Release-critical Bugreport for January 12, 2001
Bug stamp-out list for Jan 12 05:17 (CST)
Total number of release-critical bugs: 177
Number that will disappear after removing packages marked [REMOVE]: 0
------------------------------------------------------------------------------
Package: abiword (debian/main)
Maintainer: Darren Benham <gecko@debian.org>
74882 Abiword refuses ISO LATIN 2 characters
Package: apache (debian/main)
Maintainer: Johnie Ingram <johnie@debian.org>
72468 apache: log file permissions are insecure
75087 cron.daily for apache sends SIGHUP to any process with
77621 Assertion `new_opencount[0] == 0' failed
79364 apache build on potato breaks woody php4 (DB2 and pgsql)
80210 Needs a recompile against new libc6 (again)
81699 upgrade from potato apache to sid breaks config
Package: apache-common (debian/main)
Maintainer: Johnie Ingram <johnie@debian.org>
73013 Security vulnerability in Apache mod_rewrite (fwd)
74306 apache-common: Incorrect mysql return results
Package: apcupsd (debian/main)
Maintainer: Martin Mitchell <martin@debian.org>
74060 apcupsd: apcupsd doesn't take any action on powerfail
Package: apt (debian/main)
Maintainer: APT Development Team <deity@lists.debian.org>
81829 segfaults
Package: ascd (debian/main)
Maintainer: Fredrik Hallenberg <hallon@debian.org>
72015 copyright doesn't meet DFSG
Package: asmixer (debian/main)
Maintainer: Fredrik Hallenberg <hallon@debian.org>
72016 asmixer not DFSG
Package: at (debian/main)
Maintainer: Siggy Brentrup <bsb@winnegan.de>
74056 at: /usr/bin is mode 4755
Package: autolog (debian/main)
Maintainer: Nicolás Lichtmaier <nick@debian.org>
73051 autolog: autolog creates endless zombies after upgrade to libc6-2.1.94
Package: bbdb (debian/main)
Maintainer: Takuo KITAME <kitame@northeye.org>
78564 bbdb breaks gnus
Package: binutils (debian/main)
Maintainer: Christopher C. Chimelis <chris@debian.org>
74396 binutils_2.10.0.27-0.cvs20000923.1(unstable): serious malfunction on m68k
Package: bnetd (debian/main)
Maintainer: Raphael Bossek <bossekr@debian.org>
81883 /var/cache/bnetd/players violates policy (FHS)
Package: c2ps (debian/main)
Maintainer: Amos Shapira <amos@debian.org>
80748 man pages in wrong directory
Package: chpp (debian/main)
Maintainer: Darren Benham <gecko@debian.org>
65780 chpp not installable
Package: colorgcc (debian/main)
Maintainer: Raphael Bossek <bossekr@debian.org>
65516 should work togetker with alternatives
Package: console-data (debian/main)
Maintainer: Yann Dirson <dirson@debian.org>
65064 [woody] After update consol unusable because of /etc/console-tools/default.kmap.gz
Package: courier-imap (debian/main)
Maintainer: Steve Haslam <araqnid@debian.org>
76334 courier-imap: depends on non-US package (libssl) but is in main
Package: craftywatcher (debian/contrib)
Maintainer: Paul Serice <ugs@debian.org>
74199 depends on nonexistent package
Package: darxite (debian/main)
Maintainer: Ben C. Hendrickson <bhendrickson@usa.net>
69859 Remotely exploitable buffer overflow
Package: devfsd (debian/main)
Maintainer: Tom Lees <tom@debian.org>
81848 package does not build properly from source
Package: dnrd (debian/main)
Maintainer: Thomas Schoepf <schoepf@debian.org>
80888 SECURITY - Several multiple buffer overflows in dnrd
Package: dpkg-multicd (debian/main)
Maintainer: Martin Schulze <joey@debian.org>
80746 man pages in wrong directory
Package: dvilx (debian/main)
Maintainer: Gergely Madarasz <gorgo@sztaki.hu>
79889 dvilx: depends on tetex-lib
Package: dvisvga (debian/main)
Maintainer: Gergely Madarasz <gorgo@sztaki.hu>
