| /[secure-testing]/hardening/subgoal-dsa.txt |
Parent Directory
| 
Revision Log
| Links to HEAD: | (view) (download) (annotate) |
| Sticky Revision: |
submitted patch for emacs23, osiris should be removed, polipo already tracked in dsa.list
isc-dhcp and nss-pam-ldapd were fixed in maintainer uploads
submitted patches for vsftpd and pstotext
submitted patches for wget, libxml2 and sash. exiftags fixed in maintainer upload
libwmf fixed in maintainer upload
libsndfile fixed in maint upload
courier fixed in maintainer upload, submitted patch for pound
submitted patches for libsndfile and libtunepimp
submitted patches for lcms and libcgroup
submitted patch for libmodplug, libpam-heimdal removed
submitted patches for freeciv, librpcsecgss and libsmi
libarchive already hardened, submitted patch for links2
submitted patches for courier and exiftags, firebird2.5 hardening incomplete
audiofile fixed in maint upload, rm bsdgames, no sec relevance
dspam hardening, only needs a rebuild with current dpkg
submitted patch for cpio
curl, libpam-krb5 fixed kolab-cyrus-imapd doesn't need to be fixed, to be folded into standard cyrus pkg drop python2.6 and add python3.3 (candidate pythons for wheezy)
submitted patches for alsaplayer and curl drbd conversion not possible, currently broken collectd should rather be removed from the archive rdesktop fixed in maint upload
submitted patch for e2fsprogs
lynx hardened in maint upload
submitted patch for libpam-krb5
lighttpd fixed in maint upload, module-init-tools will be replaced with kmod
pimd and chmlib fixed in maint uploads
submitted patch for module-init-tools
submitted patches for socat, rssh, lighttpd and libxfont
submitted patches for libpng and mutt
submitted patches for lynx, mtr, forked-daapd and pimd
oprofile removed
remove petris, tuxpaint, typespeed: irrelevant for now
bluez-hcidump fixed in maint upload
track libexif bug remove pinball, not relevant
submitted patch for clamav
submitted patches for chmlib, nbd and beid
submitted patch for libwpd gv previously hardened by maintainer
drop abcmidi and crawl, not worth the trouble. These package can be converted later on, but no point in prioritising them
submitted patch for asterisk avahi already prepared for hardening, fixed with next upload util-linux already tracked in subgoal-important.txt
xmcd and thttpd removed
amule, enscript, xterm, findutils, iptables and inetutils hardened in maintainer uploads
made a QA upload for htdig mawk already hardened
cabextract now hardened apache2 switched to dpkg-buildflags, was already hardened
fetchmail building with hardening flags now
fontforge fixed in maintainer upload
submitted patches for capi4hylafax and fetchmail
submitted patches for fontforge, ctorrent and devil
fuse already hardened submitted patches for ekg and dovecot
submitted patches for expat and enscript
cyrus-2.2 has been removed, 2.4 uses hardening wrapper
surprisingly dpkg uses dpkg-buildflags :-)
filed patches for bochs and citadel
submitted patches for bluez-hcidump and cabextract
submitted patches for apt and barnowl wv2 fixed in maintainer upload
antiword fixed in very quick maintainer upload bug for audiofile
filed patches for acpid and amule
submitted patch for antiword kphone removed apache, apr and apr-util already hardened
reprepro already fixed submitted patches for rdesktop and cscope filed bug for openssl
fbi fixed filed patch for xterm
submitted patch for file fixed xfs in QA upload jasper already hardened
hardening updates
hardening updates
elinks fixed file bug for rsync
hardening updates
harden updates
xorg-server fixed thanks to jcristau
new sympa upload
xpdf build is now hardened
etherape fixed in sid and spu
filed bug
fixed mailman
ghostscript fixed
libmusicbrainz-2.1 NMUd
updates
remaining non candidates
filter cdbs packages more removals
mt-daapd -> forked-daapd nss-ldapd -> nss-pam-ldapd remove removals
- libcairo -> cairo - libtasn1-2 -> libtasn1-3 - libmusicbrainz-2.0 -> -libmusicbrainz-2.1 - more removed pkgs
ethereal -> wireshark belpic - beid firebird2 -> firebird2.5 gdm -> gdm3 ganglia-monitor-core -> ganglia
zgv fixed
- move removed pkgs to separate file, update list of removed pkgs - more cdbs pkgs - remove pkgs covered in subgoal important from subgoal dsa
gimp fixed
move all non-candidates to a shared file
libvirt and ncompress have been fixed more non-candidates
- change more pkgs to source pkg name - udev is the first pkg converted to dpkg-buildflags - aircrack-ng removed
also mark pkgs using hardening-includes as fixed
removed pkgs / updates nsd -> nsd3
mark pkgs already using hardening-wrapper as fixed
updates libsoup -> libsoup2.4
updates
more non-candidates gmime2.2 -> gmime2.4 glibc -> eglibc gnocatan -> pioneers
more removed pkgs isc-dhcp instead of dhcp/dhcp3 emacs23 instead of emacs21
more removed/non-candidate pkgs track cyrus-imapd-2.4 instead of cyrus-imapd
further removals / non-candidates
further removed pkgs bugzilla non-candidate track gnutls26
track removed pkgs track xen instead of xen-3.0
first filter of non-eligible packages
some more hardening info
add some instructions for hardening work
use the secure-testing repo for initial tracking/coordinating of sec hardening work. Will possibly moved elsewhere once more appropriate infrastructure has been found.
This form allows you to request diffs between any two revisions of this file. For each of the two "sides" of the diff, enter a numeric revision.
| ViewVC Help | |
| Powered by ViewVC 1.1.5 |