summaryrefslogtreecommitdiffstats
path: root/data/dsa-needed.txt
blob: 355ba7944161fde1d6021966659da7e191b7034d (plain) (blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
A DSA is needed for the following source packages in old/stable. The specific
CVE IDs do not need to be listed, they can be gathered in an up-to-date manner from
https://security-tracker.debian.org/tracker/source-package/SOURCEPACKAGE
when working on an update.

Some packages are not tracked here:
- Linux kernel (tracking in kernel-sec repo)
- Embargoed issues continue to be tracked in separate file.

To pick an issue, simply add your uid behind it.

If needed, specify the release by adding a slash after the name of the source package.

--
asterisk
--
blender (jmm)
--
curl
--
epiphany-browser
--
freecad (aron)
--
kicad (jmm)
--
ldap-account-manager
--
librecad
--
libpgjava (apo)
--
linux (carnil)
  Wait until more issues have piled up, though try to regulary rebase for point
  releases to more recent v4.19.y versions.
--
ndpi/oldstable
--
netatalk
  open regression with MacOS, tentative patch not yet merged upstream
--
nodejs/oldstable
  one of the upstream fixes doesn't address the security issue	
--
php-horde-mime-viewer
--
php-horde-turba
--
puma/oldstable
--
rpki-client/stable
  new 7.6 release required libretls, which isn't in Bullseye
--
ruby-rack
--
salt
--
slurm-llnl/oldstable
--
sox
  patch needed for CVE-2021-40426, check with upstream
--
thunderbird (jmm)
--
unzip
  unclear information, initial report indicates writable memory corruption, but
  some identified patch is just for a NULL deref, needs more clarification
--
xen (jmm)
--

© 2014-2024 Faster IT GmbH | imprint | privacy policy