[Secure-testing-team] what else needs a DTSA right now?

[Joey Hess]

Can anyone suggest any more good candidates for DTSAs in the list of
unfixed holes in testing? I've been trying to cover all the remote
exploits and bad local exploits and aside from updating the kernel and
mozilla thunderbird (which I can't get to build), I don't see many 
other obvious candidates of that nature.

I also looked at these:

 - drupal: should get into testing soon on its own
 - evolution: missing m68k build, otherwise a possibility
 - bluez-utils: needs bluez-libs updated too, which could be tricky
 - openvpn: well, possible, very young in unstable though
 - pdns: too young in unstable
 - php4: rc bugs, fix not in unstable
 - zlib: too young in unstable, would rather not add new upstreams of
   core libs to the repo until we know what can go wrong

-- 
see shy jo
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature
Url : http://lists.alioth.debian.org/pipermail/secure-testing-team/attachments/20050830/dfbe51ba/attachment.pgp