[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

List of bugs that *must* be fixed before releasing Hamm



The following bug reports *must* be fixed before the current frozen Debian
distribution can progress further in its development cycle.  Reminders have
been sent to the maintainers of these packages but some of the packages with
older bugs could probably use some assistance.

Package Name      Bug #  Bug Description [days old] (maintainer)
~~~~~~~~~~~~~~~~  ~~~~~  ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
boot-floppies     23842  install.html missing from boot-floppies [0]  (Enrique Zanardi <sr1-boot-floppies@debian.org>)
cvs-pcl           22577  compile of pcl-cvs.el fails (cannot load &quot;cookie&quot;) [38]  (Tom Lees <tom@lpsg.demon.co.uk>)
debian-policy     23661  Security issue when accessing documentation through an http server [8]  (Debian QA <debian-qa@lists.debian.org>)
dhttpd            23659  /var/www/doc symlink introduces a security weakness [8]  (Nicolas Lichtmaier <nick@feedback.com.ar>)
dpkg-dev          20776  dpkg-dev: dpkg-dev does not use emacsen-commen method of installing .el files [80]  (Klee Dienes and Ian Jackson <dpkg-maint@chiark.greenend.org.uk>)
dpkg-dev          21186  dpkg-dev: dpkg-dev has a file also provided in dpkg [71]  (Klee Dienes and Ian Jackson <dpkg-maint@chiark.greenend.org.uk>)
dpkg-python       23059  .py files must not install files into /usr/lib/python [24]  (Klee Dienes <klee@debian.org>)
elib              23810  Emacsen add-on packages must depend on emacsen, not emacsen-common. [0]  (Tom Lees <tom@lpsg.demon.co.uk>)
ftp.debian.org    16652  javalex: bad dependencies [170]  (Guy Maor <ftpmaster@debian.org>)
ftp.debian.org    22946  We have two priority: standard emacs. [28]  (Guy Maor <ftpmaster@debian.org>)
general           23867  Critical permissions bug on /lib and /tmp [0]  (debian-devel@lists.debian.org)
hyperlatex        23809  Emacsen add-on packages must depend on emacsen, not emacsen-common. [0]  (Matthias Klose <doko@debian.org>)
infocom           23563  infocom: /usr/doc/infocom/copyright doesn't include a licence [10]  (Brian White <bcwhite@pobox.com>)
libc6             20714  Current libc6 is a beta. [81]  (Dale Scheetz <dwarf@polaris.net>)
libc6             20799  getgrnam does not return when group name does not exist [79]  (Dale Scheetz <dwarf@polaris.net>)
libc6             22626  netbase: bugtraq says: RPC services are subject to Denial of Service attacks [37]  (Dale Scheetz <dwarf@polaris.net>)
libc6             22790  libc6: login(3) does not reuse dead entries [32]  (Dale Scheetz <dwarf@polaris.net>)
libc6             23698  Linux-security says: Beware of dangerous enviroment (libc6) [0]  (Dale Scheetz <dwarf@polaris.net>)
libc6             23893  libc6: &quot;env LD_PRELOAD= ls&quot; core dump [0]  (Dale Scheetz <dwarf@polaris.net>)
libc6-dev         19797  libc6-dev: use of /tmp/*$$ in an insecure fashion [101]  (Dale Scheetz <dwarf@polaris.net>)
libc6-dev         21884  libc6-dev: relative links between top-level dirs [57]  (Dale Scheetz <dwarf@polaris.net>)
libreadline2      22941  libreadline2 depends on libc6 [28]  (Guy Maor <maor@debian.org>)
libreadlineg2     23035  bash: Not 8-bit clean. [25]  (Guy Maor <maor@debian.org>)
libtool           23884  libtool: Insecure use of /tmp (?) [0]  (Frederic Lepied <Lepied@debian.org>)
login             22191  login: does not chown /dev/vcs* anymore [49]  (Guy Maor <maor@debian.org>)
mailx             23880  [alvaro@lander.es: [linux-security] security hole in mailx] [0]  (Loic Prylli <lprylli@graville.fdn.fr>)
