| /[secure-testing]/hardening/subgoal-dsa.txt |
Parent Directory
| 
Revision Log
| Links to HEAD: | (view) (download) (annotate) |
| Sticky Revision: |
zabbix, gmime2.4 and opensaml hardened
submitted patch for maradns
submitted patch for lurker, filed bug for noweb
xmltooling fixed
submitted patches for ircd-hybrid and aptitude, filed bug for eglibc
filed bug for lvm2, submitted patch for ejabberd
submitted patches for net-snmp and nspr
mimetex and telepathy-gabble fixed, submitted patch for mono
submitted patch for hostapd xml-security-c and httrack fixed
submitted patch for gmime
submitted patch for nss
kazehakase was removed
submitted patch for proftpd-dfsg
exiv2 fixed, submitted patch for isakmpd
submitted patch for libtk-img, filed bug for gdbm
apt and xine-lib hardened
mlmmj, dspam, procps, tinyproxy fixed nas now fully hardened vsftpd and dmidecode not properly fixed, maintainer messed up my patches with "cleanups"
filed bug for libapache-mod-jk
submitted patches for icinga and iscsitarget
submitted patches for vnc4 and pdns
submitted patch for pdns-recursor, filed bug for incomplete nas fix
tcpreen and slurm-llnl fixed, nas partly fixed
submitted patches for slurm-llnl and snmptrapfmt
libtorrent-rasterbar fixed
submitted patches for libextractor and libmikmod
submitted patch for zabbix, suggested kazehakase for removal
vsftpd, mimetex and dmidecode fixed in maintainer uploads
pcsc-lite fixed in maintainer upload
submitted patches for texinfo and xml-security-c, ntp already hardened
submitted patches for xmlsec1 and xmltooling, filed bug for pptpd
submitted patches for mimetex and libreoffice
libcdaudio and asterisk hardened submitted patch for smstools
submitted patches for libtorrent-rasterbar and telepathy-gabble
submitted patch for webcit
submitted patches for procps, screen and imlib2
submitted patches for openexr and libcdaudio, strongswan already hardened
bsdmainutils fixed, submitted patches for exiv2 and opensc
submitted patch for qemu
submitted patches for pcsc-lite id3lib3.8.3, scponly filed for removal
submitted patch for unzip, texinfo already tracked in subgoal-dsa
submitted patches for hylafax/net-tools, filed bug for nano
submitted patches for slang2 and tgt
lftp fixed in maintainer upload
submitted patch for squidguard, filed bug for splitvt
submitted patches for loop-aes-utils and bsdmainutils
submitted patches for linux-ftpd, opensaml2 and pcre3
submitted patches for mlmmj, netrik and pam-pgsql
libxml2 and hostname fixed in maintainer uploads
submitted patches for systemtap and dmidecode
submitted patches for speex and netcat
submitted patches for hashcash and tinyproxy
krb5 fixed in maintainer upload
wget fixed in maintainer upload, filed bug for nas
submitted patches for netpbm-free
submitted patch for libxslt, firebird2.5 fixed in maintainer upload
wxwidgets2.6 removed, python3.3 not event in experimental
- citadel, zoo and sudo fixed in maintainer uploads - drop cdbs-based previous entries from the fixed list, the cdbs support for hardened build flags is a mess and needs more investigation
submitted patches for grep and x11-xserver-utils
submitted patches for zoo and base-passwd, boost1.42 removed
submitted patch for suphp
filed bug for ruby-gnome2, submitted patch for sudo
submitted patches for flex and perdition, nsd3 already hardened
libsmi and acpid fixed in maintainer uploads
mon fixed in maintainer upload, newt already tracked in subgoal dsa
submitted patch for tcpreen, mldonkey and avahi fixed in maintainer uploads
submitted patches for krb5 and ndiswrapper
- libpng fixed in maintainer upload - hybserv removed - cheesetracker removed - no-ip removed
filed bugs for avahi and dspam
couple pkgs to be removed
drop gcc-*, hybserv filed for removal
cheesetracker filed for removal
submitted patch for bzip2, drop devscripts (arch=all except for a four-line libvfork)
dia fixed in maintainer upload, filed bug for syslog-ng
mtr fixed in maintainer upload
submitted patch for xine-lib
filed bug for wzdftpd, sdl-image1.2 already hardened
submitted patches for openswan and mldonkey
submitted patch for mon, mpg123 already hardened
submitted patches for memcached and maildrop, dropped tinymux (not sec relevant)
submitted patches for cairo and openvpn
submitted patches for chrony and ganglia
submitted patch for emacs23, osiris should be removed, polipo already tracked in dsa.list
isc-dhcp and nss-pam-ldapd were fixed in maintainer uploads
submitted patches for vsftpd and pstotext
submitted patches for wget, libxml2 and sash. exiftags fixed in maintainer upload
libwmf fixed in maintainer upload
libsndfile fixed in maint upload
courier fixed in maintainer upload, submitted patch for pound
submitted patches for libsndfile and libtunepimp
submitted patches for lcms and libcgroup
submitted patch for libmodplug, libpam-heimdal removed
submitted patches for freeciv, librpcsecgss and libsmi
libarchive already hardened, submitted patch for links2
submitted patches for courier and exiftags, firebird2.5 hardening incomplete
audiofile fixed in maint upload, rm bsdgames, no sec relevance
dspam hardening, only needs a rebuild with current dpkg
submitted patch for cpio
curl, libpam-krb5 fixed kolab-cyrus-imapd doesn't need to be fixed, to be folded into standard cyrus pkg drop python2.6 and add python3.3 (candidate pythons for wheezy)
submitted patches for alsaplayer and curl drbd conversion not possible, currently broken collectd should rather be removed from the archive rdesktop fixed in maint upload
submitted patch for e2fsprogs
lynx hardened in maint upload
submitted patch for libpam-krb5
lighttpd fixed in maint upload, module-init-tools will be replaced with kmod
pimd and chmlib fixed in maint uploads
submitted patch for module-init-tools
submitted patches for socat, rssh, lighttpd and libxfont
submitted patches for libpng and mutt
submitted patches for lynx, mtr, forked-daapd and pimd
oprofile removed
remove petris, tuxpaint, typespeed: irrelevant for now
bluez-hcidump fixed in maint upload
track libexif bug remove pinball, not relevant
submitted patch for clamav
submitted patches for chmlib, nbd and beid
submitted patch for libwpd gv previously hardened by maintainer
drop abcmidi and crawl, not worth the trouble. These package can be converted later on, but no point in prioritising them
submitted patch for asterisk avahi already prepared for hardening, fixed with next upload util-linux already tracked in subgoal-important.txt
xmcd and thttpd removed
amule, enscript, xterm, findutils, iptables and inetutils hardened in maintainer uploads
made a QA upload for htdig mawk already hardened
cabextract now hardened apache2 switched to dpkg-buildflags, was already hardened
fetchmail building with hardening flags now
fontforge fixed in maintainer upload
submitted patches for capi4hylafax and fetchmail
submitted patches for fontforge, ctorrent and devil
fuse already hardened submitted patches for ekg and dovecot
submitted patches for expat and enscript
cyrus-2.2 has been removed, 2.4 uses hardening wrapper
surprisingly dpkg uses dpkg-buildflags :-)
filed patches for bochs and citadel
submitted patches for bluez-hcidump and cabextract
submitted patches for apt and barnowl wv2 fixed in maintainer upload
antiword fixed in very quick maintainer upload bug for audiofile
filed patches for acpid and amule
submitted patch for antiword kphone removed apache, apr and apr-util already hardened
reprepro already fixed submitted patches for rdesktop and cscope filed bug for openssl
fbi fixed filed patch for xterm
submitted patch for file fixed xfs in QA upload jasper already hardened
hardening updates
hardening updates
elinks fixed file bug for rsync
hardening updates
harden updates
xorg-server fixed thanks to jcristau
new sympa upload
xpdf build is now hardened
etherape fixed in sid and spu
filed bug
fixed mailman
ghostscript fixed
libmusicbrainz-2.1 NMUd
updates
remaining non candidates
filter cdbs packages more removals
mt-daapd -> forked-daapd nss-ldapd -> nss-pam-ldapd remove removals
- libcairo -> cairo - libtasn1-2 -> libtasn1-3 - libmusicbrainz-2.0 -> -libmusicbrainz-2.1 - more removed pkgs
ethereal -> wireshark belpic - beid firebird2 -> firebird2.5 gdm -> gdm3 ganglia-monitor-core -> ganglia
zgv fixed
- move removed pkgs to separate file, update list of removed pkgs - more cdbs pkgs - remove pkgs covered in subgoal important from subgoal dsa
gimp fixed
move all non-candidates to a shared file
libvirt and ncompress have been fixed more non-candidates
- change more pkgs to source pkg name - udev is the first pkg converted to dpkg-buildflags - aircrack-ng removed
also mark pkgs using hardening-includes as fixed
removed pkgs / updates nsd -> nsd3
mark pkgs already using hardening-wrapper as fixed
updates libsoup -> libsoup2.4
updates
more non-candidates gmime2.2 -> gmime2.4 glibc -> eglibc gnocatan -> pioneers
more removed pkgs isc-dhcp instead of dhcp/dhcp3 emacs23 instead of emacs21
more removed/non-candidate pkgs track cyrus-imapd-2.4 instead of cyrus-imapd
further removals / non-candidates
further removed pkgs bugzilla non-candidate track gnutls26
track removed pkgs track xen instead of xen-3.0
first filter of non-eligible packages
some more hardening info
add some instructions for hardening work
use the secure-testing repo for initial tracking/coordinating of sec hardening work. Will possibly moved elsewhere once more appropriate infrastructure has been found.
This form allows you to request diffs between any two revisions of this file. For each of the two "sides" of the diff, enter a numeric revision.
| ViewVC Help | |
| Powered by ViewVC 1.1.5 |