Candidates for DTSAs

The table below lists packages which are fixed in unstable, but unfixed in testing. Use the testing migration checker to find out why they have not entered testing yet.

List of vulnerable packages in testing

Package	Migration	Bug	Urgency	Remote
activemq	check	CVE-2021-26117	not yet assigned	no
ansible	check	CVE-2021-20228	not yet assigned	?
audacity	check	CVE-2020-11867	not yet assigned	no
ckeditor	check	CVE-2021-26271	not yet assigned	no
		CVE-2021-26272	not yet assigned	no
containerd	check	CVE-2021-21334	not yet assigned	?
gnome-autoar	check	CVE-2020-36241	not yet assigned	no
golang-github-appc-cni	check	CVE-2021-20206	not yet assigned	?
isync	check	CVE-2021-20247	not yet assigned	no
jetty9	check	CVE-2020-27223	not yet assigned	no
jinja2	check	CVE-2020-28493	not yet assigned	no
libconvert-asn1-perl	check	CVE-2013-7488	not yet assigned	no
linux	check	CVE-2020-25639	not yet assigned	no
		CVE-2021-20194	not yet assigned	no
		CVE-2021-26930	not yet assigned	no
		CVE-2021-26931	not yet assigned	no
		CVE-2021-26932	not yet assigned	no
lucene-solr	check	CVE-2020-13941	not yet assigned	no
mumble	check	CVE-2021-27229	not yet assigned	no
mupdf	check	CVE-2021-3407	not yet assigned	no
node-ansi-up	check	CVE-2021-3377	not yet assigned	no
node-elliptic	check	CVE-2020-28498	not yet assigned	no
pillow	check	CVE-2021-25289	not yet assigned	?
		CVE-2021-25290	not yet assigned	?
		CVE-2021-25291	not yet assigned	?
		CVE-2021-25292	not yet assigned	?
		CVE-2021-25293	not yet assigned	?
		CVE-2021-27921	not yet assigned	no
		CVE-2021-27922	not yet assigned	no
		CVE-2021-27923	not yet assigned	no
python-aiohttp	check	CVE-2021-21330	not yet assigned	no
python2.7	check	CVE-2019-20907	low	no
		CVE-2020-8492	low	no
		CVE-2021-3177	not yet assigned	no
python3.9	check	CVE-2021-23336	not yet assigned	no
rust-http	check	CVE-2020-25574	low	no
stunnel4	check	CVE-2021-20230	not yet assigned	no
xen	check	CVE-2021-26933	not yet assigned	no
		CVE-2021-3308	not yet assigned	no