Preparation of Debian GNU/Linux 3.0r2

An up-to-date version is at http://master.debian.org/~joey/3.0r2/.

I am preparing the second revision of the current stable Debian distribution (woody) and will infrequently send reports so people can actually comment on it and intervene whenever this is required.

If you disagree with one bit or another, please reply to this mail and explain why these things should be handled differently. There is still time to reconsider.

The plan is to release this revision at some time in the future. An ftpmaster still has to give the final approval for each package since they are responsible for the archive. However, I will try to make their work as easy as possible in the hope to get the next revision out properly.

The regulations for stable are quite conservative. The requirements for packages to get into stable are:

1. The package fixes a security problem. An advisory by our own Security Team is required. Updates need to be approved by the security team.

2. The package fixes a critical bug which can lead into data loss, data corruption, or an overly broken system, or the package is broken or not usable (anymore).

3. The stable version of the package is not installable at all due to broken or unmet dependencies or broken installation scripts.

4. All released architectures have to be in sync.

5. If it is a kernel package, I can detect a similar amount of packages to remove, preferably older versions of the new packages.

It is ((1 OR 2 OR 3) AND 4) OR 5

Regular bugs and upgrade problems don't get fixed in new revisions for the stable distribution. They should instead be documented in the Release Notes which are maintained by Rob Bradford <mailto:robster@debian.org> and are found at http://www.debian.org/releases/woody/releasenotes.

Packages, which will most probably be rejected:

. Packages that fix non-critical bugs.

. Misplaced uploads, i.e. packages that were uploaded to 'stable unstable' or `frozen unstable' or similar.

. Packages for which its binary packages are out of sync with regard to all supported architectures in the stable distribution.

. Binary packages for which the source got lost somehow.

Accepted Packages

These packages will be installed into the stable Debian distribution and will be part of the next revision.

acmstable5.0-3alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc source
acmupdates5.0-3.woody.1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc source

DSA 333 - integer overflow

apcupsdstable3.8.5-1.1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc source
apcupsdupdates3.8.5-1.1.1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc source

DSA 277 - buffer overflows, format string

aspell-enstable0.33.7.1-8alpha arm hppa i386 ia64 m68k powerpc s390 sparc
aspellstable0.33.7.1-8alpha arm hppa i386 ia64 m68k powerpc s390 sparc source
libaspell-devstable0.33.7.1-8alpha arm hppa i386 ia64 m68k powerpc s390 sparc
libaspell10stable0.33.7.1-8alpha arm hppa i386 ia64 m68k powerpc s390 sparc

The license incorrectly says that it's LGPL but it is in fact a unique license which is non-DFSG-free.

atftpdstable0.6alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
atftpdupdates0.6.0woody1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
atftpstable0.6alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc source
atftpupdates0.6.0woody1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc source

DSA 314 - buffer overflow

autorespondstable2.0.2-1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc source
autorespondupdates2.0.2-2woody1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc source

DSA 373 - buffer overflow

balsastable1.2.4-2alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc source
balsaupdates1.2.4-2.2alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc source

DSA 300 - buffer overflow

bind-devstable1:8.3.3-0.woody.1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
bind-devupdates1:8.3.3-2.0woody1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
bind-docstable1:8.3.3-0.woody.1all
bind-docupdates1:8.3.3-2.0woody1all
bindstable1:8.3.3-0.woody.1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc source
bindupdates1:8.3.3-2.0woody1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc source

DSA 196 - several vulnerabilities

bugzilla-docstable2.14.2-0woody2all
bugzilla-docupdates2.14.2-0woody4all
bugzillastable2.14.2-0woody2all source
bugzillaupdates2.14.2-0woody4all source

DSA 230 - insecure permissions, spurious backup files

canna-utilsstable3.5b2-46alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
canna-utilsupdates3.5b2-46.2alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
cannastable3.5b2-46alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc source
cannaupdates3.5b2-46.2alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc source
libcanna1g-devstable3.5b2-46alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
libcanna1g-devupdates3.5b2-46.2alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
libcanna1gstable3.5b2-46alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
libcanna1gupdates3.5b2-46.2alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc

DSA 224 - buffer overflow and more

colrconvstable0.99.2-8alpha i386 source
colrconvupdates0.99.2-8arm hppa ia64 m68k mips mipsel powerpc s390 sparc

Bring architectures back in sync

console-datastable1999.08.29-24all source
console-dataupdates1999.08.29-24.2all source

* Add keymaps for sunt5-uk, sunt6-uk. Required for systems with these keyboards to boot. Closes: #190745.

