doc/LennyBugsAll

   1 = Open RC Bugs in Lenny =
   2
   3 These are bugs to consider at SIPB's [LennyBugs RC-bug-squashing hackathon] for Lenny.
   4
   5 Bug list dumped early 2008-12-12.  The pipeline was
   6  `$ cd /mit/debathena/debian-bts && ./get_bugs | sort | ./bugs-format-trac`
   7
   8 Please sort into useful/not useful, add notes, etc.
   9
  10 = Juicy? =
  11
  12 Try these!
  13
  14 [http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=426465 426465]
  15 in [http://packages.debian.org/lenny/initramfs-tools initramfs-tools]
  16 "/init exports MODPROBE_OPTIONS=-qb"
  17 [[BR]](Note: real bug report is near bottom.)
  18
  19 [http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=476525 476525]
  20 in [http://packages.debian.org/lenny/python-hid python-hid]
  21 "python-hid: hid module will not import since python policy transition"
  22 [[BR]](Note: have patch, looks messy, looks like not-too-hard bug to fix well.)
  23
  24 [http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=481072 481072]
  25 in [http://packages.debian.org/lenny/dk-filter dk-filter]
  26 "dk-filter reliably crashes upon connection from postfix"
  27 [[BR]](Note: bug report, little followup.  Test, reproduce, debug, fix.)
  28
  29 [http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=506057 506057]
  30 in [http://packages.debian.org/lenny/splashy splashy]
  31 "splashy: Splashy fails to install due to missing default theme"
  32
  33 [http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=506748 506748]
  34 in [http://packages.debian.org/lenny/rtorrent rtorrent]
  35 "crash rtorrent by scgi-interface (function: 'fi.get_filename_last')"
  36 [[BR]]This is fixed in experimental, but in a newer, less-stable version; Someone might be able to backport the fix.
  37
  38 These ones are only about 2 weeks old:
  39
  40 [http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=507071 507071]
  41 in [http://packages.debian.org/lenny/racoon racoon]
  42 "racoon - Fails after upgrade: symbol lookup error: /usr/sbin/racoon: undefined symbol: libipsec_opt"
  43
  44 [http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=507072 507072]
  45 in [http://packages.debian.org/lenny/ipsec-tools ipsec-tools]
  46 "libipsec0 packaged in ipsec-tools without development headers"
  47
  48 = Specific hardware =
  49
  50 If you have the relevant hardware you could help a lot.
  51
  52 [http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=394963 394963]
  53 in [http://packages.debian.org/lenny/installation-reports installation-reports]
  54 "installation: Problems with dual booting Dell D600 with winXP pro in the first partition (hd0, 0). After installing the Dell Etch Beta 3, Windows fails to boot and I get the blue screen of death."
  55
  56 [http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=418972 418972]
  57 in [http://packages.debian.org/lenny/installation-reports installation-reports]
  58 "cdrom: Etch does not detect CD-ROM on Acer Aspire 7100"
  59
  60 [http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=478717 478717]
  61 in [http://packages.debian.org/lenny/ruby1.9 ruby1.9]
  62 "ruby1.9: FTBFS on hppa: make[1]: *** [all] Segmentation fault"
  63
  64 [http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=499078 499078]
  65 in [http://packages.debian.org/lenny/jfsutils jfsutils]
  66 "jfsutils: Bus Error when running fsck.jfs on sparc"
  67
  68 [http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=501804 501804]
  69 in [http://packages.debian.org/lenny/installation-reports installation-reports]
  70 "installation-reports: Lenny b2 install on ThinkPad X61 - fails to detect hard disk"
  71
  72 [http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=495603 495603]
  73 in [http://packages.debian.org/lenny/installation-reports installation-reports]
  74 "grub-installer fails on a FSC Primergy RX300 with a level 5 RAID"
  75
  76 = Examples =
  77
  78 [http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496954 496954]
  79 in [http://packages.debian.org/lenny/bind9 bind9]
  80 "bind9: Fails to start due to SIGSEGV"
  81 [[BR]]This bug sat unfixed for months.  Then someone attacked it in a bug-squashing party,
  82 got the first reproducible testcase, and sent that upstream, which swiftly produced a fix.
