Bugs submitted by jmm@debian.org -- Debian Bug report logs

Outstanding bugs -- Grave functionality bugs; Unclassified (1 bug)
Outstanding bugs -- Serious (policy violations or makes package unfit for release); Unclassified (2 bugs)
Outstanding bugs -- Important bugs; Patch Available (1 bug)
Outstanding bugs -- Important bugs; Unclassified (29 bugs)
Outstanding bugs -- Important bugs; Will Not Fix (1 bug)
Outstanding bugs -- Normal bugs; Patch Available (1 bug)
Outstanding bugs -- Normal bugs; Unclassified (17 bugs)
Outstanding bugs -- Wishlist items; Confirmed (1 bug)
Outstanding bugs -- Wishlist items; Unclassified (13 bugs)
Outstanding bugs -- Wishlist items; Will Not Fix (1 bug)
Forwarded bugs -- Important bugs (20 bugs)
Forwarded bugs -- Normal bugs (3 bugs)
Forwarded bugs -- Wishlist items (1 bug)
Resolved bugs -- Grave functionality bugs (1 bug)
Resolved bugs -- Normal bugs (4 bugs)

#1082053 [G|Su| ] [src:rust-lexical-core] RUSTSEC-2023-0086
Reported by: Moritz Muehlenhoff <[email protected]>; Date: Tue, 17 Sep 2024 21:21:02 UTC; Severity: grave; Tags: security, upstream; Found in version rust-lexical-core/0.7.6-2; Filed 238 days ago; Modified 21 days ago;

#923347 [S| |☣] [src:mysql-connector-python] No sensible security support due to Oracle's policies
Reported by: Moritz Muehlenhoff <[email protected]>; Date: Tue, 26 Feb 2019 19:33:04 UTC; Severity: serious; Filed 6 years and 78 days ago; Modified 5 years and 179 days ago;
#1031046 [S| | ] [src:asterisk] Only include in Bookworm with commitment to stable updates
Reported by: Moritz Muehlenhoff <[email protected]>; Date: Fri, 10 Feb 2023 19:51:04 UTC; Severity: serious; Found in version asterisk/1:20.1.0~dfsg+~cs6.12.40431414-1; Filed 2 years and 93 days ago; Modified 29 days ago;

#1010264 [i|+Su| ] [src:busybox] CVE-2022-28391
Reported by: Moritz Muehlenhoff <[email protected]>; Date: Wed, 27 Apr 2022 11:57:03 UTC; Severity: important; Tags: patch, security, upstream; Found in version busybox/1:1.35.0-1; Filed 3 years and 17 days ago; Modified 2 years and 312 days ago;