* Fix depends to work properly on woody. Closes: #201659.

Alastair McKinstry: The sunt5-uk support was in boot-floppies on Woody 3.0; it appears from the boot-floppies logs that you could select it; once the system rebooted however, it would be broken. sunt6-uk is not in boot-floppies. You have to select it after booting. (British and American keyboards are close enough that you can boot American and fix the keyboard afterwards, when console-common runs.)

Rendering freshly installed machines unbootable is bad...

cupsys-bsdstable1.1.14-3alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
cupsys-bsdupdates1.1.14-5alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
cupsys-clientstable1.1.14-3alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
cupsys-clientupdates1.1.14-5alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
cupsys-pstorasterstable1.1.14-3alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
cupsys-pstorasterupdates1.1.14-5alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
cupsysstable1.1.14-3alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc source
cupsysupdates1.1.14-5alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc source
libcupsys2-devstable1.1.14-3alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
libcupsys2-devupdates1.1.14-5alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
libcupsys2stable1.1.14-3alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
libcupsys2updates1.1.14-5alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc

DSA 317 - denial of service

cvsstable1.11.1p1debian-8alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc source
cvsupdates1.11.1p1debian-8.1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc source

DSA 233 - doubly freed memory

cyrus-adminstable1.5.19-9alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
cyrus-adminupdates1.5.19-9.1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
cyrus-commonstable1.5.19-9alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
cyrus-commonupdates1.5.19-9.1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
cyrus-devstable1.5.19-9alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
cyrus-devupdates1.5.19-9.1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
cyrus-imapdstable1.5.19-9alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc source
cyrus-imapdupdates1.5.19-9.1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc source
cyrus-nntpstable1.5.19-9alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
cyrus-nntpupdates1.5.19-9.1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
cyrus-pop3dstable1.5.19-9alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
cyrus-pop3dupdates1.5.19-9.1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc

DSA 215 - buffer overflow

cyrus-sasl2stable2.1.2-2source
libsasl2-devstable2.1.2-2alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
libsasl2-digestmd5-plainstable2.1.2-2alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
libsasl2-modules-plainstable2.1.2-2alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
libsasl2stable2.1.2-2alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
sasl2-binstable2.1.2-2alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc

The library has some minor security problems and according to the maintainer some other problems as well, i.e. it could not work with software in testing/unstable which requires it either. All of the SASL-using software in stable uses cyrus-sasl, not cyrus-sasl2.

dbishellstable0.8.9-2all source
dbishellupdates0.8.9-2woody1all source

Workaround xterm feature disabled in DSA 380-1 that we used. Without this change, we lose the ability to run inside xterms after DSA 380-1 is dealt with on a system.

ddskkstable11.6.rel.0-2all source
ddskkupdates11.6.rel.0-2woody1all source

DSA 343 - insecure temporary file

debianutilsstable1.16alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc source
debianutilsupdates1.16.2woody1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc source

* Backport for woody. closes: #172200.

* Backport of Ian Zimmerman's run-parts program output loss patch, which fixes zombie problem. closes: #184710.

There is a race condition with the receiving of SIGCHLD before select is called.

1.16.1woody0 consumed infinite CPU power. It should be fixed in 1.16.2woody0 which happens to be just another version from sid recompiled. That's a reason to delay it alone, this requires testing!

dhcp3-clientstable3.0+3.0.1rc9-2alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
dhcp3-clientupdates3.0+3.0.1rc9-2.2alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
dhcp3-commonstable3.0+3.0.1rc9-2alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
dhcp3-commonupdates3.0+3.0.1rc9-2.2alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
dhcp3-devstable3.0+3.0.1rc9-2alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
dhcp3-devupdates3.0+3.0.1rc9-2.2alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
dhcp3-relaystable3.0+3.0.1rc9-2alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
dhcp3-relayupdates3.0+3.0.1rc9-2.2alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
dhcp3-serverstable3.0+3.0.1rc9-2alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
dhcp3-serverupdates3.0+3.0.1rc9-2.2alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
dhcp3stable3.0+3.0.1rc9-2source
dhcp3updates3.0+3.0.1rc9-2.2source

