TODO items
- #474322: glimpse removal (licensing)
- #475088: dcc removal (security issues)
- for r4: decide on http://teams.debian.net/lurker/message/20071212.212045.36bf9639.en.html
- schedule binNMUs for apache2-mpm-itk
- binNMUs of kdelibs/stable/arm against qt-x11-free/p-u/arm and kdebase/stable/arm against new rebuilt kdelibs/p-u/arm
Resolution Pending (30 uploads)
| Package | Version | Architectures | Action |
|---|---|---|---|
| b2evolution | 0.9.2-3+etch1 | Built:all source | ? |
| blender | 2.42a-7.1+etch1 | Built:alpha amd64 arm hppa i386 ia64 mips mipsel powerpc s390 source sparc | ? |
| cacti | 0.8.6i-3.4 | Built:all source | ? |
| cacti | 0.8.6i-3.3 | Built:all source | ? |
| cpio | 2.6-18.1+etch1 | Built:alpha amd64 arm hppa i386 ia64 mips mipsel powerpc s390 source sparc | ? |
| dns-flood-detector | 1.12-1etch1 | Built:i386 source | ? |
| exiv2 | 0.10-1.6 | Built:all amd64 source | |
Reason: Regression introduced in security update: should be fixed through stable-security | |||
| fai-kernels | 1.17+etch.18etch4 | Built:amd64 i386 powerpc source | ? |
| fai-kernels | 1.17+etch.18etch3 | Built:amd64 i386 powerpc source | ? |
| fai-kernels | 1.17+etch.18etch2 | Built:i386 source | ? |
| gforge | 4.5.14-22etch8 | Built:all source | ? |
| gforge | 4.5.14-22etch7 | Built:all source | ? |
| gforge | 4.5.14-22etch6 | Built:all source | ? |
| icedove | 1.5.0.13+1.5.0.15b.dfsg1+prepatch080417a-0etch1 | Built:all alpha amd64 arm hppa i386 ia64 mips mipsel powerpc s390 source sparc | ? |
| kazehakase | 0.4.2-1etch1 | Built:alpha amd64 arm hppa i386 ia64 mips mipsel powerpc s390 source sparc | ? |
| kiosktool | 1.0-2~etch+1 | Built:i386 source | ? |
| lighttpd | 1.4.13-4etch9 | Built:all amd64 source | ? |
| lighttpd | 1.4.13-4etch8 | Built:all alpha amd64 arm hppa i386 ia64 mips mipsel powerpc s390 source sparc | |
Reason: Fix denial of service (fixes for regressions) DSA: 1540 Still not ok according to the maintainer | |||
| lighttpd | 1.4.13-4etch7 | Built:all alpha amd64 arm hppa i386 ia64 mips powerpc s390 source sparc Missing:mipsel | |
Reason: Broken security update for denial of service fix DSA: 1540 | |||
| mplayer | 1.0~rc1-12etch3 | Built:all alpha amd64 arm hppa i386 ia64 mips mipsel powerpc s390 source sparc | |
Reason: Arbitrary code execution (#473056) [this is really CVE-2008-1558, not CVE-2008-0073; not associated to a DSA!?; no mail to d-release] | |||
| netpbm-free | 10.0-11.1+etch1 | Built:alpha amd64 arm hppa i386 ia64 mips mipsel powerpc s390 source sparc | ? |
| pdftohtml | 0.36-13etch1 | Built:i386 source | ? |
| php4 | 4.4.4-8+etch6 | Built:all alpha amd64 arm hppa i386 ia64 mips mipsel powerpc s390 source sparc | ? |
| php5 | 5.2.0-8+etch11 | Built:all alpha amd64 arm hppa i386 ia64 mips mipsel powerpc s390 source sparc | ? |
| qsynth | 0.2.5-2+etch1 | Built:i386 source | ? |
| roundup | 1.2.1-5+etch2 | Built:all source | ? |
| user-mode-linux | 2.6.18-1um-2etch.18etch4 | Built:i386 source | ? |
| user-mode-linux | 2.6.18-1um-2etch.18etch3 | Built:i386 source | ? |
| user-mode-linux | 2.6.18-1um-2etch.18etch2 | Built:i386 source | ? |
| wordpress | 2.0.10-1etch2 | Built:all source | ? |
Pending Processing (0 uploads)
Processed (99 uploads)
| Package | Version | Action |
|---|---|---|
| alsa-driver | 1.0.13-5etch1 | ACCEPTED |
Reason: kernel memory leak DSA: 1505 | ||
| alsaplayer | 0.99.76-9+etch1 | ACCEPTED |
Reason: Fix arbitrary code execution DSA: 1538 | ||
| apache2 | 2.2.3-4+etch5 | ACCEPTED |
Reason: Fix possible segfault introduced by patch for CVE-2007-6421. | ||
| asterisk | 1.2.13~dfsg-2etch4 | ACCEPTED |
Reason: Fix denial of service DSA: 1563 | ||
| asterisk | 1.2.13~dfsg-2etch3 | ACCEPTED |
This upload was superseded by a more current one. Reason: Several vulnerabilities DSA: 1525 | ||
| backup-manager | 0.7.5-4 | ACCEPTED |
Reason: Password disclosure DSA: 1518 | ||
| balsa | 2.3.13-3 | ACCEPTED |
Reason: Fix for stack-based buffer overflow | ||
| base-installer | 1.76etch1 | ACCEPTED |
Reason: correctly recognize powerpc64 systems (#469030) | ||
| chkrootkit | 0.47-2 | ACCEPTED |
Reason: Enye check was killing random applications (#421864) | ||
| clamav | 0.90.1dfsg-3etch11 | ACCEPTED |
Reason: Fix several vulnerabilities DSA: 1549 | ||
| clamav | 0.90.1dfsg-3etch10 | ACCEPTED |
This upload was superseded by a more current one. Reason: Several vulnerabilities DSA: 1497 | ||
| cupsys | 1.2.7-4etch3 | ACCEPTED |
Reason: Multiple vulnerabilities DSA: 1530 | ||
| debconf | 1.5.11etch2 | ACCEPTED |
Reason: Make debconf-apt-progress compatible with the Lenny installer | ||
| debian-goodies | 0.27+etch1 | ACCEPTED |
Reason: Insufficient input sanitising DSA: 1527 | ||
| dovecot | 1.0.rc15-2etch4 | ACCEPTED |
Reason: Fix privilege escalation DSA: 1516 | ||
| dspam | 3.6.8-5etch1 | ACCEPTED |
Reason: Information disclosure DSA: 1501 | ||
| evolution | 2.6.3-6etch2 | ACCEPTED |
Reason: Arbitrary code execution DSA: 1512 | ||
| exiftags | 0.98-1.1+etch1 | ACCEPTED |
Reason: Several vulnerabilities DSA: 1533 | ||
| firmware-nonfree | 0.4etch1 | ACCEPTED |
Reason: build-depend on new kernel ABI 2.6-6 (Closes: #468215) | ||
| glibc | 2.3.6.ds1-13etch6 | ACCEPTED |
Reason: Fix nscd host caching (#467609) | ||
| gnumeric | 1.6.3-5.1+etch1 | ACCEPTED |
Reason: Fix arbitrary code execution DSA: 1546 | ||
| grub | 0.97-27etch1 | ACCEPTED |
Reason: Fix 1 TiB disk addressing limit (#450951) | ||
| gs-esp | 8.15.3.dfsg.1-1etch1 | ACCEPTED |
Reason: Arbitrary code execution DSA: 1510 | ||
| gs-gpl | 8.54.dfsg.1-5etch1 | ACCEPTED |
Reason: Arbitrary code execution DSA: 1510 | ||
| gtimer | 1.1.6-11+b1 | ACCEPTED |
This upload was superseded by a more current one. Reason: rebuild against Etch libraries (#466453) | ||
| horde3 | 3.1.3-4etch3 | ACCEPTED |
Reason: Insufficient input sanitising DSA: 1519 | ||
| iceape | 1.0.13~pre080323b-0etch3 | ACCEPTED |
Reason: Fix arbitrary code execution DSA: 1562 | ||
| iceape | 1.0.13~pre080323b-0etch2 | ACCEPTED |
This upload was superseded by a more current one. Reason: Fix several vulnerabilities (fixes for regression) DSA: 1534 | ||
| iceape | 1.0.13~pre080323b-0etch1 | ACCEPTED |
This upload was superseded by a more current one. Reason: Fixes for several vulnerabilities DSA: 1534 | ||
| iceape | 1.0.12~pre080131b-0etch2 | ACCEPTED |
This upload was superseded by a more current one. Reason: Fix several vulnerabilities (fixes for regression) DSA: 1506 | ||
| iceape | 1.0.12~pre080131b-0etch1 | ACCEPTED |
This upload was superseded by a more current one. Reason: Fix several vulnerabilities DSA: 1506 | ||
| icedove | 1.5.0.13+1.5.0.15b.dfsg1-0etch2 | ACCEPTED |
Reason: Several vulnerabilities (fixes for regression) DSA: 1485 | ||
| iceweasel | 2.0.0.14-0etch1 | ACCEPTED |
Reason: Fix arbitrary code execution DSA: 1555 | ||
| iceweasel | 2.0.0.13-0etch1 | ACCEPTED |