#594620 [i| | ] [bison++] Please switch to standard flex
Reported by: Moritz Muehlenhoff <[email protected]>; Date: Fri, 27 Aug 2010 19:06:02 UTC; Severity: important; Filed 14 years and 263 days ago; Modified 5 years and 299 days ago;
#653498 [i| | ] [rdesktop] Please enable hardened build flags
Reported by: Moritz Muehlenhoff <[email protected]>; Date: Wed, 28 Dec 2011 22:12:05 UTC; Severity: important; Found in version rdesktop/1.7.0-1; Filed 13 years and 140 days ago; Modified 13 years and 65 days ago;
#663442 [i| | ] [cdbs] Malformed sonames when compiling libnss-ldap
Reported by: Moritz Muehlenhoff <[email protected]>; Date: Sun, 11 Mar 2012 10:36:02 UTC; Severity: important; Found in version cdbs/0.4.109; Filed 13 years and 66 days ago; Modified 13 years and 66 days ago;
#851058 [i|Su| ] [qt4-x11] CVE-2016-10040
Reported by: Moritz Muehlenhoff <[email protected]>; Date: Wed, 11 Jan 2017 15:48:02 UTC; Severity: important; Tags: security, upstream; Found in version 4:4.8.2+dfsg-11; Filed 8 years and 124 days ago; Modified 282 days ago;
#867493 [i|S| ] [libjgroups-java] CVE-2016-2141
Reported by: Moritz Muehlenhoff <[email protected]>; Date: Thu, 6 Jul 2017 20:45:02 UTC; Severity: important; Tags: security; Filed 7 years and 313 days ago; Modified 7 years and 313 days ago;
#870608 [i|Su| ] [src:libao] CVE-2017-11548
Reported by: Moritz Muehlenhoff <[email protected]>; Date: Thu, 3 Aug 2017 11:15:01 UTC; Severity: important; Tags: security, upstream; Found in version libao/1.2.0-1; Filed 7 years and 285 days ago; Modified 6 years and 69 days ago;
#902187 [i|S| ] [src:sleuthkit] CVE-2018-11737 CVE-2018-11738 CVE-2018-11739 CVE-2018-11740
Reported by: Moritz Muehlenhoff <[email protected]>; Date: Sat, 23 Jun 2018 08:54:02 UTC; Severity: important; Tags: security; Filed 6 years and 326 days ago; Modified 5 years and 104 days ago;
#902783 [i|S| ] [jabberd2] CVE-2017-18226
Reported by: Moritz Muehlenhoff <[email protected]>; Date: Sat, 30 Jun 2018 20:45:02 UTC; Severity: important; Tags: security; Found in version jabberd2/2.4.0-1; Filed 6 years and 319 days ago; Modified 6 years and 317 days ago;
#926280 [i| | ] [jruby] Don't bundle rubygems
Reported by: Moritz Muehlenhoff <[email protected]>; Date: Tue, 2 Apr 2019 20:27:06 UTC; Severity: important; Filed 6 years and 43 days ago; Modified 4 years and 142 days ago;
#949707 [i| | ] [src:libsixel] Consider linking against archive version of libstb
Reported by: Moritz Muehlenhoff <[email protected]>; Date: Thu, 23 Jan 2020 22:18:01 UTC; Severity: important; Filed 5 years and 112 days ago; Modified 5 years and 112 days ago;
#950192 [i| | ] [debian-installer] Please remove build dep on aboot
Reported by: Moritz Muehlenhoff <[email protected]>; Date: Wed, 29 Jan 2020 22:12:02 UTC; Severity: important; Filed 5 years and 106 days ago; Modified 5 years and 106 days ago;
#968820 [i|Su| ] [qemu] qemu: CVE-2020-24352: OOB read/write in ati-vga device emulation in ati_2d_blt()
Reported by: Moritz Muehlenhoff <[email protected]>; Date: Fri, 21 Aug 2020 18:15:01 UTC; Severity: important; Tags: security, upstream; Filed 4 years and 266 days ago; Modified 3 years and 78 days ago;
#970562 [i| | ] [lists.debian.org] Moderation script for debian-security-announce doesn't cope with non-ASCII characters
Reported by: Moritz Muehlenhoff <[email protected]>; Date: Fri, 18 Sep 2020 17:36:02 UTC; Severity: important; Filed 4 years and 238 days ago; Modified 94 days ago;
#970585 [i|S| ] [src:resteasy] CVE-2020-25633
Reported by: Moritz Muehlenhoff <[email protected]>; Date: Sat, 19 Sep 2020 11:39:01 UTC; Severity: important; Tags: security; Filed 4 years and 237 days ago; Modified 4 years and 237 days ago;
#972034 [i|S| ] [src:intellij-community-idea] Multiple security issues affecting intellij-community-idea?
Reported by: Moritz Muehlenhoff <[email protected]>; Date: Sun, 11 Oct 2020 17:06:01 UTC; Severity: important; Tags: security; Filed 4 years and 215 days ago; Modified 4 years and 215 days ago;
#980816 [i| | ] [src:jackson-databind] Clarify requirement for safe default typing?
Reported by: Moritz Muehlenhoff <[email protected]>; Date: Fri, 22 Jan 2021 20:06:02 UTC; Severity: important; Filed 4 years and 112 days ago; Modified 4 years and 112 days ago;
#984666 [i|S| ] [src:tika] CVE-2020-9489
Reported by: Moritz Muehlenhoff <[email protected]>; Date: Sat, 6 Mar 2021 20:00:01 UTC; Severity: important; Tags: security; Filed 4 years and 69 days ago; Modified 4 years and 69 days ago;
#986805 [i|Su| ] [src:tika] CVE-2021-28657
Reported by: Moritz Muehlenhoff <[email protected]>; Date: Mon, 12 Apr 2021 10:03:06 UTC; Severity: important; Tags: security, upstream; Filed 4 years and 32 days ago; Modified 4 years and 32 days ago;
#987284 [i|Su| ] [gradle] CVE-2021-29428 CVE-2021-29429
Reported by: Moritz Muehlenhoff <[email protected]>; Date: Tue, 20 Apr 2021 19:09:01 UTC; Severity: important; Tags: security, upstream; Filed 4 years and 24 days ago; Modified 4 years and 24 days ago;
#988728 [i|S| ] [src:shiro] CVE-2020-17523 CVE-2020-17510 CVE-2020-11989
Reported by: Moritz Muehlenhoff <[email protected]>; Date: Tue, 18 May 2021 18:39:02 UTC; Severity: important; Tags: security; Filed 3 years and 361 days ago; Modified 3 years and 361 days ago;
#988946 [i|Su| ] [libhibernate-validator-java] CVE-2020-10693
Reported by: Moritz Muehlenhoff <[email protected]>; Date: Fri, 21 May 2021 19:42:01 UTC; Severity: important; Tags: security, upstream; Filed 3 years and 358 days ago; Modified 3 years and 358 days ago;
#988948 [i|Su| ] [src:thrift] CVE-2019-11939
Reported by: Moritz Muehlenhoff <[email protected]>; Date: Fri, 21 May 2021 19:51:01 UTC; Severity: important; Tags: security, upstream; Filed 3 years and 358 days ago; Modified 2 years and 45 days ago;
#989364 [i|S| ] [scilab] scilab: Multiple security issues in ezxml
Reported by: Moritz Muehlenhoff <[email protected]>; Date: Tue, 1 Jun 2021 19:57:11 UTC; Severity: important; Tags: security; Filed 3 years and 347 days ago; Modified 3 years and 347 days ago;
#1032266 [i| |☺] [src:fdroidserver] autopkgtest regression in stable with latest Java 11
Reported by: Moritz Muehlenhoff <[email protected]>; Date: Thu, 2 Mar 2023 14:33:02 UTC; Severity: important; Found in version fdroidserver/2.0.3-1; Fixed in versions fdroidserver/2.2.0-1, fdroidserver/2.2.0; Filed 2 years and 73 days ago; Modified 2 years and 73 days ago;
#1103836 [i| | ] [src:beast-mcmc] Depends on an EOLed version of libitext
Reported by: Moritz Muehlenhoff <[email protected]>; Date: Mon, 21 Apr 2025 19:03:01 UTC; Severity: important; Found in version beast-mcmc/1.10.4+dfsg-6; Filed 22 days ago; Modified 22 days ago;
#1103889 [i| | ] [src:jabref] Please switch to libpdfbox2-java
Reported by: Moritz Muehlenhoff <[email protected]>; Date: Tue, 22 Apr 2025 14:09:02 UTC; Severity: important; Found in version jabref/3.8.2+ds-17; Filed 21 days ago; Modified 20 days ago;
#1103890 [i| | ] [src:king] Please switch to libpdfbox2-java
Reported by: Moritz Muehlenhoff <[email protected]>; Date: Tue, 22 Apr 2025 14:09:03 UTC; Severity: important; Found in version king/2.24+dfsg2-2; Filed 21 days ago; Modified 21 days ago;
#1103891 [i| | ] [src:omegat] Please switch to libpdfbox2-java
Reported by: Moritz Muehlenhoff <[email protected]>; Date: Tue, 22 Apr 2025 14:12:02 UTC; Severity: important; Found in version omegat/3.6.0.10+dfsg-3; Filed 21 days ago; Modified 21 days ago;
#1103892 [i| | ] [src:tika] Please switch to libpdfbox2-java
Reported by: Moritz Muehlenhoff <[email protected]>; Date: Tue, 22 Apr 2025 14:15:01 UTC; Severity: important; Found in version tika/1.22-2; Filed 21 days ago; Modified 21 days ago;

