Comment by superkuh

A better bug covering this is at: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1147093

Basically for bullseye users with the bullseye-security repo in use there were packages that should have been included in the final point release before they (in bullseye-security) were deleted, instead there are some broken dependency chains because they weren't.

One doesn't need -security updates for bullseye, and this isn't about security or asking for extra extended support. It is about the repos not being in an independent state when bullseye-security went away. And this broke existing installs.

For others with the issue finding this post the mitigation is to use the snapshot servers:

    deb [check-valid-until=no] http://snapshot.debian.org/archive/debian-security/20260903T220410Z/ bullseye-security main
    deb-src [check-valid-until=no] http://snapshot.debian.org/archive/debian-security/20260903T220410Z/ bullseye-security main