# List of packages whose security support is limited or ends before the distribution EOL

# File format: Columns, separated by one or more space characters
# 1. source package name
# 2. non-supported if security support ends completely, limited if it doesn't
#    benefit from the regular security support
# 3. last version with support
#    Important: If there have been binNMUs, enter the highest version
#    number used (only when non-supported)
# 4. Date when support ended or will end, in the form YYYY-mm-dd (only when non-supported)
# 5. Descriptive text or URL with more details (optional)
#    In the program's output, this is prefixed with "Details:"

adns                        limited  Stub resolver that should only be used with trusted recursors
binutils                    limited  Only suitable for trusted content; see https://lists.debian.org/msgid-search/87lfqsomtg.fsf@mid.deneb.enyo.de
consul                      non-supported   1.10.12+dfsg1-1  2023-09-20  https://bugs.debian.org/1052289
cython                      limited  Only included for building packages, not running them, #975058
ganglia                     limited  See README.Debian.security, only supported behind an authenticated HTTP zone, #702775
ganglia-web                 limited  See README.Debian.security, only supported behind an authenticated HTTP zone, #702776
gnupg1                      limited  See #982258 and https://www.debian.org/releases/stretch/amd64/release-notes/ch-whats-new.en.html#modern-gnupg
gobgpd                      limited  See https://www.debian.org/releases/trixie/release-notes/issues.en.html#go-and-rust-based-packages
golang.*                    limited  See https://www.debian.org/releases/trixie/release-notes/issues.en.html#go-and-rust-based-packages
isc-dhcp                    non-supported   4.4.3-P1-2       2023-07-05  https://lists.isc.org/pipermail/dhcp-users/2022-October/022786.html
jython                      limited  Includes python2.7 stdlib, support limited until Py3 port, see #975058 and https://lists.debian.org/debian-lts/2024/08/msg00027.html
kde4libs                    limited  khtml has no security support upstream, only for use on trusted content
khtml                       limited  khtml has no security support upstream, only for use on trusted content, see #1004293
libspring-java              limited  See README.Debian.security included in the package
mozjs102                    limited  Not covered by security support, only suitable for trusted content, see package description
mozjs78                     limited  Not covered by security support, only suitable for trusted content, see #959804
musescore2                  limited  Only supported with trusted files, see README.Debian shipped in package and #1070860
musescore3                  limited  Only supported with trusted files, see README.Debian shipped in package and #1070860
ocsinventory-server         limited  Only supported behind an authenticated HTTP zone
qtwebengine-opensource-src  limited  No security support upstream and backports not feasible, only for use on trusted content
qtwebkit                    limited  No security support upstream and backports not feasible, only for use on trusted content
qtwebkit-opensource-src     limited  No security support upstream and backports not feasible, only for use on trusted content
rust.*                      limited  See https://www.debian.org/releases/trixie/release-notes/issues.en.html#go-and-rust-based-packages
sql-ledger                  limited  Only supported behind an authenticated HTTP zone
tiles                       limited  Only supported for building packages, #1057343
vte                         limited  Not covered by security support, only used by debian-installer, #1082885
zoneminder                  limited  See README.Debian.security, only supported behind an authenticated HTTP zone, #922724
