-remote-desktop, (48~alpha -> 48~beta),
0, 2, golang-github-containernetworking-plugins, (1.1.1+ds1 -> 1.6.2),
0, 2, golang-github-labstack-echo, (4.12.0 -> 4.13.3),
0, 2, golang-github-pires-go-proxyproto, (0.7.0 -> 0.8.0),
0, 2, golang-github-russellhaering-goxmldsig, (1.2.0 -> 1.4.0),
0, 2, golang-google-protobuf, (1.33.0 -> 1.36.5),
0, 2, google-oauth-client-java, (1.34.1 -> 1.37.0),
0, 2, hamlib, (4.6.1 -> 4.6.2),
0, 2, hashcash, (1.22 -> 1.23~pr),
0, 2, haskell-tls, (1.8.0 -> 2.1.7),
0, 2, iodine, (0.7.0 -> 0.8.0),
0, 2, jackson-dataformat-xml, (2.14.0 -> 2.18.2),
0, 2, joblib, (1.3.2 -> 1.4.2),
0, 2, jsch, (0.2.19 -> 0.2.23),
0, 2, kaffeine, (2.0.18+git20230226.439cd0d -> 2.0.18+git20250201.e0aea04),
0, 2, kauth, (5.115.0 -> 6.10.0),
0, 2, kdeplasma-addons, (6.2.91 -> 6.3.0),
0, 2, kitty, (0.39.0 -> 0.39.1),
0, 2, ksmtp, (24.12.0 -> 24.12.2),
0, 2, ktexteditor, (5.115.0 -> 6.10.0),
0, 2, libapache2-mod-python, (3.5.0.1 -> 3.5.0.4),
0, 2, libcryptx-perl, (0.084 -> 0.085),
0, 2, libgrokj2k, (10.0.5 -> 14.3.0),
0, 2, libitext5-java, (5.5.13.3 -> 5.5.13.4),
0, 2, libjgroups-java, (2.12.2.Final -> 5.0.0),
0, 2, libmaxminddb, (1.11.0 -> 1.12.2),
0, 2, libmetadata-extractor-java, (2.11.0 -> 2.19.0),
0, 2, libowasp-esapi-java, (2.4.0.0 -> 2.6.0.0),
0, 2, libxfixes, (6.0.0 -> 6.0.1),
0, 2, libxml-libxml-perl, (2.0207+dfsg+really+2.0134 -> 2.0210),
0, 2, libxt, (1.2.1 -> 1.3.1),
0, 2, libxxf86dga, (1.1.5 -> 1.1.6),
0, 2, logwatch, (7.12 -> 7.12/logwatch-7.12),
0, 2, lvm2, (2.03.27 -> 2.03.30),
0, 2, mako, (1.3.8 -> 1.3.9),
0, 2, mysql-workbench, (8.0.32+dfsg -> 8.0.41),
0, 2, node-cached-path-relative, (1.1.0+~1.0.0 -> 1.1.0+~1.0.2),
0, 2, node-debug, (4.3.4+~cs4.1.12 -> 4.4.0+~cs4.1.12),
0, 2, node-glob-parent, (6.0.2+~5.1.1 -> 6.0.2+~5.1.3),
0, 2, node-got, (11.8.5 -> 14.4.6),
0, 2, node-hoek, (10.0.1+~cs12.0.1 -> 11.0.7+~cs12.0.1),
0, 2, node-minimatch, (9.0.3 -> 10.0.1),
0, 2, node-mocha, (10.7.2+ds1+~cs34.2.11 -> 11.1.0+~cs34.2.11),
0, 2, node-mysql, (2.18.1+~2.3.2 -> 2.18.1+~2.3.3),
0, 2, node-path-to-regexp, (6.3.0 -> 8.2.0),
0, 2, node-semver, (7.6.1+~7.5.8 -> 7.7.1+~7.5.8),
0, 2, node-set-value, (4.1.0+~4.0.1 -> 4.1.0+~4.0.3),
0, 2, node-shell-quote, (1.7.4+~1.7.1 -> 1.8.2+~1.7.5),
0, 2, node-socket.io-parser, (4.2.1+~3.1.0 -> 4.2.4+~4.0.0),
0, 2, node-sqlite3, (5.1.5+ds1 -> 5.1.7),
0, 2, node-ssri, (9.0.1 -> 12.0.0),
0, 2, node-superagent, (9.0.1 -> 10.1.1),
0, 2, node-tough-cookie, (4.1.4+~4.0.5 -> 5.1.1+~4.0.5),
0, 2, node-webpack, (5.97.1+dfsg1+~cs12.18.20 -> 5.97.1+~cs12.18.20),
0, 2, novnc, (1.3.0 -> 1.5.0),
0, 2, nut, (2.8.1 -> 2.8.2),
0, 2, opendnssec, (2.1.13 -> 2.1.14),
0, 2, orthanc, (1.12.5+dfsg -> 1.12.6),
0, 2, pam-mysql, (0.8.2 -> 1.0.0~beta3),
0, 2, pandoc, (3.1.11.1+ds -> 3.6.3),
0, 2, parallel, (20240222+ds -> 20250122),
0, 2, pithos, (1.6.1 -> 1.6.2),
0, 2, pkgconf, (1.8.1 -> 2.3.0),
0, 2, postorius, (1.3.10 -> 1.3.13),
0, 2, ppc64-diag, (2.7.9 -> 2.7.10),
0, 2, prometheus, (2.53.1+ds -> 3.2.0-rc.1),
0, 2, puppet-module-puppetlabs-apt, (9.4.0 -> 10.0.1),
0, 2, pymatgen, (2024.10.29+dfsg1 -> 2025.1.24),
0, 2, pymongo, (4.10.1 -> 4.11.1),
0, 2, pypdf, (4.3.1 -> 5.3.0),
0, 2, python-eventlet, (0.36.1 -> 0.39.0),
0, 2, python-glance-store, (4.8.1 -> 4.9.0),
0, 2, python-markdown2, (2.4.11 -> 2.5.3),
0, 2, python-os-brick, (6.9.0 -> 6.10.0),
0, 2, python-uvicorn, (0.32.0 -> 0.34.0),
0, 2, qt6-declarative, (6.7.2+dfsg -> 6.8.2),
0, 2, qtdeclarative-opensource-src, (5.15.15+dfsg -> 5.15.16),
0, 2, qtdeclarative-opensource-src-gles, (5.15.15+dfsg -> 5.15.16),
0, 2, qtimageformats-opensource-src, (5.15.15 -> 5.15.16),
0, 2, rebar3, (3.23.0 -> 3.24.0),
0, 2, rekor, (1.3.7 -> 1.3.9),
0, 2, robocode, (1.9.3.9 -> 1.9.5.4),
0, 2, rrdtool, (1.7.2 -> 1.9.0),
0, 2, ruby-i18n, (1.14.5 -> 1.14.7),
0, 2, ruby-json, (2.9.1+dfsg -> 2.10.1),
0, 2, ruby-json-jwt, (1.14.0 -> 1.16.7),
0, 2, ruby-mechanize, (2.10.1 -> 2.14.0),
0, 2, ruby-omniauth-facebook, (4.0.0 -> 10.0.0),
0, 2, ruby-ox, (2.14.17 -> 2.14.22),
0, 2, ruby-secure-headers, (6.3.2 -> 7.1.0),
0, 2, rust-bumpalo, (3.16.0 -> 3.17.0),
0, 2, rust-gix-index, (0.33.1 -> 0.38.0),
0, 2, rust-gix-worktree, (0.34.1 -> 0.39.0),
0, 2, rust-inventory, (0.3.2 -> 0.3.19),
0, 2, rust-memoffset, (0.8.0 -> 0.9.1),
0, 2, rust-mio, (1.0.2 -> 1.0.3),
0, 2, rust-pyo3, (0.22.6 -> 0.23.4),
0, 2, rust-quinn-proto, (0.10.6 -> 0.11.9),
0, 2, rust-rand-core, (0.6.4 -> 0.9.0-beta.1),
