Convert most http: links to https:
[wiki.git] / projects / lenny-bugs-all.mdwn
1 [[!meta title="Open RC Bugs in Lenny"]]
2
3 These are bugs to consider at SIPB's [[RC-bug-squashing hackathon|lenny-bugs]] for Lenny.
4
5 Bug list dumped early 2008-12-12.  The pipeline was
6  `$ cd /mit/debathena/debian-bts && ./get_bugs | sort | ./bugs-format-trac`
7
8 Please sort into useful/not useful, add notes, etc.
9
10 ----
11
12 ## Juicy?
13
14 All acted on!  See the "Stuff we did" sections below.
15
16
17
18 ----
19
20 ## Stuff we did
21
22 ### Fixed by SIPB!
23 [436140](https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=436140)
24 in [installation-reports](https://packages.debian.org/lenny/installation-reports)
25 "cdrom: Most of the system's files have a future timestamp causing at least update/config problems."
26 (closed by wdaher)
27
28 [476525](https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=476525) 
29 in [python-hid](https://packages.debian.org/lenny/python-hid) 
30 "python-hid: hid module will not import since python policy transition" 
31 (tabbott)
32
33 [507071](https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=507071) 
34 [racoon](https://packages.debian.org/lenny/racoon) 
35 "racoon - Fails after upgrade: symbol lookup error: /usr/sbin/racoon: undefined symbol: libipsec_opt" 
36 (fixed by broder)
37
38 [507072](https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=507072) 
39 in [ipsec-tools](https://packages.debian.org/lenny/ipsec-tools) 
40 "libipsec0 packaged in ipsec-tools without development headers" 
41 (downgraded by hartmans)
42
43 [504626](https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=504626) 
44 in [nvidia-glx](https://packages.debian.org/lenny/nvidia-glx) 
45 "[nvidia-glx] Quietly drops support for several chipsets" 
46 (downgraded by nelhage)
47
48 [502845](https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=502845)
49 in [open-iscsi](https://packages.debian.org/lenny/open-iscsi)
50 "open-iscsi: no login using amd64"
51 (quentin reassigned; Bastian Blank then lowered priority)
52
53 [508265](https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=508265)
54 in [sysprof-module-source](https://packages.debian.org/lenny/sysprof-module-source)
55 "sysprof-module-source: doesn't compile on AMD64 arch (wrong register names)"
56 (patch added by andersk)
57
58 [506057](https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=506057)
59 in [splashy](https://packages.debian.org/lenny/splashy)
60 "splashy: Splashy fails to install due to missing default theme"
61 (fix suggestion added by ecprice with help from tabbott and fawkes)
62
63 [506748](https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=506748)
64 in [rtorrent](https://packages.debian.org/lenny/rtorrent)
65 "crash rtorrent by scgi-interface (function: 'fi.get_filename_last')"
66 (submitted patch that disables broken RPC; leaving to maintainer to decide if this is what he wants to do)
67
68 [426465](https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=426465)
69 in [initramfs-tools](https://packages.debian.org/lenny/initramfs-tools)
70 "/init exports MODPROBE_OPTIONS=-qb"  
71 (patch added by price)
72
73 [489501](https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=489501)
74 in [zekr](https://packages.debian.org/lenny/zekr)
75 "zekr depends on libxul0d"  
76 (mako tweaked and sponsored fix by Asheesh Laroia)
77
78 ### Waiting on feedback
79
80 [502140](https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=502140)
81 in [pam](https://packages.debian.org/lenny/pam)
82 "cannot unlock screen during etch -> lenny transition"
83 (hartmans added comment)
84
85 [481072](https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=481072)
86 in [dk-filter](https://packages.debian.org/lenny/dk-filter)
87 "dk-filter reliably crashes upon connection from postfix"  
88 (quentin couldn't reproduce)
89
90 [507883](https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=507883)
91 in [asterisk](https://packages.debian.org/lenny/asterisk)
92 "asterisk: Very frequent segfaults on startup"
93 (quentin couldn't reproduce)
94
95 [456037](https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=456037)
96 in [fenix](https://packages.debian.org/lenny/fenix)
97 "fenix: not 64 bit clean"  
98 (ezyang observed upstream's website looks ~dead)
99
100
101
102
103 ----
104
105 ## Fun stuff to read
106
107 ### Flamewars
108
109 You might enjoy reading these, but they may not be good targets to fix.
110
111 [475737](https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=475737)
112 in [otrs2](https://packages.debian.org/lenny/otrs2)
113 "otrs2 - makes files in /usr writable by non-root"
114
115 [504771](https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=504771)
116 in [wordpress](https://packages.debian.org/lenny/wordpress)
117 "wordpress can be subject of delayed attacks via cookies"
118
119 For this one, the actual flamewar is off the bug report log.
120
121 [497823](https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=497823)
122 in [ftp.debian.org](https://packages.debian.org/lenny/ftp.debian.org)
123 "longstanding DFSG violations in linux-2.6 package"
124
125 [504747](https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=504747)
126 in [gnu-fdisk](https://packages.debian.org/lenny/gnu-fdisk)
127 "gnu-fdisk: wipes out MBR when used on GPT partitions"
128
129
130 ### Would have been fun
131
132 Entertaining to read but sadly already fixed.
133
134 [506961](https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=506961)
135 in auctex
136 "auctex: reuses old logfile on emacsen upgrades, enabling symlink attack"
137
138
139 ### Examples to live up to
140
141 [496954](https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496954)
142 in [bind9](https://packages.debian.org/lenny/bind9)
143 "bind9: Fails to start due to SIGSEGV"  
144 This bug sat unfixed for months.  Then someone attacked it in a bug-squashing party,
145 got the first reproducible testcase, and sent that upstream, which swiftly produced a fix.
146
147
148 ### Puzzling
149
150 Someone please explain what's going on (Debian Project-wise) in these bugs.
151
152 [323473](https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=323473)
153 in [wnpp](https://packages.debian.org/lenny/wnpp)
154 "ITA: mol-drivers-linux -- The Mac-on-Linux emulator - drivers for Linux"  
155 (Note: The bug is for someone to take over maintainership.  They did.  Then when the bug gets automatically archived, they reply saying to keep it?  I (price) don't understand.)
156
157
158
159
160 ----
161
162 ## Not so ripe for us to fix
163
164 ### Specific hardware
165
166 If you have the relevant hardware you could help a lot.
167
168 [394963](https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=394963)
169 in [installation-reports](https://packages.debian.org/lenny/installation-reports)
170 "installation: Problems with dual booting Dell D600 with winXP pro in the first partition (hd0, 0). After installing the Dell Etch Beta 3, Windows fails to boot and I get the blue screen of death."
171
172 [418972](https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=418972)
173 in [installation-reports](https://packages.debian.org/lenny/installation-reports)
174 "cdrom: Etch does not detect CD-ROM on Acer Aspire 7100"
175
176 [478717](https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=478717)
177 in [ruby1.9](https://packages.debian.org/lenny/ruby1.9)
178 "ruby1.9: FTBFS on hppa: make[1]: *** [all] Segmentation fault"
179
180 [499078](https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=499078)
181 in [jfsutils](https://packages.debian.org/lenny/jfsutils)
182 "jfsutils: Bus Error when running fsck.jfs on sparc"
183
184 [501804](https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=501804)
185 in [installation-reports](https://packages.debian.org/lenny/installation-reports)
186 "installation-reports: Lenny b2 install on ThinkPad X61 - fails to detect hard disk"
187
188 [495603](https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=495603)
189 in [installation-reports](https://packages.debian.org/lenny/installation-reports)
190 "grub-installer fails on a FSC Primergy RX300 with a level 5 RAID"
191
192
193 ### May be a lot of work
194
195 [490171](https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=490171)
196 in [rtorrent](https://packages.debian.org/lenny/rtorrent)
197 "rtorrent: random crash"  
198 (Reproducing this seems to require runnin 20+ torrents for a ~day)