#988730 [i|S☹| ] [lxc-templates] CVE-2017-18641
Reported by: Moritz Muehlenhoff <[email protected]>; Date: Tue, 18 May 2021 18:48:02 UTC; Severity: important; Tags: security, wontfix; Filed 3 years and 361 days ago; Modified 1 year and 56 days ago;

#435287 [n|+| ] [sysvinit-core] sysvinit: Please use new -8 option from util-linux
Reported by: Moritz Muehlenhoff <[email protected]>; Date: Mon, 30 Jul 2007 19:21:01 UTC; Severity: normal; Tags: forky, patch; Filed 17 years and 292 days ago; Modified 77 days ago;

#400398 [n| | ] [tellico] tellico: Tellico doesn't preserve the selection of rows to display
Reported by: Moritz Muehlenhoff <[email protected]>; Date: Sat, 25 Nov 2006 23:03:14 UTC; Severity: normal; Found in version tellico/1.2.4-1; Filed 18 years and 174 days ago; Modified 18 years and 161 days ago;
#782571 [n| | ] [partman-crypto] Status message during initial overwrite not wrapped
Reported by: Moritz Muehlenhoff <[email protected]>; Date: Tue, 14 Apr 2015 10:51:01 UTC; Severity: normal; Found in version partman-crypto/80; Filed 10 years and 32 days ago; Modified 10 years and 32 days ago;
#817286 [n| |☣] [ftp.debian.org] Simplify testing access for packages on security-master
Reported by: Moritz Muehlenhoff <[email protected]>; Date: Wed, 9 Mar 2016 18:45:02 UTC; Severity: normal; Filed 9 years and 67 days ago; Modified 2 years and 245 days ago;
#853850 [n| | ] [libguestfs0] Demote dependency on ntfs-3g to Recommends
Reported by: Moritz Muehlenhoff <[email protected]>; Date: Wed, 1 Feb 2017 13:57:01 UTC; Severity: normal; Filed 8 years and 103 days ago; Modified 8 years and 103 days ago;
#885503 [n| | ] [file-roller] Please remove Suggests on zoo
Reported by: Moritz Muehlenhoff <[email protected]>; Date: Wed, 27 Dec 2017 16:06:15 UTC; Severity: normal; Filed 7 years and 139 days ago; Modified 7 years and 139 days ago;
#917343 [n| | ] [src:foxeye] Obsolete build dependency on libssl1.0-dev
Reported by: Moritz Muehlenhoff <[email protected]>; Date: Wed, 26 Dec 2018 11:51:02 UTC; Severity: normal; Filed 6 years and 140 days ago; Modified 6 years and 140 days ago;
#919526 [n|Su| ] [catdoc] CVE-2018-20451 CVE-2018-20453
Reported by: Moritz Muehlenhoff <[email protected]>; Date: Wed, 16 Jan 2019 22:06:02 UTC; Severity: normal; Tags: security, upstream; Found in version catdoc/1:0.95-4.1; Filed 6 years and 119 days ago; Modified 6 years and 116 days ago;
#950251 [n| | ] [src:sumo] Consider linking against archive version of libstb
Reported by: Moritz Muehlenhoff <[email protected]>; Date: Thu, 30 Jan 2020 15:33:01 UTC; Severity: normal; Filed 5 years and 105 days ago; Modified 5 years and 105 days ago;
#950252 [n| | ] [src:yquake2] Consider linking against archive version of libstb
Reported by: Moritz Muehlenhoff <[email protected]>; Date: Thu, 30 Jan 2020 15:33:04 UTC; Severity: normal; Filed 5 years and 105 days ago; Modified 5 years and 105 days ago;
#958998 [n|Su| ] [src:duo-unix] CVE-2020-12135 in embedded bson
Reported by: Moritz Muehlenhoff <[email protected]>; Date: Mon, 27 Apr 2020 21:12:01 UTC; Severity: normal; Tags: security, upstream; Filed 5 years and 17 days ago; Modified 5 years and 16 days ago;
#979678 [n|Su| ] [qemu] qemu: CVE-2020-35503: NULL pointer dereference issue in megasas-gen2 host bus adapter
Reported by: Moritz Muehlenhoff <[email protected]>; Date: Sat, 9 Jan 2021 23:00:01 UTC; Severity: normal; Tags: security, upstream; Found in version qemu/1:5.2+dfsg-3; Filed 4 years and 125 days ago; Modified 3 years and 78 days ago;
#992115 [n| | ] [security-tracker] Stop using the NVD severity
Reported by: Moritz Muehlenhoff <[email protected]>; Date: Wed, 11 Aug 2021 21:00:02 UTC; Severity: normal; Filed 3 years and 276 days ago; Modified 3 years and 248 days ago;
#1027187 [n| |☣] [wnpp] O: coco-cpp -- Coco/R Compiler Generator (C++ Version)
Reported by: Moritz Muehlenhoff <[email protected]>; Date: Thu, 29 Dec 2022 01:09:01 UTC; Severity: normal; Filed 2 years and 137 days ago; Modified 2 years and 137 days ago;
#1033104 [n| | ] [src:ippsample] CVE-2023-24808
Reported by: Moritz Muehlenhoff <[email protected]>; Date: Fri, 17 Mar 2023 12:00:02 UTC; Severity: normal; Found in version ippsample/0.0~git20220607.72f89b3-1; Filed 2 years and 58 days ago; Modified 2 years and 58 days ago;
#1033333 [n| | ] [src:rust-encoding] rust-encoding is unmaintained upstream
Reported by: Moritz Muehlenhoff <[email protected]>; Date: Wed, 22 Mar 2023 19:48:05 UTC; Severity: normal; Tags: bookworm, sid, trixie; Found in version rust-encoding/0.2.33-1; Filed 2 years and 53 days ago; Modified 1 year and 337 days ago;
#1033335 [n| | ] [src:rust-const-cstr] rust-const-cstr is unmaintained upstream
Reported by: Moritz Muehlenhoff <[email protected]>; Date: Wed, 22 Mar 2023 19:48:10 UTC; Severity: normal; Found in version rust-const-cstr/0.3.0-1; Filed 2 years and 53 days ago; Modified 2 years and 51 days ago;
#1035854 [n| | ] [installation-reports] Bookworm netboot image fails in VM
Reported by: Moritz Muehlenhoff <[email protected]>; Date: Wed, 10 May 2023 08:45:01 UTC; Severity: normal; Filed 2 years and 4 days ago; Modified 2 years and 4 days ago;

#917381 [w| | ] [lintian-brush] Support git-less operation
Reported by: Moritz Muehlenhoff <[email protected]>; Date: Wed, 26 Dec 2018 23:03:01 UTC; Severity: wishlist; Tags: confirmed; Found in versions lintian-brush/0.9, lintian-brush/0.89, lintian-brush/0.113; Filed 6 years and 140 days ago; Modified 3 years and 237 days ago;

