# List of packages whose security support is limited or ends before the distribution EOL

# File format: Columns, separated by one or more space characters
# 1. source package name
# 2. non-supported if security support ends completely, limited if it doesn't
#    benefit from the regular security support
# 3. last version with support
#    Important: If there have been binNMUs, enter the highest version
#    number used (only when non-supported)
# 4. Date when support ended or will end, in the form YYYY-mm-dd (only when non-supported)
# 5. Descriptive text or URL with more details (optional)
#    In the program's output, this is prefixed with "Details:"

adns                        limited  Stub resolver that should only be used with trusted recursors
binutils                    limited  Only suitable for trusted content; see https://lists.debian.org/msgid-search/87lfqsomtg.fsf@mid.deneb.enyo.de
consul                      non-supported   1.10.12+dfsg1-1  2023-09-20  https://bugs.debian.org/1052289
cython                      limited  Only included for building packages, not running them, #975058
ganglia                     limited  See README.Debian.security, only supported behind an authenticated HTTP zone, #702775
ganglia-web                 limited  See README.Debian.security, only supported behind an authenticated HTTP zone, #702776
gnupg1                      limited  See #982258 and https://www.debian.org/releases/stretch/amd64/release-notes/ch-whats-new.en.html#modern-gnupg
gobgp                       limited  See https://www.debian.org/releases/trixie/release-notes/issues.en.html#go-and-rust-based-packages
golang.*                    limited  See https://www.debian.org/releases/trixie/release-notes/issues.en.html#go-and-rust-based-packages
hdf5                        limited  Not covered by security support, only suitable for trusted content, see #1117722
isc-dhcp                    non-supported   4.4.3-P1-2       2023-07-05  https://lists.isc.org/pipermail/dhcp-users/2022-October/022786.html
jython                      limited  Includes python2.7 stdlib, support limited until Py3 port, see #975058 and https://lists.debian.org/debian-lts/2024/08/msg00027.html
kde4libs                    limited  khtml has no security support upstream, only for use on trusted content
khtml                       limited  khtml has no security support upstream, only for use on trusted content, see #1004293
libsoup2.4                  limited  Only supported as a client, not as a server: see https://gitlab.gnome.org/GNOME/libsoup/-/commit/2a9d8ecc45bb814f6a81b1241e6c0c55d632aa28
libsoup3                    limited  Only supported as a client, not as a server: see https://gitlab.gnome.org/GNOME/libsoup/-/commit/2a9d8ecc45bb814f6a81b1241e6c0c55d632aa28
libspring-java              limited  See README.Debian.security included in the package
mozjs128                    limited  Not covered by security support, only suitable for trusted content, see package description
musescore2                  limited  Only supported with trusted files, see README.Debian shipped in package and #1070860
musescore3                  limited  Only supported with trusted files, see README.Debian shipped in package and #1070860
ocsinventory-server         limited  Only supported behind an authenticated HTTP zone
qt6-webengine               limited  No security support upstream and backports not feasible, only for use on trusted content
qtwebengine-opensource-src  limited  No security support upstream and backports not feasible, only for use on trusted content
qtwebkit                    limited  No security support upstream and backports not feasible, only for use on trusted content
qtwebkit-opensource-src     limited  No security support upstream and backports not feasible, only for use on trusted content
rust.*                      limited  See https://www.debian.org/releases/trixie/release-notes/issues.en.html#go-and-rust-based-packages
rust-sequoia-sqv            supported  sequoia sqv is fully supported. See: https://bugs.debian.org/1106154
sql-ledger                  limited  Only supported behind an authenticated HTTP zone
tiles                       limited  Only supported for building packages, #1057343
vte                         limited  Not covered by security support, only used by debian-installer, #1082885
wpewebkit                   non-supported   2.38.6-1  2026-01-04  wpewebkit is generally unsupported from bookworm onwards, see #1118273, #1035997 and #1035794
zabbix                      limited  The WEB UI is only supported for access by trusted users, no security updates issued for it, #1124558
zoneminder                  limited  See README.Debian.security, only supported behind an authenticated HTTP zone, #922724