199
200
201 ### Unclassified
202
203 Please read these reports and figure out what category they belong in.  Or make a new category.
204
205 [504661](https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=504661)
206 in [nvidia-glx-legacy-96xx-dev](https://packages.debian.org/lenny/nvidia-glx-legacy-96xx-dev)
207 "nvidia-glx-legacy-96xx-dev: /usr/lib/libGL.so symlink broken"
208
209 [504918](https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=504918)
210 in [network-manager](https://packages.debian.org/lenny/network-manager)
211 "Updating to lenny failed when NetworkManager got updated"
212
213 ### Unclassified Security
214
215 [505563](https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=505563)
216 in [icedove](https://packages.debian.org/lenny/icedove)
217 "Mozilla Thunderbird Multiple Vulnerabilities"
218
219 [507165](https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=507165)
220 in [xine-lib](https://packages.debian.org/lenny/xine-lib)
221 "xine-lib: CVE-2008-5242 heap-based buffer overflow"
222
223 [507184](https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=507184)
224 in [xine-lib](https://packages.debian.org/lenny/xine-lib)
225 "xine-lib: CVE-2008-5246 heap overflow"
226
227 [504977](https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=504977)
228 in [ffmpeg-debian](https://packages.debian.org/lenny/ffmpeg-debian)
229 "ffmpeg-debian: Several security issues"
230
231 ### Fresh bugs
232
233 These are very recent and presumably will get dealt with by the
234 package maintainers without help.
235
236 If you're bored you might look through and see if some are interesting
237 anyway.  Also feel free to draw the line at some other time; I (price)
238 picked December 1, arbitrarily.
239
240
241 [239111](https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=239111)
242 in [grub](https://packages.debian.org/lenny/grub)
243 "Freeze when installing GRUB on XFS boot partition"  
244 (Note: just re-opened 2008-12-12)
245
246 [507558](https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=507558)
247 in [hibernate](https://packages.debian.org/lenny/hibernate)
248 "ignores "LockXLock yes" setting in /etc/hibernate/common.conf (e.g. does not lock the screen)"
249
250 [507579](https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=507579)
251 in [yocto-reader](https://packages.debian.org/lenny/yocto-reader)
252 "Package installation results in license violation"
253
254 [507706](https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=507706)
255 in [cdimage.debian.org](https://packages.debian.org/lenny/cdimage.debian.org)
256 "Missing sources for d-i components/kernel of etch-n-half images"
257
258 [507721](https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=507721)
259 in [cryptsetup](https://packages.debian.org/lenny/cryptsetup)
260 "cryptsetup: Sometimes initrd ends up missing conf/conf.d/cryptroot file in it"
261
262 [507818](https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=507818)
263 in [mldonkey-server](https://packages.debian.org/lenny/mldonkey-server)
264 "mldonkey-server: mlnet does not start, logs syntax error in downloads.ini"
265
266 [507865](https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=507865)
267 in [openoffice.org-writer](https://packages.debian.org/lenny/openoffice.org-writer)
268 "openoffice.org-writer: OOo 2.4.x openinig OOo 3 files doesn't show text (2.x implements standard wrong)"
269
270 [507889](https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=507889)
271 in [mdadm](https://packages.debian.org/lenny/mdadm)
272 "mdadm: initramfs-tools script is broken, system with root on RAID won't boot"
273
274 [507996](https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=507996)
275 in [uim-tcode](https://packages.debian.org/lenny/uim-tcode)
276 "mazegaki conversion cannot be used"
277
278 [508133](https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=508133)
279 in [libmad0](https://packages.debian.org/lenny/libmad0)
280 "audacity: munmap_chunk(): invalid pointer: 0x00000000026f4eb0"
281
282 [508194](https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=508194)
283 in [sun-java5](https://packages.debian.org/lenny/sun-java5)
284 "sun-java5: New upstream release fixes several security issues"
285
286 [508313](https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=508313)
287 in [xine-lib](https://packages.debian.org/lenny/xine-lib)
288 "xine-lib: CVE-2008-5234 heap overflow in atom parsing"
289
290 [508322](https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=508322)
291 in [wodim](https://packages.debian.org/lenny/wodim)
292 "wodim: Cannot load media.  Cannot init drive."