0, 2, rust-rustls, (0.23.20+ds -> 0.23.22),
0, 2, rust-sequoia-openpgp, (1.22.0 -> 2.0.0~alpha.1),
0, 2, salmon, (1.10.2+ds1 -> 1.10.3),
0, 2, scala, (2.11.12 -> 2.13.16),
0, 2, scikit-learn, (1.4.2+dfsg -> 1.6.1),
0, 2, scipy, (1.14.1 -> 1.15.1),
0, 2, seafile, (9.0.11 -> 9.0.12),
0, 2, setuptools, (75.6.0 -> 75.8.0),
0, 2, slapi-nis, (0.60.0 -> 0.70.0),
0, 2, slashem, (0.0.7E7F3 -> 008e0f1),
0, 2, suckless-tools, (5.2 -> 5.3),
0, 2, swtpm, (0.7.1 -> 0.10.0),
0, 2, synfig, (1.5.1+dfsg -> 1.5.3),
0, 2, t1utils, (1.41 -> 1.42),
0, 2, texinfo, (7.1.1 -> 7.2),
0, 2, timg, (1.6.0 -> 1.6.1),
0, 2, torcs, (1.3.7+dfsg -> 1.3.8-test1),
0, 2, ublock-origin, (1.62.0+dfsg -> 1.62.1b1),
0, 2, unadf, (0.7.11a -> 0.9.0),
0, 2, wims, (4.28+dfsg1 -> 4.29a),
0, 2, wss4j, (1.6.19 -> 4.0.0),
0, 2, yabasic, (2.90.5 -> 2.91.1),
0, 1, aardvark-dns, (1.12.2 -> 1.13.1),
0, 1, aflplusplus, (4.21c -> 4.30c),
0, 1, almanah, (0.12.3 -> 0.12.4),
0, 1, analog, (6.0.17 -> 6.0.18),
0, 1, android-platform-dalvik, (10.0.0+r36 -> 15.0.0+r17),
0, 1, android-platform-external-libunwind, (10.0.0+r36 -> 11.0.0+r48),
0, 1, apache-directory-api, (2.1.2 -> 2.1.8),
0, 1, apache-directory-server, (2.0.0~M26 -> 2.0.0~M27),
0, 1, atop, (2.10.0 -> 2.11.0),
0, 1, auctex, (13.2 -> 13.3),
0, 1, autopsy, (2.24 -> 4.21.0),
0, 1, backbone, (1.4.1~dfsg+~1.4.15 -> 1.6.0+~1.4.22),
0, 1, beanstalkd, (1.12 -> 1.13),
0, 1, binpac, (0.59.0 -> 0.61.0),
0, 1, blosxom, (2.1.2 -> 2.2.0),
0, 1, bpfcc, (0.31.0+ds -> 0.33.0),
0, 1, btrbk, (0.32.5 -> 0.32.6),
0, 1, caja, (1.26.3 -> 1.28.0),
0, 1, chartkick.js, (4.1.0 -> 5.0.1),
0, 1, chasquid, (1.14.0 -> 1.15.0),
0, 1, checkpw, (1.02 -> 1.03),
0, 1, cherrytree, (1.2.0+dfsg -> 1.3.0),
0, 1, cinnamon-settings-daemon, (6.4.2 -> 6.4.3),
0, 1, cmus, (2.11.0 -> 2.12.0),
0, 1, codemirror-js, (5.65.0+~cs5.83.24 -> 5.65.18+~cs5.83.24),
0, 1, commons-daemon, (1.0.15 -> 1.4.1),
0, 1, commons-text, (1.12.0 -> 1.13.0),
0, 1, coreboot, (24.08+dfsg -> 24.12),
0, 1, cpdb-libs, (2.0~b5 -> 2.0~b6),
0, 1, cracklib2, (2.9.6 -> 2.10.3),
0, 1, crmsh, (4.6.0 -> 5.0.0~pre),
0, 1, cryptojs, (3.1.2+dfsg -> 4.2.0),
0, 1, cups-pk-helper, (0.2.6 -> 0.2.7),
0, 1, cura, (5.0.0 -> 5.10.0-alpha.0),
0, 1, cvxopt, (1.3.0+dfsg -> 1.3.2),
0, 1, dask.distributed, (2024.12.1+ds -> 2025.1.0),
0, 1, dcm2niix, (1.0.20240202 -> 1.0.20241211),
0, 1, ddd, (3.3.12 -> 3.4.1),
0, 1, didiwiki, (3.0.4 -> 3.0.5),
0, 1, django-js-reverse, (0.9.1 -> 0.10.2),
0, 1, django-tastypie, (0.13.3 -> 0.14.3),
0, 1, dnscrypt-proxy, (2.1.5+ds1 -> 2.1.7),
0, 1, doxygen, (1.9.8+ds -> 1.13.2),
0, 1, duo-unix, (1.11.3 -> 2.0.4),
0, 1, dvipng, (1.15 -> 1.18),
0, 1, e2guardian, (5.5.6 -> 5.5.7),
0, 1, emacspeak, (53.0+dfsg -> 60.0),
0, 1, engrampa, (1.26.2 -> 1.28.2),
0, 1, eric, (24.3+ds1 -> 25.2),
0, 1, fabric, (2.6.0 -> 3.2.2),
0, 1, falcosecurity-libs, (0.18.1 -> 0.20.0),
0, 1, fastapi, (0.115.5 -> 0.115.8),
0, 1, fceux, (2.6.5+dfsg1 -> 2.6.6),
0, 1, flashrom, (1.4.0 -> 1.5.1),
0, 1, flightgear-data, (2020.3.19+dfsg -> 2024.1.1),
0, 1, flim, (1.14.9+0.20230205 -> 1.14.9+0.20240221),
0, 1, fmtlib, (11.1.1+ds1 -> 11.1.3),
0, 1, fontconfig, (2.15.0 -> 2.16.0),
0, 1, fonttools, (4.55.3 -> 4.56.0),
0, 1, freeplane, (1.7.10 -> 1.12.9),
0, 1, freetds, (1.3.17+ds -> 1.4.26),
0, 1, fuse3, (3.14.0 -> 3.16.2),
0, 1, gambas3, (3.20.0 -> 3.20.1),
0, 1, gawk, (5.2.1 -> 5.3.1),
0, 1, gemmi, (0.6.5+ds -> 0.7.0),
0, 1, gettext.js, (0.7.0 -> 2.0.3),
0, 1, giac, (1.9.0.93+dfsg2 -> 1.9.0.998),
0, 1, gitaly, (16.11.6+ds1 -> 17.8.1),
0, 1, gitlab-shell, (14.35.0+ds1 -> 14.40.0),
0, 1, gkrellm, (2.3.11 -> 2.4.0),
0, 1, gnunet, (0.20.0 -> 0.23.1),
0, 1, golang-github-antchfx-xmlquery, (1.4.3 -> 1.4.4),
0, 1, golang-github-appc-cni, (1.1.2 -> 1.2.3),
0, 1, golang-github-aws-aws-sdk-go, (1.49.0 -> 1.55.6),
0, 1, golang-github-docker-docker-credential-helpers, (0.6.4+ds1 -> 0.8.2),
0, 1, golang-github-elazarl-goproxy, (1.1+git20240726.8b0c205+dfsg -> 1.1+git20250211.591e8ff),
0, 1, golang-github-emicklei-go-restful, (3.10.2 -> 3.12.1),
0, 1, golang-github-go-ldap-ldap, (3.4.9 -> 3.4.10),
0, 1, golang-github-microcosm-cc-bluemonday, (1.0.26 -> 1.0.27),
0, 1, golang-github-nats-io-nkeys, (0.4.9 -> 0.4.10),
0, 1, golang-github-proglottis-gpgme, (0.1.1 -> 0.1.4),
0, 1, golang-github-revel-revel, (1.0.0 -> 1.1.0),
0, 1, golang-github-ulikunitz-xz, (0.5.6 -> 0.6.0~alpha3),
0, 1, golang-github-vbatts-tar-split, (0.11.6 -> 0.12.1),
0, 1, golang-glog, (0.0~git20160126.23def4e -> 0.0~git20250113.a0e3c40),