  83
  84
  85 = May be a lot of work =
  86
  87 [http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=456037 456037]
  88 in [http://packages.debian.org/lenny/fenix fenix]
  89 "fenix: not 64 bit clean"
  90
  91 [http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=490171 490171]
  92 in [http://packages.debian.org/lenny/rtorrent rtorrent]
  93 "rtorrent: random crash"
  94 [[BR]](Reproducing this seems to require runnin 20+ torrents for a ~day)
  95
  96 = Puzzling =
  97
  98 Someone please explain what's going on (Debian Project-wise) in these bugs.
  99
 100 [http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=323473 323473]
 101 in [http://packages.debian.org/lenny/wnpp wnpp]
 102 "ITA: mol-drivers-linux -- The Mac-on-Linux emulator - drivers for Linux"
 103 [[BR]](Note: The bug is for someone to take over maintainership.  They did.  Then when the bug gets automatically archived, they reply saying to keep it?  I (price) don't understand.)
 104
 105
 106 = Unclassified =
 107
 108 Please read these reports and figure out what category they belong in.  Or make a new category.
 109
 110 [http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=436140 436140]
 111 in [http://packages.debian.org/lenny/installation-reports installation-reports]
 112 "cdrom: Most of the system's files have a future timestamp causing at least update/config problems."
 113
 114 [http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=490999 490999]
 115 in [http://packages.debian.org/lenny/libqt3-mt libqt3-mt]
 116 "kicker: crashes on startup"
 117
 118 [http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=494293 494293]
 119 in [http://packages.debian.org/lenny/installation-reports installation-reports]
 120 "installation-reports: Grub error: not a regular file..."
 121
 122 [http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=495232 495232]
 123 in [http://packages.debian.org/lenny/quagga quagga]
 124 "quagga: zebra ignores routes added via command line"
 125
 126 [http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=500460 500460]
 127 in [http://packages.debian.org/lenny/oss-compat oss-compat]
 128 "oss-compat: modules are not loaded"
 129
 130 [http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=501800 501800]
 131 in [http://packages.debian.org/lenny/bind9 bind9]
 132 "bind9: bind crashes with a list for allow-update"
 133
 134 [http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=502140 502140]
 135 in [http://packages.debian.org/lenny/pam pam]
 136 "cannot unlock screen during etch -> lenny transition"
 137
 138 [http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=502751 502751]
 139 in [http://packages.debian.org/lenny/clamav-getfiles clamav-getfiles]
 140 "clamav-getfiles: piuparts test fails: eicar.com md5sum mismatch, file needs downloading"
 141
 142 [http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=503303 503303]
 143 in [http://packages.debian.org/lenny/upgrade-reports upgrade-reports]
 144 "etch -> lenny minimal chrrot upgrade fails due to Conflicts/Pre-Depends loop"
 145
 146 [http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=503532 503532]
 147 in [http://packages.debian.org/lenny/dbus dbus]
 148 "send_requested_reply="true" allows all non-reply messages"
 149
 150 [http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=503712 503712]
 151 in [http://packages.debian.org/lenny/ghostscript ghostscript]
 152 "etch->lenny upgrade left the system in broken state"
 153
 154 [http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=504524 504524]
 155 in [http://packages.debian.org/lenny/sun-java6 sun-java6]
 156 "AWT_TOOLKIT=MToolkit causes java to segfault on amd64"
 157
 158 [http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=504626 504626]
 159 in [http://packages.debian.org/lenny/nvidia-glx nvidia-glx]
 160 "[nvidia-glx] Quietly drops support for several chipsets"
 161
 162 [http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=504661 504661]
 163 in [http://packages.debian.org/lenny/nvidia-glx-legacy-96xx-dev nvidia-glx-legacy-96xx-dev]
 164 "nvidia-glx-legacy-96xx-dev: /usr/lib/libGL.so symlink broken"
 165
 166 [http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=504918 504918]
 167 in [http://packages.debian.org/lenny/network-manager network-manager]
 168 "Updating to lenny failed when NetworkManager got updated"
 169
 170 [http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=506853 506853]
 171 in [http://packages.debian.org/lenny/libgnutls26 libgnutls26]
 172 "libgnutls26: 2.4.2-3 breaks OpenLDAP access"
 173
 174 [http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=507003 507003]
 175 in [http://packages.debian.org/lenny/open-iscsi open-iscsi]
 176 "initiatorname.iscsi should maybe not be in /etc"
 177
 178 = Unclassified Security =
 179
 180 [http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=505563 505563]
 181 in [http://packages.debian.org/lenny/icedove icedove]
 182 "Mozilla Thunderbird Multiple Vulnerabilities"
 183
 184 [http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=506353 506353]
 185 in [http://packages.debian.org/lenny/mailscanner mailscanner]
 186 "CVE-2008-5312/3: mailscanner might allow local users to overwrite arbitrary files via a symlink attack"
 187
 188 [http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=507165 507165]
 189 in [http://packages.debian.org/lenny/xine-lib xine-lib]
 190 "xine-lib: CVE-2008-5242 heap-based buffer overflow"
 191
 192 [http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=507184 507184]
 193 in [http://packages.debian.org/lenny/xine-lib xine-lib]
 194 "xine-lib: CVE-2008-5246 heap overflow"
 195
 196 [http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=506741 506741]
 197 in [http://packages.debian.org/lenny/wireshark wireshark]
 198 "wireshark: DoS caused by sending a SMTP request with large content"
 199
 200 [http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=504977 504977]
 201 in [http://packages.debian.org/lenny/ffmpeg-debian ffmpeg-debian]
 202 "ffmpeg-debian: Several security issues"
 203
 204 [http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=504771 504771]
 205 in [http://packages.debian.org/lenny/wordpress wordpress]
 206 "wordpress can be subject of delayed attacks via cookies"
 207
 208 [http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=504283 504283]
 209 in [http://packages.debian.org/lenny/egroupware-core egroupware-core]
 210 "CVE-2007-3215: phpmailer issue (embedded code-copy)"
 211
 212 = Fresh bugs =
 213
 214 These are very recent and presumably will get dealt with by the package maintainers without help.
 215
 216 If you're bored you might look through and see if some are interesting anyway.  Also feel free to draw the line at some other time; I (price) picked December 1, arbitrarily.
 217
 218
 219 [http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=239111 239111]
 220 in [http://packages.debian.org/lenny/grub grub]
 221 "Freeze when installing GRUB on XFS boot partition"
 222 [[BR]](Note: just re-opened 2008-12-12)
 223
 224 [http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=507558 507558]
 225 in [http://packages.debian.org/lenny/hibernate hibernate]
 226 "ignores "LockXLock yes" setting in /etc/hibernate/common.conf (e.g. does not lock the screen)"
 227
 228 [http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=507579 507579]
 229 in [http://packages.debian.org/lenny/yocto-reader yocto-reader]
 230 "Package installation results in license violation"
 231
 232 [http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=507706 507706]
 233 in [http://packages.debian.org/lenny/cdimage.debian.org cdimage.debian.org]
 234 "Missing sources for d-i components/kernel of etch-n-half images"
 235
 236 [http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=507721 507721]
 237 in [http://packages.debian.org/lenny/cryptsetup cryptsetup]
 238 "cryptsetup: Sometimes initrd ends up missing conf/conf.d/cryptroot file in it"
 239
 240 [http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=507818 507818]
 241 in [http://packages.debian.org/lenny/mldonkey-server mldonkey-server]
 242 "mldonkey-server: mlnet does not start, logs syntax error in downloads.ini"
 243
 244 [http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=507865 507865]
 245 in [http://packages.debian.org/lenny/openoffice.org-writer openoffice.org-writer]
 246 "openoffice.org-writer: OOo 2.4.x openinig OOo 3 files doesn't show text (2.x implements standard wrong)"
 247
 248 [http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=507883 507883]
 249 in [http://packages.debian.org/lenny/asterisk asterisk]
 250 "asterisk: Very frequent segfaults on startup"
 251
 252 [http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=507889 507889]
 253 in [http://packages.debian.org/lenny/mdadm mdadm]
 254 "mdadm: initramfs-tools script is broken, system with root on RAID won't boot"
 255
 256 [http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=507947 507947]
 257 in [http://packages.debian.org/lenny/moodle moodle]
 258 "moodle: html2text.php is not DFSG-free"