293
294 [508324](https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=508324)
295 in [ftp.debian.org](https://packages.debian.org/lenny/ftp.debian.org)
296 "ftp.debian.org: gcc-4.2-base is not really required"
297
298 [508434](https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=508434)
299 in [ipmitool](https://packages.debian.org/lenny/ipmitool)
300 "ipmitool: Several init script problems due to wrong pidfile name"
301
302 [508443](https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=508443)
303 in [imagemagick](https://packages.debian.org/lenny/imagemagick)
304 "convert crash on sparc during compilation of djvulibre (work on x86-64)"
305
306 [508480](https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=508480)
307 in [iodbc](https://packages.debian.org/lenny/iodbc)
308 "iodbc: Segfaults when asking for the available DSNs"
309
310 [508392](https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=508392)
311 in [dpkg](https://packages.debian.org/lenny/dpkg)
312 "Handling of conflicting conffiles broken"
313
314 [508565](https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=508565)
315 in [f2c](https://packages.debian.org/lenny/f2c)
316 "f2c: does not translate properly in EMT64 machines"
317
318 [508551](https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=508551)
319 in [merkaartor](https://packages.debian.org/lenny/merkaartor)
320 "merkaartor: crash on startup: QPaintEngine::setSystemClip: Should not be change
321
322 [508589](https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=508589)
323 in [linux-2.6](https://packages.debian.org/lenny/linux-2.6)
324 "ppp: USB Modem removal after PPP exits kills keyboard"
325
326 [508660](https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=508660)
327 in [autopkgtest-xenlvm](https://packages.debian.org/lenny/autopkgtest-xenlvm)
328 "adtxenlvm: initscript assumes eth0"
329
330 ### Mostly solved?
331
332 These look like good progress is being made and they'll get fixed
333 soon. Do we need a DD to do an NMU on any of these?
334
335 [504283](https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=504283)
336 in [egroupware-core](https://packages.debian.org/lenny/egroupware-core)
337 "CVE-2007-3215: phpmailer issue (embedded code-copy)"
338
339 [508510](https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=508510)
340 in [debget](https://packages.debian.org/lenny/debget)
341 "Can't parse packages.debian.org output anymore"
342
343 [332782](https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=332782)
344 in [release-notes](https://packages.debian.org/lenny/release-notes)
345 "release-notes: Where's the license?"
346
347 [475958](https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=475958)
348 in [release-notes](https://packages.debian.org/lenny/release-notes)
349 "document procedure to recover from "/dev/hda became /dev/sda" boot failure"  
350 (Note: looks done, just not closed.)
351
352 [506883](https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=506883)
353 in [tuxguitar](https://packages.debian.org/lenny/tuxguitar)
354 "tuxguitar: hard-codes dependencies on libraries"
355
356 [495178](https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=495178)
357 in [libjs-jquery](https://packages.debian.org/lenny/libjs-jquery)
358 "libjs-jquery: Should compile jquery.min.js and jquery.pack.js from jquery.js"
359
360 [507059](https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=507059)
361 in [initramfs-tools](https://packages.debian.org/lenny/initramfs-tools)
362 "initramfs-tools: Wrong check for udevadm in functions"  
363 (No maintainer activity since it was reported 2 weeks ago; One-line patch attached.)
364
365 [496334](https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496334)
366 in [mdadm](https://packages.debian.org/lenny/mdadm)
367 "mdadm segfault on --assemble --force with raid10"  
368 Seems to be fixed and uploaded, but got reopened for some reason?
369
370 [374644](https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=374644) in [xine-ui](https://packages.debian.org/lenny/xine-ui)
371 "xine-ui: ctrl/shift key press emulation implementation broken"  
372 (Note: There's a patch that may be good enough -- blocking on some guy responding)
373
374 [505237](https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=505237)
375 in [snmpd](https://packages.debian.org/lenny/snmpd)
376 "/etc/init.d/snmpd start reports error if already running"
377 (Note: fixed, waiting on an upload?)