#404762 [w| | ] [wnpp] RFP: freesynd -- Free implementation of the Syndicate engine
Reported by: Moritz Muehlenhoff <[email protected]>; Date: Thu, 28 Dec 2006 01:48:02 UTC; Severity: wishlist; Filed 18 years and 142 days ago; Modified 8 years and 300 days ago;
#485978 [w| | ] [xfrisk] xfrisk: friskserver should have a systemd .service
Reported by: Moritz Muehlenhoff <[email protected]>; Date: Thu, 12 Jun 2008 19:03:04 UTC; Severity: wishlist; Found in version xfrisk/1.2-3; Filed 16 years and 339 days ago; Modified 43 days ago;
#635194 [w| | ] [buildd.debian.org] Only send failed logs to security builds exploder
Reported by: Moritz Muehlenhoff <[email protected]>; Date: Sat, 23 Jul 2011 17:03:01 UTC; Severity: wishlist; Filed 13 years and 298 days ago; Modified 13 years and 298 days ago;
#635516 [w| | ] [wnpp] RFP: dvdstyler -- DVD authoring and burning tool
Reported by: Moritz Muehlenhoff <[email protected]>; Date: Tue, 26 Jul 2011 14:03:01 UTC; Severity: wishlist; Filed 13 years and 295 days ago; Modified 8 years and 80 days ago;
#863802 [w| | ] [ferm] systemd unit breaks ferm in some setups in jessie->stretch upgrade
Reported by: Moritz Muehlenhoff <[email protected]>; Date: Wed, 31 May 2017 11:57:01 UTC; Severity: wishlist; Tags: stretch-ignore; Found in versions ferm/2.3-2, ferm/2.5.1-1.1; Filed 7 years and 349 days ago; Modified 186 days ago;
#871309 [w| | ] [src:sddm] Support rootless X with SDDM for buster
Reported by: Moritz Muehlenhoff <[email protected]>; Date: Mon, 7 Aug 2017 15:21:02 UTC; Severity: wishlist; Filed 7 years and 281 days ago; Modified 7 years and 281 days ago;
#908155 [w| | ] [src:developers-reference] Coordination with upstream developers not universally applied
Reported by: Moritz Muehlenhoff <[email protected]>; Date: Thu, 6 Sep 2018 19:09:01 UTC; Severity: wishlist; Filed 6 years and 251 days ago; Modified 5 years and 30 days ago;
#959735 [w| | ] [systemd] Ship a default range for systemd-sysusers which follows adduser defaults
Reported by: Moritz Muehlenhoff <[email protected]>; Date: Mon, 4 May 2020 17:57:02 UTC; Severity: wishlist; Filed 5 years and 10 days ago; Modified 4 years and 59 days ago;
#979317 [w| | ] [finish-install] Create list of packages installed by d-i?
Reported by: Moritz Muehlenhoff <[email protected]>; Date: Tue, 5 Jan 2021 09:33:01 UTC; Severity: wishlist; Filed 4 years and 129 days ago; Modified 4 years and 129 days ago;
#989065 [w| | ] [security-tracker] Show packages from next-point-release.txt in source package overview
Reported by: Moritz Muehlenhoff <[email protected]>; Date: Mon, 24 May 2021 22:21:02 UTC; Severity: wishlist; Filed 3 years and 355 days ago; Modified 3 years and 355 days ago;
#990798 [w| | ] [src:libsixel] Switch to fork?
Reported by: Moritz Muehlenhoff <[email protected]>; Date: Wed, 7 Jul 2021 18:15:02 UTC; Severity: wishlist; Found in version libsixel/1.8.6-2; Filed 3 years and 311 days ago; Modified 3 years and 231 days ago;
#1039606 [w| | ] [security-tracker] Don't display unimportant issues as "vulnerable"
Reported by: Moritz Muehlenhoff <[email protected]>; Date: Tue, 27 Jun 2023 18:36:02 UTC; Severity: wishlist; Filed 1 year and 321 days ago; Modified 1 year and 321 days ago;
#1103925 [w| | ] [src:debian-security-support] Mark musescore2/musescore3 as limited support for all suites
Reported by: Moritz Muehlenhoff <[email protected]>; Date: Tue, 22 Apr 2025 20:51:01 UTC; Severity: wishlist; Found in version debian-security-support/1:13+2025.04.12; Filed 21 days ago; Modified 21 days ago;

#604854 [w|☹| ] [src:glibc] Please build Berkeley DB NSS modules
Reported by: Moritz Muehlenhoff <[email protected]>; Date: Wed, 24 Nov 2010 20:42:01 UTC; Severity: wishlist; Tags: wontfix; Filed 14 years and 174 days ago; Modified 10 years and 324 days ago;

