"dk-filter reliably crashes upon connection from postfix"
[[BR]](Note: bug report, little followup. Test, reproduce, debug, fix.)
+[http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=506057 506057]
+in [http://packages.debian.org/lenny/splashy splashy]
+"splashy: Splashy fails to install due to missing default theme"
+
+These ones are only about 2 weeks old:
+
+[http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=507071 507071]
+in [http://packages.debian.org/lenny/racoon racoon]
+"racoon - Fails after upgrade: symbol lookup error: /usr/sbin/racoon: undefined symbol: libipsec_opt"
+
+[http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=507072 507072]
+in [http://packages.debian.org/lenny/ipsec-tools ipsec-tools]
+"libipsec0 packaged in ipsec-tools without development headers"
= Specific hardware =
in [http://packages.debian.org/lenny/jfsutils jfsutils]
"jfsutils: Bus Error when running fsck.jfs on sparc"
+[http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=501804 501804]
+in [http://packages.debian.org/lenny/installation-reports installation-reports]
+"installation-reports: Lenny b2 install on ThinkPad X61 - fails to detect hard disk"
+
= Examples =
[http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496954 496954]
in [http://packages.debian.org/lenny/mdadm mdadm]
"mdadm segfault on --assemble --force with raid10"
-[http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=497471 497471]
-in [http://packages.debian.org/lenny/cdimage.debian.org cdimage.debian.org]
-"sarge images have syslinux binaries without source"
-
-[http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=497823 497823]
-in [http://packages.debian.org/lenny/ftp.debian.org ftp.debian.org]
-"longstanding DFSG violations in linux-2.6 package"
-
[http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=500460 500460]
in [http://packages.debian.org/lenny/oss-compat oss-compat]
"oss-compat: modules are not loaded"
in [http://packages.debian.org/lenny/bind9 bind9]
"bind9: bind crashes with a list for allow-update"
-[http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=501804 501804]
-in [http://packages.debian.org/lenny/installation-reports installation-reports]
-"installation-reports: Lenny b2 install on ThinkPad X61 - fails to detect hard disk"
-
[http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=502140 502140]
in [http://packages.debian.org/lenny/pam pam]
"cannot unlock screen during etch -> lenny transition"
in [http://packages.debian.org/lenny/ghostscript ghostscript]
"etch->lenny upgrade left the system in broken state"
-[http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=503907 503907]
-in [http://packages.debian.org/lenny/libwebkit-1.0-1 libwebkit-1.0-1]
-"epiphany-webkit: Crashes at startup whenever I go to a site."
-
-[http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=504283 504283]
-in [http://packages.debian.org/lenny/egroupware-core egroupware-core]
-"CVE-2007-3215: phpmailer issue (embedded code-copy)"
-
-[http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=504373 504373]
-in [http://packages.debian.org/lenny/libtemplate-perl libtemplate-perl]
-"libtemplate-perl: Upgrade from etch breaks code using DBI plugins"
-
[http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=504524 504524]
in [http://packages.debian.org/lenny/sun-java6 sun-java6]
"AWT_TOOLKIT=MToolkit causes java to segfault on amd64"
in [http://packages.debian.org/lenny/gnu-fdisk gnu-fdisk]
"gnu-fdisk: wipes out MBR when used on GPT partitions"
-[http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=504771 504771]
-in [http://packages.debian.org/lenny/wordpress wordpress]
-"wordpress can be subject of delayed attacks via cookies"
-
[http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=504918 504918]
in [http://packages.debian.org/lenny/network-manager network-manager]
"Updating to lenny failed when NetworkManager got updated"
-[http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=504977 504977]
-in [http://packages.debian.org/lenny/ffmpeg-debian ffmpeg-debian]
-"ffmpeg-debian: Several security issues"
-
[http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=505237 505237]
in [http://packages.debian.org/lenny/snmpd snmpd]
"/etc/init.d/snmpd start reports error if already running"
-[http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=505563 505563]
-in [http://packages.debian.org/lenny/icedove icedove]
-"Mozilla Thunderbird Multiple Vulnerabilities"
-
-[http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=506057 506057]
-in [http://packages.debian.org/lenny/splashy splashy]
-"splashy: Splashy fails to install due to missing default theme"
-
-[http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=506353 506353]
-in [http://packages.debian.org/lenny/mailscanner mailscanner]
-"CVE-2008-5312/3: mailscanner might allow local users to overwrite arbitrary files via a symlink attack"
-
-[http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=506652 506652]
-in [http://packages.debian.org/lenny/xml2rfc xml2rfc]
-"Yet another boilerplate change"
-
-[http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=506741 506741]
-in [http://packages.debian.org/lenny/wireshark wireshark]
-"wireshark: DoS caused by sending a SMTP request with large content"
-
[http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=506748 506748]
in [http://packages.debian.org/lenny/rtorrent rtorrent]
"crash rtorrent by scgi-interface (function: 'fi.get_filename_last')"
in [http://packages.debian.org/lenny/libgnutls26 libgnutls26]
"libgnutls26: 2.4.2-3 breaks OpenLDAP access"