DSA 245 - ignored counter boundary

DSA 231 - stack overflows

dietlibc-devstable0.12-2.4alpha arm i386 mips mipsel powerpc sparc
dietlibc-devupdates0.12-2.5alpha arm i386 mips mipsel powerpc sparc
dietlibc-docstable0.12-2.4all
dietlibc-docupdates0.12-2.5all
dietlibcstable0.12-2.4source
dietlibcupdates0.12-2.5source

DSA 272 - integer overflow

dwwwstable1.7.6.woody.1alpha hppa i386 ia64 m68k mips mipsel powerpc s390 sparc source
dwwwupdates1.7.6.woody.1arm
realpathstable1.7.6.woody.1alpha hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
realpathupdates1.7.6.woody.1arm

Get architectures in sync

ecartis-cgistable0.129a+1.0.0-snap20020514-1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
ecartis-cgiupdates0.129a+1.0.0-snap20020514-1.1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
ecartisstable0.129a+1.0.0-snap20020514-1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc source
ecartisupdates0.129a+1.0.0-snap20020514-1.1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc source

DSA 271 - unauthorized password change

eldavstable0.0.20020411-1all source
eldavupdates0.0.20020411-1woody1all source

DSA 325 - insecure temporary file

epicstable3.004-17alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc source
epicupdates3.004-17.1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc source

DSA 287 - buffer overflows

epic4stable1:1.1.2.20020219-2alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc source
epic4updates1:1.1.2.20020219-2.2alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc source

DSA 298 - buffer overflows

DSA 399 - buffer overflow

eroasterstable2.1.0.0.3-2all source
eroasterupdates2.1.0.0.3-2woody1all source

DSA 366 - insecure temporary file

etermstable0.9.2-0pre2002042903alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc source
etermupdates0.9.2-0pre2002042903.2alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc source

DSA 309 - buffer overflow

ethereal-commonstable0.9.4-1woody2alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
ethereal-commonupdates0.9.4-1woody5alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
ethereal-devstable0.9.4-1woody2alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
ethereal-devupdates0.9.4-1woody5alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
etherealstable0.9.4-1woody2alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc source
etherealupdates0.9.4-1woody5alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc source
tetherealstable0.9.4-1woody2alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
tetherealupdates0.9.4-1woody5alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc

DSA 258 - format string vulnerability

DSA 313 - buffer overflows, integer overflows

DSA 324 - several vulnerabilities

eximonstable3.35-1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
eximonupdates3.35-1woody2alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
eximstable3.35-1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc source
eximupdates3.35-1woody2alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc source

DSA 376 - buffer overflow

exim-tlsstable3.35-3alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc source
exim-tlsupdates3.35-3woody1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc source

DSA 376 - buffer overflow

falconseye-datastable1.9.3-7all
falconseye-dataupdates1.9.3-7woody3all
falconseyestable1.9.3-7alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc source
falconseyeupdates1.9.3-7woody3alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc source

DSA 350 - buffer overflow

fdclonestable2.00a-1alpha arm hppa i386 m68k powerpc s390 sparc source
fdcloneupdates2.00a-1woody3alpha arm hppa i386 m68k powerpc s390 sparc source

DSA 352 - insecure temporary directory

fetchmail-commonstable5.9.11-6.1all
fetchmail-commonupdates5.9.11-6.2all
fetchmailconfstable5.9.11-6.1all
fetchmailconfupdates5.9.11-6.2all
fetchmailstable5.9.11-6.1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc source
fetchmailupdates5.9.11-6.2alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc source

DSA 216 - buffer overflow

fetchmail-sslstable5.9.11-6.1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc source
fetchmail-sslupdates5.9.11-6.2alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc source

DSA 216 - buffer overflow

filestable3.37-3.1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc source
fileupdates3.37-3.1.woody.1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc source