80540 broken dependency on tetex-lib, and build failure of source
Package: eject (debian/main)
Maintainer: Martin Mitchell <martin@debian.org>
80747 man pages in wrong directory
Package: elm-me+ (debian/main)
Maintainer: John Goerzen <jgoerzen@complete.org>
81750 Tries to setgid(0) during build
Package: emacs20 (debian/main)
Maintainer: Rob Browning <rlb@cs.utexas.edu>
72103 potato -> woody upgrade broke sending mail
Package: emacsen-common (debian/main)
Maintainer: Rob Browning <rlb@cs.utexas.edu>
61167 emacsen-common: major bug in policy (not RC for potato)
Package: eperl (debian/main)
Maintainer: Heiko Schlittermann <heiko@lotte.sax.de>
71479 eperl possible buffer overflow
Package: exim (debian/main)
Maintainer: Mark Baker <mbaker@iee.org>
74897 exim: exim won't send email
Package: fakebo (debian/main)
Maintainer: Gregory T. Norris <adric@debian.org>
76314 Security problems in fakebo
Package: falselogin (debian/main)
Maintainer: Tibor Koleszar <oldw@debian.org>
81734 falselogin: Build failure due to missing build deps
Package: fetchmail (debian/main)
Maintainer: Paul Haggart <phaggart@debian.org>
69983 fetchmail: fetchmail won't fetch mail, man page info isn't true (security hole)
75287 fetchmail: fetchmail segfaults sometimes when downloading mail via pop3 over ssh, with portforwarding (ssh 2.2.0p1-1.1 2.2.0p1-1.1)
76663 fetchmail dumps core, but not really sure why
Package: fileutils (debian/main)
Maintainer: Michael Stone <mstone@debian.org>
81477 fileutils: source package format wrong
Package: ftp.debian.org (pseudo)
Maintainer: James Troup and others <ftpmaster@debian.org>
81391 Please change my maintainer address.
81409 Bugs about pico are not sent to me.
Package: gdb (debian/main)
Maintainer: Vincent Renardias <vincent@debian.org>
74546 segmentation fault
Package: gdk-imlib1 (debian/main)
Maintainer: Ossama Othman <ossama@debian.org>
79375 gdk-imlib1: consumes memory non-stop
Package: gdtclft (debian/main)
Maintainer: David N. Welton <davidw@efn.org>
74163 depends on nonexistent libgd1g
Package: general (pseudo)
Maintainer: debian-devel@lists.debian.org
80109 the Packages-file for non-free in the testing distribution is empty.
Package: gltron (debian/main)
Maintainer: Raphael Bossek <bossekr@debian.org>
80598 gltron segfaults
Package: gnomba (debian/main)
Maintainer: Timshel Knoll <timshel@debian.org>
70895 gnomba: Password authentication not work in share mode.
Package: gnome-print (debian/main)
Maintainer: Vincent Renardias <vincent@debian.org>
77010 gnome-print_0.24-0.1(unstable): Missing build dependencies
Package: gnome-session (debian/main)
Maintainer: Christian Marillat <marillat@debian.org>
75144 GNOME'e nterm service
Package: gnomehack (debian/main)
Maintainer: Erik Andersen <andersee@debian.org>
72202 Crash when going down to a new level using stairs.
Package: gnucash (debian/main)
Maintainer: John Goerzen <jgoerzen@complete.org>
81722 gnucash: missing build-depends on libgtkxmhtml-dev
Package: gnumeric (debian/main)
Maintainer: Vincent Renardias <vincent@debian.org>
71668 gnumeric crashes on startup
Package: gpm (debian/main)
Maintainer: Zephaniah E. Hull <warp@debian.org>
77930 project: task-x-window-system
78862 gpm: gpm segfaults whenever it is run on Mac PowerBook G3
Package: gravitywars (debian/main)
Maintainer: Joey Hess <joeyh@debian.org>
81988 [PATCH] gravitywars looks for hscore.gw in wrong directory, and fails to run
Package: gtimer (debian/main)
Maintainer: Robert S. Edmonds <stu@novare.net>
77282 gtimer updated, all data gone!