 259
 260 [http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=507996 507996]
 261 in [http://packages.debian.org/lenny/uim-tcode uim-tcode]
 262 "mazegaki conversion cannot be used"
 263
 264 [http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=508026 508026]
 265 in [http://packages.debian.org/lenny/phppgadmin phppgadmin]
 266 "phpPgAdmin: Local File Inclusion Vulnerability"
 267
 268 [http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=508091 508091]
 269 in [http://packages.debian.org/lenny/tuxguitar tuxguitar]
 270 "maintainer address bounces"
 271
 272 [http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=508124 508124]
 273 in [http://packages.debian.org/lenny/python-m2crypto python-m2crypto]
 274 "Yum crashes when setting-up a CentOS chroot OS"
 275
 276 [http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=508133 508133]
 277 in [http://packages.debian.org/lenny/libmad0 libmad0]
 278 "audacity: munmap_chunk(): invalid pointer: 0x00000000026f4eb0"
 279
 280 [http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=508194 508194]
 281 in [http://packages.debian.org/lenny/sun-java5 sun-java5]
 282 "sun-java5: New upstream release fixes several security issues"
 283
 284 [http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=508257 508257]
 285 in [http://packages.debian.org/lenny/twiki twiki]
 286 "CVE-2008-5305: TWiki SEARCH variable allows arbitrary shell command execution"
 287
 288 [http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=508265 508265]
 289 in [http://packages.debian.org/lenny/sysprof-module-source sysprof-module-source]
 290 "sysprof-module-source: doesn't compile on AMD64 arch (wrong register names)"
 291
 292 [http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=508313 508313]
 293 in [http://packages.debian.org/lenny/xine-lib xine-lib]
 294 "xine-lib: CVE-2008-5234 heap overflow in atom parsing"
 295
 296 [http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=508322 508322]
 297 in [http://packages.debian.org/lenny/wodim wodim]
 298 "wodim: Cannot load media.  Cannot init drive."
 299
 300 [http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=508324 508324]
 301 in [http://packages.debian.org/lenny/ftp.debian.org ftp.debian.org]
 302 "ftp.debian.org: gcc-4.2-base is not really required"
 303
 304 [http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=508434 508434]
 305 in [http://packages.debian.org/lenny/ipmitool ipmitool]
 306 "ipmitool: Several init script problems due to wrong pidfile name"
 307
 308 [http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=508443 508443]
 309 in [http://packages.debian.org/lenny/imagemagick imagemagick]
 310 "convert crash on sparc during compilation of djvulibre (work on x86-64)"
 311
 312 [http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=508480 508480]
 313 in [http://packages.debian.org/lenny/iodbc iodbc]
 314 "iodbc: Segfaults when asking for the available DSNs"
 315
 316 [http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=508510 508510]
 317 in [http://packages.debian.org/lenny/debget debget]
 318 "Can't parse packages.debian.org output anymore"
 319
 320 [http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=508392 508392]
 321 in [http://packages.debian.org/lenny/dpkg dpkg]
 322 "Handling of conflicting conffiles broken"
 323
 324 [http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=508565 508565]
 325 in [http://packages.debian.org/lenny/f2c f2c]
 326 "f2c: does not translate properly in EMT64 machines"
 327
 328 [http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=508551 508551]
 329 in [http://packages.debian.org/lenny/merkaartor merkaartor]
 330 "merkaartor: crash on startup: QPaintEngine::setSystemClip: Should not be change
 331
 332 [http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=502845 502845]
 333 in [http://packages.debian.org/lenny/open-iscsi open-iscsi]
 334 "open-iscsi: no login using amd64"
 335
 336 [http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=508589 508589]
 337 in [http://packages.debian.org/lenny/linux-2.6 linux-2.6]
 338 "ppp: USB Modem removal after PPP exits kills keyboard"
 339
 340 [http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=508635 508635]
 341 in [http://packages.debian.org/lenny/libexif-gtk-dev libexif-gtk-dev]
 342 "libexif-gtk-dev: References no longer existing libXcursor.la"
 343
 344 = Mostly solved? =
 345
 346 These look like good progress is being made and they'll get fixed
 347 soon. Do we need a DD to do an NMU on any of these?