0, 1, golang-gvisor-gvisor, (0.0~20240729.0 -> 0.0~20250203.0),
0, 1, golang-v2ray-core, (4.34.0+ds -> 5.28.0),
0, 1, gource, (0.54 -> 0.55),
0, 1, gparted, (1.6.0 -> 1.7.0),
0, 1, groonga, (14.1.0+dfsg -> 15.0.0),
0, 1, guilt, (0.36 -> 0.37~rc1),
0, 1, haskell-aeson, (2.1.2.1 -> 2.2.3.0),
0, 1, haskell-cmark-gfm, (0.2.5+ds1 -> 0.2.6),
0, 1, haskell-pandoc, (3.1.11.1 -> 3.6.3),
0, 1, haskell-xml-conduit, (1.9.1.3 -> 1.10.0.0),
0, 1, hcxtools, (6.3.4 -> 6.3.5),
0, 1, highlight.js, (9.18.5+dfsg1 -> refs/tags/stable-11),
0, 1, httpx, (0.27.2 -> 0.28.1),
0, 1, hyprland, (0.41.2+ds -> 0.47.2),
0, 1, i2pd, (2.53.0 -> 2.55.0),
0, 1, iaxmodem, (1.2.0~dfsg -> 1.3.4),
0, 1, ibus, (1.5.32~beta1 -> 1.5.32~beta2),
0, 1, icingaweb2-module-director, (1.11.1 -> 1.11.3),
0, 1, ignition, (2.14.0+ds1 -> 2.20.0),
0, 1, iptraf-ng, (1.2.1 -> 1.2.2),
0, 1, ipxe, (1.21.1+git20220113.fbbdc3926+dfsg -> 1.21.1+git20250207.bd90abf4),
0, 1, ironic-python-agent, (9.14.0 -> 10.1.0),
0, 1, jabref, (3.8.2+ds -> 5.15),
0, 1, jags, (4.3.2 -> 4.3.2-x86_64),
0, 1, jakarta-el-api, (5.0.1 -> 6.0.1),
0, 1, jawn, (0.11.1+really0.6.0 -> 1.6.0),
0, 1, jekyll, (4.3.4+dfsg -> 4.4.1),
0, 1, jpegqs, (1.20210408 -> 1.20240129),
0, 1, karchive, (5.115.0 -> 6.10.0),
0, 1, kate, (24.12.1 -> 24.12.2),
0, 1, kconfig, (5.115.0 -> 6.10.0),
0, 1, kcoreaddons, (5.115.0 -> 6.10.0),
0, 1, kcron, (24.12.0 -> 24.12.2),
0, 1, kdeconnect, (24.12.0 -> 24.12.2),
0, 1, kdepim-runtime, (24.12.0 -> 24.12.2),
0, 1, kildclient, (3.2.1 -> 3.2.2),
0, 1, kimageformats, (5.115.0 -> 6.10.0),
0, 1, kio, (5.115.0 -> 6.10.0),
0, 1, kleopatra, (24.12.0 -> 24.12.2),
0, 1, kmail, (24.12.0 -> 24.12.2),
0, 1, kpmcore, (24.12.0 -> 24.12.2),
0, 1, lazarus, (3.8+dfsg1 -> 4.0~rc2),
0, 1, leocad, (21.06 -> 23.03),
0, 1, lib3mf, (1.8.1+ds -> 3MFConsortium/lib3mf/archive/refs/tags/v.2.4.1-alpha),
0, 1, libcacard, (2.8.0 -> 2.8.1),
0, 1, libclipboard-perl, (0.31 -> 0.32),
0, 1, libcommons-net-java, (3.9.0 -> 3.11.1-RC1),
0, 1, libcupsfilters, (2.0.0 -> 2.1.0),
0, 1, libgoogle-gson-java, (2.10.1 -> 2.12.1),
0, 1, libhttp-body-perl, (1.22 -> 1.23),
0, 1, libhx, (4.23 -> 4.24),
0, 1, libice, (1.1.1 -> 1.1.2),
0, 1, libinput, (1.26.2 -> 1.27.1),
0, 1, libiodbc2, (3.52.9 -> 3.52.16),
0, 1, libjcat, (0.2.0 -> 0.2.3),
0, 1, libjgraphx-java, (2.1.0.7 -> 4.2.2),
0, 1, libjwt, (1.17.2 -> 2.1.1),
0, 1, libmng, (1.0.10+dfsg -> tools/mngview-linux-20021006/mngview-linux-20021006+dfsg),
0, 1, libokhttp-java, (3.13.1 -> 5.0.0-alpha.14),
0, 1, libquartz2-java, (2.3.2 -> 2.5.0-rc2),
0, 1, libseccomp, (2.5.5 -> 2.6.0),
0, 1, libslf4j-java, (1.7.32 -> 2.0.16),
0, 1, libthrift-java, (0.19.0 -> 0.21.0),
0, 1, libtwelvemonkeys-java, (3.11.0+dfsg -> 3.12.0),
0, 1, libxalan2-java, (2.7.2 -> 2.7.3),
0, 1, libxext, (1.3.4 -> 1.3.6),
0, 1, libxinerama, (1.1.4 -> 1.1.5),
0, 1, libxml-twig-perl, (3.52 -> 3.53),
0, 1, libxres, (1.2.1 -> 1.2.2),
0, 1, libxxf86vm, (1.1.4 -> 1.1.6),
0, 1, linphone, (5.2.99 -> 5.3.105),
0, 1, linux-atm, (2.5.1 -> 2.5.2),
0, 1, liquidsoap, (2.3.0 -> 2.3.1),
0, 1, lookatme, (2.5.4 -> 3.0.0-rc5),
0, 1, mafft, (7.505 -> 7.525),
0, 1, mailman3, (3.3.8 -> 3.3.10),
0, 1, manila, (19.0.0 -> 19.0.1),
0, 1, mate-screensaver, (1.26.2 -> 1.28.0),
0, 1, mate-settings-daemon, (1.26.1 -> 1.28.0),
0, 1, matplotlib, (3.8.3 -> 3.10.0),
0, 1, mediaelement, (2.15.1+dfsg -> 7.0.7),
0, 1, mew, (6.9 -> 6.9a),
0, 1, mew-beta, (7.0.50~6.9+0.20230214 -> 7.0.50~6.9+0.20240911),
0, 1, mhc, (1.2.4 -> 1.2.7),
0, 1, mootools, (1.4.5~debian1 -> 1.6.0),
0, 1, mozc, (2.29.5160.102+dfsg -> 2.31.5712.102),
0, 1, mpd, (0.23.16 -> 0.23.17),
0, 1, mpmath, (1.4.0~a3 -> 1.4.0~a4),
0, 1, ncftp, (3.2.6 -> 3.2.7),
0, 1, neatvnc, (0.9.1+dfsg -> 0.9.2),
0, 1, network-manager-ssh, (1.2.11 -> 1.2.13),
0, 1, node-ajv, (8.12.0~ds+~2.1.1 -> 8.17.1+~3.0.1),
0, 1, node-ansi-regex, (5.0.1 -> 6.1.0),
0, 1, node-ansi-up, (5.1.0+dfsg -> 6.0.2),
0, 1, node-babel7, (7.20.15+ds1+~cs214.273.195 -> 7.26.8+~cs214.273.195),
0, 1, node-bl, (5.1.0 -> 6.0.19),
0, 1, node-body-parser, (1.20.3+~1.19.5 -> 2.1.0+~1.19.5),
0, 1, node-brace-expansion, (2.0.1+~1.1.0 -> 4.0.0+~1.1.2),
0, 1, node-browserify-sign, (4.2.2 -> 4.2.3),
0, 1, node-chart.js, (3.9.1+~cs4.1.0 -> 4.4.7+~cs4.1.0),
0, 1, node-chownr, (2.0.0 -> 3.0.0),
0, 1, node-color-string, (1.9.1 -> 2.0.0),
0, 1, node-cookie, (0.7.1+~0.6.0 -> 1.0.2+~1.0.0),
0, 1, node-cookiejar, (2.1.4+~2.1.2 -> 2.1.4+~2.1.5),