Package: hdparm (debian/main)
Maintainer: Steve Dunham <dunham@cps.msu.edu>
80897 hdparm: Can't build from source with unstable's libc6-dev
Package: htdig (debian/main)
Maintainer: Gergely Madarasz <gorgo@sztaki.hu>
70700 if htdig daily cron takes too long, many copies run
Package: http-analyze (debian/non-free)
Maintainer: Hanno Wagner <wagner@linux.de>
74206 depends on nonexistent package
Package: icewm-themes (debian/main)
Maintainer: Gergely Madarasz <gorgo@caesar.elte.hu>
80514 icewm-themes contains non-free theme blueice
Package: isapnptools (debian/main)
Maintainer: Frederic Lepied <Lepied@debian.org>
74455 isapnptools: Broken!
74893 isapnp should be in /sbin, not /usr/sbin
Package: jed-canna (debian/main)
Maintainer: "Kikutani Makoto" <kikutani@debian.org>
76144 Not installable - lacks Provides: jed-ja
Package: john (debian/main)
Maintainer: Christian Kurz <shorty@debian.org>
81756 [patch] sparc build failure
Package: jove (debian/main)
Maintainer: Loic Prylli <lprylli@graville.fdn.fr>
81878 Cannot build jove from source because of lack of use of DESTDIR
Package: kaffe (debian/main)
Maintainer: Ean R. Schuessler <ean@novare.net>
66547 kaffe: Does not build on PowerPC
Package: kerberos4kth (non-US/main)
Maintainer: Greg Stark <gsstark@mit.edu>
79288 bugtraq posting on kerberos4kth--environment variables and buffer overflow
Package: lcdproc (debian/main)
Maintainer: Brian Bassett <brianb@debian.org>
70098 lcdproc crashes with floating point exception
Package: ldp-ligs (debian/main)
Maintainer: Andrea Fanfani <andrea@debian.org>
67499 Missing source code for ldp-ligs
Package: lha (debian/non-free)
Maintainer: Steve McIntyre <stevem@chiark.greenend.org.uk>
80759 man pages in wrong directory
Package: libcgi-pm-perl (debian/main)
Maintainer: Piotr Roszatycki <dexter@debian.org>
67807 libcgi-pm-perl: uninstallable - conflict with libcgi-perl ?!
Package: libdb2 (debian/main)
Maintainer: Fabrizio Polacco <fpolacco@debian.org>
72532 libdb2 breaks sendmail and other programs
72579 libdb2: Variable GLIBC_2.0 _at least_ seems missing as an information field in latest libdb2 compilation.
Package: libdb2.6 (debian/main)
Maintainer: Fabrizio Polacco <fpolacco@debian.org>
72866 db2.6 source not available
Package: libfltk-dev (debian/main)
Maintainer: Sean 'Shaleh' Perry <shaleh@debian.org>
74182 depends on nonexistent package
Package: libggi2 (debian/main)
Maintainer: Charles Briscoe-Smith <cpbs@debian.org>
80751 man pages in wrong directory
Package: libgii0 (debian/main)
Maintainer: Charles Briscoe-Smith <cpbs@debian.org>
80769 man pages in wrong directory
Package: libguile6-slib (debian/main)
Maintainer: Craig Brozefsky <craig@red-bean.com>
76193 require.scm is not looked for in the correct place
Package: libjpeg-progs (debian/main)
Maintainer: Mark Mickan <mmickan@debian.org>
74087 djpeg broken for some jpegs
80752 man pages in wrong directory
Package: liblockfile1 (debian/main)
Maintainer: Miquel van Smoorenburg <miquels@cistron.nl>
80753 man pages in wrong directory
Package: libncurses5 (debian/main)
Maintainer: Joel Klecker <ncurses-maint@debian.org>
77794 ncurses5 NMU causes segv's on sparc woody
Package: libsigc++-dev (debian/main)
Maintainer: Michael Alan Dorman <mdorman@debian.org>
81005 libsigc++-dev has wrong dependency
Package: libucl (debian/main)
Maintainer: Leon Breedt <ljb@debian.org>