 348
 349 [http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=507316 507316]
 350 in [http://packages.debian.org/lenny/smarty smarty]
 351 "smarty: Non-free logo included in package"
 352
 353 [http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=332782 332782]
 354 in [http://packages.debian.org/lenny/release-notes release-notes]
 355 "release-notes: Where's the license?"
 356
 357 [http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=475958 475958]
 358 in [http://packages.debian.org/lenny/release-notes release-notes]
 359 "document procedure to recover from "/dev/hda became /dev/sda" boot failure"
 360 [[BR]](Note: looks done, just not closed.)
 361
 362 [http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=506883 506883]
 363 in [http://packages.debian.org/lenny/tuxguitar tuxguitar]
 364 "tuxguitar: hard-codes dependencies on libraries"
 365
 366 [http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=495178 495178]
 367 in [http://packages.debian.org/lenny/libjs-jquery libjs-jquery]
 368 "libjs-jquery: Should compile jquery.min.js and jquery.pack.js from jquery.js"
 369
 370 [http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=507059 507059]
 371 in [http://packages.debian.org/lenny/initramfs-tools initramfs-tools]
 372 "initramfs-tools: Wrong check for udevadm in functions"
 373 [[BR]](No maintainer activity since it was reported 2 weeks ago; One-line patch attached.)
 374
 375 [http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496334 496334]
 376 in [http://packages.debian.org/lenny/mdadm mdadm]
 377 "mdadm segfault on --assemble --force with raid10"
 378 [[BR]]Seems to be fixed and uploaded, but got reopened for some reason?
 379
 380 [http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=374644 374644] in [http://packages.debian.org/lenny/xine-ui xine-ui]
 381 "xine-ui: ctrl/shift key press emulation implementation broken"
 382 [[BR]](Note: There's a patch that may be good enough -- blocking on some guy responding)
 383
 384 [http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=505237 505237]
 385 in [http://packages.debian.org/lenny/snmpd snmpd]
 386 "/etc/init.d/snmpd start reports error if already running"
 387 (Note: fixed, waiting on an upload?)
 388
 389
 390 = Not much of use one can do =
 391
 392 (this one looks like it'll be removed from Lenny or have amd64 disabled)
 393
 394 [http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=507021 507021]
 395 in [http://packages.debian.org/lenny/helpdeco helpdeco]
 396 "Fails to work on amd64"
 397
 398 (this one looks the maintainer has labeled unreproducible)
 399
 400 [http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=507242 507242]
 401 in [http://packages.debian.org/lenny/amule-daemon amule-daemon]
 402 "amule-daemon: causes OOM's by leaking lots of memory"
 403
 404 (waiting on upstream)
 405
 406 [http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=506652 506652]
 407 in [http://packages.debian.org/lenny/xml2rfc xml2rfc]
 408 "Yet another boilerplate change"
 409
 410 = Flamewars =
 411
 412 You might enjoy reading these, but they may not be good targets to fix.
 413
 414 [http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=475737 475737]
 415 in [http://packages.debian.org/lenny/otrs2 otrs2]
 416 "otrs2 - makes files in /usr writable by non-root"
 417
 418 For this one, the actual flameware is off the bug report log.
 419
 420 [http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=497823 497823]
 421 in [http://packages.debian.org/lenny/ftp.debian.org ftp.debian.org]
 422 "longstanding DFSG violations in linux-2.6 package"
 423
 424 [http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=504747 504747]
 425 in [http://packages.debian.org/lenny/gnu-fdisk gnu-fdisk]
 426 "gnu-fdisk: wipes out MBR when used on GPT partitions"
 427
 428 = Would have been fun =
 429
 430 Entertaining to read but sadly already fixed.
 431
 432 [http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=506961 506961]
 433 in auctex
 434 "auctex: reuses old logfile on emacsen upgrades, enabling symlink attack"
 435
 436
 437 = Special team bugs =
 438
 439 These bugs are probably not good targets because the work involved with them at this point is to be done by someone on a special Debian team.