DSA 260 - buffer overflow

ftape-toolsstable1:1.09.2001.08.13-0.3source
ftape-utilstable1:1.09.2001.08.13-0.3arm i386
ftape-utilupdates1:1.09.2001.08.13-0.3alpha

Get architectures more in sync

fuzzstable0.6-6alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc source
fuzzupdates0.6-6woody1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc source

DSA 302 - privilege escalation

gallerystable1.2.5-7.woody.0all source
galleryupdates1.2.5-8woody1all source

DSA 355 - cross-site scripting

glibc-docstable2.2.5-11.2all
glibc-docupdates2.2.5-11.5all
glibcstable2.2.5-11.2source
glibcupdates2.2.5-11.5source
libc6-dbgstable2.2.5-11.2arm hppa i386 m68k mips mipsel powerpc s390 sparc
libc6-dbgupdates2.2.5-11.5arm hppa i386 m68k mips mipsel powerpc s390 sparc
libc6-dev-sparc64stable2.2.5-11.2sparc
libc6-dev-sparc64updates2.2.5-11.5sparc
libc6-devstable2.2.5-11.2arm hppa i386 m68k mips mipsel powerpc s390 sparc
libc6-devupdates2.2.5-11.5arm hppa i386 m68k mips mipsel powerpc s390 sparc
libc6-picstable2.2.5-11.2arm hppa i386 m68k mips mipsel powerpc s390 sparc
libc6-picupdates2.2.5-11.5arm hppa i386 m68k mips mipsel powerpc s390 sparc
libc6-profstable2.2.5-11.2arm hppa i386 m68k mips mipsel powerpc s390 sparc
libc6-profupdates2.2.5-11.5arm hppa i386 m68k mips mipsel powerpc s390 sparc
libc6-sparc64stable2.2.5-11.2sparc
libc6-sparc64updates2.2.5-11.5sparc
libc6.1-dbgstable2.2.5-11.2alpha ia64
libc6.1-dbgupdates2.2.5-11.5alpha ia64
libc6.1-devstable2.2.5-11.2alpha ia64
libc6.1-devupdates2.2.5-11.5alpha ia64
libc6.1-picstable2.2.5-11.2alpha ia64
libc6.1-picupdates2.2.5-11.5alpha ia64
libc6.1-profstable2.2.5-11.2alpha ia64
libc6.1-profupdates2.2.5-11.5alpha ia64
libc6.1stable2.2.5-11.2alpha ia64
libc6.1updates2.2.5-11.5alpha ia64
libc6stable2.2.5-11.2arm hppa i386 m68k mips mipsel powerpc s390 sparc
libc6updates2.2.5-11.5arm hppa i386 m68k mips mipsel powerpc s390 sparc
localesstable2.2.5-11.2all
localesupdates2.2.5-11.5all
nscdstable2.2.5-11.2alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
nscdupdates2.2.5-11.5alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc

DSA 282 - integer overflow

gnocatan-clientstable0.6.1-5alpha arm i386 ia64 m68k mips mipsel powerpc s390 sparc
gnocatan-clientstable0.6.1-5.0.1hppa
gnocatan-clientupdates0.6.1-5woody2alpha arm i386 ia64 m68k mips mipsel powerpc s390 sparc
gnocatan-datastable0.6.1-5all
gnocatan-dataupdates0.6.1-5woody2all
gnocatan-helpstable0.6.1-5all
gnocatan-helpupdates0.6.1-5woody2all
gnocatan-serverstable0.6.1-5alpha arm i386 ia64 m68k mips mipsel powerpc s390 sparc
gnocatan-serverstable0.6.1-5.0.1hppa
gnocatan-serverupdates0.6.1-5woody2alpha arm i386 ia64 m68k mips mipsel powerpc s390 sparc
gnocatanstable0.6.1-5source
gnocatanupdates0.6.1-5woody2source

DSA 315 - buffer overflows, denial of service

gnupgstable1.0.6-3alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc source
gnupgupdates1.0.6-4alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc source

Upstream security fix and compatibility with more recent keyrings. This update is required to use recent Debian keyrings with Debian stable.

gopherdstable3.0.3alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
gopherdupdates3.0.3woody1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
gopherstable3.0.3alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc source
gopherupdates3.0.3woody1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc source

