Nixpkgs security tracker

Dismissed

Permalink CVE-2012-1157

updated 2 months, 4 weeks ago by @LeSuisse Activity log

Created suggestion 3 months, 1 week ago
@LeSuisse ignored package moodle-dl 2 months, 4 weeks ago
@LeSuisse dismissed 2 months, 4 weeks ago

Moodle before 2.2.2 has a default repository capabilities issue where …

Moodle before 2.2.2 has a default repository capabilities issue where all repositories are viewable by all users by default

References

http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078209.html x_transferredx_refsource_MISC
https://security-tracker.debian.org/tracker/CVE-2012-1157 x_transferredx_refsource_MISC
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-1157 x_transferredx_refsource_MISC
https://access.redhat.com/security/cve/cve-2012-1157 x_transferredx_refsource_MISC
http://lists.fedoraproject.org/pipermail/package-announce/2012-May/081047.html x_transferredx_refsource_MISC
http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078210.html x_transferredx_refsource_MISC
http://lists.fedoraproject.org/pipermail/package-announce/2012-April/077635.html x_transferredx_refsource_MISC
http://lists.fedoraproject.org/pipermail/package-announce/2012-May/080712.html x_transferredx_refsource_MISC
https://moodle.org/mod/forum/discuss.php?d=198624 x_refsource_CONFIRMx_transferred

Affected products

Moodle

==2.0 to 2.0.7+
==2.2 to 2.2.1+
==2.1 to 2.1.4+

Matching in nixpkgs

pkgs.moodle

Free and open-source learning management system (LMS) written in PHP

nixos-unstable 5.1.1
- nixpkgs-unstable 5.1.1
- nixos-unstable-small 5.1.1
nixos-25.11 5.0.4
- nixos-25.11-small 5.0.4
- nixpkgs-25.11-darwin 5.0.4

Ignored packages (1)

pkgs.moodle-dl

Moodle downloader that downloads course content fast from Moodle

nixos-unstable 2.3.13
- nixpkgs-unstable 2.3.13
- nixos-unstable-small 2.3.13
nixos-25.11 2.3.13
- nixos-25.11-small 2.3.13
- nixpkgs-25.11-darwin 2.3.13

Package maintainers

@freezeboy freezeboy

Old issue current stable branch was never impacted.

Dismissed

Permalink CVE-2012-1161

updated 2 months, 4 weeks ago by @LeSuisse Activity log

Created suggestion 3 months, 1 week ago
@LeSuisse ignored package moodle-dl 2 months, 4 weeks ago
@LeSuisse dismissed 2 months, 4 weeks ago

Moodle before 2.2.2: Course information leak via hidden courses being …

Moodle before 2.2.2: Course information leak via hidden courses being displayed in tag search results

References

http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078209.html x_transferredx_refsource_MISC
http://lists.fedoraproject.org/pipermail/package-announce/2012-May/081047.html x_transferredx_refsource_MISC
http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078210.html x_transferredx_refsource_MISC
https://security-tracker.debian.org/tracker/CVE-2012-1161 x_transferredx_refsource_MISC
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-1161 x_transferredx_refsource_MISC
https://access.redhat.com/security/cve/cve-2012-1161 x_transferredx_refsource_MISC
http://lists.fedoraproject.org/pipermail/package-announce/2012-April/077635.html x_transferredx_refsource_MISC
http://lists.fedoraproject.org/pipermail/package-announce/2012-May/080712.html x_transferredx_refsource_MISC
https://moodle.org/mod/forum/discuss.php?d=198630 x_refsource_CONFIRMx_transferred

Affected products

Moodle

==2.2 to 2.2.1+
==2.1 to 2.1.4+

Matching in nixpkgs

pkgs.moodle

Free and open-source learning management system (LMS) written in PHP

nixos-unstable 5.1.1
- nixpkgs-unstable 5.1.1
- nixos-unstable-small 5.1.1
nixos-25.11 5.0.4
- nixos-25.11-small 5.0.4
- nixpkgs-25.11-darwin 5.0.4

Ignored packages (1)

pkgs.moodle-dl

Moodle downloader that downloads course content fast from Moodle

nixos-unstable 2.3.13
- nixpkgs-unstable 2.3.13
- nixos-unstable-small 2.3.13
nixos-25.11 2.3.13
- nixos-25.11-small 2.3.13
- nixpkgs-25.11-darwin 2.3.13

Package maintainers

@freezeboy freezeboy

Old issue current stable branch was never impacted.

Dismissed

Permalink CVE-2012-1156

updated 2 months, 4 weeks ago by @LeSuisse Activity log

Created suggestion 3 months, 1 week ago
@LeSuisse ignored package moodle-dl 2 months, 4 weeks ago
@LeSuisse dismissed 2 months, 4 weeks ago

Moodle before 2.2.2 has users' private files included in course …

Moodle before 2.2.2 has users' private files included in course backups

References

http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078209.html x_transferredx_refsource_MISC
https://security-tracker.debian.org/tracker/CVE-2012-1156 x_transferredx_refsource_MISC
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-1156 x_transferredx_refsource_MISC
https://access.redhat.com/security/cve/cve-2012-1156 x_transferredx_refsource_MISC
http://lists.fedoraproject.org/pipermail/package-announce/2012-May/081047.html x_transferredx_refsource_MISC
http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078210.html x_transferredx_refsource_MISC
http://lists.fedoraproject.org/pipermail/package-announce/2012-April/077635.html x_transferredx_refsource_MISC
http://lists.fedoraproject.org/pipermail/package-announce/2012-May/080712.html x_transferredx_refsource_MISC
https://moodle.org/mod/forum/discuss.php?d=198623 x_refsource_CONFIRMx_transferred

Affected products

Moodle

==2.0 to 2.0.7+
==2.2 to 2.2.1+
==2.1 to 2.1.4+

Matching in nixpkgs

pkgs.moodle

Free and open-source learning management system (LMS) written in PHP

nixos-unstable 5.1.1
- nixpkgs-unstable 5.1.1
- nixos-unstable-small 5.1.1
nixos-25.11 5.0.4
- nixos-25.11-small 5.0.4
- nixpkgs-25.11-darwin 5.0.4

Ignored packages (1)

pkgs.moodle-dl

Moodle downloader that downloads course content fast from Moodle

nixos-unstable 2.3.13
- nixpkgs-unstable 2.3.13
- nixos-unstable-small 2.3.13
nixos-25.11 2.3.13
- nixos-25.11-small 2.3.13
- nixpkgs-25.11-darwin 2.3.13

Package maintainers

@freezeboy freezeboy

Old issue current stable branch was never impacted.

Dismissed

Permalink CVE-2012-1159

updated 2 months, 4 weeks ago by @LeSuisse Activity log

Created suggestion 3 months, 1 week ago
@LeSuisse ignored package moodle-dl 2 months, 4 weeks ago
@LeSuisse dismissed 2 months, 4 weeks ago

Moodle before 2.2.2: Overview report allows users to see hidden …

Moodle before 2.2.2: Overview report allows users to see hidden courses

References

http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078209.html x_transferredx_refsource_MISC
http://lists.fedoraproject.org/pipermail/package-announce/2012-May/081047.html x_transferredx_refsource_MISC
https://security-tracker.debian.org/tracker/CVE-2012-1159 x_transferredx_refsource_MISC
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-1159 x_transferredx_refsource_MISC
https://access.redhat.com/security/cve/cve-2012-1159 x_transferredx_refsource_MISC
http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078210.html x_transferredx_refsource_MISC
http://lists.fedoraproject.org/pipermail/package-announce/2012-April/077635.html x_transferredx_refsource_MISC
http://lists.fedoraproject.org/pipermail/package-announce/2012-May/080712.html x_transferredx_refsource_MISC
https://moodle.org/mod/forum/discuss.php?d=198628 x_refsource_CONFIRMx_transferred

Affected products

Moodle

==2.2 to 2.2.1+
==2.1 to 2.1.4+

Matching in nixpkgs

pkgs.moodle

Free and open-source learning management system (LMS) written in PHP

nixos-unstable 5.1.1
- nixpkgs-unstable 5.1.1
- nixos-unstable-small 5.1.1
nixos-25.11 5.0.4
- nixos-25.11-small 5.0.4
- nixpkgs-25.11-darwin 5.0.4

Ignored packages (1)

pkgs.moodle-dl

Moodle downloader that downloads course content fast from Moodle

nixos-unstable 2.3.13
- nixpkgs-unstable 2.3.13
- nixos-unstable-small 2.3.13
nixos-25.11 2.3.13
- nixos-25.11-small 2.3.13
- nixpkgs-25.11-darwin 2.3.13

Package maintainers

@freezeboy freezeboy

Old issue current stable branch was never impacted.

Dismissed

Permalink CVE-2012-1158

updated 2 months, 4 weeks ago by @LeSuisse Activity log

Created suggestion 3 months, 1 week ago
@LeSuisse ignored package moodle-dl 2 months, 4 weeks ago
@LeSuisse dismissed 2 months, 4 weeks ago

Moodle before 2.2.2 has a course information leak in gradebook …

Moodle before 2.2.2 has a course information leak in gradebook where users are able to see hidden grade items in export

References

http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078209.html x_transferredx_refsource_MISC
http://lists.fedoraproject.org/pipermail/package-announce/2012-May/081047.html x_transferredx_refsource_MISC
https://security-tracker.debian.org/tracker/CVE-2012-1158 x_transferredx_refsource_MISC
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-1158 x_transferredx_refsource_MISC
https://access.redhat.com/security/cve/cve-2012-1158 x_transferredx_refsource_MISC
http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078210.html x_transferredx_refsource_MISC
http://lists.fedoraproject.org/pipermail/package-announce/2012-April/077635.html x_transferredx_refsource_MISC
http://lists.fedoraproject.org/pipermail/package-announce/2012-May/080712.html x_transferredx_refsource_MISC
https://moodle.org/mod/forum/discuss.php?d=198627 x_refsource_CONFIRMx_transferred

Affected products

Moodle

==2.2 to 2.2.1+
==2.1 to 2.1.4+

Matching in nixpkgs

pkgs.moodle

Free and open-source learning management system (LMS) written in PHP

nixos-unstable 5.1.1
- nixpkgs-unstable 5.1.1
- nixos-unstable-small 5.1.1
nixos-25.11 5.0.4
- nixos-25.11-small 5.0.4
- nixpkgs-25.11-darwin 5.0.4

Ignored packages (1)

pkgs.moodle-dl

Moodle downloader that downloads course content fast from Moodle

nixos-unstable 2.3.13
- nixpkgs-unstable 2.3.13
- nixos-unstable-small 2.3.13
nixos-25.11 2.3.13
- nixos-25.11-small 2.3.13
- nixpkgs-25.11-darwin 2.3.13

Package maintainers

@freezeboy freezeboy

Old issue current stable branch was never impacted.

Dismissed

Permalink CVE-2012-1155

updated 2 months, 4 weeks ago by @LeSuisse Activity log

Created suggestion 3 months, 1 week ago
@LeSuisse ignored package moodle-dl 2 months, 4 weeks ago
@LeSuisse dismissed 2 months, 4 weeks ago

Moodle has a database activity export permission issue where the …

Moodle has a database activity export permission issue where the export function of the database activity module exports all entries even those from groups the user does not belong to

References

https://security-tracker.debian.org/tracker/CVE-2012-1155 x_transferredx_refsource_MISC
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-1155 x_transferredx_refsource_MISC
https://access.redhat.com/security/cve/cve-2012-1155 x_transferredx_refsource_MISC
http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078209.html x_transferredx_refsource_MISC
http://lists.fedoraproject.org/pipermail/package-announce/2012-May/081047.html x_transferredx_refsource_MISC
http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078210.html x_transferredx_refsource_MISC
http://lists.fedoraproject.org/pipermail/package-announce/2012-April/077635.html x_transferredx_refsource_MISC
http://lists.fedoraproject.org/pipermail/package-announce/2012-May/080712.html x_transferredx_refsource_MISC
https://moodle.org/mod/forum/discuss.php?d=198621 x_refsource_CONFIRMx_transferred

Affected products

Moodle

==2.0.x
==2.2.x
==1.9.x
==2.1.x

Matching in nixpkgs

pkgs.moodle

Free and open-source learning management system (LMS) written in PHP

nixos-unstable 5.1.1
- nixpkgs-unstable 5.1.1
- nixos-unstable-small 5.1.1
nixos-25.11 5.0.4
- nixos-25.11-small 5.0.4
- nixpkgs-25.11-darwin 5.0.4

Ignored packages (1)

pkgs.moodle-dl

Moodle downloader that downloads course content fast from Moodle

nixos-unstable 2.3.13
- nixpkgs-unstable 2.3.13
- nixos-unstable-small 2.3.13
nixos-25.11 2.3.13
- nixos-25.11-small 2.3.13
- nixpkgs-25.11-darwin 2.3.13

Package maintainers

@freezeboy freezeboy

Old issue current stable branch was never impacted.

Dismissed

Permalink CVE-2012-1168

updated 2 months, 4 weeks ago by @LeSuisse Activity log

Created suggestion 3 months, 1 week ago
@LeSuisse ignored package moodle-dl 2 months, 4 weeks ago
@LeSuisse dismissed 2 months, 4 weeks ago

Moodle before 2.2.2 has a password and web services issue …

Moodle before 2.2.2 has a password and web services issue where when the user profile is updated the user password is reset if not specified.

References

http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078209.html x_transferredx_refsource_MISC
http://lists.fedoraproject.org/pipermail/package-announce/2012-May/081047.html x_transferredx_refsource_MISC
http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078210.html x_transferredx_refsource_MISC
https://security-tracker.debian.org/tracker/CVE-2012-1168 x_transferredx_refsource_MISC
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-1168 x_transferredx_refsource_MISC
https://access.redhat.com/security/cve/cve-2012-1168 x_transferredx_refsource_MISC
http://lists.fedoraproject.org/pipermail/package-announce/2012-April/077635.html x_transferredx_refsource_MISC
http://lists.fedoraproject.org/pipermail/package-announce/2012-May/080712.html x_transferredx_refsource_MISC
https://moodle.org/mod/forum/discuss.php?d=198622 x_refsource_CONFIRMx_transferred

Affected products

Moodle

==2.0 to 2.0.7+
==2.2 to 2.2.1+
==2.1 to 2.1.4+

Matching in nixpkgs

pkgs.moodle

Free and open-source learning management system (LMS) written in PHP

nixos-unstable 5.1.1
- nixpkgs-unstable 5.1.1
- nixos-unstable-small 5.1.1
nixos-25.11 5.0.4
- nixos-25.11-small 5.0.4
- nixpkgs-25.11-darwin 5.0.4

Ignored packages (1)

pkgs.moodle-dl

Moodle downloader that downloads course content fast from Moodle

nixos-unstable 2.3.13
- nixpkgs-unstable 2.3.13
- nixos-unstable-small 2.3.13
nixos-25.11 2.3.13
- nixos-25.11-small 2.3.13
- nixpkgs-25.11-darwin 2.3.13

Package maintainers

@freezeboy freezeboy

Old issue current stable branch was never impacted.

Published

Permalink CVE-2026-26047

6.5 MEDIUM

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Privileges Required (PR): Low (L)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): None (N)
Integrity (I): None (N)
Availability (A): High (H)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): Low (L)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): None (N)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): None (N)
Modified Availability (MA): High (H)

updated 2 months, 4 weeks ago by @LeSuisse Activity log

Created suggestion 3 months ago
@LeSuisse ignored package moodle-dl 3 months ago
@LeSuisse accepted 3 months ago
@LeSuisse published on GitHub 2 months, 4 weeks ago

Moodle: moodle: uncontrolled resource consumption in tex formula editor leading to denial of service

A denial-of-service vulnerability was identified in Moodle’s TeX formula editor. When rendering TeX content using mimetex, insufficient execution time limits could allow specially crafted formulas to consume excessive server resources. An authenticated user could abuse this behavior to degrade performance or cause service interruption.

References

https://access.redhat.com/security/cve/CVE-2026-26047 vdb-entryx_refsource_REDHAT
RHBZ#2440905 issue-trackingx_refsource_REDHAT

Affected products

moodle

<5.0.5
<5.1.2
<4.5.9

Matching in nixpkgs

pkgs.moodle

Free and open-source learning management system (LMS) written in PHP

nixos-unstable 5.1.1
- nixpkgs-unstable 5.1.1
- nixos-unstable-small 5.1.1
nixos-25.11 5.0.4
- nixos-25.11-small 5.0.4
- nixpkgs-25.11-darwin 5.0.4

Ignored packages (1)

pkgs.moodle-dl

Moodle downloader that downloads course content fast from Moodle

nixos-unstable 2.3.13
- nixpkgs-unstable 2.3.13
- nixos-unstable-small 2.3.13
nixos-25.11 2.3.13
- nixos-25.11-small 2.3.13
- nixpkgs-25.11-darwin 2.3.13

Package maintainers

@freezeboy freezeboy

Upstream advisory: https://moodle.org/mod/forum/discuss.php?d=473316#p1896307

Published

Permalink CVE-2026-26045

7.2 HIGH

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Privileges Required (PR): High (H)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): High (H)
Integrity (I): High (H)
Availability (A): High (H)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): High (H)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): High (H)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): High (H)
Modified Availability (MA): High (H)

updated 2 months, 4 weeks ago by @LeSuisse Activity log

Created suggestion 3 months ago
@LeSuisse ignored package moodle-dl 3 months ago
@LeSuisse accepted 3 months ago
@LeSuisse published on GitHub 2 months, 4 weeks ago

Moodle: moodle: improper validation in file restore functionality leading to remote code execution

A flaw was identified in Moodle’s backup restore functionality where specially crafted backup files were not properly validated during processing. If a malicious backup file is restored, it could lead to unintended execution of server-side code. Since restore capabilities are typically available to privileged users, exploitation requires authenticated access. Successful exploitation could result in full compromise of the Moodle server.