-[http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=506977 506977]
-in [http://packages.debian.org/lenny/release.debian.org release.debian.org]
-"FPC: copyright infringement in pre 2.2.2 sources"
-
[http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=507003 507003]
in [http://packages.debian.org/lenny/open-iscsi open-iscsi]
"initiatorname.iscsi should maybe not be in /etc"
in [http://packages.debian.org/lenny/initramfs-tools initramfs-tools]
"initramfs-tools: Wrong check for udevadm in functions"
-[http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=507071 507071]
-in [http://packages.debian.org/lenny/racoon racoon]
-"racoon - Fails after upgrade: symbol lookup error: /usr/sbin/racoon: undefined symbol: libipsec_opt"
+= Unclassified Security =
-[http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=507072 507072]
-in [http://packages.debian.org/lenny/ipsec-tools ipsec-tools]
-"libipsec0 packaged in ipsec-tools without development headers"
+[http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=505563 505563]
+in [http://packages.debian.org/lenny/icedove icedove]
+"Mozilla Thunderbird Multiple Vulnerabilities"
+
+[http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=506353 506353]
+in [http://packages.debian.org/lenny/mailscanner mailscanner]
+"CVE-2008-5312/3: mailscanner might allow local users to overwrite arbitrary files via a symlink attack"
[http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=507165 507165]
in [http://packages.debian.org/lenny/xine-lib xine-lib]
in [http://packages.debian.org/lenny/xine-lib xine-lib]
"xine-lib: CVE-2008-5246 heap overflow"
-[http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=507239 507239]
-in [http://packages.debian.org/lenny/release.debian.org release.debian.org]
-"RM: astrolog/stable -- RoQA; orphaned long time, non-free, contains potentially undistributable code"
+[http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=506741 506741]
+in [http://packages.debian.org/lenny/wireshark wireshark]
+"wireshark: DoS caused by sending a SMTP request with large content"
-[http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=507242 507242]
-in [http://packages.debian.org/lenny/amule-daemon amule-daemon]
-"amule-daemon: causes OOM's by leaking lots of memory"
+[http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=504977 504977]
+in [http://packages.debian.org/lenny/ffmpeg-debian ffmpeg-debian]
+"ffmpeg-debian: Several security issues"
-[http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=507316 507316]
-in [http://packages.debian.org/lenny/smarty smarty]
-"smarty: Non-free logo included in package"
+[http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=504771 504771]
+in [http://packages.debian.org/lenny/wordpress wordpress]
+"wordpress can be subject of delayed attacks via cookies"
+[http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=504283 504283]
+in [http://packages.debian.org/lenny/egroupware-core egroupware-core]
+"CVE-2007-3215: phpmailer issue (embedded code-copy)"
= Fresh bugs =
in [http://packages.debian.org/lenny/mdadm mdadm]
"mdadm: initramfs-tools script is broken, system with root on RAID won't boot"
-[http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=507915 507915]
-in [http://packages.debian.org/lenny/povray povray]
-"Povray unusable with non-ascii filenames"
-
-[http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=507927 507927]
-in [http://packages.debian.org/lenny/acpi-support acpi-support]
-"Fix suspend-resume in Thinkpad R50e (intel 855gm card)"
-
[http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=507944 507944]
in [http://packages.debian.org/lenny/xwhois xwhois]
"xwhois: segfaults on start in get_servers()"
in [http://packages.debian.org/lenny/sysprof-module-source sysprof-module-source]
"sysprof-module-source: doesn't compile on AMD64 arch (wrong register names)"
-[http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=508272 508272]
-in [http://packages.debian.org/lenny/gnome-splashscreen-manager gnome-splashscreen-manager]
-"gnome-splashscreen-manager: Refuses to start, undefined symbol: gtk_file_system_error_quark"
-
[http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=508313 508313]
in [http://packages.debian.org/lenny/xine-lib xine-lib]
"xine-lib: CVE-2008-5234 heap overflow in atom parsing"
in [http://packages.debian.org/lenny/ftp.debian.org ftp.debian.org]
"ftp.debian.org: gcc-4.2-base is not really required"
-[http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=508351 508351]
-in [http://packages.debian.org/lenny/open-iscsi open-iscsi]
-"open-iscsi: will not install, looking for missing /sys/module/scsi_transport_iscsi/version file"
-
[http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=508434 508434]
in [http://packages.debian.org/lenny/ipmitool ipmitool]
"ipmitool: Several init script problems due to wrong pidfile name"
in [http://packages.debian.org/lenny/debget debget]
"Can't parse packages.debian.org output anymore"
+[http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=508392 508392]
+in [http://packages.debian.org/lenny/dpkg dpkg]
+"Handling of conflicting conffiles broken"
+
+[http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=508565 508565]
+in [http://packages.debian.org/lenny/f2c f2c]
+"f2c: does not translate properly in EMT64 machines"
+
+[http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=508551 508551]
+in [http://packages.debian.org/lenny/merkaartor merkaartor]
+"merkaartor: crash on startup: QPaintEngine::setSystemClip: Should not be change
+
= Mostly solved? =
These look like good progress is being made and they'll get fixed soon.