0, 1, node-d3-color, (1.4.1+~1.4.2 -> 3.1.0+~3.1.3),
0, 1, node-decamelize, (4.0.0 -> 6.0.0),
0, 1, node-dot-prop, (7.2.0 -> 9.0.0),
0, 1, node-dottie, (2.0.6+~2.0.5 -> 2.0.6+~2.0.7),
0, 1, node-eventsource, (2.0.2+~1.1.10 -> 3.0.5+~3.0.0),
0, 1, node-formidable, (3.2.5+20221017git493ec88+~cs6.4.9 -> 3.2.5+20241021git152e940+~cs6.4.9),
0, 1, node-fresh, (0.5.2+~0.5.0 -> 2.0.0+~0.5.2),
0, 1, node-get-func-name, (2.0.2 -> 3.0.0),
0, 1, node-graphql, (16.8.1 -> 16.10.0),
0, 1, node-hawk, (9.0.1 -> 9.0.2),
0, 1, node-hosted-git-info, (6.1.1 -> 8.0.2),
0, 1, node-http-signature, (1.3.6 -> 1.4.0),
0, 1, node-ini, (3.0.1 -> 5.0.0),
0, 1, node-jose, (4.11.4 -> 5.9.6),
0, 1, node-json-schema, (0.4.0+~7.0.11 -> 0.4.0+~7.0.15),
0, 1, node-log4js, (6.9.1+~cs8.5.20 -> 6.9.1+~cs8.5.20),
0, 1, node-micromatch, (4.0.7+~4.0.9 -> 4.0.8+~4.0.9),
0, 1, node-mime, (3.0.0+dfsg+~cs8.96.9 -> 4.0.6+~cs8.96.9),
0, 1, node-mqtt, (4.3.7 -> 5.10.3),
0, 1, node-ms, (2.1.3+~cs2.1.0 -> 2.1.3+~cs2.1.0),
0, 1, node-negotiator, (0.6.3+~0.6.1 -> 1.0.0+~0.6.3),
0, 1, node-node-sass, (9.0.0+git20240131.6081731+dfsg -> 9.0.0+git20240724.107ded9),
0, 1, node-pathval, (1.1.1+~1.1.0 -> 2.0.0+~1.1.2),
0, 1, node-rollup, (3.29.5 -> 4.34.6),
0, 1, node-shelljs, (0.8.5+~cs0.8.15 -> 0.8.5+~cs0.8.15),
0, 1, node-socks, (2.7.1+dfsg -> 2.8.4),
0, 1, node-tar-fs, (2.1.1 -> 3.0.8),
0, 1, node-terser, (5.38.0 -> 5.38.1),
0, 1, node-trim-newlines, (3.0.0+~3.0.0 -> 5.0.0+~3.0.0),
0, 1, node-xterm, (5.3.0 -> 5.5.0),
0, 1, node-yaml, (2.3.4+~cs0.4.0 -> 2.7.0+~cs0.4.0),
0, 1, node-yargs-parser, (21.1.1+~21.0.0 -> 21.1.1+~21.0.3),
0, 1, obs-build, (20210120 -> 20250206),
0, 1, obs-studio, (30.2.3+dfsg -> 31.0.1),
0, 1, ocsinventory-agent, (2.10.0 -> 2.10.4),
0, 1, openjpa, (2.4.2 -> 4.0.1),
0, 1, openqa, (4.6.1732034221.ae34b08ff -> 4.6.1739296030.77d38ef),
0, 1, pam-python, (1.1.0~git20220701.1d4e111 -> 1.1.0~git20240912.67b202d),
0, 1, parser-mysql, (10.8 -> 10.9),
0, 1, passportjs, (0.6.0+~1.0.0 -> 0.7.0+~1.0.0),
0, 1, pdf.js, (2.14.305+dfsg -> 4.10.38),
0, 1, pdm, (2.20.1+ds1 -> 2.22.3),
0, 1, pdsh, (2.34 -> 2.35),
0, 1, pipenv, (2024.0.1+ds -> 2024.4.1),
0, 1, pipewire, (1.2.7 -> 1.3.82),
0, 1, pistache, (0.0.5+ds -> 0.4.26),
0, 1, plexus-archiver, (4.6.1 -> 4.10.0),
0, 1, plptools, (1.0.13 -> 1.0.24),
0, 1, pmount, (0.9.23 -> 0.9.99-alpha.tar.bz2),
0, 1, postfix-mta-sts-resolver, (1.4.0 -> 1.5.0),
0, 1, proxytunnel, (1.12.1 -> 1.12.2),
0, 1, puppet-module-puppetlabs-firewall, (8.0.0 -> 8.1.3),
0, 1, puppet-module-puppetlabs-stdlib, (9.4.1 -> 9.7.0),
0, 1, pydrive2, (1.20.0 -> 1.21.3),
0, 1, pykerberos, (1.1.14 -> 1.2.4),
0, 1, pymca, (5.9.3+dfsg -> 5.9.4),
0, 1, python-autobahn, (23.1.2+dfsg1 -> 24.4.2),
0, 1, python-bcrypt, (4.2.0 -> 4.2.1),
0, 1, python-clickhouse-driver, (0.2.5 -> 0.2.9),
0, 1, python-django-registration, (3.3 -> 3.4),
0, 1, python-djangorestframework-simplejwt, (5.3.1 -> 5.4.0),
0, 1, python-engineio, (4.11.1 -> 4.11.2),
0, 1, python-hpack, (4.0.0 -> 4.1.0),
0, 1, python-marshmallow, (3.20.1 -> 3.26.1),
0, 1, python-matrix-nio, (0.25.2 -> 0.25.2rc1),
0, 1, python-mistral-lib, (3.0.0 -> 3.1.0),
0, 1, python-openstackclient, (7.1.1 -> 7.2.1),
0, 1, python-orjson, (3.10.7 -> 3.10.15),
0, 1, python-os-vif, (3.7.0 -> 4.0.0),
0, 1, python-oslo.middleware, (6.2.0 -> 6.3.0),
0, 1, python-oslo.privsep, (3.4.0 -> 3.5.0),
0, 1, python-psutil, (5.9.8 -> 6.1.1),
0, 1, python-pycadf, (3.1.1 -> 4.0.1),
0, 1, python-rtslib-fb, (2.1.76 -> 2.2.2),
0, 1, python-websockets, (14.1 -> 14.2),
0, 1, qt6-connectivity, (6.7.2 -> 6.8.2),
0, 1, qt6-networkauth, (6.7.2 -> 6.8.2),
0, 1, qtconnectivity-opensource-src, (5.15.15 -> 5.15.16),
0, 1, qtnetworkauth-everywhere-src, (5.15.15 -> 5.15.16),
0, 1, qtvirtualkeyboard-opensource-src, (5.15.15+dfsg -> 5.15.16),
0, 1, qtwebsockets-opensource-src, (5.15.15 -> 5.15.16),
0, 1, rbdoom3bfg, (1.4.0+dfsg -> 1.5.1),
0, 1, rdflib, (7.1.1 -> 7.1.3),
0, 1, rexical, (1.0.7 -> 1.0.8),
0, 1, rocksndiamonds, (4.3.8.2+dfsg -> 4.4.0.3),
0, 1, rootlesskit, (2.0.2 -> 2.3.2),
0, 1, rsnapshot, (1.5.1 -> 1.5.1-rc0),
0, 1, rspamd, (3.8.1 -> 3.11.0),
0, 1, rubocop, (1.39.0+dfsg -> 1.71.2),
0, 1, ruby-addressable, (2.8.5 -> 2.8.7),
0, 1, ruby-attr-encrypted, (4.1.0 -> 4.2.0),
0, 1, ruby-bindata, (2.4.14 -> 2.5.0),
0, 1, ruby-crack, (0.4.4 -> 1.0.0),
0, 1, ruby-diffy, (3.4.2 -> 3.4.3),
0, 1, ruby-doorkeeper-openid-connect, (1.8.7 -> 1.8.11),
0, 1, ruby-excon, (0.112.0 -> 1.2.3),
