summaryrefslogtreecommitdiffstats
path: root/data/dsa-needed.txt
blob: c3970ed40dfb2c4bb2abde7a60c70f89abdbcaa7 (plain) (blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
A DSA is needed for the following source packages in old/stable. The specific
CVE IDs do not need to be listed, they can be gathered in an up-to-date manner from
https://security-tracker.debian.org/tracker/source-package/SOURCEPACKAGE
when working on an update.

Some packages are not tracked here:
- Linux kernel (tracking in kernel-sec repo)
- Embargoed issues continue to be tracked in separate file.

To pick an issue, simply add your uid behind it.

If needed, specify the release by adding a slash after the name of the source package.

--
curl (ghedo)
--
glusterfs/oldstable
--
graphicsmagick
--
jruby/oldstable
--
libopenmpt
--
linux (carnil)
  Wait until more issues have piled up
--
mercurial/oldstable
--
nodejs
--
nss/oldstable (jmm)
  Roberto proposed an update including fixes for CVE-2018-12404 and CVE-2018-18508
--
php7.0
--
php7.3
--
pillow (jmm)
--
poppler (jmm)
--
python-django (seb)
  2020-02-05: taking after Chris volunteered to propose debdiff
--
python-reportlab (hle)
--
python-pysaml2 (jmm)
  Maintainer prepared an update for buster
--
smarty3/oldstable
--
squid3/oldstable
--
tiff/oldstable
--
webkit2gtk
--
xcftools (hle)
--

© 2014-2024 Faster IT GmbH | imprint | privacy policy