+[http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=507316 507316]
+in [http://packages.debian.org/lenny/smarty smarty]
+"smarty: Non-free logo included in package"
+
[http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=332782 332782]
in [http://packages.debian.org/lenny/release-notes release-notes]
"release-notes: Where's the license?"
in [http://packages.debian.org/lenny/libjs-jquery libjs-jquery]
"libjs-jquery: Should compile jquery.min.js and jquery.pack.js from jquery.js"
+= Not much of use one can do =
+
(this one looks like it'll be removed from Lenny or have amd64 disabled)
+
[http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=507021 507021]
in [http://packages.debian.org/lenny/helpdeco helpdeco]
"Fails to work on amd64"
+(this one looks the maintainer has labeled unreproducible)
+
+[http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=507242 507242]
+in [http://packages.debian.org/lenny/amule-daemon amule-daemon]
+"amule-daemon: causes OOM's by leaking lots of memory"
+
+(waiting on upstream)
+
+[http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=506652 506652]
+in [http://packages.debian.org/lenny/xml2rfc xml2rfc]
+"Yet another boilerplate change"
+
= Flamewars =
You might enjoy reading these, but they may not be good targets to fix.
in [http://packages.debian.org/lenny/otrs2 otrs2]
"otrs2 - makes files in /usr writable by non-root"
+For this one, the actual flameware is off the bug report log.
+
+[http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=497823 497823]
+in [http://packages.debian.org/lenny/ftp.debian.org ftp.debian.org]
+"longstanding DFSG violations in linux-2.6 package"
= Would have been fun =
"auctex: reuses old logfile on emacsen upgrades, enabling symlink attack"
-= Ftpmaster bugs =
+= Special team bugs =
-These bugs are probably not good targets because the work involved with them is easy for either the maintainer or ftpmasters to fix.
+These bugs are probably not good targets because the work involved with them at this point is to be done by someone on a special Debian team.
[http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=451628 451628]
in [http://packages.debian.org/lenny/ftp.debian.org ftp.debian.org]
[http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=507678 507678]
in [http://packages.debian.org/lenny/ftp.debian.org ftp.debian.org]
"libsqlite3-0 should have priority standard"
+
[http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=507775 507775]
in [http://packages.debian.org/lenny/ftp.debian.org ftp.debian.org]
"libkeyutils1 should have priority standard"
in [http://packages.debian.org/lenny/ftp.debian.org ftp.debian.org]
"libpci3 must have priority standard"
+[http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=497471 497471]
+in [http://packages.debian.org/lenny/cdimage.debian.org cdimage.debian.org]
+"sarge images have syslinux binaries without source"
+
+[http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=506977 506977]
+in [http://packages.debian.org/lenny/release.debian.org release.debian.org]
+"FPC: copyright infringement in pre 2.2.2 sources"
+
+[http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=507239 507239]
+in [http://packages.debian.org/lenny/release.debian.org release.debian.org]
+"RM: astrolog/stable -- RoQA; orphaned long time, non-free, contains potentially undistributable code"
+
+[http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=504373 504373]
+in [http://packages.debian.org/lenny/libtemplate-perl libtemplate-perl]
+"libtemplate-perl: Upgrade from etch breaks code using DBI plugins"
+
+This one is fixed in experimental:
+
+[http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=503907 503907]
+in [http://packages.debian.org/lenny/libwebkit-1.0-1 libwebkit-1.0-1]
+"epiphany-webkit: Crashes at startup whenever I go to a site."