0, 1, ruby-ffi, (1.17.0+dfsg -> 1.17.1),
0, 1, ruby-geocoder, (1.5.1 -> 1.8.5),
0, 1, ruby-grape, (2.0.0 -> 2.3.0),
0, 1, ruby-haml, (6.1.2 -> 6.3.0),
0, 1, ruby-http, (4.4.1 -> 5.2.0),
0, 1, ruby-httparty, (0.21.0 -> 0.22.0),
0, 1, ruby-image-processing, (1.13.0 -> 1.14.0),
0, 1, ruby-jmespath, (1.6.1 -> 1.6.2),
0, 1, ruby-jquery-rails, (4.3.5 -> 4.6.0),
0, 1, ruby-mini-magick, (4.13.1 -> 5.1.2),
0, 1, ruby-minitar, (0.9 -> 1.0.2),
0, 1, ruby-mixlib-archive, (0.4.1 -> 1.2.3),
0, 1, ruby-multi-xml, (0.6.0 -> 0.7.1),
0, 1, ruby-netaddr, (1.5.1 -> 2.0.6),
0, 1, ruby-oauth, (0.5.6 -> 1.1.0),
0, 1, ruby-octokit, (8.1.0 -> 9.2.0),
0, 1, ruby-omniauth-auth0, (3.1.0 -> 3.1.1),
0, 1, ruby-rack-cache, (1.2 -> 1.17.0),
0, 1, ruby-rails-assets-markdown-it, (8.4.2 -> 14.1.0),
0, 1, ruby-redis-store, (1.10.0 -> 1.11.0),
0, 1, ruby-request-store, (1.5.1 -> 1.7.0),
0, 1, ruby-rmagick, (6.0.1 -> 6.1.1),
0, 1, ruby-rotp, (6.2.0 -> 6.3.0),
0, 1, ruby-sqlite3, (1.6.9 -> 2.5.0),
0, 1, ruby-xmlhash, (1.3.6 -> 1.3.9),
0, 1, runit, (2.1.2 -> 2.2.0),
0, 1, rust-anstream, (0.6.15 -> 0.6.18),
0, 1, rust-bcder, (0.7.3 -> 0.7.5),
0, 1, rust-buffered-reader, (1.3.1 -> 1.3.2),
0, 1, rust-bzip2, (0.4.4 -> 0.5.1),
0, 1, rust-capnp, (0.19.2 -> 0.20.3),
0, 1, rust-crossbeam-deque, (0.8.5 -> 0.8.6),
0, 1, rust-crossbeam-queue, (0.3.11 -> 0.3.12),
0, 1, rust-crossbeam-utils, (0.8.19 -> 0.8.21),
0, 1, rust-diesel, (2.0.3 -> 2.2.7),
0, 1, rust-enumflags2, (0.7.10 -> 0.7.11),
0, 1, rust-eza, (0.20.14 -> 0.20.20),
0, 1, rust-generator, (0.7.1 -> 0.8.4),
0, 1, rust-generic-array, (0.14.7 -> 1.2.0),
0, 1, rust-gix-attributes, (0.22.5 -> 0.24.0),
0, 1, rust-gix-fs, (0.11.3 -> 0.13.0),
0, 1, rust-gix-ref, (0.45.0 -> 0.50.0),
0, 1, rust-gix-transport, (0.42.2 -> 0.45.0),
0, 1, rust-gix-worktree-state, (0.11.1 -> 0.17.0),
0, 1, rust-hashbrown, (0.14.5 -> 0.15.2),
0, 1, rust-kamadak-exif, (0.5.5 -> 0.6.1),
0, 1, rust-kvm-ioctls, (0.19.1 -> 0.20.0),
0, 1, rust-libflate, (0.1.25 -> 2.1.0),
0, 1, rust-miow, (0.3.7 -> 0.6.0),
0, 1, rust-ntpd, (1.1.3 -> 1.4.0),
0, 1, rust-once-cell, (1.20.2 -> 1.20.3),
0, 1, rust-remove-dir-all, (0.8.2 -> 1.0.0),
0, 1, rust-rgb, (0.8.50 -> 0.8.90~alpha.2),
0, 1, rust-rmp-serde, (1.3.0 -> 1.3.0-beta.1),
0, 1, rust-rustix, (0.38.37 -> 0.38.44),
0, 1, rust-ruzstd, (0.7.3 -> 0.8.0),
0, 1, rust-security-framework-sys, (0.4.2 -> 2.14.0),
0, 1, rust-sha2, (0.10.8 -> 0.11.0-pre.4),
0, 1, rust-tonic, (0.10.2+dfsg -> 0.12.3),
0, 1, rust-tracing, (0.1.40 -> 0.1.41),
0, 1, rust-tungstenite, (0.24.0 -> 0.26.1),
0, 1, rust-webbrowser, (0.8.10 -> 1.0.3),
0, 1, rust-whoami, (1.5.2 -> 2.0.0~pre.0),
0, 1, rust-xml-rs, (0.8.19 -> 0.8.25),
0, 1, rust-zerocopy, (0.7.34 -> 0.9.0~alpha.0),
0, 1, sanlock, (3.8.5 -> 3.9.5),
0, 1, scheme48, (1.9.2 -> 1.9.3),
0, 1, scrollz, (2.2.3 -> 2.3.1),
0, 1, sdcc, (4.4.0+dfsg -> 4.5.0),
0, 1, seafile-client, (9.0.11+ds1 -> 9.0.12),
0, 1, sentry-python, (2.18.0 -> 2.21.0),
0, 1, ser2net, (4.6.2 -> 4.6.4),
0, 1, sigil, (2.2.1+dfsg -> 2.4.2),
0, 1, snapcast, (0.30.0 -> 0.31.0),
0, 1, sqlgrey, (1.8.0 -> 1.8.0-rc2),
0, 1, stalin, (0.11 -> 0.11-amd64-patches),
0, 1, stellarium, (24.3 -> 24.4),
0, 1, tboot, (1.10.5 -> v1.11.2),
0, 1, tcmu, (1.5.4 -> 1.6.2),
0, 1, three.js, (111+dfsg1 -> 173),
0, 1, toybox, (0.8.9+dfsg -> 0.8.12),
0, 1, triplea, (1.9.0.0.7062 -> 2.7.14934),
0, 1, tuxpaint, (0.9.28-sdl2 -> 0.9.34),
0, 1, udfclient, (0.8.11 -> 0.8.21),
0, 1, uglify-js, (3.17.4 -> 3.19.3),
0, 1, uimaj, (2.10.4 -> 3.6.0),
0, 1, underscore, (1.13.4~dfsg+~1.11.4 -> 1.13.7+~1.13.0),
0, 1, universal-ctags, (5.9.20210829.0 -> 6.1.20250202.0),
0, 1, uptimed, (0.4.6 -> 0.4.7),
0, 1, validators, (0.20.0 -> 0.34.0),
0, 1, vice, (3.8+dfsg -> 3.9),
0, 1, virtualenvwrapper, (4.8.4 -> 6.1.1),
0, 1, vtk9, (9.3.0+dfsg1 -> 9.4.1),
0, 1, waagent, (2.12.0.2 -> 2.12.0.4),
0, 1, weasyprint, (62.3 -> 64.0),
0, 1, wordpress-shibboleth, (1.8 -> 2.4.3),
0, 1, xaos, (4.3.2 -> 4.3.3),
0, 1, xapian-core, (1.4.25 -> 1.4.27),
0, 1, xapian-omega, (1.4.25 -> 1.4.27),
0, 1, xdelta3, (3.0.11-dfsg -> 3.1.0),
0, 1, xerial-sqlite-jdbc, (3.46.1.3+dfsg -> 3.49.0.0),
0, 1, xfce4-panel, (4.20.0 -> 4.20.3),
0, 1, xfce4-settings, (4.20.0 -> 4.20.1),
0, 1, xfe, (1.46.2 -> 2.0),
0, 1, xmedcon, (0.24.0-gtk3+dfsg -> 0.25.0-gtk3),
0, 1, xmlbeans, (4.0.0 -> 5.3.0),
0, 1, xmonad-contrib, (0.18.0 -> 0.18.1),
0, 1, xtrans, (1.4.0 -> 1.5.2),
0, 1, yadm, (3.3.0 -> 3.4.0),
0, 1, zim, (0.76.0 -> 0.76.1),


