[Secure-testing-commits] r17719 - hardening

Moritz Muehlenhoff jmm at alioth.debian.org
Wed Nov 30 21:13:47 UTC 2011


Author: jmm
Date: 2011-11-30 21:13:46 +0000 (Wed, 30 Nov 2011)
New Revision: 17719

Modified:
   hardening/subgoal-dsa.txt
Log:
harden updates


Modified: hardening/subgoal-dsa.txt
===================================================================
--- hardening/subgoal-dsa.txt	2011-11-30 21:13:17 UTC (rev 17718)
+++ hardening/subgoal-dsa.txt	2011-11-30 21:13:46 UTC (rev 17719)
@@ -72,15 +72,12 @@
 fetchmail
 file
 firebird2.5
-flac
 flex
 fontforge
 freeciv
 freeradius
-freetype
 fuse
 ganglia
-git-core
 eglibc
 gmime2.4
 pioneers
@@ -146,7 +143,6 @@
 librpcsecgss
 libsmi
 libsndfile
-libthai
 libtk-img
 libtool
 libtorrent-rasterbar
@@ -188,7 +184,6 @@
 netpbm-free
 netrik
 net-snmp
-network-manager
 newt
 nginx
 no-ip
@@ -202,7 +197,6 @@
 openexr
 open-iscsi
 openjdk-6
-openldap
 libreoffice
 opensaml2
 opensc
@@ -232,7 +226,6 @@
 python2.7
 python3.2
 python-cjson
-python-crypto
 qemu
 qemu-kvm
 qt4-x11
@@ -242,7 +235,6 @@
 rssh
 rsync
 ruby-gnome2
-samba
 sash
 scponly
 screen
@@ -277,7 +269,6 @@
 unicon
 unzip
 util-linux
-vim
 vlc
 vnc4
 webcit
@@ -309,7 +300,6 @@
   the upload of dpkg/1.16.1:
 koffice
 kphone
-libgd2
 libspf2
 wordnet
 sendmail
@@ -361,39 +351,42 @@
 vino
 
 
-Partially fixed:
-libmusicbrainz-2.1 (2.1_2.1.5-6.1) (znow missing)
-
-
-Fixed through cdbs (log or pkg should be checked, before moving to
-Resolved/fixed, since some Makefile or buildsystem foo might reset
-flags)
+Fixed:
 libvirt (0.9.6-1)
 gimp (2.6.11-4)
 ghostscript (9.04~dfsg-1)
+samba (2:3.5.11~dfsg-2)
+libgd2 (2.0.36~rc1~dfsg-6)
 sympa (6.1.7~dfsg-1)
-
-Resolved/fixed: (should be double-checked with hardening-check from
-hardening-includes before moving it here):
 mailman (1:2.1.14-3)
 ncompress (4.2.4.4-3)
 xzgv (5.9-3)
+flac (1.2.1-6)
 xorg-server (2:1.11.1.901-1)
+openldap (2.4.25-4)
+vim (2:7.3.346-1)
+freetype (2.4.7-2)
+python-crypto (2.4-1)
+xorg-server (2:1.11.1.901-1)
 xpdf (3.03-7)
+network-manager (0.9.1.95-1)
+libmusicbrainz-2.1 (2.1_2.1.5-6.1)
+tmux (1.6~svn2630-2)
+tcpdump (4.2.0~rc1-2)
+libthai (0.1.16-1)
+git (1:1.7.7.2-1)
+man-db (2.6.0.2-3)
 
 
 Packages using hardening-wrapper/-includes (these are considered fixed, although
    switching them over to dpkg-buildflags might be worthwhile later on):
-tmux
 netatalk
-man-db
 graphicsmagick
 udev
 xfce4-terminal
 openssh
 evolution
 dbus
-tcpdump
 libgsf
 tor
 evolution-data-server




More information about the Secure-testing-commits mailing list