[Secure-testing-commits] r24950 - hardening

[Moritz Muehlenhoff]

Author: jmm
Date: 2013-12-29 13:58:50 +0000 (Sun, 29 Dec 2013)
New Revision: 24950

Modified:
   hardening/subgoal-dsa.txt
Log:
restore list of packages which have been ported to dpkg-buildflags
  for completeness / grepability
add new source packages for which DSAs have been released in 2012/2013 (WIP)


Modified: hardening/subgoal-dsa.txt
===================================================================
--- hardening/subgoal-dsa.txt	2013-12-29 11:42:25 UTC (rev 24949)
+++ hardening/subgoal-dsa.txt	2013-12-29 13:58:50 UTC (rev 24950)
@@ -1,5 +1,5 @@
 Hardening subgoal for Wheezy:
-All packages, which had a DSA since 2006. 
+All packages, which had a DSA since 2006 (up to the end of 2013)
 
 Instructions:
 - After checking a package, add it to the "Candidates:" or "Non-candidates:" list
@@ -10,7 +10,7 @@
   future)
 
 
-Bugs:
+Unfixed packages / requring further checks:
 barnowl (653506)
 eglibc (657528)
 heartbeat (657840)
@@ -25,15 +25,59 @@
 wzdftpd (655141)
 pmount (664501)
 eggdrop (668091)
+openjdk-7 (660021)
+foomatic-filters
+putty
+polarssl
+xen
+virtualbox
+pidgin-otr
+libyaml-libyaml-perl
+openjpeg
+cvs
+dropbear
+mesa
+libxt 
+libxcursor
+libxext
+libxi
+libxrandr
+libxp
+libxcb
+libfs
+libxres
+libxtst
+libxfixes
+libxvmc
+libxv
+libxrender
+xserver-xorg-video-openchrome
+libdmx
+libxxf86dga
+libxinerama
+libxxf86v
+libx11
+systemd
+nas
+pixman
+openttd
+ecryptfs-utils
+bip
+mumble
+notmuch
+libproxy
+libssh
+cfingerd
+cups-pk-helper
 
 
 
+
 debhelper-based packages needing bugs:
 wxwidgets2.8
 libapache2-mod-authnz-external
 libtool
 libvorbis
-ltsp
 mapserver
 spamass-milter
 subversion
@@ -201,7 +245,6 @@
 imagemagick (8:6.7.4.0-2) (657833)
 loop-aes-utils (2.16.2-3) (656009)
 vsftpd (2.3.5-3) (655103)
-openjdk-7 (7~u3-2.1-2) (660021)
 vlc (2.0.0-5) (658030)
 libxfont (1:1.4.5-1) (654154)
 libav (4:0.8-2) (658929)
@@ -355,9 +398,24 @@
 apr-util
 openafs (659663)
 kvirc (669189)
+l2tpns
+gnumeric
+kvirc
+openafs
+wireshark
+chromium-browser
+tiff
+gnupg2
+php5
+postgresql-9.1
+systemd
+apr
+apr-util
+ltsp
+super (3.30.0-4)
+devscripts
 
 
-
 Packages, which use hardened build flags manually, but not yet dpkg-buildflags:
 sendmail
 
@@ -394,3 +452,8 @@
 
 
 
+
+
+
+
+