109 only older packages available
num of open CVEs in sid, num of historical CVE, source name
11, 745, thunderbird,
10, 435, qemu,
3, 4, xar,
2, 42, edk2,
1, 24, openvswitch,
1, 15, network-manager,
1, 10, llvm-toolchain-14,
1, 2, libtheora,
1, 2, llvm-toolchain-17,
1, 2, llvm-toolchain-18,
0, 270, phpmyadmin,
0, 251, binutils,
0, 165, curl,
0, 43, dnsmasq,
0, 38, frr,
0, 36, proftpd-dfsg,
0, 28, sox,
0, 26, gnupg2,
0, 26, ncurses,
0, 18, bash,
0, 17, dcmtk,
0, 15, dojo,
0, 15, spamassassin,
0, 10, abcm2ps,
0, 10, cgit,
0, 9, libapache2-mod-auth-mellon,
0, 8, gerbv,
0, 7, amanda,
0, 7, coturn,
0, 7, dia,
0, 7, node-elliptic,
0, 6, aircrack-ng,
0, 6, tcc,
0, 5, augeas,
0, 5, chmlib,
0, 5, dino-im,
0, 5, inn2,
0, 5, libuser,
0, 5, minidjvu,
0, 5, sddm,
0, 5, xine-ui,
0, 4, acpica-unix,
0, 4, distcc,
0, 4, unrtf,
0, 3, arc,
0, 3, bchunk,
0, 3, eggdrop,
0, 3, libjackson-json-java,
0, 3, mdadm,
0, 3, partclone,
0, 3, rtmpdump,
0, 3, ruby-omniauth,
0, 2, aide,
0, 2, checkinstall,
0, 2, clutter-1.0,
0, 2, csync2,
0, 2, exuberant-ctags,
0, 2, furnace,
0, 2, gauche,
0, 2, gnome-online-accounts,
0, 2, gtetrinet,
0, 2, httrack,
0, 2, libimobiledevice,
0, 2, loggerhead,
0, 2, notary,
0, 2, nullmailer,
0, 2, scriptaculous,
0, 2, tmate-ssh-server,
0, 2, up-imapproxy,
0, 2, wayland,
0, 1, allegro5,
0, 1, automysqlbackup,
0, 1, ax25-tools,
0, 1, cloudcompare,
0, 1, cxxtools,
0, 1, dash,
0, 1, ddskk,
0, 1, ggobi,
0, 1, gnumach,
0, 1, golang-github-google-nftables,
0, 1, gummi,
0, 1, hex-a-hop,
0, 1, hunspell,
0, 1, imapfilter,
0, 1, in-toto,
0, 1, libao,
0, 1, libpgf,
0, 1, lrzsz,
0, 1, lxc-templates,
0, 1, magics++,
0, 1, node-jison,
0, 1, node-markdown-it,
0, 1, nvidia-cg-toolkit,
0, 1, openpyxl,
0, 1, python-dbusmock,
0, 1, python-scciclient,
0, 1, rc,
0, 1, ruby-asciidoctor-include-ext,
0, 1, ruby-eventmachine,
0, 1, rust-curve25519-dalek,
0, 1, skktools,
0, 1, sks,
0, 1, sniproxy,
0, 1, tiger,
0, 1, xen-tools,
0, 1, xine-lib-1.2,
0, 1, xmlrpc-epi,
0, 1, xserver-xorg-video-intel,
0, 1, zhcon,