DSA 387 - buffer overflows

gs-commonstable0.3.3all source
gs-commonupdates0.3.3.0woody1all source

DSA 286 - insecure temporary file

gzipstable1.3.2-3alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc source
gzipupdates1.3.2-3woody1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc source

DSA 308 - insecure temporary files

hylafax-clientstable1:4.1.1-1.1alpha arm hppa i386 ia64 m68k powerpc s390 sparc
hylafax-clientupdates1:4.1.1-3alpha arm hppa i386 ia64 m68k powerpc s390 sparc
hylafax-docstable1:4.1.1-1.1all
hylafax-docupdates1:4.1.1-3all
hylafax-serverstable1:4.1.1-1.1alpha arm hppa i386 ia64 m68k powerpc s390 sparc
hylafax-serverupdates1:4.1.1-3alpha arm hppa i386 ia64 m68k powerpc s390 sparc
hylafaxstable1:4.1.1-1.1source
hylafaxupdates1:4.1.1-3source

* NMU by Giuseppe Sacco (rejected)

* The ghostscript fonts where looked for among many directories. If some of these directories wasn't existing then a message was written for each of them. Now the message is printed only if all directories are missing (Closes: #146874)

* fixed the way configure looks for awk. (Closes: #153488)

* Added g++ as build dep.

DSA 401 - format strings

hypermailstable2.1.3-1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc source
hypermailupdates2.1.3-2.0alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc source

DSA 248 - buffer overflows

illuminator-demostable0.3.2-1.woody.2alpha i386 mips mipsel powerpc s390 sparc
illuminator-demoupdates0.3.2-1.woody.2ia64
illuminator-devstable0.3.2-1.woody.2alpha i386 mips mipsel powerpc s390 sparc
illuminator-devupdates0.3.2-1.woody.2ia64
illuminator-docstable0.3.2-1.woody.2all
illuminator0stable0.3.2-1.woody.2alpha i386 mips mipsel powerpc s390 sparc
illuminator0updates0.3.2-1.woody.2ia64
illuminatorstable0.3.2-1.woody.2source

Sync architectures

imagemagickstable4:5.4.4.5-1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc source
imagemagickupdates4:5.4.4.5-1woody1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc source
libmagick++5-devstable4:5.4.4.5-1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
libmagick++5-devupdates4:5.4.4.5-1woody1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
libmagick++5stable4:5.4.4.5-1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
libmagick++5updates4:5.4.4.5-1woody1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
libmagick5-devstable4:5.4.4.5-1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
libmagick5-devupdates4:5.4.4.5-1woody1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
libmagick5stable4:5.4.4.5-1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
libmagick5updates4:5.4.4.5-1woody1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
perlmagickstable4:5.4.4.5-1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
perlmagickupdates4:5.4.4.5-1woody1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc

DSA 331 - insecure temporary file

impstable3:2.2.6-5all source
impupdates3:2.2.6-5.2all source

DSA 229 - SQL injection

intlfontsstable1.2-2.1source
intlfontsupdates1.2.1-0.woody.1source
xfonts-intl-arabicstable1.2-2.1all
xfonts-intl-arabicupdates1.2.1-0.woody.1all
xfonts-intl-asianstable1.2-2.1all
xfonts-intl-asianupdates1.2.1-0.woody.1all
xfonts-intl-chinese-bigstable1.2-2.1all
xfonts-intl-chinese-bigupdates1.2.1-0.woody.1all
xfonts-intl-chinesestable1.2-2.1all
xfonts-intl-chineseupdates1.2.1-0.woody.1all
xfonts-intl-europeanstable1.2-2.1all
xfonts-intl-europeanupdates1.2.1-0.woody.1all
xfonts-intl-japanese-bigstable1.2-2.1all
xfonts-intl-japanese-bigupdates1.2.1-0.woody.1all
xfonts-intl-japanesestable1.2-2.1all
xfonts-intl-japaneseupdates1.2.1-0.woody.1all
xfonts-intl-phoneticstable1.2-2.1all
xfonts-intl-phoneticupdates1.2.1-0.woody.1all

New upstream release, backported to woody. It fixes the licensing problem with Japanese big fonts that we are not allowed to distribute.

