[Secure-testing-commits] r18633 - hardening

[Moritz Muehlenhoff]

Author: jmm
Date: 2012-03-10 13:40:50 +0000 (Sat, 10 Mar 2012)
New Revision: 18633

Modified:
   hardening/subgoal-dsa.txt
Log:
- cdbs is now properly fixed, start triaging pkgs. I'll try to fix a great bunch
  through binNMUs
- pmount has migrated to debhelper


Modified: hardening/subgoal-dsa.txt
===================================================================
--- hardening/subgoal-dsa.txt	2012-03-10 13:36:04 UTC (rev 18632)
+++ hardening/subgoal-dsa.txt	2012-03-10 13:40:50 UTC (rev 18633)
@@ -137,6 +137,7 @@
 id3lib3.8.3 (656272)
 opensc (656350)
 openexr (656506)
+pmount
 
 
 Packages using Makefile.PL, needs additional research:
@@ -182,6 +183,10 @@
 
 
 Candidate packages using cdbs:
+(Starting with 0.4.106, cdbs now properly exports flags. Some package
+will still need patches, since they set flags manually in debian/rules
+or in their upstream buildsystems. jmm will request binNMUs for all pkgs
+which work w/o adaptions.)
 
 sympa
 libgd2
@@ -192,8 +197,6 @@
 koffice
 libspf2
 wordnet
-afuse
-bomberclone
 camlimages
 couchdb
 crossfire
@@ -221,7 +224,6 @@
 mediawiki
 moin
 pango1.0
-pmount
 polipo
 poppler
 postgresql-ocaml
@@ -229,14 +231,22 @@
 ruby1.8
 ruby1.9.1
 squid3
-streamripper
 sword
-t1lib
 unalz
 uw-imap
 vino
 
+cdbs packages needing additional patches:
+t1lib (arcane buildsystem)
+streamripper (overrides CPPFLAGS in configure.ac)
 
+
+cdbs Bin-NMU candidates:
+afuse 0.2-3
+bomberclone 0.11.9-3
+
+
+
 Fixed:
 samba (2:3.5.11~dfsg-2)
 mailman (1:2.1.14-3)