226 errors
num of open CVEs in sid, num of historical CVE, source name
44, 52, freeimage,
9, 127, rails,
7, 8, golang-github-hashicorp-go-getter,
5, 41, libsixel,
5, 22, tika,
3, 21, h2o,
3, 5, libhibernate-validator-java,
3, 5, olm,
2, 62, kubernetes,
1, 8, sylpheed,
1, 5, gitlab-ci-multi-runner,
1, 5, libspf2,
1, 2, libfcgi,
1, 2, musescore2,
1, 1, jackson-dataformat-cbor,
1, 1, libitext1-java,
1, 1, libwoodstox-java,
1, 1, trilead-ssh2,
0, 259, tiff,
0, 199, samba,
0, 52, libspring-java,
0, 36, irssi,
0, 32, consul,
0, 25, smarty3,
0, 20, netpbm-free,
0, 17, netcdf-parallel,
0, 15, icedtea-web,
0, 14, ntopng,
0, 12, filezilla,
0, 11, libxkbcommon,
0, 11, pcre2,
0, 10, adplug,
0, 10, fuse,
0, 10, ndpi,
0, 9, jbig2dec,
0, 9, picolibc,
0, 8, faac,
0, 8, gajim,
0, 8, rlottie,
0, 8, snakeyaml,
0, 8, uw-imap,
0, 7, jqueryui,
0, 7, xemacs21,
0, 6, bogofilter,
0, 6, lava,
0, 5, asn1c,
0, 5, eterm,
0, 5, libclamunrar,
0, 5, libguestfs,
0, 5, libxsmm,
0, 5, mongo-c-driver,
0, 5, pypdf2,
0, 5, typespeed,
0, 5, wildmidi,
0, 4, dillo,
0, 4, encfs,
0, 4, fdkaac,
0, 4, flex,
0, 4, ganeti,
0, 4, geshi,
0, 4, phpliteadmin,
0, 4, slixmpp,
0, 4, storebackup,
0, 4, super,
0, 4, whitedune,
0, 3, camlimages,
0, 3, crawl,
0, 3, davical,
0, 3, groovy,
0, 3, libpff,
0, 3, lua-cgi,
0, 3, man2html,
0, 3, mtink,
0, 3, mysql-ocaml,
0, 3, nexuiz,
0, 3, pan,
0, 3, uglifyjs,
0, 3, xshisen,
0, 2, amavisd-new,
0, 2, antiword,
0, 2, awl,
0, 2, beep,
0, 2, bsdgames,
0, 2, canna,
0, 2, dosfstools,
0, 2, f2c,
0, 2, html2ps,
0, 2, isoqlog,
0, 2, juce,
0, 2, lam,
0, 2, latex2rtf,
0, 2, libnl3,
0, 2, liboggplay,
0, 2, lprng,
0, 2, matanza,
0, 2, migrationtools,
0, 2, monopd,
0, 2, networkd-dispatcher,
0, 2, nikto,
0, 2, pesign,
0, 2, phabricator,
0, 2, php-pecl-http,
0, 2, php-sabredav,
0, 2, policyd-weight,
0, 2, postsrsd,
0, 2, refpolicy,
0, 2, rtkit,
0, 2, sphinxsearch,
0, 2, tarantool,
0, 2, tardiff,
0, 2, targetcli-fb,
0, 2, tiles,
0, 2, udunits,
0, 2, uim,
0, 2, wml,
0, 2, wordnet,
0, 2, wv,
0, 2, xcfa,
0, 2, xsok,
0, 1, anope,
0, 1, apg,
0, 1, aptitude,
0, 1, armagetronad,
0, 1, autojump,
0, 1, axiom,
0, 1, boolector,
0, 1, bsh,
0, 1, byobu,
0, 1, calife,
0, 1, changetrack,
0, 1, crafty,
0, 1, cvsweb,
0, 1, das-watchdog,
0, 1, dist,
0, 1, emacs-jabber,
0, 1, fast-cpp-csv-parser,
0, 1, fcheck,
0, 1, gnome-subtitles,
0, 1, golang-gopkg-square-go-jose.v2,
0, 1, gringotts,
0, 1, gross,
0, 1, ibm-3270,
0, 1, iio-sensor-proxy,
0, 1, info2www,
0, 1, iputils,
0, 1, ircd-irc2,
0, 1, iucode-tool,
0, 1, kannel,
0, 1, kgb-bot,
0, 1, kinit,
0, 1, l2tpns,
0, 1, lib3ds,
0, 1, libapache2-mod-authnz-external,
0, 1, libapache2-mod-rpaf,
0, 1, libast,
0, 1, libcommons-collections3-java,
0, 1, libcue,
0, 1, libevt,
0, 1, libinfinity,
0, 1, libjdom2-java,
0, 1, libprelude,
0, 1, libquartz-java,
0, 1, libsmi,
0, 1, libvt-ldap-java,
0, 1, lsyncd,
0, 1, lv,
0, 1, maildirsync,
0, 1, mathjax,
0, 1, minicom,
0, 1, mlmmj,
0, 1, mongo-java-driver,
0, 1, monkeysphere,
0, 1, mp4h,
0, 1, nd,
0, 1, nn,
0, 1, node-opencv,
0, 1, node-redis,
0, 1, node-uuid,
0, 1, node-webfont,
0, 1, obexftp,
0, 1, obexpushd,
0, 1, okio,
0, 1, openvpn-auth-ldap,
0, 1, pdf2djvu,
0, 1, pdftk-java,
0, 1, pimd,
0, 1, playmidi,
0, 1, polygen,
0, 1, prelude-manager,
0, 1, prewikka,
0, 1, psensor,
0, 1, psi-plus,
0, 1, purity,
0, 1, python-nbxmpp,
0, 1, python-rencode,
0, 1, python-requests-kerberos,
0, 1, qdbm,
0, 1, realmd,
0, 1, redeclipse,
0, 1, redisearch,
0, 1, ruby-faye-websocket,
0, 1, ruby-will-paginate,
0, 1, shairport-sync,
0, 1, simpleproxy,
0, 1, slrn,
0, 1, syncevolution,
0, 1, t-coffee,
0, 1, t-prot,
0, 1, tcptraceroute,
0, 1, tenshi,
0, 1, testng,
0, 1, torbrowser-launcher,
0, 1, trickle,
0, 1, unace-nonfree,
0, 1, unoconv,
0, 1, user-mode-linux,
0, 1, v86d,
0, 1, velocity,
0, 1, velocity-tools,
0, 1, vobcopy,
0, 1, webalizer,
0, 1, x-face-el,
0, 1, xonix,
0, 1, xpat2,
0, 1, yodl,
0, 1, zutty,


#!/usr/bin/python3
# -*- coding: utf-8 -*-

"""
List packages that have a history of security issues and whose packaged version
is not up to date.
"""

from psycopg2 import connect

DATABASE="postgresql://udd-mirror:udd-mirror@udd-mirror.debian.net/udd"
QUERY = """
    SELECT DISTINCT
        u.source,
        (
            SELECT
                COUNT(sir.source)
            FROM
                security_issues_releases AS sir
            WHERE
                sir.source = u.source AND
                sir.release='sid' AND
                (sir.status != 'resolved' AND sir.urgency != 'unimportant' AND sir.urgency != 'low')
        ) AS cves_open,
        (
            SELECT
                COUNT(sec.source)
            FROM security_issues AS sec
            WHERE sec.source = u.source
        ) AS cves_ever,
        u.status,
        u.debian_uversion,
        u.upstream_version
    FROM upstream as u
    WHERE
        u.status != 'up to date' AND
        EXISTS (SELECT 1 FROM security_issues WHERE source = u.source) AND
        EXISTS (SELECT 1 FROM security_issues_releases WHERE source = u.source)
    ORDER BY
        cves_open DESC, cves_ever DESC;
    """

def main():
    conn = connect(DATABASE)
    conn.set_client_encoding('UTF8')
    cursor = conn.cursor()
    cursor.execute(QUERY)
    results = cursor.fetchall()

    cursor.close()
    conn.close()

    pkg_status = {}

    for pkg in results:
        pkg_status[pkg[0]] = {
                'num_cves_open': pkg[1],
                'num_cves_ever': pkg[2],
                'upstream_status': pkg[3],
                'debian_uversion': pkg[4],
                'upstream_version': pkg[5]
                }

    newer = []
    older = []
    error = []

    for pkg_name, pkg_data in pkg_status.items():
        deb_version = pkg_data["debian_uversion"]
        up_version = pkg_data["upstream_version"]
        num_cves_open = pkg_data["num_cves_open"]
        num_cves_ever = pkg_data["num_cves_ever"]

        if pkg_data['upstream_status'] == "newer package available":
            newer.append(f"{num_cves_open}, {num_cves_ever}, {pkg_name}, ({deb_version} -> {up_version}),\n")
        elif pkg_data["upstream_status"] == "only older package available":
            older.append(f"{num_cves_open}, {num_cves_ever}, {pkg_name},\n")
        elif pkg_data["upstream_status"] in (
            "error",
            "package available",
        ):
            error.append(f'{num_cves_open}, {num_cves_ever}, {pkg_name},\n')
        else :
            print(f"{pkg_name}: {pkg_data['status']}")

    print(f'{len(newer)} newer packages available\nnum of open CVEs in sid, num of historical CVE, source name\n{"".join(newer)}\n')
    print(f'{len(older)} only older packages available\nnum of open CVEs in sid, num of historical CVE, source name\n{"".join(older)}\n')
    print(f'{len(error)} errors\nnum of open CVEs in sid, num of historical CVE, source name\n{"".join(error)}\n')

if __name__ == '__main__':
    main()

Attachment: signature.asc
Description: PGP signature