This upload was superseded by a more current one. Reason: Fixes for several vulnerabilities DSA: 1535 | ||
| icu | 3.6-2etch1 | ACCEPTED |
Reason: Multiple problems DSA: 1511 | ||
| ikiwiki | 1.33.5 | ACCEPTED |
Reason: Fix cross-site request forgery DSA: 1553 | ||
| ikiwiki | 1.33.4 | ACCEPTED |
This upload was superseded by a more current one. Reason: Fix cross-site scripting DSA: 1523 | ||
| kdelibs | 3.5.5a.dfsg.1-8etch1+b1 | ACCEPTED |
This upload was superseded by a more current one. Reason: rebuild against updated qt-x11-free | ||
| kernel-patch-openvz | 028.18.1+etch6 | ACCEPTED |
Reason: several vulnerabilities DSA: 1428 | ||
| koffice | 1.6.1-2etch2 | ACCEPTED |
Reason: Multiple vulnerabilities (xpdf) DSA: 1509 | ||
| krb5 | 1.4.4-7etch6 | ACCEPTED |
Reason: Fix rare kadmind crash on 64-bit platforms during password change (#428732) | ||
| krb5 | 1.4.4-7etch5 | ACCEPTED |
This upload was superseded by a more current one. Reason: Multiple vulnerabilities DSA: 1524 | ||
| kronolith2 | 2.1.4-1etch1 | ACCEPTED |
Reason: Fix cross site scripting DSA: 1560 | ||
| ldapscripts | 1.4-2etch1 | ACCEPTED |
Reason: Information disclosure DSA: 1517 | ||
| libcairo | 1.2.4-4.1+etch1 | ACCEPTED |
Reason: Arbitrary code execution DSA: 1542 | ||
| libimager-perl | 0.50-1etch1 | ACCEPTED |
Reason: Arbitrary code execution DSA: 1498 | ||
| libnet-dns-perl | 0.59-1etch1 | ACCEPTED |
Reason: Several vulnerabilities DSA: 1515 | ||
| lighttpd | 1.4.13-4etch6 | ACCEPTED |
Reason: Arbitrary file disclosure | ||
| lighttpd | 1.4.13-4etch5 | ACCEPTED |
This upload was superseded by a more current one. Reason: Fix CGI source disclosure DSA: 1513 | ||
| linux-2.6 | 2.6.18.dfsg.1-20 | ACCEPTED |
Reason: several issues (#473824) (#466401) (#471427) (#469058) | ||
| linux-2.6 | 2.6.18.dfsg.1-19 | ACCEPTED |
This upload was superseded by a more current one. Reason: several issues (#473824) (#466401) (#471427) (#469058) | ||
| linux-2.6.24 | 2.6.24-6~etchnhalf.2 | ACCEPTED |
Reason: updated kernel for etchnhalf | ||
| linux-2.6.24 | 2.6.24-6~etchnhalf.1 | ACCEPTED |
This upload was superseded by a more current one. Reason: updated kernel for etchnhalf | ||
| ltsp | 0.99debian11+etch1 | ACCEPTED |
Reason: Fix information disclosure DSA: 1561 | ||
| mapserver | 4.10.0-5.1+etch2 | ACCEPTED |
Reason: Multiple vulnerabilities DSA: 1539 | ||
| moin | 1.5.3-1.2etch1 | ACCEPTED |
Reason: Several vulnerabilities DSA: 1514 | ||
| openldap2.3 | 2.3.30-5+etch1 | ACCEPTED |
Reason: Fix denial of service DSA: 1541 | ||
| openoffice.org | 2.0.4.dfsg.2-7etch5 | ACCEPTED |
Reason: Fix arbitrary code execution DSA: 1547 | ||
| openssl | 0.9.8c-4etch3 | ACCEPTED |
Reason: Fix predictable random number generator DSA: 1571 | ||
| openssl | 0.9.8c-4etch2 | ACCEPTED |
This upload was superseded by a more current one. Reason: Security update fixing CVE-2007-4995 and CVE-2007-3108 (#438142) | ||
| partman-lvm | 53etch1 | ACCEPTED |
Reason: Fix installation with already existing RAID (#470374) | ||
| pcre3 | 6.7+7.4-3 | ACCEPTED |
Reason: Arbitrary code execution DSA: 1499 | ||
| pdns-recursor | 3.1.4-1+etch1 | ACCEPTED |
Reason: Fix cache poisioning vulnerability DSA: 1544 | ||
| perl | 5.8.8-7etch3 | ACCEPTED |
Reason: Fix denial of service (revised security update) DSA: 1556 | ||
| perl | 5.8.8-7etch2 | ACCEPTED |
This upload was superseded by a more current one. Reason: Fix denial of service DSA: 1556 | ||
| php5 | 5.2.0-8+etch11~p1 | ACCEPTED |
