[Secure-testing-team] Re: summary of what's blocking security fixes from testing

[Moritz Muehlenhoff]

Steve Langasek wrote:
> > mozilla-thunderbird
> > 	41 days old
> > 	FTBFS on alpha, arm, m68k
> 
> ... with a patch in the BTS, if someone wants to NMU...

The maintainer posted a followup to the firefox side of the latest
Mozilla IDN buffer overflow, so I very much suspect he's currently
preparing fixed thunderbird packages.
 
> > ntp
> > 	177 days old
> > 	3 RC bugs, max 98 days old, none with responses from maintainers
> > 	recommend removal from testing (and/or debian)
> 
> Are these different security bugs than the ones already fixed via
> proposed-updates?

No, it the same vulnerability as already fixed in t-p-u.
 
Cheers,
        Moritz