#778261 [i|Su☹|↝] [byzanz] byzanz: CVE-2015-2785: Buffer overflow in GIF encoder
Reported by: Moritz Muehlenhoff <[email protected]>; Date: Thu, 12 Feb 2015 22:18:02 UTC; Severity: important; Tags: security, upstream, wontfix; Forwarded to https://bugzilla.gnome.org/show_bug.cgi?id=749674; Filed 10 years and 93 days ago; Modified 6 years and 315 days ago;
#796342 [i|US|↝] [src:haskell-tls] CVE-2013-0169
Reported by: Moritz Muehlenhoff <[email protected]>; Date: Fri, 21 Aug 2015 12:27:01 UTC; Severity: important; Tags: fixed-upstream, security; Forwarded to https://github.com/vincenthz/hs-tls/issues/117; Filed 9 years and 268 days ago; Modified 1 year and 140 days ago;
#897259 [i|USu|↝] [src:jakarta-jmeter] CVE-2018-1297
Reported by: Moritz Muehlenhoff <[email protected]>; Date: Mon, 30 Apr 2018 22:39:02 UTC; Severity: important; Tags: fixed-upstream, security, upstream; Found in version jakarta-jmeter/2.13-2; Forwarded to https://bz.apache.org/bugzilla/show_bug.cgi?id=62039; Filed 7 years and 15 days ago; Modified 6 years and 282 days ago;
#902719 [i|USu|↝] [triplea] CVE-2018-1000546
Reported by: Moritz Muehlenhoff <[email protected]>; Date: Fri, 29 Jun 2018 21:06:02 UTC; Severity: important; Tags: fixed-upstream, security, upstream; Found in version triplea/1.9.0.0.7062-1; Forwarded to https://github.com/triplea-game/triplea/issues/3442; Filed 6 years and 320 days ago; Modified 104 days ago;
#922460 [i|US|☺↝] [src:libsixel] CVE-2019-3574
Reported by: Moritz Muehlenhoff <[email protected]>; Date: Sat, 16 Feb 2019 12:36:01 UTC; Severity: important; Tags: fixed-upstream, security; Found in versions libsixel/1.5.2-2, libsixel/1.8.2-1; Fixed in versions libsixel/1.8.2-2, libsixel/1.8.2-1+deb10u1; Forwarded to https://github.com/saitoha/libsixel/issues/83; Filed 6 years and 88 days ago; Modified 5 years and 150 days ago;
#922648 [i|Su|↝] [src:openjpeg2] CVE-2019-6988
Reported by: Moritz Muehlenhoff <[email protected]>; Date: Mon, 18 Feb 2019 22:03:02 UTC; Severity: important; Tags: security, upstream; Found in version openjpeg2/2.3.0-1.1; Forwarded to https://github.com/uclouvain/openjpeg/issues/1178; Filed 6 years and 86 days ago; Modified 5 years and 73 days ago;
#927711 [i|USu|☺↝] [telegram-desktop] CVE-2019-10044
Reported by: Moritz Muehlenhoff <[email protected]>; Date: Sun, 21 Apr 2019 20:21:02 UTC; Severity: important; Tags: fixed-upstream, security, upstream; Found in version telegram-desktop/1.5.11-1; Fixed in version telegram-desktop/1.8.4-1; Forwarded to https://github.com/telegramdesktop/tdesktop/issues/6331; Filed 6 years and 24 days ago; Modified 5 years and 247 days ago;
#930885 [i|USu|↝] [libgcrypt20] CVE-2019-12904
Reported by: Moritz Muehlenhoff <[email protected]>; Date: Fri, 21 Jun 2019 21:21:02 UTC; Severity: important; Tags: fixed-upstream, security, upstream; Found in versions libgcrypt20/1.8.4-5, 1.8.5-1; Forwarded to https://dev.gnupg.org/T4541; Filed 5 years and 328 days ago; Modified 1 year and 337 days ago;
#947477 [i|Su|↝] [src:freeimage] freeimage: CVE-2019-12212
Reported by: Moritz Muehlenhoff <[email protected]>; Date: Sun, 26 May 2019 19:27:01 UTC; Severity: important; Tags: security, upstream; Found in version freeimage/3.18.0+ds2-1; Forwarded to https://sourceforge.net/p/freeimage/discussion/36111/thread/e06734bed5/; Filed 5 years and 354 days ago; Modified 5 years and 139 days ago;
#947478 [i|Su|↝] [src:freeimage] freeimage: CVE-2019-12214
Reported by: Moritz Muehlenhoff <[email protected]>; Date: Sun, 26 May 2019 19:27:01 UTC; Severity: important; Tags: security, upstream; Found in version freeimage/3.18.0+ds2-1; Forwarded to https://sourceforge.net/p/freeimage/discussion/36111/thread/e06734bed5/; Filed 5 years and 354 days ago; Modified 1 year and 28 days ago;
#966197 [i|Su|↝] [src:beaker] CVE-2013-7489
Reported by: Moritz Muehlenhoff <[email protected]>; Date: Fri, 24 Jul 2020 16:03:01 UTC; Severity: important; Tags: security, upstream; Found in version beaker/1.10.0-3; Forwarded to https://github.com/bbangert/beaker/issues/191; Filed 4 years and 294 days ago; Modified 4 years and 294 days ago;
#970328 [i|USu|↝] [src:resteasy] CVE-2020-10688
Reported by: Moritz Muehlenhoff <[email protected]>; Date: Mon, 14 Sep 2020 18:09:01 UTC; Severity: important; Tags: fixed-upstream, security, upstream; Forwarded to https://github.com/resteasy/Resteasy/pull/2320; Filed 4 years and 242 days ago; Modified 3 years and 156 days ago;
#973384 [i|USu|↝] [ruby-omniauth] CVE-2015-9284
Reported by: Moritz Muehlenhoff <[email protected]>; Date: Thu, 29 Oct 2020 18:51:01 UTC; Severity: important; Tags: fixed-upstream, security, upstream; Forwarded to https://github.com/omniauth/omniauth/pull/809; Filed 4 years and 197 days ago; Modified 4 years and 123 days ago;
#986791 [i|Su|↝] [src:libpodofo] libpodofo: CVE-2021-30469
Reported by: Moritz Muehlenhoff <[email protected]>; Date: Mon, 12 Apr 2021 09:18:01 UTC; Severity: important; Tags: security, upstream; Forwarded to https://sourceforge.net/p/podofo/tickets/129/; Filed 4 years and 32 days ago; Modified 4 years and 30 days ago;
#986792 [i|Su|↝] [src:libpodofo] libpodofo: CVE-2021-30470
Reported by: Moritz Muehlenhoff <[email protected]>; Date: Mon, 12 Apr 2021 09:18:03 UTC; Severity: important; Tags: security, upstream; Forwarded to https://sourceforge.net/p/podofo/tickets/130/; Filed 4 years and 32 days ago; Modified 4 years and 30 days ago;
#986793 [i|Su|↝] [src:libpodofo] libpodofo: CVE-2021-30471
Reported by: Moritz Muehlenhoff <[email protected]>; Date: Mon, 12 Apr 2021 09:18:05 UTC; Severity: important; Tags: security, upstream; Forwarded to https://sourceforge.net/p/podofo/tickets/131/; Filed 4 years and 32 days ago; Modified 4 years and 30 days ago;
#986794 [i|Su|↝] [src:libpodofo] libpodofo: CVE-2021-30472
Reported by: Moritz Muehlenhoff <[email protected]>; Date: Mon, 12 Apr 2021 09:18:08 UTC; Severity: important; Tags: security, upstream; Forwarded to https://sourceforge.net/p/podofo/tickets/132/; Filed 4 years and 32 days ago; Modified 4 years and 30 days ago;
#988159 [i|S|↝] [src:libsixel] CVE-2020-36120
Reported by: Moritz Muehlenhoff <[email protected]>; Date: Thu, 6 May 2021 18:09:01 UTC; Severity: important; Tags: security; Forwarded to https://github.com/libsixel/libsixel/issues/46; Filed 4 years and 8 days ago; Modified 3 years and 23 days ago;
#988209 [i|Su|↝] [wget] CVE-2021-31879
Reported by: Moritz Muehlenhoff <[email protected]>; Date: Fri, 7 May 2021 19:18:03 UTC; Severity: important; Tags: security, upstream; Found in version wget/1.21-1; Forwarded to https://mail.gnu.org/archive/html/bug-wget/2021-02/msg00002.html https://savannah.gnu.org/bugs/?56909; Filed 4 years and 7 days ago; Modified 3 years and 70 days ago;
#1103893 [i| |↝] [src:texlive-extra] Please switch to libpdfbox2-java
Reported by: Moritz Muehlenhoff <[email protected]>; Date: Tue, 22 Apr 2025 14:30:01 UTC; Severity: important; Found in version texlive-extra/2024.20250309-2; Forwarded to https://github.com/bastien-roucaries/latex-pax/issues/8; Filed 21 days ago; Modified 11 days ago;