Reason: Fix crashes with php5-recode (#459020) | ||
| phpgedview | 4.0.2.dfsg-3 | ACCEPTED |
Reason: Fix cross site scripting DSA: 1559 | ||
| phpmyadmin | 2.9.1.1-7 | ACCEPTED |
Reason: Fix several vulnerabilities DSA: 1557 | ||
| policyd-weight | 0.1.14-beta-6etch2 | ACCEPTED |
Reason: Fix insecure temporary files DSA: 1531 | ||
| policyd-weight | 0.1.14-beta-6etch1 | ACCEPTED |
This upload was superseded by a more current one. Reason: Fix insecure temporary files DSA: 1531 | ||
| python2.4 | 2.4.4-3+etch1 | ACCEPTED |
Reason: Fix several vulnerabilities DSA: 1551 | ||
| qt-x11-free | 3.3.7-4etch2 | ACCEPTED |
Reason: Ease updates of KDE by hardcoding the unames | ||
| rdesktop | 1.5.0-1etch2 | ACCEPTED |
Reason: Fix several vulnerabilities DSA: 1573 | ||
| roundup | 1.2.1-5+etch1 | ACCEPTED |
Reason: Fix cross-site scripting vulnerabily DSA: 1554 | ||
| rsync | 2.6.9-2etch2 | ACCEPTED |
Reason: Arbitrary code execution DSA: 1545 | ||
| sage | 0.1.2-1+b2 | ACCEPTED |
This upload was superseded by a more current one. Reason: Rebuild against libsdl1.2_1.2.11-8 to kill off dangling .la references. | ||
| sdl-image1.2 | 1.2.5-2+etch1 | ACCEPTED |
Reason: Rebuild with higher version number DSA: 1493 | ||
| sear | 0.6.1-1+b1 | ACCEPTED |
This upload was superseded by a more current one. Reason: Rebuild against lib3ds-dev 1.2.0-4.1+etch1 (propagate fix for #399761) | ||
| serendipity | 1.0.4-1+etch1 | ACCEPTED |
Reason: Fix cross site scripting DSA: 1528 | ||
| smarty | 2.6.14-1etch1 | ACCEPTED |
Reason: Insufficient input sanitising DSA: 1520 | ||
| splitvt | 1.6.5-9etch1 | ACCEPTED |
Reason: Fix privilege escalation DSA: 1500 | ||
| suphp | 0.6.2-1+etch0 | ACCEPTED |
Reason: Fix local privilege escalation DSA: 1550 | ||
| sword | 1.5.9-2etch1 | ACCEPTED |
Reason: Insufficient input sanitising DSA: 1508 | ||
| turba2 | 2.1.3-1etch1 | ACCEPTED |
Reason: Fix permission testing DSA: 1507 | ||
| tzdata | 2007k-1etch1 | ACCEPTED |
Reason: New timezone information (#457938, #469194) | ||
| unzip | 5.52-9etch1 | ACCEPTED |
Reason: Programming error DSA: 1522 | ||
| vlc | 0.8.6-svn20061012.debian-5.1+etch2 | ACCEPTED |
Reason: Fix several vulnerabilities DSA: 1543 | ||
| vzctl | 3.0.11-14 | ACCEPTED |
Reason: Fix file permission transfer on migrations (#469293) | ||
| wml | 2.0.11-1etch2 | ACCEPTED |
Reason: clean up temporary files (#471345) DSA: 1492 | ||
| wordpress | 2.0.10-1etch1 | ACCEPTED |
Reason: Multiple vulnerabilities DSA: 1502 | ||
| wxmaxima | 0.7.0a-1.1 | ACCEPTED |
Reason: fix connection problems making the package unusable (#432665) | ||
| xine-lib | 1.1.2+dfsg-6 | ACCEPTED |
Reason: Several vulnerabilities DSA: 1536 | ||
| xpdf | 3.01-9.1+etch4 | ACCEPTED |
Reason: Fix arbitrary code execution DSA: 1548 | ||
| xpdf | 3.01-9.1+etch2 | ACCEPTED |
This upload was superseded by a more current one. Reason: Multiple vulnerabilities DSA: 1537 | ||
| xpenguins-applet | 2.1.1-3.1etch1 | ACCEPTED |
Reason: Avoid double free (#442284, #364590) | ||
| xserver-xorg-video-nv | 2.0.3-1 | ACCEPTED |
Reason: Etch and a half upload supporting new hardware | ||
| xulrunner | 1.8.0.15~pre080323b-0etch2 | ACCEPTED |
Reason: Fix arbitrary code execution DSA: 1558 | ||
| xulrunner | 1.8.0.15~pre080323b-0etch1 | ACCEPTED |
This upload was superseded by a more current one. Reason: Fix several vulnerabilities DSA: 1532 | ||
| xwine | 1.0.1-1etch1 | ACCEPTED |
Reason: Fix several vulnerabilities DSA: 1522 | ||