79801 libucl: The copyright file doesn't include the full copyright
79803 ucl: Standards-Version 3.1.0 but no Build-Depends
Package: lilo (debian/main)
Maintainer: Vincent Renardias <vincent@debian.org>
62012 lilo: New lilo renders my system unbootable
78193 lilo segfaults on bad char
81342 This new version of lilo overwrites a customized lilo.conf without option to back out
81347 Unconditionally configures package on upgrade
81537 lilo: OVERWRITES /ETC/LILO.CONF
81652 lilo: Installs in stupid place; renders system unbootable
81662 lilo: debconf setup nukes config without asking questions
Package: lilypond (debian/main)
Maintainer: Anthony Fok <foka@debian.org>
67697 Bad dependency on libguile4 on alpha and newer is uncompilable
Package: locale-ko (debian/main)
Maintainer: Chu-yeon Park <kokids@debian.org>
72552 locale-{ja,ko,vi,zh} should have depends: libc6 (<< 2.1.94).
74567 locales: locales must conflict, provide locale-ko
Package: lockfile-progs (debian/main)
Maintainer: Rob Browning <rlb@cs.utexas.edu>
80755 man pages in wrong directory
Package: lynx (debian/main)
Maintainer: Christian Hudon <chrish@debian.org>
63391 lynx: Doesn't warn if there's an error saving a file
Package: magicfilter (debian/main)
Maintainer: David Frey <dfrey@debian.org>
69535 magicfilter apparently requires /usr/bin/djscript but makes no mention of this
Package: mailman (debian/main)
Maintainer: Gergely Madarasz <gorgo@sztaki.hu>
72714 cron job forking too much
77936 mailman: qrunner creates huge error log
Package: mailx (debian/main)
Maintainer: Loic Prylli <lprylli@graville.fdn.fr>
68745 cat somefile | mail -s teste root@localhost segfaults
80758 man pages in wrong directory
Package: man2html (debian/main)
Maintainer: Nicolás Lichtmaier <nick@debian.org>
78195 Man2html memory consumption over 400 Megs.
Package: mesag3-glide2 (debian/main)
Maintainer: James A. Treacy <treacy@debian.org>
74471 Open GL xscreensavers cause X to hang with 3DFX cards.
Package: mime-support (debian/main)
Maintainer: Brian White <bcwhite@pobox.com>
80756 man pages in wrong directory
Package: mingetty (debian/main)
Maintainer: Michael Alan Dorman <mdorman@debian.org>
80757 man pages in wrong directory
Package: mrtg (debian/main)
Maintainer: Michael-John Turner <mj@debian.org>
75398 mrtg: Permissions for /etc/mrtg.cfg and mrtg.ok too generous
Package: mtools (debian/main)
Maintainer: Adrian Bunk <bunk@fs.tum.de>
79180 mtools doesn't work on Debian/ARM 2.2r2
Package: newsx (debian/main)
Maintainer: Adrian Bridgett <bridgett@debian.org>
81264 inn 2.3.0 changes break newsx?
Package: nfs-common (debian/main)
Maintainer: Chip Salzenberg <chip@debian.org>
79997 nfs-common: copyright file is incomplete
Package: nvi (debian/main)
Maintainer: Steve Greenland <stevegr@debian.org>
77978 [PATCH] nvi: undo breakage due to invalid use of libdb ;-/
Package: oidentd (debian/main)
Maintainer: Sean 'Shaleh' Perry <shaleh@debian.org>
76682 Error: initgroups(nobody, 65534): Operation not permitted
Package: pcmcia-source (debian/main)
Maintainer: Brian Mays <brian@debian.org>
76834 pcmcia-modules-2.2.17 does not work with Lucent Orinoco card
Package: perl-5.005 (debian/main)
Maintainer: Darren Stalder <torin@daft.com>
76308 A dreaded Conflicts/Pre-Depends loop with perl-5.005
Package: pgapack (debian/main)
Maintainer: Andreas Franzen <anfra@debian.org>
79496 > pgapack programs give gmentation fault after compiling when run.
Package: php3 (debian/main)
Maintainer: Petr Cech <cech@debian.org>
78713 php3: Causes Apache to segfault
79596 php3: php3 script segfaults
Package: php3-cgi (debian/main)
Maintainer: Petr Cech <cech@debian.org>
69528 php3-cgi sends non-compliant X-Powered-By tag
Package: pilot-link (debian/main)
Maintainer: Ben Darnell <bgdarnel@debian.org>
71476 pilot-link and 'Weird packets'
Package: postgresql (debian/main)
Maintainer: Oliver Elphick <Oliver.Elphick@lfix.co.uk>
81292 lost data with vacuum
Package: postgresql-dev (debian/main)
Maintainer: Oliver Elphick <Oliver.Elphick@lfix.co.uk>
78599 libpq.a is a malformed archive
Package: prc-tools (debian/main)
Maintainer: Stephen Zander <gibreel@debian.org>
78745 PalmOS SDK license
80762 man pages in wrong directory
Package: printtool (debian/main)
Maintainer: Rafael Kitover <rkitover@io.com>
81036 Alternative FIX for "No spool file found"
Package: proftpd (debian/main)
Maintainer: Johnie Ingram <johnie@debian.org>
68356 proftpd: Problems with multiple user/group settings in proftpd.conf
Package: psutils (debian/main)
Maintainer: Rob Browning <rlb@cs.utexas.edu>
80761 man pages in wrong directory
Package: pump (debian/main)
Maintainer: Steve Dunham <dunham@debian.org>
81719 kernel 2.4 support
Package: pwgen (debian/main)
Maintainer: Vincent Renardias <vincent@debian.org>
39130 pwgen: No copyright or licence
80763 man pages in wrong directory
Package: pydb (debian/main)
Maintainer: Gregor Hoffleit <flight@debian.org>
80764 man pages in wrong directory
Package: python-base (debian/main)
Maintainer: Gregor Hoffleit <flight@debian.org>
78577 Python tempfile module uses insecure tempfile!
Package: python-bobo (debian/main)
Maintainer: Gregor Hoffleit <flight@debian.org>
80765 man pages in wrong directory
Package: python-pcgi (debian/main)
Maintainer: Gregor Hoffleit <flight@debian.org>
80766 man pages in wrong directory
Package: qcad (debian/main)
Maintainer: Fernando Sanchez <fer@debian.org>
77196 qcad could not be installed on woody, shares file with xlibs (XFree86 4.0.1)
Package: realplayer (debian/contrib)
Maintainer: Debian QA Group <debian-qa@lists.debian.org>
74741 cannot find required realplayer version on real web site
Package: roxen (debian/main)
Maintainer: Turbo Fredriksson <turbo@debian.org>
81648 roxen on powerpc
Package: rx (debian/main)
Maintainer: James Troup <james@nocrew.org>
69011 can not get source
Package: samba-common (debian/main)
Maintainer: Eloy A. Paris <peloy@debian.org>
79271 samba-common: nmbd's spawning until system runs out of resources with 2.2.17
Package: saml (debian/main)
Maintainer: John Lapeyre <lapeyre@physics.arizona.edu>
80767 man pages in wrong directory
Package: sash (debian/main)
Maintainer: Raul Miller <moth@debian.org>
81793 sash postinstall script set /etc/shadow permission to -rw-r--r-
Package: sather (debian/main)
Maintainer: Eray Ozkural <erayo@cs.bilkent.edu.tr>
81525 sather: build fails on alpha
Package: sendfile (debian/main)
Maintainer: Martin Schulze <joey@debian.org>
76048 Multiple local root compromises and other security issues in sendfiled
78603 sendfile: notify called with GID 0.
Package: signify (debian/main)
Maintainer: Brian White <bcwhite@pobox.com>
81479 Signify follows outdated standards (patch included)
Package: slrnpull (debian/main)
Maintainer: Joey Hess <joeyh@debian.org>
63011 slrnpull: Debian's setup of slrnpull seems to be unsafe.
Package: snd (debian/main)
Maintainer: Guenter Geiger <geiger@debian.org>
81864 snd: build fails on alpha
Package: splay (debian/main)
Maintainer: Zed Pobre <zed@debian.org>
71953 [Sparc] [HELP!] Bus error/bad buffersize
Package: spruce (debian/main)
Maintainer: Cody Pisto <cpisto@flash.net>
76595 spruce crashes, creates "Temp3" mailbox
80089 spruce crashes while trying to recreate mailbox index
Package: ssh (non-US/main)
Maintainer: Philip Hands <phil@hands.com>
53783 ssh; scp does not handle spaces in file names
68523 ssh: Ssh: enforces duff configuration options
77361 sshd gets stopped and not started when upgrading without tty
81886 missing build-depends for groff
Package: sslwrap (non-US/main)
Maintainer: Raphael Bossek <bossekr@debian.org>
81913 sslwrap: no shared cipher
Package: stunnel (non-US/main)
Maintainer: Paolo Molaro <lupus@debian.org>
80079 Multiple security problems, please package 3.10
Package: sysklogd (debian/main)
Maintainer: Martin Schulze <joey@debian.org>
80771 man pages in wrong directory
Package: syslinux (debian/main)
Maintainer: Juan Cespedes <cespedes@debian.org>
69140 Syslinux boot fails on Industrial Computer Source boxen
Package: tar (debian/main)
Maintainer: Bdale Garbee <bdale@gag.com>
81556 convince upstream to drop -I entirely
Package: tcl8.0-ja (debian/main)
Maintainer: Masato Taruishi <taru@debian.org>
66455 [woody] not installable any more
Package: tcpdump (debian/main)
Maintainer: Anand Kumria <wildfire@progsoc.org>
80984 SIGSEGV after upgrade
81969 tcpdump should have a build-conflict for openssl/ssleay
Package: tex4ht (debian/main)
Maintainer: Andrew Gray <ajpg@debian.org>
81751 Build failure due to no build depends
Package: timeoutd (debian/main)
Maintainer: Craig Sanders <cas@taz.net.au>
80770 man pages in wrong directory
Package: tk8.0-ja (debian/main)
Maintainer: Masato Taruishi <taru@debian.org>
74191 depends on nonexistent package
Package: tunnelv (non-US/main)
Maintainer: Debian QA Group <debian-qa@lists.debian.org>
81903 does not build from source on Debian alpha
Package: untex (debian/main)
Maintainer: Enrique Zanardi <ezanardi@molec1.dfis.ull.es>
80772 man pages in wrong directory
Package: update (debian/main)
Maintainer: Debian QA Group <debian-qa@lists.debian.org>
80774 man pages in wrong directory
Package: util-linux (debian/main)
Maintainer: Sean 'Shaleh' Perry <shaleh@debian.org>
69372 cfdisk bugged and wiped partition
Package: vlock (debian/main)
Maintainer: Zephaniah E. Hull <warp@debian.org>
81400 vlock compromised with magic SysRQ key
Package: watchdog (debian/main)
Maintainer: Johnie Ingram <johnie@debian.org>
79556 watchdog upgrade still imperfect
Package: wenglish (debian/main)
Maintainer: Charles Briscoe-Smith <cpbs@debian.org>
80775 man pages in wrong directory
Package: whowatch (debian/main)
Maintainer: KELEMEN Peter <fuji@debian.org>
72533 whowatch segfaults on powerpc
Package: xcircuit (debian/main)
Maintainer: Dale Scheetz <dwarf@polaris.net>
80854 xcircuit: can't build from source, and general policy updates
Package: xmcd (debian/main)
Maintainer: Adrian Bridgett <bridgett@debian.org>
80345 doesn't complain but also doesn't play
This post is automatically generated. Please send comments to
bugscan@debian.org .
Reply to: