Candidates for DTSAs

The table below lists packages which are fixed in unstable, but unfixed in testing. Use the testing migration checker to find out why they have not entered testing yet.

List of vulnerable packages in testing

Package	Migration	Bug	Urgency	Remote
ansible	check	CVE-2021-20228	not yet assigned	?
ceph	check	CVE-2020-25678	not yet assigned	no
		CVE-2020-27839	not yet assigned	?
clamav	check	CVE-2021-1252	not yet assigned	no
		CVE-2021-1404	not yet assigned	no
		CVE-2021-1405	not yet assigned	no
file-roller	check	CVE-2020-36314	not yet assigned	no
firefox-esr	check	CVE-2021-23961	not yet assigned	no
		CVE-2021-23994	not yet assigned	?
		CVE-2021-23995	not yet assigned	?
		CVE-2021-23998	not yet assigned	?
		CVE-2021-23999	not yet assigned	?
		CVE-2021-24002	not yet assigned	?
		CVE-2021-29945	not yet assigned	?
		CVE-2021-29946	not yet assigned	?
ircii	check	CVE-2021-29376	not yet assigned	no
leptonlib	check	CVE-2020-36277	not yet assigned	no
		CVE-2020-36278	not yet assigned	no
		CVE-2020-36279	not yet assigned	no
		CVE-2020-36280	not yet assigned	no
		CVE-2020-36281	not yet assigned	no
libnbd	check	CVE-2021-20286	not yet assigned	no
libpdfbox2-java	check	CVE-2021-27807	not yet assigned	no
		CVE-2021-27906	not yet assigned	no
mosquitto	check	CVE-2021-28166	not yet assigned	no
nanopb	check	CVE-2021-21401	not yet assigned	no
node-glob-parent	check	CVE-2020-28469	not yet assigned	?
node-handlebars	check	CVE-2021-23369	not yet assigned	no
node-xmldom	check	CVE-2021-21366	not yet assigned	no
nvidia-graphics-drivers-legacy-390xx (non-free)	check	CVE-2021-1076	not yet assigned	?
php-phpseclib	check	CVE-2021-30130	not yet assigned	no
phpseclib	check	CVE-2021-30130	not yet assigned	no
qemu	check	CVE-2020-17380	not yet assigned	no
		CVE-2021-3392	not yet assigned	no
		CVE-2021-3409	not yet assigned	no
ruby2.7	check	CVE-2021-28965	not yet assigned	?
umoci	check	CVE-2021-29136	not yet assigned	no
wordpress	check	CVE-2021-29450	not yet assigned	no
xorg-server	check	CVE-2021-3472	not yet assigned	?