modutils          22612  modutils package is difficult to upgrade from bo [37]  (Wichert Akkerman <wakkerma@debian.org>)
mtools            23604  mtools: insecure use of /tmp [9]  (Mark Eichin <eichin@kitten.gen.ma.us>)
nas               23841  nas: init.d script fails to start au because of missing path [0]  (Steve McIntyre <stevem@chiark.greenend.org.uk>)
nonus.debian.org  18572  nonus.debian.org: remove des-solnet_1.03-5.deb [121]  (Sven Rudolph <sr1@inf.tu-dresden.de>)
nonus.debian.org  18785  nonus.debian.org: incoming backlog [114]  (Sven Rudolph <sr1@inf.tu-dresden.de>)
nonus.debian.org  20773  nonus.debian.org: please remove gnupg from frozen [80]  (Sven Rudolph <sr1@inf.tu-dresden.de>)
nonus.debian.org  21423  Dpkg-ftp can't handle alternative distributions [66]  (Sven Rudolph <sr1@inf.tu-dresden.de>)
nonus.debian.org  22287  nonus.debian.org with incorrect layout [47]  (Sven Rudolph <sr1@inf.tu-dresden.de>)
passwd            21275  passwd: useradd violates base-passwd's rules [69]  (Guy Maor <maor@debian.org>)
plan              23483  plan: does not register user+group `netplan' [12]  (telmerco@debian.org (Colin R. Telmer))
samba             23903  samba: samba maps username before authenicating with NT password server [0]  (peloy@debian.org (Eloy A. Paris))
smail             23717  smail: smtp entry in inetd.conf gone after smail upgrade [0]  (Soenke Lange <soenke@escher.north.de>)
sox               23913  SOX doesn't work at all [0]  (Geiger Guenter <geiger@iem.mhsg.ac.at>)
svgalib-bin       23601  svgalib-bin: insecure use of /tmp [9]  (Andy Mortimer <andy.mortimer@poboxes.com>)
wu-ftpd-academ    17401  netstd overwrites ftpd.8.gz [153]  (Heiko Schlittermann <heiko@lotte.sax.de>)
wu-ftpd-academ    20355  wu-ftpd: contains ftpd.8.gz which is also present in netstd [89]  (Heiko Schlittermann <heiko@lotte.sax.de>)
xbase             22877  xbase: xdm port, and X applications [0]  (Branden Robinson <branden@debian.org>)
xinetd            23866  xinetd: problems while installing [0]  (Norbert Veber <nveber@debian.org>)
xlbiff            21942  xlbiff: copyright file sucks [56]  (Christoph Martin <christoph.martin@uni-mainz.de>)
xviewg-dev        23598  xviewg-dev (cv2xview): insecure use of /tmp [9]  (Martin Buck <mbuck@debian.org>)

The above are all the "critical", "grave", and "important" bug reports, both
"pending" and "forwarded".

If you would like to help speed the release of the next Debian distribution,
you are encourage to take part in fixing these bugs.  More information about
them can be found on Debian's web page:  http://www.debian.org/Bugs/

These bugs can either be degraded below critical, grave, and important, or
they can be fixed in non-maintainer releases.

Alternatively, the package can be reverted to the version in Bo.  If this is
done, _don't_ close the bug but rather downgrade the severity of the bug
to "normal".

If there is a bug that you think must be fixed before the release of this
distribution, please upgrade its severity to critical, grave, or important.
For more info on this, see:  http://www.us.debian.org/Bugs/server-control.html
Be sure to copy the bug directly with the reason why the severity changed.

                                          Brian
                                 ( bcwhite@verisim.com )

-------------------------------------------------------------------------------
Debian GNU/Linux!  Search it at  http://insite.verisim.com/search/debian/simple


--  
To UNSUBSCRIBE, email to debian-qa-request@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org


Reply to: