Author: jmm Date: 2011-11-30 21:13:46 +0000 (Wed, 30 Nov 2011) New Revision: 17719 Modified: hardening/subgoal-dsa.txt Log: harden updates Modified: hardening/subgoal-dsa.txt ==================================================================--- hardening/subgoal-dsa.txt 2011-11-30 21:13:17 UTC (rev 17718) +++ hardening/subgoal-dsa.txt 2011-11-30 21:13:46 UTC (rev 17719) @@ -72,15 +72,12 @@ fetchmail file firebird2.5 -flac flex fontforge freeciv freeradius -freetype fuse ganglia -git-core eglibc gmime2.4 pioneers @@ -146,7 +143,6 @@ librpcsecgss libsmi libsndfile -libthai libtk-img libtool libtorrent-rasterbar @@ -188,7 +184,6 @@ netpbm-free netrik net-snmp -network-manager newt nginx no-ip @@ -202,7 +197,6 @@ openexr open-iscsi openjdk-6 -openldap libreoffice opensaml2 opensc @@ -232,7 +226,6 @@ python2.7 python3.2 python-cjson -python-crypto qemu qemu-kvm qt4-x11 @@ -242,7 +235,6 @@ rssh rsync ruby-gnome2 -samba sash scponly screen @@ -277,7 +269,6 @@ unicon unzip util-linux -vim vlc vnc4 webcit @@ -309,7 +300,6 @@ the upload of dpkg/1.16.1: koffice kphone -libgd2 libspf2 wordnet sendmail @@ -361,39 +351,42 @@ vino -Partially fixed: -libmusicbrainz-2.1 (2.1_2.1.5-6.1) (znow missing) - - -Fixed through cdbs (log or pkg should be checked, before moving to -Resolved/fixed, since some Makefile or buildsystem foo might reset -flags) +Fixed: libvirt (0.9.6-1) gimp (2.6.11-4) ghostscript (9.04~dfsg-1) +samba (2:3.5.11~dfsg-2) +libgd2 (2.0.36~rc1~dfsg-6) sympa (6.1.7~dfsg-1) - -Resolved/fixed: (should be double-checked with hardening-check from -hardening-includes before moving it here): mailman (1:2.1.14-3) ncompress (4.2.4.4-3) xzgv (5.9-3) +flac (1.2.1-6) xorg-server (2:1.11.1.901-1) +openldap (2.4.25-4) +vim (2:7.3.346-1) +freetype (2.4.7-2) +python-crypto (2.4-1) +xorg-server (2:1.11.1.901-1) xpdf (3.03-7) +network-manager (0.9.1.95-1) +libmusicbrainz-2.1 (2.1_2.1.5-6.1) +tmux (1.6~svn2630-2) +tcpdump (4.2.0~rc1-2) +libthai (0.1.16-1) +git (1:1.7.7.2-1) +man-db (2.6.0.2-3) Packages using hardening-wrapper/-includes (these are considered fixed, although switching them over to dpkg-buildflags might be worthwhile later on): -tmux netatalk -man-db graphicsmagick udev xfce4-terminal openssh evolution dbus -tcpdump libgsf tor evolution-data-server