378
379 [508257](https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=508257)
380 in [twiki](https://packages.debian.org/lenny/twiki)
381 "CVE-2008-5305: TWiki SEARCH variable allows arbitrary shell command execution"
382
383 [508026](https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=508026)
384 in [phppgadmin](https://packages.debian.org/lenny/phppgadmin)
385 "phpPgAdmin: Local File Inclusion Vulnerability"
386
387 [501800](https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=501800)
388 in [bind9](https://packages.debian.org/lenny/bind9)
389 "bind9: bind crashes with a list for allow-update"
390
391 [503532](https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=503532)
392 in [dbus](https://packages.debian.org/lenny/dbus)
393 "send_requested_reply="true" allows all non-reply messages"
394
395 [506741](https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=506741)
396 in [wireshark](https://packages.debian.org/lenny/wireshark)
397 "wireshark: DoS caused by sending a SMTP request with large content"
398
399 [503303](https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=503303)
400 in [upgrade-reports](https://packages.debian.org/lenny/upgrade-reports)
401 "etch -> lenny minimal chrrot upgrade fails due to Conflicts/Pre-Depends loop"
402
403 [504524](https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=504524)
404 in [sun-java6](https://packages.debian.org/lenny/sun-java6)
405 "AWT_TOOLKIT=MToolkit causes java to segfault on amd64"
406
407 [503712](https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=503712)
408 in [ghostscript](https://packages.debian.org/lenny/ghostscript)
409 "etch->lenny upgrade left the system in broken state"
410
411 [508635](https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=508635)
412 in [libexif-gtk-dev](https://packages.debian.org/lenny/libexif-gtk-dev)
413 "libexif-gtk-dev: References no longer existing libXcursor.la"
414
415 [500460](https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=500460)
416 in [oss-compat](https://packages.debian.org/lenny/oss-compat)
417 "oss-compat: modules are not loaded"
418
419
420 ### Not much of use one can do
421
422 (waiting on reporter to reproduce)
423
424 [494293](https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=494293)
425 in [installation-reports](https://packages.debian.org/lenny/installation-reports)
426 "installation-reports: Grub error: not a regular file..."
427
428 (this one looks like it'll be removed from Lenny or have amd64 disabled)
429
430 [507021](https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=507021)
431 in [helpdeco](https://packages.debian.org/lenny/helpdeco)
432 "Fails to work on amd64"
433
434 (this one looks the maintainer has labeled unreproducible)
435
436 [507242](https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=507242)
437 in [amule-daemon](https://packages.debian.org/lenny/amule-daemon)
438 "amule-daemon: causes OOM's by leaking lots of memory"
439
440 (waiting on upstream)
441
442 [506652](https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=506652)
443 in [xml2rfc](https://packages.debian.org/lenny/xml2rfc)
444 "Yet another boilerplate change"
445
446 [490999](https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=490999)
447 in [libqt3-mt](https://packages.debian.org/lenny/libqt3-mt)
448 "kicker: crashes on startup"
449
450 [507947](https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=507947)
451 in [moodle](https://packages.debian.org/lenny/moodle)
452 "moodle: html2text.php is not DFSG-free"
453
454 [495232](https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=495232)
455 in [quagga](https://packages.debian.org/lenny/quagga)
456 "quagga: zebra ignores routes added via command line"
457
458 (misc)
459
460 [508091](https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=508091)
461 in [tuxguitar](https://packages.debian.org/lenny/tuxguitar)
462 "maintainer address bounces"
463
464 (trivial fix may cause regression, may punt)
465
466 [507003](https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=507003)
467 in [open-iscsi](https://packages.debian.org/lenny/open-iscsi)
468 "initiatorname.iscsi should maybe not be in /etc"
469
470 (legal issue involving non-free file)
471
472 [502751](https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=502751)
473 in [clamav-getfiles](https://packages.debian.org/lenny/clamav-getfiles)
474 "clamav-getfiles: piuparts test fails: eicar.com md5sum mismatch, file needs downloading"
475
476 [506353](https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=506353)
477 in [mailscanner](https://packages.debian.org/lenny/mailscanner)
478 "CVE-2008-5312/3: mailscanner might allow local users to overwrite arbitrary files via a symlink attack"
479
480 [507316](https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=507316)
481 in [smarty](https://packages.debian.org/lenny/smarty)
482 "smarty: Non-free logo included in package"
483
484
485 ### Special team bugs
486
487 These bugs are probably not good targets because the work involved with them at this point is to be done by someone on a special Debian team.
