
# List of packages whose security support ends before the distribution EOL

# File format: Columns, separated by one or more space characters
# 1. source package name
# 2. last version with support
#    Important: If there have been binNMUs, enter the highest version
#    number used
# 3. Date when support ended or will end, in the form YYYY-mm-dd
# 4. Descriptive text or URL with more details (optional)
#    In the program's output, this is prefixed with "Details:"

chromium                 120.0.6099.224-1~deb11u1    2024-01-23  https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1061268
consul                   1.8.7+dfsg1-2               2023-12-04  https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1057418
xen                      4.14.5+94-ge49571868d-1     2023-09-30  https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1053246
tor                      0.4.5.16-1                  2023-11-22  https://lists.debian.org/debian-security-announce/2023/msg00258.html
odoo                     14.0.0+dfsg.2-7+deb11u2     2025-04-12  Lack of clear information upstream about the commits fixing CVEs makes it difficult to backport patches. See #1100929
pdns-recursor		 4.4.2-3		     2024-05-14  https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1070176  
phppgadmin               7.13.0+dfsg-2               2024-06-29  https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1072589
pytest-salt-factories    0.93.0-1                    2024-06-29  https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1070175
pytest-testinfra         6.1.0-1                     2024-06-29  https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1070175
salt                     3002.6+dfsg1-4+deb11u1      2024-06-29  https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1070175
slurm-wlm		 20.11.7+really20.11.4-2+deb11u1 2024-05-14 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1071127
snort			 2.9.20-0+deb11u1	     2024-02-11	 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1063756
libreswan		 4.3-1+deb11u3               2024-06-03  https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1072527
gpac                     1.0.1+dfsg1-4+deb11u3       2024-08-08  https://lists.debian.org/debian-lts/2024/08/msg00007.html
iotjs                    1.0+715-1                   2024-08-15  https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1078334
wpewebkit                2.38.6-1~deb11u1            2024-08-16  https://bugs.debian.org/1035997
cython                   0.29.21-3                   2024-09-29  Only included for building packages, not running them. https://lists.debian.org/debian-lts/2024/08/msg00057.html
jython                   2.7.2+repack1-3             2024-09-29  Includes python2.7 stdlib https://lists.debian.org/debian-lts/2024/08/msg00057.html
pypy                     7.3.3+dfsg-2                2024-09-29  Includes python2.7 stdlib. https://lists.debian.org/debian-lts/2024/08/msg00057.html
python2.7                2.7.18-8+deb11u1            2024-09-29  Only included for building packages, not running them. https://lists.debian.org/debian-lts/2024/08/msg00057.html
python-setuptools        40.8.0-1                    2024-09-29  Only included for building packages, not running them. https://lists.debian.org/debian-lts/2024/08/msg00057.html
python-stdlib-extensions 2.7.18-1                    2024-09-29  Only included for building packages, not running them. https://lists.debian.org/debian-lts/2024/08/msg00057.html
intel-mediasdk           21.1.0-1                    2024-11-07  abandoned upstream, upstream does not publish enough information to fix issues.
node-matrix-js-sdk       9.3.0+~cs9.9.16-2           2025-01-30  https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1094651
node-node-forge          0.10.0~dfsg-3+deb11u1       2025-12-29  https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1124248
ckeditor3                3.6.6.1+dfsg-7              2025-04-04  Only present as a build dependency for virtuoso-opensource, no updates will be issued
guix                     1.2.0-4+deb11u3             2025-09-26  https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1112246
dnsdist                  1.5.1-3                     2025-10-01  No security support upstream and backports not feasible, only for use on private and trusted network
pdns                     4.4.1-1                     2025-10-01      No security support upstream and backports not feasible, only for use on private and trusted network
keras                    2.3.1+dfsg-3                2025-12-08  Only suitable for trusted content https://salsa.debian.org/lts-team/lts-updates-tasks/-/issues/281
freeimage                3.18.0+ds2-6+deb11u1        2026-02-06  Inactive project upstream, with no feedback about the longstanding security issues reported on different places
