Hardening subgoal for Wheezy:
All packages, which had a DSA since 2006. 

Instructions:
- After checking a package, add it to the "Candidates:" or "Non-candidates:" list
- After NMUing a candidate where all build flags have been successfully enabled, 
  add it to the "Resolved/fixed:" list
- After NMUing a candidate with only some of the build flags enabled, add it to
  the "Partially fixed: list (in order to remember what needs further work in the 
  future)

This lists needs cleaned up further:
- Software written in non-C/C++ languages (PHP, etc.) should be added to 
  the "Non-candidates:" list
- Some packages have been removed/superceded by newer srcpkg (I did
  some cursory cleanup, but needs more work)

To check:

abcmidi
acpid
afuse
aircrack-ng
albatross
alsaplayer
amarok
amule
antiword
apache2
apr
apr-util
apt
aria2
asterisk
audiofile
avahi
barnowl
belpic
bind9
blender
bluez-hcidump
bochs
bomberclone
bsdgames
bzip2
cabextract
camlimages
capi4hylafax
cgiirc
cheesetracker
chmlib
chromium-browser
chrony
citadel
clamav
collectd
couchdb
courier
courier-authlib
cpio
crawl
crossfire
cscope
ctorrent
cups
curl
cyrus-imapd-2.4
cyrus-imapd-2.2
cyrus-sasl2
dbus
devil
devscripts
dhcp
dhcp3
dia
djbdns
dkim-milter
dovecot
dpkg
drbd8
dspam
dtc
dvipng
e2fsprogs
eggdrop
ejabberd
ekg
elinks
elog
emacs21
enscript
etch
ethereal
evince
evolution
evolution-data-server
exiftags
exim4
exiv2
expat
fbi
fetchmail
file
firebird2
fireflier
flac
flex
flyspray
fontforge
freeciv
freeradius
freetype
fuse
gaim
ganeti
ganglia-monitor-core
gdm
gdm3
gforge
ghostscript
gimp
git-core
glib2.0
glibc
gmime2.2
gnocatan
gnomemeeting
gnome-peercast
gnumeric
gnupg
gnupg2
gnutls26
graphicsmagick
gst-plugins-bad0.10
gst-plugins-good0.10
gtetrinet
gv
gzip
hashcash
heartbeat
heimdal
hf
hostapd
hplip
htdig
httrack
hybserv
hylafax
iceape
icedove
iceweasel
icu
id3lib3.8.3
imagemagick
imlib2
inotify-tools
ipsec-tools
ircd-hybrid
isakmpd
isc-dhcp
iscsitarget
jabberd14
jasper
kaffeine
kazehakase
kde4libs
kdebase
kdegraphics
koffice
kolab-cyrus-imapd
kphone
krb5
krb5-appl
ktorrent
kvirc
kvm
l2tpns
lasso
lcms
ldns
lftp
libapache2-mod-authnz-external
libapache2-mod-auth-pgsql
libapache2-mod-fcgid
libapache-auth-ldap
libapache-mod-auth-kerb
libapache-mod-jk
libapreq2-perl
libarchive
libav
libast
libcairo
libcdaudio
libcgroup
libdbd-pg-perl
libdumb
libexif
libextractor
libfishsound
libgd2
libgsf
libgtop2
libhtml-parser-perl
libimager-perl
libmail-audit-perl
libmikmod
libmodplug
libmusicbrainz-2.0
libnet-dns-perl
libnss-ldap
libopenssl-ruby
libpam-heimdal
libpam-krb5
libpam-ldap
libpng
librpcsecgss
libsmi
libsndfile
libsoup
libspf2
libtasn1-2
libthai
libtheora
libtk-img
libtool
libtorrent-rasterbar
libtunepimp
libvirt
libvorbis
libwmf
libwpd
libxfont
libxml
libxml2
libxslt
lighttpd
link-grammar
links2
linux-ftpd
loop-aes-utils
lsh-server
ltsp
lurker
lvm2
lynx-cur
maildrop
mailman
man-db
mapserver
maradns
mediawiki
memcached
metamail
mimetex
mldonkey
mlmmj
moin
mon
mono
mpg123
mplayer
mplayer2
mt-daapd
mtr
multipath-tools
mutt
mydms
mydns
mysql-5.1
mysql-ocaml
nagios3
icinga
nagios-plugins
nas
nbd
ncompress
ndiswrapper
netatalk
netpbm-free
netrik
net-snmp
network-manager
newt
nginx
no-ip
noweb
nsd
nspr
nss
nss-ldapd
ntp
openafs
openexr
open-iscsi
openjdk-6
openldap
libreoffice
opensaml2
opensc
openssh
openssl
openswan
openvpn
oprofile
osiris
pam-pgsql
pango1.0
pcre3
pcsc-lite
pdfkit.framework
pdftohtml
pdns
pdns-recursor
peercast
perdition
perl
petris
php5
pidgin
pimd
pinball
pmount
polipo
poppler
postfix
postgresql-8.4
postgresql-9.0
postgresql-9.1
postgresql-ocaml
pound
ppp
pptpd
proftpd-dfsg
psi
pstotext
pulseaudio
pygresql
python2.6
python2.7
python3.2
python-cjson
python-crypto
pywebdav
qemu
qemu-kvm
qt4-x11
qt-x11-free
quagga
rdesktop
refpolicy
reprepro
request-tracker3.8
resmgr
rssh
rsync
ruby1.8
ruby1.9.1
ruby-gnome2
samba
sash
scponly
screen
sdl-image1.2
sendmail
shadow
silc-client
slurm-llnl
smstools
snmptrapfmt
socat
spamassassin
spamass-milter
speex
splitvt
sql-ledger
squid
squid3
squidguard
streamripper
strongswan
subversion
sudo
suphp
sword
sympa
syslog-ng
systemtap
t1lib
tar
tcpdump
tcpreen
telepathy-gabble
texinfo
tgt
thttpd
tiff
tinymux
tinyproxy
tk8.4
tk8.5
tk8.6
tmux
tor
tuxpaint
typespeed
udev
unalz
unbound
unicon
unzip
util-linux
uw-imap
vim
vino
vlc
vnc4
webcit
webkit
wesnoth
wget
wine
wireshark
wml
wordnet
wv2
wxwidgets2.6
wxwidgets2.8
wzdftpd
x11-xserver-utils
xapian-omega
xfce4-terminal
xfs
xine
xine-lib
xmcd
xmlsec1
xml-security-c
xmltooling
xmms
xorg-server
xpdf
xpvm
xterm
xulrunner
xwine
xzgv
zabbix
zgv
znc
zodb
zoo

Non-candidates:

adzapper
ajaxterm
apt-listchanges
auth2db
awstats
b2evolution
backup-manager
boinc
ca-certificates
cacti
changetrack
debian-goodies
dnsmasq
doctrine
dokuwiki
drupal6
enemies-of-carlotta
fail2ban
fcheck
fex
firefox-sage
flamethrower
flexbackup
gallery
gallery2
gfax
gitolite
gnatsweb
gtk+2.0
hiki
horde2
horde3
ikiwiki
ilohamail
imp4
ingo1
ipplan
jailer
jffnms
kronolith
kronolith2
ldap-account-manager
ldapscripts
libcrypt-cbc-perl
libmojolicious-perl
libnet-server-perl
libphp-adodb
libphp-phpmailer
libxerces2-java
logwatch
lookup-el
mahara
mantis
migrationtools
moodle
motor
movabletype-opensource
ocsinventory-agent
otrs
otrs2
php4
phpbb2
phpgedview
php-json-ext
phpldapadmin
php-mail
phpmyadmin
php-net-ping
phppgadmin
phpwiki
php-xajax
phpymadmin
policyd-weight
popfile
postfix-policyd
postgrey
python-cherrypy
python-django
python-dns
rails
redmine
request-tracker3.4
request-tracker3.6
roundup
serendipity
sitebar
slash
smarty
squirrelmail
storebackup
smbind
tdiary
tex-common
tetex-bin
trac
trac-git
transmission
tunapie
turba2
tutos
typo3-src
twiki
upcoming
usermin
webcalendar
webmin
websvn
weechat
wordpress
xen
yarssr
yaws
zaptel
zonecheck
zoph
bugzilla
sork-passwd-h3
spip
advi


Candidates:

Partially fixed:

Resolved/fixed:

Removed from the archive:
gcc-3.4
gforge-plugin-scmcvs
cvsnt
zope-ldapuserfolder
zope-cmfplone
zope2.10
zope2.7
xfree86
opie
firebird
bmv
gpdf
gsambad
gs-esp
lxr-cvs
nfs-user-server
newsx
kdelibs
links
abc2ps
apache
bind
centericq
cfs
cupsys