References

https://access.redhat.com/security/cve/CVE-2026-26045 vdb-entryx_refsource_REDHAT
RHBZ#2440901 issue-trackingx_refsource_REDHAT

Affected products

moodle

<5.0.5
<5.1.2
<4.5.9

Matching in nixpkgs

pkgs.moodle

Free and open-source learning management system (LMS) written in PHP

nixos-unstable 5.1.1
- nixpkgs-unstable 5.1.1
- nixos-unstable-small 5.1.1
nixos-25.11 5.0.4
- nixos-25.11-small 5.0.4
- nixpkgs-25.11-darwin 5.0.4

Ignored packages (1)

pkgs.moodle-dl

Moodle downloader that downloads course content fast from Moodle

nixos-unstable 2.3.13
- nixpkgs-unstable 2.3.13
- nixos-unstable-small 2.3.13
nixos-25.11 2.3.13
- nixos-25.11-small 2.3.13
- nixpkgs-25.11-darwin 2.3.13

Package maintainers

@freezeboy freezeboy

Upstream advisory: https://moodle.org/mod/forum/discuss.php?d=473314#p1896305

Published

Permalink CVE-2026-26046

7.2 HIGH

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Privileges Required (PR): High (H)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): High (H)
Integrity (I): High (H)
Availability (A): High (H)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): High (H)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): High (H)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): High (H)
Modified Availability (MA): High (H)

updated 2 months, 4 weeks ago by @LeSuisse Activity log

Created suggestion 3 months ago
@LeSuisse ignored package moodle-dl 3 months ago
@LeSuisse accepted 3 months ago
@LeSuisse published on GitHub 2 months, 4 weeks ago

Moodle: moodle: improper input sanitization in tex filter administration setting

A vulnerability was found in a Moodle TeX filter administrative setting where insufficient sanitization of configuration input could allow command injection. On sites where the TeX filter is enabled and ImageMagick is installed, a maliciously crafted setting value entered by an administrator could result in unintended system command execution. While exploitation requires administrative privileges, successful compromise could affect the entire Moodle server.

References

https://access.redhat.com/security/cve/CVE-2026-26046 vdb-entryx_refsource_REDHAT
RHBZ#2440903 issue-trackingx_refsource_REDHAT

Affected products

moodle

<5.0.5
<5.1.2
<4.5.9

Matching in nixpkgs

pkgs.moodle

Free and open-source learning management system (LMS) written in PHP

nixos-unstable 5.1.1
- nixpkgs-unstable 5.1.1
- nixos-unstable-small 5.1.1
nixos-25.11 5.0.4
- nixos-25.11-small 5.0.4
- nixpkgs-25.11-darwin 5.0.4

Ignored packages (1)

pkgs.moodle-dl

Moodle downloader that downloads course content fast from Moodle

nixos-unstable 2.3.13
- nixpkgs-unstable 2.3.13
- nixos-unstable-small 2.3.13
nixos-25.11 2.3.13
- nixos-25.11-small 2.3.13
- nixpkgs-25.11-darwin 2.3.13

Package maintainers

@freezeboy freezeboy

Upstream advisory: https://moodle.org/mod/forum/discuss.php?d=473315#p1896306

Suggestions search

References

Affected products

Matching in nixpkgs

pkgs.moodle

pkgs.moodle-dl

Package maintainers

References

Affected products

Matching in nixpkgs

pkgs.moodle

pkgs.moodle-dl

Package maintainers

References

Affected products

Matching in nixpkgs

pkgs.moodle

pkgs.moodle-dl

Package maintainers

References

Affected products

Matching in nixpkgs

pkgs.moodle

pkgs.moodle-dl

Package maintainers

References

Affected products

Matching in nixpkgs

pkgs.moodle

pkgs.moodle-dl

Package maintainers

References

Affected products

Matching in nixpkgs

pkgs.moodle

pkgs.moodle-dl

Package maintainers

References

Affected products

Matching in nixpkgs

pkgs.moodle

pkgs.moodle-dl

Package maintainers

References

Affected products

Matching in nixpkgs

pkgs.moodle

pkgs.moodle-dl

Package maintainers

References

Affected products

Matching in nixpkgs

pkgs.moodle

pkgs.moodle-dl

Package maintainers

References

Affected products

Matching in nixpkgs

pkgs.moodle

pkgs.moodle-dl

Package maintainers