anchor.diff:  bc,bc (1.06.95-2),,gnubc,, The GNU bc arbitrary precision calculator language,Standard System Utilities,0,0,0,Use relatively rare.  Unlikely to process data from attacker.,,
   bind9-host,bind9,bind,bind9,, Version of 'host' bundled with BIND 9.X,Standard System Utilities,1,0,0,"Bind9 is critical for security. It does have active development. Support is via mailing lists. Very active development, issue tracker intentionally not public...claimed to be ""huge backlog"" of issues. Public git repo. Active history of CVEs raised and fixed. ++",In some cases contacts network and processes data from it,
   binutils,,binutils,binutils,," GNU assembler, linker and binary utilities",Standard System Utilities,0,0,1,"Vital software for a running system.  Active maintenance.  Includes many subcomponents; some components might need review, but hard to tell because they're managed as a group.",Used to process data from network,
  +binutils-dev,,binutils,binutils-dev,,,,0,0,0,,,
  +bootp,,,bootp,,,,1,0,0,Bootp has basic security issues.,,
  +bouncycastle,,5523,bouncycastle,,,,1,0,0,,,
   bsd-mailx,,nail,bsd-mailx,, simple mail user agent,Standard System Utilities,1,0,0,"This does take data from untrusted sources, but many systems won't actively use it (there are many mail clients).",In some cases contacts network and processes data from it,
   bsdmainutils,,freebsd,bsdmainutils,, collection of more utilities from FreeBSD,Standard System Utilities,0,0,0,,,
   bsdutils,util-linux (2.20.1-5.3),util-linux-ng,bsdutils,, Basic utilities from 4.4BSD-Lite,Standard System Utilities,0,0,0,,,
  +buildbot,buildbot,buildbot,buildbot,http://trac.buildbot.net,system to automate compile/test cycle,devel,1,1,1,,
   busybox,,busybox,busybox,, Tiny utilities for small and embedded systems,Standard System Utilities,0,0,0,,,
  -bzip2,,bzip2,bzip2,, high-quality block-sorting file compressor - utilities,Standard System Utilities,0,1,0,"Bzip2 is widely used for decompression of network-supplied data. No code repo, only released code source tarballs. This is the reference implementation, many alternate implementations shown on https://en.wikipedia.org/wiki/Bzip2. Last release in 2010, v1.0.6, in response to CVE-2010-0405. No forums found. At least one HTTP server supports bzip2 for compression.  +++","Used to process data from network; web site exists but last release in 2010, no public repo.",
  +bzip2,,bzip2,bzip2,, high-quality block-sorting file compressor - utilities,Standard System Utilities,0,1,0,"Bzip2 is widely used for decompression of network-supplied data. No code repo, only released code source tarballs. This is the reference implementation, many alternate implementations shown on https://en.wikipedia.org/wiki/Bzip2. Last release in 2010, v1.0.6, in response to CVE-2010-0405. No forums found. At least one HTTP server supports bzip2 for compression.  +++","Used to process data from network; web site exists but last release in 2010, no public repo.", 
  +bzr,,bzr-svn,,,,,0,1,0,,,
   ca-certificates,,,,, Common CA certificates,Standard System Utilities,0,1,0,,,
  +ckeditor,ckeditor,ckeditor,ckeditor,https://dev.ckeditor.com/,text editor which can be embedded into web pages,web,1,1,1,,
  +clamav,,clamav,clamav,https://bugzilla.clamav.net/,anti-virus utility for Unix - command-line interface,,1,1,0,,,
  +clang-3.5,clang-3.5,llvm-toolchain-3.5,clang,https://llvm.org/bugs/,"C, C++ and Objective-C compiler (LLVM based)",devel,0,0,0,,
   console-setup,,console-setup,console-setup,, console font and keymap setup program,Standard System Utilities,0,0,0,,,
   console-setup-linux,console-setup,console-setup,console-setup,, Linux specific part of console-setup,Standard System Utilities,0,0,0,,,
  +coolkey,,,coolkey,,,,0,1,0,"Smart card drivers.  Not used in many environments, but critically important for security in other environments.  Activity unclear. Managed via Fedora packaging active here: https://apps.fedoraproject.org/packages/coolkey but that is not where the real code is maintained. Important for users of PKCS#11, but slightly specialized. http://pkgs.fedoraproject.org/gitweb/?p=coolkey.git http://pkg-coolkey.alioth.debian.org/ ++",,
   coreutils,,coreutils,coreutils,, GNU core utilities,Standard System Utilities,0,0,1,"Vital software for a running system.  Active maintenance.  Includes many subcomponents; some components might need review, but hard to tell because they're managed as a group.",Used to process data from network,
   cpio,,cpio,cpio,, GNU cpio -- a program to manage archives of files,Standard System Utilities,0,1,0,"Decompression software. Isolated cpio format uncommon today, but RPMs are based on it.",,
  -cpp,gcc-defaults (1.120),gcc,gcc,, GNU C preprocessor (cpp),Standard System Utilities,0,0,0,,,
   cpp-4.6,gcc-4.6,gcc,gcc,, GNU C preprocessor,Standard System Utilities,0,0,0,,,
   cpp-4.7,gcc-4.7,gcc,gcc,, GNU C preprocessor,Standard System Utilities,0,0,0,,,
  +cpp,gcc-defaults (1.120),gcc,gcc,, GNU C preprocessor (cpp),Standard System Utilities,0,0,0,,,
   cron,,pkg-cron,cron,, process scheduling daemon,Standard System Utilities,0,0,0,,,
  +cryptsetup,,cryptsetup,,,,,0,0,1,"This is used to set up disk encryption (at rest), e.g., Linux Unified Key Setup (LUKS).  Home page http://code.google.com/p/cryptsetup , uses git. Tracker in active use.  Latest version 1.6.6 released 2014-08-16.  Development ongoing; 8 commits in February 2015. ++",,
  +curl,,curl,curl,,,,1,0,0,Telnet is a fundamentally insecure protocol and is being phased out.,,
   dash,,dash,dash,, POSIX-compliant shell,Standard System Utilities,0,0,0,,,
   db5.1-util,db,berkeleydb,berkeleydb,, Berkeley v5.1 Database Utilities,Standard System Utilities,0,0,0,,,
   dc,bc (1.06.95-2),,bc,, The GNU dc arbitrary precision reverse-polish calculator,Standard System Utilities,0,0,0,Use relatively rare.  Unlikely to process data from attacker.,,
  
positive.code: libdevmapper1.02.1,lvm2 (2.02.95-8),lvm2,lvm2,, Linux Kernel Device Mapper userspace library,Standard System Utilities,0,0,0,,,
  libdiscover2,discover,,discover,, hardware identification library,Standard System Utilities,0,0,0,,,
  libdns100,bind9,bind,bind9,, DNS Shared Library used by BIND,Standard System Utilities,1,0,0,Bind9 is critical for security. It does have active development. ++,,
  libdrm-intel1,libdrm,libdrm,libdrm,, Userspace interface to intel-specific kernel DRM services -- runtime,Standard System Utilities,0,0,0,,,
  libdrm-nouveau1a,libdrm,libdrm,libdrm,, Userspace interface to nouveau-specific kernel DRM services -- runtime,Standard System Utilities,0,0,0,,,
  libdrm-radeon1,libdrm,libdrm,libdrm,, Userspace interface to radeon-specific kernel DRM services -- runtime,Standard System Utilities,0,0,0,,,
  libdrm2,libdrm,libdrm,libdrm,, Userspace interface to kernel DRM services -- runtime,Standard System Utilities,0,0,0,,,
  libedit2,libedit,libedit-merge,libedit,, BSD editline and history libraries,Standard System Utilities,0,0,0,,,
  libept1.4.12,libept,,libept,, High-level library for managing Debian package information,Standard System Utilities,0,0,0,"Should primarily be managing data from trusted source; if it ensures data source okay, less risky.",,
  libevent-2.0-5,libevent,libevent,libevent,, Asynchronous event notification library,Standard System Utilities,0,0,0,,,
  
negative.code: linux-image-amd64,linux-latest (46),linux,Linux-image,, Linux for 64-bit PCs (meta-package),Standard System Utilities,0,0,0,,,
  linux-kbuild-3.2,linux-tools,linux,kbuild,, Kbuild infrastructure for Linux 3.2,Standard System Utilities,0,0,0,,,
  linux-libc-dev,linux,linux,Linux-libc,, Linux support headers for userspace development,Standard System Utilities,0,0,0,,,
  llvm-3.5,llvm-toolchain-3.5,llvm,llvm,https://llvm.org/bugs/,"C, C++ and Objective-C compiler (LLVM based)",devel,0,0,0,,
  locales,eglibc,eglibc,eglibc,, Embedded GNU C Library: National Language (locale) data [support],Standard System Utilities,0,0,0,,,
  login,shadow,shadow-tool-suite,shadow,, system login tools,Standard System Utilities,0,0,1,"Front door for local login. Has Home Page, part of shadow tool suite, Latest release May 2014, Public Repo, Somewhat active mailing list, NO issue tracker. ++",,
  logrotate,,logrotate,logrotate,, Log rotation utility,Standard System Utilities,0,0,1,"Moves logs, but doesn't seriously analyze them, so attack opportunities reduced.",,
  lsb-base,lsb,lsb,lsb,, Linux Standard Base 4.1 init script functionality,Standard System Utilities,0,0,0,,,
  lsb-release,lsb,lsb,lsb,, Linux Standard Base version reporting utility,Standard System Utilities,0,0,0,,,
  lsof,,lsof,lsof,, Utility to list open files,Standard System Utilities,0,0,0,Unlikely to be a security vulnerability,,
  lzma,,lzmautils,lzma,,,,0,1,0,,,
  m4,,m4,m4,, a macro processing language,Standard System Utilities,0,0,0,,,
  mailman,mailman,mailman,mailman,https://bugs.launchpad.net/mailman/,"Powerful, web-based mailing list manager",mail,1,1,1,,
  make,make-dfsg,make,make,, An utility for Directing compilation.,Standard System Utilities,0,0,0,,,
  man-db,,man-db,man-db,, on-line manual pager,Standard System Utilities,0,0,0,,,
  manpages-dev,manpages,,manpages,, Manual pages about using GNU/Linux for development,Standard System Utilities,0,0,0,,,
  manpages,,,manpages,, Manual pages about using a GNU/Linux system,Standard System Utilities,0,0,0,,,
  mawk,,mawk,mawk,, a pattern scanning and text processing language,Standard System Utilities,0,0,0,,,
  mediawiki,mediawiki,mediawiki,mediawiki,https://phabricator.wikimedia.org/,website engine for collaborative work,web,1,1,1,,
  menu,,8294,,, generates programs menu for all menu-aware applications,Standard System Utilities,0,0,0,,,
  mercurial,,mercurial,,,,,0,1,0,,,
  mime-support,,,mime-support,," MIME files 'mime.types' & 'mailcap', and support programs",Standard System Utilities,0,0,0,Processes potentially untrustworthy files.,,
  mingw-w64-i686-dev,mingw-w64,mingw-w64,mingw-w64,http://sourceforge.net/p/mingw-w64/bugs/,Development environment targeting 23- and 64-bit Windows,,0,0,0,,Couldn't find a bug tracker,
  mingw-w64-x86-64-dev,mingw-w64,mingw-w64,mingw-w64,http://sourceforge.net/p/mingw-w64/bugs/,,,0,0,0,,Couldn't find a bug tracker,
  mlocate,,mlocate,mlocate,, quickly find files on the filesystem based on their name,Standard System Utilities,0,0,0,,,
  module-init-tools,kmod,kmod,kmod,, transitional dummy package (module-init-tools to kmod),Standard System Utilities,0,0,0,,,
  mount,util-linux,util-linux-ng,util-linux,, Tools for mounting and manipulating filesystems,Standard System Utilities,0,0,0,,,
  multiarch-support,eglibc,eglibc,eglibc,, Transitional package to ensure multiarch compatibility,Standard System Utilities,0,0,0,,,
  musl,musl,musl,musl,,standard C library development files,,0,0,0,,"No bug tracker, uses mailing list",
  mutt,,mutt,mutt,," text-based mailreader supporting MIME, GPG, PGP and threading",Standard System Utilities,1,0,0,Rarely used in practice,,
  mysql-server,mysql-5.6,mysql,mysql,http://bugs.mysql.com/,MySQL database server binaries and system database setup,database,1,1,1,,
  nagios3,nagios3,nagios,nagios,https://support.nagios.com/forum/,host/service/network monitoring and management system,net,1,1,1,,User forum rather than bug tracker
  nano,nano (2.2.6-1),nano,nano,," small, friendly text editor inspired by Pico",Standard System Utilities,0,0,0,,,
  ncurses-base,ncurses,ncurses,ncurses,, basic terminal type definitions,Standard System Utilities,0,0,0,,,
  ncurses-bin,ncurses,ncurses,ncurses,, terminal-related programs and man pages,Standard System Utilities,0,0,0,,,
  ncurses-term,ncurses,ncurses,ncurses,, additional terminal type definitions,Standard System Utilities,0,0,0,,,
  netbase,,,netbase,, Basic TCP/IP networking system,Standard System Utilities,1,0,0,,,
  netcat-traditional,netcat,,netcat,, TCP/IP swiss army knife,Standard System Utilities,1,0,0,Netcat is typically used only by invocation in specific cases.,"External maintenance stopped in 1996: “was developed until first  months of the 1996, when it reached version 1.10, released by Avian Research (avian.org).” Not the same GNU netcat or OpenBSD netcat; https://www.openhub.net/projects/netcat
  netsniff-ng,netsniff-ng,netsniff-ng,netsniff-ng,https://github.com/netsniff-ng/netsniff-ng/issues,Linux network packet sniffer toolkit,net,1,1,1,,
  net-tools,,net-tools,net-tools,, The NET-3 networking toolkit,Standard System Utilities,1,0,0,"It's unclear if the Debian package and SourceForge project are still related.  This warrants further examination. Upstream listed as https://developer.berlios.de/projects/net-tools/ but has moved to http://sourceforge.net/projects/net-tools/ Has mailing though rather inactive. Has public git repo, latest commit 2015-01-07 on 2015-03-12. These are tools for controlling the network and typically run as root; it's unclear how exposed they are to network attack (most, if not all, are probably not exposed). This lack of exposure probably lowers their priority. ++","Debian points to http://net-tools.berlios.de/ but it doesn't exist, sourceforge page seems to be equivalent. most net-tools programs are obsolete now.",
  nfs-common,nfs-utils,nfs-utils,nfs-utils,, NFS support files common to client and server,Standard System Utilities,1,0,0,"Important for NFS, amount of use unclear.",,
  nginx,nginx,nginx,nginx,https://trac.nginx.org/nginx/,"small, powerful, scalable web/proxy server",httpd,1,1,1,,
  nodejs,nodejs,node,node.js,https://github.com/nodejs/node/issues,evented I/O for V8 javascript,web,1,1,1,,
  node-stylus,node-stylus,stylus,stylus,https://github.com/stylus/stylus/issues,"Robust, expressive, and feature-rich CSS superset – Node.js module",web,1,1,1,,
  ntp,,,ntp,,,,1,0,0,"Directly connects to network and open to attack. HAS Home Page, NO issue tracker, Has Mailing list, public repo. CII investing. ++",,
  openssh-blacklist-extra,openssh-blacklist,openssh,openssh,, list of non-default blacklisted OpenSSH RSA and DSA keys,Standard System Utilities,0,0,0,,,
  openssh-blacklist,,openssh,openssh,, list of default blacklisted OpenSSH RSA and DSA keys,Standard System Utilities,0,0,0,,,
  openssh-client,openssh,openssh,openssh,," secure shell (SSH) client, for secure access to remote machines",Standard System Utilities,1,0,0,Vital for security. CII already investing in this. ++,,
  openssh-server,openssh,openssh,openssh,," secure shell (SSH) server, for secure access from remote machines",SSH Server,1,0,0,Vital for security. CII already investing in this. ++,,
  openssl,,openssl,openssl,, Secure Socket Layer (SSL) binary and related cryptographic tools,Standard System Utilities,1,0,0,"Critical, in wide use.  OpenSSL is already funded by CII. ++",,
  openvpn,,openvpn,openvpn,https://community.openvpn.net/openvpn/report,virtual private network daemon,Standard System Utilities,1,0,0,,,
  os-prober,,os-prober,os-prober,, utility to detect other OSes on a set of drives,Standard System Utilities,0,0,0,,,
  owncloud,,owncloud,owncloud,https://github.com/owncloud/core/issues,"cloud storage for files, music, contacts, calendars, and many more",Standard System Utilities,1,0,0,,,
  parted,,gparted,,,,,0,0,1,,,
  passwd,shadow,shadow-tool-suite,shadow,, change and administer password and group data,Standard System Utilities,1,0,0,Critical for security, unclear if undicovered vulnerabilities are likely to be here.,
  patch,,diffutils,,, Apply a diff file to an original,Standard System Utilities,0,0,0,,,
  pciutils,,pciutils,pciutils,, Linux PCI Utilities,Standard System Utilities,0,0,0,,,
  pdf.js-common,pdf.js,pdf_js,pdf.js,https://github.com/mozilla/pdf.js/issues,Portable Document Format (PDF) viewer,web,1,1,1,,
  pep8,pep8,pep8,pep8,https://github.com/PyCQA/pep8/issues,Python PEP 8 code style checker,python,0,0,0,,
  perl-base,perl,perl,perl,, minimal Perl system,Standard System Utilities,0,0,0,,,
  perl-modules,perl,perl,perl,, Core Perl modules,Standard System Utilities,0,0,0,,,
  perl,,perl,perl,, Larry Wall's Practical Extraction and Report Language,Standard System Utilities,0,0,0,,,
  pocketsphinx,pocketsphinx,534,CMU Sphinx,http://sourceforge.net/p/cmusphinx/bugs/,Speech recognition tool,sound,1,1,1,,
  postfix,,postfix,,,,,1,0,0,"This is a widely-used mail transfer agent (MTA).
  Postfix was created by Wietse Venema, main site www.postfix.org.  On February 8, 2015 Postfix released 3.0.0, so currently active.  Developer mailing list postfix-devel has activity. (e.g., http://news.gmane.org/gmane.mail.postfix.devel/cutoff=2948).  There is no public repo; Wietse (the lead developer) does not want to allow any external review before formal release, as noted in https://groups.google.com/forum/#!topic/mailing.postfix.users/6Kkel3J_nv4 (The Debian package may be an obsolete fork; the Debian package has been assembled by LaMont Jones from sources available from http://www.postfix.org, and can be cloned from git via: git clone git://git.debian.org/~lamont/postfix.git.  Changes on http://anonscm.debian.org/cgit/users/lamont/postfix.git/log/ in git stop in 2011.) ++",,
  postgresql-9.4,postgresql-9.4,postgres,postgres,http://www.postgresql.org/support/submitbug/,Object-relational SQL database,database,1,1,1,,
  procmail,,8853,procmail,, Versatile e-mail processor,Standard System Utilities,1,0,0,"Processes email passed in, so it does process untrusted data from the network.",,
  procps,,procps,procps,, /proc file system utilities,Standard System Utilities,0,0,0,,,
  psmisc,,psmisc,psmisc,, utilities that use the proc file system,Standard System Utilities,0,0,0,,,
  puppet-common,puppet,puppet,puppet,https://tickets.puppetlabs.com/secure/Dashboard.jspa,configuration management system,admin,1,1,1,,
  pyflakes,pyflakes,pyflakes,pyflakes,https://bugs.launchpad.net/pyflakes/+filebug,passive checker of Python 2 and 3 programs,,0,0,0,,
  python2.6-minimal,python2.6,python,python,, Minimal subset of the Python language (version 2.6),Standard System Utilities,0,0,0,,,
  python2.6,,python,python,, Interactive high-level object-oriented language (version 2.6),Standard System Utilities,0,0,0,,,
  python2.7-minimal,python2.7,python,python,, Minimal subset of the Python language (version 2.7),Standard System Utilities,0,0,0,,,
  python2.7,,python,python,, Interactive high-level object-oriented language (version 2.7),Standard System Utilities,0,0,0,,,
  python3-django,python-django,django,django,https://code.djangoproject.com/,High-level Python web development framework,python,1,1,1,,
  python3-flake8,python-flake8,flake8,flake8,https://gitlab.com/pycqa/flake8/issues,code checker using pep8 and pyflakes,python,0,0,0,,
  python-apt-common,python-apt,python-apt,python-apt,, Python interface to libapt-pkg (locales),Standard System Utilities,0,0,0,,,
  python-apt,,python-apt,python-apt,, Python interface to libapt-pkg,Standard System Utilities,0,0,0,,,
  python-celery-common,celery,celery,celery,https://github.com/celery/celery/issues,async task/job queue based on message passing (common files),python,1,1,1,,
  python-chardet,chardet,chardet,chardet,, universal character encoding detector,Standard System Utilities,0,0,0,,,
  python-debianbts,,python-debianbts,python-debianbts,, Python interface to Debian's Bug Tracking System,Standard System Utilities,0,0,0,,,
  python-debian,,python-debian,python-debian,, Python modules to work with Debian-related data formats,Standard System Utilities,0,0,0,,,
  python-djangorestframework,djangorestframework,djangorestframework,djangorestframework,https://github.com/tomchristie/django-rest-framework/issues,"Web APIs for Django, made easy",python,1,1,1,,
  python-flask,flask,flask,flask,https://github.com/mitsuhiko/flask/issues,"micro web framework based on Werkzeug, Jinja2 and good intention",python,1,1,1,,
  python-fpconst,fpconst,,fpconst,, Utilities for handling IEEE 754 floating point special values,Standard System Utilities,0,0,0,,,
  python-kombu,kombu,kombu,kombu,https://github.com/celery/kombu,AMQP Messaging Framework for Python,,1,1,1,,
  python-minimal,python-defaults,python,python-minimal,, minimal subset of the Python language (default version),Standard System Utilities,0,0,0,,,
  python-pip,python-pip,pip,Python pip,https://github.com/pypa/pip/issues,alternative Python package installer,python,1,1,1,,
  python-pytest,python-pytest,pytest,pytest,https://github.com/pytest-dev/pytest/issues,"Simple, powerful testing in Python",python,0,0,0,,
  python,python-defaults,python,python,, interactive high-level object-oriented language (default version),Standard System Utilities,0,0,0,,,
  python-reportbug,reportbug,,reportbug,, Python modules for interacting with bug tracking systems,Standard System Utilities,0,0,0,,,
  python-requests,requests,requests,Python-requests,https://github.com/kennethreitz/requests/issues,"elegant and simple HTTP library for Python2, built for human beings",,1,1,1,,
  python-soappy,,python-soappy,python-soappy,, SOAP Support for Python,Standard System Utilities,1,0,0,,,
  python-support,,python-support,python-support,, automated rebuilding support for Python modules,Standard System Utilities,0,0,0,,,
  qemu,,qemu,qemu,https://bugs.launchpad.net/qemu/,fast processor emulator,,0,0,1,,,
  rabbitmq-server,rabbitmq-server,rabbitmq,rabbitmq,https://github.com/rabbitmq/rabbitmq-server/issues,AMQP server written in Erlang,net,1,1,1,,
  readline-common,readline6,,readline,," GNU readline and history libraries, common files",Standard System Utilities,0,0,0,,,
  reportbug,,reportbug,reportbug,, reports bugs in the Debian distribution,Standard System Utilities,1,0,0,,,
  rpcbind,,rpcbind,rpcbind,, converts RPC program numbers into universal addresses,Standard System Utilities,1,0,0,"IPC communication, including network communcation from untrustworthy sources.",,
  rpm,,rpm,,,,,0,1,0,"This is used by RPM-based systems to install programs.  Here we refer to the version at rpm.org (used by Fedora, Red Hat Enterprise Linux, CentOS, SUSE).  (Note that there is a fork by the original RPM maintainer (Jeff Johnson) at rpm5.org, used by some organizations.)  Has ticket tracker, many long-opened defect tickets. Latest release 2014-10-09. Repo publicly available in git, see: http://rpm.org/wiki/GetSource and a number of commits in 2015 (and before).",,
  rsync,,rsync,rsync,https://rsync.samba.org/bugzilla.html,"fast, versatile, remote (and local) file-copying tool",Standard System Utilities,1,0,0,,,
  rsyslog,,rsyslog,rsyslog,, reliable system and kernel logging daemon,Standard System Utilities,1,0,0,"Processes data from untrusted users.  Important today; as systemd becomes more used, its use may lessen but still important for merging data sources. Project page http://www.rsyslog.com/ Official repo on GitHub, https://github.com/rsyslog This is an active multi-person project; in the one-month period February 12, 2015 ﾖ March 12, 2015, excluding merges, 7 authors have pushed 27 commits to master and 40 commits to all branches. On master, 37 files have changed and there have been 677 additions and 216 deletions. ++",,
  samba,,samba,samba,https://bugzilla.samba.org/,"SMB/CIFS file, print, and login server for Unix",,1,0,0,,,
  sed,,sed,sed,, The GNU sed stream editor,Standard System Utilities,0,0,0,,,
  sendmail,sendmail,4536,,,,,1,0,0,"This is a widely-used mail transfer agent (MTA). Sendmail main site https://www.sendmail.com/sm/open_source/ No public repo found.  However, they have tarball “snapshots”; on 2015-03-13 the current snapshot was 2015-03-06. This indicates active development, but its development seems opaque so difficult to say more. Version 8.15.1 posted 2014-12-06.",,
  sensible-utils,,debianutils,debianutils,, Utilities for sensible alternative selection,Standard System Utilities,0,0,0,,,
  sgml-base,,,sgml,, SGML infrastructure and SGML catalog file support,Standard System Utilities,0,0,0,,,
  ssl-cert,,debconf,debconf,, simple debconf wrapper for OpenSSL,Web Server,1,0,0,See OpenSSL.,,
  subversion,,subversion,,,,,0,1,0,,,
  suricata,suricata,suricata-engine,suricata,https://redmine.openinfosecfoundation.org/projects/suricata/issues,Next Generation Intrusion Detection and Prevention Tool,net,1,1,1,,
  sysvinit,,sysvinit,sysvinit,, System-V-like init utilities,Standard System Utilities,0,0,0,,,
  sysvinit-utils,sysvinit,sysvinit,sysvinit,, System-V-like utilities,Standard System Utilities,0,0,0,,,
  sysv-rc,sysvinit,sysvinit,sysvinit,, System-V-like runlevel change mechanism,Standard System Utilities,0,0,0,,,
  tar,,tar,tar,, GNU version of the tar archiving utility,Standard System Utilities,0,1,0,"Widely-used compression/decompression.  Vital, a vulnerability here could be very serious. Has Home page, mailing list, Public Repo git://git.savannah.gnu.org/tar.git, uses ""technical support"" for issue tracking (could be confusing).  Does have changes in git repo, but only a few a month and typically small. ++",,
  task-english,tasksel,tasksel,tasksel,, General English environment,Standard System Utilities,0,0,0,,,
  tasksel-data,tasksel,tasksel,tasksel,, Official tasks used for installation of Debian systems,Standard System Utilities,0,0,0,,,
  tasksel,,tasksel,tasksel,, Tool for selecting tasks for installation on Debian systems,Standard System Utilities,0,0,0,,,
  task-ssh-server,tasksel,tasksel,tasksel,, SSH server,SSH Server,1,0,0,,,
  task-web-server,tasksel,tasksel,tasksel,, Web server,Web Server,0,0,0,,,
  tcpd,tcp-wrappers,,tcpwrapper,, Wietse Venema's TCP wrapper utilities,Standard System Utilities,1,0,0,Exposed to the network (wraps incoming requests). Has some security-relevant functions. Relatively small.,Upstream halted since 2001. ftp://ftp.porcupine.org/pub/security/index.html,
  telnet,netkit-telnet,,telnet,, The telnet client,Standard System Utilities,1,0,0,Telnet is a fundamentally insecure protocol and is being phased out in most locations.,Debian comment reports upstream as ftp://ftp.uk.linux.org/pub/linux/Networking/netkit/ which is no longer available.,
  texinfo,,texinfo,texinfo,, Documentation system for on-line information and printed output,Standard System Utilities,0,0,0,,,
  