488
489 [451628](https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=451628)
490 in [ftp.debian.org](https://packages.debian.org/lenny/ftp.debian.org)
491 "Packages might enter the archive from security without source"
492
493 [506152](https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=506152)
494 in [ftp.debian.org](https://packages.debian.org/lenny/ftp.debian.org)
495 "libept0 should have priority important"
496
497 [507675](https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=507675)
498 in [ftp.debian.org](https://packages.debian.org/lenny/ftp.debian.org)
499 "python2.5 should have priority standard"
500
501 [507678](https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=507678)
502 in [ftp.debian.org](https://packages.debian.org/lenny/ftp.debian.org)
503 "libsqlite3-0 should have priority standard"
504
505 [507775](https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=507775)
506 in [ftp.debian.org](https://packages.debian.org/lenny/ftp.debian.org)
507 "libkeyutils1 should have priority standard"
508
509 [507778](https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=507778)
510 in [ftp.debian.org](https://packages.debian.org/lenny/ftp.debian.org)
511 "libldap-2.4-2 should have priority standard"
512
513 [507779](https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=507779)
514 in [ftp.debian.org](https://packages.debian.org/lenny/ftp.debian.org)
515 "[Priorities] libustr-1.0-1 -> standard"
516
517 [507780](https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=507780)
518 in [ftp.debian.org](https://packages.debian.org/lenny/ftp.debian.org)
519 "python-sepolgen should have priority standard"
520
521 [507783](https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=507783)
522 in [ftp.debian.org](https://packages.debian.org/lenny/ftp.debian.org)
523 "libxml2 should have priority standard"
524
525 [507784](https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=507784)
526 in [ftp.debian.org](https://packages.debian.org/lenny/ftp.debian.org)
527 "python2.5-minimal should have priority standard"
528
529 [507796](https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=507796)
530 in [ftp.debian.org](https://packages.debian.org/lenny/ftp.debian.org)
531 "libisccfg40 should have priority standard"
532
533 [507797](https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=507797)
534 in [ftp.debian.org](https://packages.debian.org/lenny/ftp.debian.org)
535 "libisccc40 should have priority standard"
536
537 [507798](https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=507798)
538 in [ftp.debian.org](https://packages.debian.org/lenny/ftp.debian.org)
539 "libedit2 should have priority standard"
540
541 [507799](https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=507799)
542 in [ftp.debian.org](https://packages.debian.org/lenny/ftp.debian.org)
543 "libgssglue1 must have priority standard"
544
545 [507800](https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=507800)
546 in [ftp.debian.org](https://packages.debian.org/lenny/ftp.debian.org)
547 "ucf must have priority standard"
548
549 [507801](https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=507801)
550 in [ftp.debian.org](https://packages.debian.org/lenny/ftp.debian.org)
551 "libpci3 must have priority standard"
552
553 [497471](https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=497471)
554 in [cdimage.debian.org](https://packages.debian.org/lenny/cdimage.debian.org)
555
556 "sarge images have syslinux binaries without source"
557
558 [506977](https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=506977)
559 in [release.debian.org](https://packages.debian.org/lenny/release.debian.org)
560 "FPC: copyright infringement in pre 2.2.2 sources"
561
562 [507239](https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=507239)
563 in [release.debian.org](https://packages.debian.org/lenny/release.debian.org)
564 "RM: astrolog/stable -- RoQA; orphaned long time, non-free, contains potentially undistributable code"
565
566 This one is fixed in experimental:
567
568
569
570 [503907](https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=503907)
571 in [libwebkit-1.0-1](https://packages.debian.org/lenny/libwebkit-1.0-1)
572 "epiphany-webkit: Crashes at startup whenever I go to a site."