#914154 [n|USu|↝] [gnome-keyring] CVE-2018-19358
Reported by: Moritz Muehlenhoff <[email protected]>; Date: Mon, 19 Nov 2018 22:51:02 UTC; Severity: normal; Tags: fixed-upstream, security, upstream; Found in version gnome-keyring/3.28.2-1; Forwarded to https://gitlab.gnome.org/GNOME/gnome-keyring/issues/5; Filed 6 years and 177 days ago; Modified 1 year and 203 days ago;
#972099 [n|Su|↝] [qemu] qemu: CVE-2019-12067: ahci: possible null dereference in ahci_commit_buf
Reported by: Moritz Muehlenhoff <[email protected]>; Date: Mon, 12 Oct 2020 17:51:01 UTC; Severity: normal; Tags: security, upstream; Forwarded to https://lists.gnu.org/archive/html/qemu-devel/2019-08/msg01358.html; Filed 4 years and 214 days ago; Modified 2 years and 149 days ago;
#989008 [n|Su|↝] [dmg2img] CVE-2021-32614
Reported by: Moritz Muehlenhoff <[email protected]>; Date: Sun, 23 May 2021 09:21:01 UTC; Severity: normal; Tags: security, upstream; Forwarded to https://github.com/Lekensteyn/dmg2img/issues/11; Filed 3 years and 356 days ago; Modified 3 years and 356 days ago;

#738172 [w| |↝] [security-tracker] Track renames of source packages
Reported by: Moritz Muehlenhoff <[email protected]>; Date: Sat, 8 Feb 2014 10:51:01 UTC; Severity: wishlist; Forwarded to https://salsa.debian.org/security-tracker-team/security-tracker/-/merge_requests/88; Filed 11 years and 97 days ago; Modified 3 years and 196 days ago;

#1103894 [G|S|☺] [src:rust-pyo3] RUSTSEC-2025-0020
Reported by: Moritz Muehlenhoff <[email protected]>; Date: Tue, 22 Apr 2025 14:30:02 UTC; Severity: grave; Tags: security; Found in version rust-pyo3/0.22.6-2; Fixed in version rust-pyo3/0.22.6-3; Done: NoisyCoil <[email protected]>; Can be archived in 9 days; Filed 21 days ago; Modified 19 days ago;

#1033334 [n| |☺] [src:rust-boxfnonce] rust-boxfnonce is unmaintained upstream
Reported by: Moritz Muehlenhoff <[email protected]>; Date: Wed, 22 Mar 2023 19:48:07 UTC; Severity: normal; Tags: bookworm, sid, trixie; Found in version rust-boxfnonce/0.1.1-2; Fixed in version 0.1.1-2+rm; Done: Debian FTP Masters <[email protected]>; Filed 2 years and 53 days ago; Modified 1 year and 167 days ago;
#1100430 [n| |☣] [ftp.debian.org] RM: kanboard/bookworm-security -- RoST; unmaintained; security issues
Reported by: Moritz Muehlenhoff <[email protected]>; Date: Thu, 13 Mar 2025 18:54:01 UTC; Severity: normal; Tags: bookworm; Done: Debian FTP Masters <[email protected]>; Can be archived in 18 days; Filed 61 days ago; Modified 10 days ago;
#1103641 [n| |☣] [ftp.debian.org] RM: coz-profiler -- RoQA; RC-buggy, orphaned, blocks removal of libelfin
Reported by: Moritz Muehlenhoff <[email protected]>; Date: Sat, 19 Apr 2025 22:03:01 UTC; Severity: normal; Done: Debian FTP Masters <[email protected]>; Can be archived in 7 days; Filed 24 days ago; Modified 21 days ago;
#1103642 [n|S|☣] [ftp.debian.org] RM: libelfin -- RoQA; open security issues, no reverse dependencies, orphaned
Reported by: Moritz Muehlenhoff <[email protected]>; Date: Sat, 19 Apr 2025 22:09:01 UTC; Severity: normal; Tags: security; Done: Debian FTP Masters <[email protected]>; Can be archived in 7 days; Filed 24 days ago; Modified 21 days ago;

Status
- 67 Outstanding
- 24 Forwarded
- 5 Resolved
Severity
- 2 Grave functionality bugs
- 2 Serious (policy violations or makes package unfit for release)
- 51 Important bugs
- 25 Normal bugs
- 16 Wishlist items
Classification
- 2 Patch Available
- 1 Confirmed
- 62 Unclassified
- 2 Will Not Fix

Select bugs		The same search fields are ORed, different fields are ANDed. Valid severities are critical, grave, serious, important, normal, minor, wishlist, fixed Valid tags are patch, wontfix, moreinfo, unreproducible, help, security, upstream, pending, confirmed, ipv6, lfs, d-i, l10n, newcomer, a11y, ftbfs, fixed-upstream, fixed, fixed-in-experimental, sid, experimental, potato, woody, sarge, sarge-ignore, etch, etch-ignore, lenny, lenny-ignore, squeeze, squeeze-ignore, wheezy, wheezy-ignore, jessie, jessie-ignore, stretch, stretch-ignore, buster, buster-ignore, bullseye, bullseye-ignore, bookworm, bookworm-ignore, trixie, trixie-ignore, forky, forky-ignore
Include Bugs
Exclude Bugs
Categorize/Order using
Misc options	Repeat Merged Reverse Bugs Reverse Pending Reverse Severity No Bugs which affect packages Toggle all extra information
Submit

Debian Bug report logs: Bugs submitted by [email protected]

Outstanding bugs -- Grave functionality bugs; Unclassified (1 bug)

Outstanding bugs -- Serious (policy violations or makes package unfit for release); Unclassified (2 bugs)

Outstanding bugs -- Important bugs; Patch Available (1 bug)

Outstanding bugs -- Important bugs; Unclassified (29 bugs)

Outstanding bugs -- Important bugs; Will Not Fix (1 bug)

Outstanding bugs -- Normal bugs; Patch Available (1 bug)

Outstanding bugs -- Normal bugs; Unclassified (17 bugs)

Outstanding bugs -- Wishlist items; Confirmed (1 bug)

Outstanding bugs -- Wishlist items; Unclassified (13 bugs)

Outstanding bugs -- Wishlist items; Will Not Fix (1 bug)

Forwarded bugs -- Important bugs (20 bugs)

Forwarded bugs -- Normal bugs (3 bugs)

Forwarded bugs -- Wishlist items (1 bug)

Resolved bugs -- Grave functionality bugs (1 bug)

Resolved bugs -- Normal bugs (4 bugs)

Summary

Options

Select bugs

Include Bugs

Exclude Bugs

Categorize/Order using

Misc options

Submit