DSA candidates

[Security Tracker]

ansible/stable
--
apache2/stable
--
cairo/stable
--
gitlab/stable
--
gnulib/stable
--
imagemagick/stable
--
jekyll/stable
--
libapache2-mod-perl2/stable
--
libbson/stable
--
net-snmp/stable
--
neutron/stable
--
openvswitch/stable
--
php-horde/stable
--
php-horde-core/stable
--
php-horde-kronolith/stable
--
qemu/stable
--
qpdf/stable
--
resiprocate/stable
--
ruby-doorkeeper/stable
--
ruby-omniauth-saml/stable
--
ruby-rails-admin/stable
--
ruby-rails-html-sanitizer/stable
--
ruby-saml/stable
--
ruby-sanitize/stable
--
ruby-zip/stable
--
rustc/stable
--
simplesamlphp/stable
--
spice/stable
--
spice-gtk/stable
--
tiff/stable
--
tomcat8/stable
--
twitter-bootstrap3/stable
--
------
The above is a list of DSA candidates based on the tracker's information.
One should evaluate the candidates and either add them to dsa-needed.txt
or consider tagging them no-dsa.