Candidates for DTSAs

The table below lists packages which are fixed in unstable, but unfixed in testing. Use the testing migration checker to find out why they have not entered testing yet.


PackageMigrationBugUrgencyRemote
chromiumcheckCVE-2025-2476not yet assignedno(fixed in stable?)
dcmtkcheckCVE-2025-2357not yet assignedno
expatcheckCVE-2024-8176not yet assignedno
golang-github-golang-jwt-jwtcheckCVE-2024-51744not yet assignedno
CVE-2025-30204not yet assignedno
golang-github-golang-jwt-jwt-v5checkCVE-2025-30204not yet assignedno
libcap2checkCVE-2025-1390not yet assignedno
libeddsa-javacheckCVE-2020-36843not yet assignedno
php8.4checkCVE-2024-11235not yet assigned?
CVE-2025-1217not yet assigned?
CVE-2025-1219not yet assigned?
CVE-2025-1734not yet assigned?
CVE-2025-1736not yet assigned?
CVE-2025-1861not yet assigned?
ruby-rackcheckCVE-2025-25184not yet assignedno
CVE-2025-27111not yet assignedno
CVE-2025-27610not yet assignedno
rust-hickory-protocheckCVE-2025-25188not yet assignedno
tinyxml2checkCVE-2024-50615not yet assignedno
varnishcheckCVE-2025-30346not yet assignedno
wpacheckCVE-2022-37660not yet assignedno
xmedconcheckCVE-2025-2581not yet assignedno

Search for package or bug name: Reporting problems