 440
 441 [http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=451628 451628]
 442 in [http://packages.debian.org/lenny/ftp.debian.org ftp.debian.org]
 443 "Packages might enter the archive from security without source"
 444
 445 [http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=506152 506152]
 446 in [http://packages.debian.org/lenny/ftp.debian.org ftp.debian.org]
 447 "libept0 should have priority important"
 448
 449 [http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=507675 507675]
 450 in [http://packages.debian.org/lenny/ftp.debian.org ftp.debian.org]
 451 "python2.5 should have priority standard"
 452
 453 [http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=507678 507678]
 454 in [http://packages.debian.org/lenny/ftp.debian.org ftp.debian.org]
 455 "libsqlite3-0 should have priority standard"
 456
 457 [http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=507775 507775]
 458 in [http://packages.debian.org/lenny/ftp.debian.org ftp.debian.org]
 459 "libkeyutils1 should have priority standard"
 460
 461 [http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=507778 507778]
 462 in [http://packages.debian.org/lenny/ftp.debian.org ftp.debian.org]
 463 "libldap-2.4-2 should have priority standard"
 464
 465 [http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=507779 507779]
 466 in [http://packages.debian.org/lenny/ftp.debian.org ftp.debian.org]
 467 "[Priorities] libustr-1.0-1 -> standard"
 468
 469 [http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=507780 507780]
 470 in [http://packages.debian.org/lenny/ftp.debian.org ftp.debian.org]
 471 "python-sepolgen should have priority standard"
 472
 473 [http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=507783 507783]
 474 in [http://packages.debian.org/lenny/ftp.debian.org ftp.debian.org]
 475 "libxml2 should have priority standard"
 476
 477 [http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=507784 507784]
 478 in [http://packages.debian.org/lenny/ftp.debian.org ftp.debian.org]
 479 "python2.5-minimal should have priority standard"
 480
 481 [http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=507796 507796]
 482 in [http://packages.debian.org/lenny/ftp.debian.org ftp.debian.org]
 483 "libisccfg40 should have priority standard"
 484
 485 [http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=507797 507797]
 486 in [http://packages.debian.org/lenny/ftp.debian.org ftp.debian.org]
 487 "libisccc40 should have priority standard"
 488
 489 [http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=507798 507798]
 490 in [http://packages.debian.org/lenny/ftp.debian.org ftp.debian.org]
 491 "libedit2 should have priority standard"
 492
 493 [http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=507799 507799]
 494 in [http://packages.debian.org/lenny/ftp.debian.org ftp.debian.org]
 495 "libgssglue1 must have priority standard"
 496
 497 [http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=507800 507800]
 498 in [http://packages.debian.org/lenny/ftp.debian.org ftp.debian.org]
 499 "ucf must have priority standard"
 500
 501 [http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=507801 507801]
 502 in [http://packages.debian.org/lenny/ftp.debian.org ftp.debian.org]
 503 "libpci3 must have priority standard"
 504
 505 [http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=497471 497471]
 506 in [http://packages.debian.org/lenny/cdimage.debian.org cdimage.debian.org]
 507 "sarge images have syslinux binaries without source"
 508
 509 [http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=506977 506977]
 510 in [http://packages.debian.org/lenny/release.debian.org release.debian.org]
 511 "FPC: copyright infringement in pre 2.2.2 sources"
 512
 513 [http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=507239 507239]
 514 in [http://packages.debian.org/lenny/release.debian.org release.debian.org]
 515 "RM: astrolog/stable -- RoQA; orphaned long time, non-free, contains potentially undistributable code"
 516
 517 This one is fixed in experimental:
 518
 519 [http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=503907 503907]
 520 in [http://packages.debian.org/lenny/libwebkit-1.0-1 libwebkit-1.0-1]
 521 "epiphany-webkit: Crashes at startup whenever I go to a site."