[Secure-testing-team] testing security status

[Joey Hess]

Another one of my periodic mails generated by checking every security holes
listed on http://spohr.debian.org/~joeyh/testing-security.html as fixed in
unstable but not in testing.

CCing this time to the mailing lists for the ports that appear in the
most issues below. You can grep for your architecture.

(Ignoring all m68k problems.)

abiword
	too young
	blocked on gmp/gcc-4.0

apachetop
	9 days old
	blocked on gmp/gcc-4.0

asterisk
	56 days old!
	RC bugs
	blocked by gmp/gcc-4.0/qt

clamav
	20 days old! (DTSAs issued)
	blocked by gmp

dia
	7 days old
	missing sparc build
	blocked by gmp/gcc-4.0

distcc
	too young
	missing arm build

eric
	10 days old
	RC bug (another security hole, shouldn't be let to block the first fix)
	blocked by gmp/gcc-4.0/qt

freeradius
	19 days old
	multiple FTBFS bugs (oldest is 342 days old with patch)
	needs NMU or something?

hylafax
	9 days old
	missing arm build
	blocked by gcc-4.0/gmp

kdebase
	22 days old
	KDE transition of course
	IIRC there have been t-p-u attempts that failed

kdeedu
	35 days old
	KDE transition of course
	missing arm, hppa builds

kdegraphics
	23 days old
	RC bugs
	missing mips build
	KDE transition of course

kdelibs
	22 days old
	missing hppa build
	KDE transition of course
	
kismet
	49 days old (DTSA issued)
	blocked by gmp

lm-sensors
	6 days old (DTSA issued)
	blocked by perl, which FTBFS on arm

login
	goes in tomorrow

mailutils
	25 days old
	missing arm build

mediawiki
	too young

mozilla
	25 days old (DTSAs issued for some issues)
	RC bugs
	missing alpha, arm, ia64 builds

mozilla-firefox
	16 days old (DTSAs issued for some issues)
	RC bug w/patch
	missing arm build
	blocked by gcc-4.0/gmp

mozilla-thunderbird
	8 days old
	missing arm, hppa builds
	blocked by gcc-4.0/gmp

mysql-dfsg-4.1
	9 days old
	missing sparc build
	blocked by gcc-4.0/gmp
	
net-snmp
	29 days old
	blocked by perl, which FTBFS on arm

openssh
	too young
	RC bugs

php4
	too young (DTSA issued for some of the holes)
	blocked by gcc-4.0/gmp/qt/perl (standard php4 dep mess)

pvpgn
	too young

python2.1
	40 days old
	blocked by gmp

python2.3
	40 days old
	blocked by gmp

ruby1.8
	18 days old
	RC bug with patch (plus m68k build failure RC bug)

slune
	17 days old
	blocked by soya which is missing an arm build

smb4k
	39 days old
	blocked by kde transition

texmacs
	85 days old!
	missing arm, hppa builds

turqstat
	28 days old
	missing hppa build
	blocked by gcc-4.0/gmp

util-linux
	18 days old
	missing mips, mipsel builds

wine
	too young
	jack transition

xloadimage
	too young
	blocked by libpng hich is missing an arm build

-- 
see shy jo
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature
Url : http://lists.alioth.debian.org/pipermail/secure-testing-team/attachments/20051010/5cbf3d3e/attachment.pgp