New upstream source is required since the orig.tar.gz needs to be altered which would not be possible with the same version. *sigh*

ipmasqstable3.5.10all source
ipmasqupdates3.5.10call source

DSA 389 - insecure packet filtering rules

bitchx-devstable1:1.0-0c19-1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
bitchx-devupdates1:1.0-0c19-1.1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
bitchx-gtkstable1:1.0-0c19-1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
bitchx-gtkupdates1:1.0-0c19-1.1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
bitchx-sslstable1:1.0-0c19-1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
bitchx-sslupdates1:1.0-0c19-1.1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
bitchxstable1:1.0-0c19-1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
bitchxupdates1:1.0-0c19-1.1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
ircii-panastable1:1.0-0c19-1source
ircii-panaupdates1:1.0-0c19-1.1source

DSA 306 - buffer overflows, integer overflow

jigdo-filestable0.6.5-1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
jigdo-fileupdates0.6.5-2alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
jigdostable0.6.5-1source
jigdoupdates0.6.5-2source

Backported some changes from 0.6.8 to stable so the tool works well with current cdimage archives (or rather .template files). It also fixes a bug with wrong files downloaded when the filename is the same but the path isn't.

jnethackstable1.1.5-11alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc source
jnethackupdates1.1.5-11woody2alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc source

DSA 316 - buffer overflow, incorrect permissions

katestable4:2.2.2-14alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
kateupdates4:2.2.2-14.7alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
kdebase-audiolibsstable4:2.2.2-14alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
kdebase-audiolibsupdates4:2.2.2-14.7alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
kdebase-devstable4:2.2.2-14alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
kdebase-devupdates4:2.2.2-14.7alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
kdebase-docstable4:2.2.2-14all
kdebase-docupdates4:2.2.2-14.7all
kdebase-libsstable4:2.2.2-14alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
kdebase-libsupdates4:2.2.2-14.7alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
kdebasestable4:2.2.2-14alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc source
kdebaseupdates4:2.2.2-14.7alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc source
kdewallpapersstable4:2.2.2-14all
kdewallpapersupdates4:2.2.2-14.7all
kdmstable4:2.2.2-14alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
kdmupdates4:2.2.2-14.7alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
konquerorstable4:2.2.2-14alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
konquerorupdates4:2.2.2-14.7alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
konsolestable4:2.2.2-14alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
konsoleupdates4:2.2.2-14.7alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
kscreensaverstable4:2.2.2-14alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
kscreensaverupdates4:2.2.2-14.7alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
libkonq-devstable4:2.2.2-14alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
libkonq-devupdates4:2.2.2-14.7alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
libkonq3stable4:2.2.2-14alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
libkonq3updates4:2.2.2-14.7alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc

DSA 296 - insecure execution

DSA 388 - several vulnerabilities

kamerastable4:2.2.2-6.8alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
kameraupdates4:2.2.2-6.11alpha hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
kcoloreditstable4:2.2.2-6.8alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
kcoloreditupdates4:2.2.2-6.11alpha hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
kdegraphicsstable4:2.2.2-6.8source
kdegraphicsupdates4:2.2.2-6.11source
kfractstable4:2.2.2-6.8alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
kfractupdates4:2.2.2-6.11alpha hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
kghostviewstable4:2.2.2-6.8alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
kghostviewupdates4:2.2.2-6.11alpha hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
kiconeditstable4:2.2.2-6.8alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
kiconeditupdates4:2.2.2-6.11alpha hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
kookastable4:2.2.2-6.8alpha arm i386 ia64 m68k mips mipsel powerpc s390 sparc
kookaupdates4:2.2.2-6.11alpha i386 ia64 m68k mips mipsel powerpc s390 sparc
kpaintstable4:2.2.2-6.8alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
kpaintupdates4:2.2.2-6.11alpha hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
krulerstable4:2.2.2-6.8alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
krulerupdates4:2.2.2-6.11alpha hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
ksnapshotstable4:2.2.2-6.8alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
ksnapshotupdates4:2.2.2-6.11alpha hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
kviewstable4:2.2.2-6.8alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
kviewupdates4:2.2.2-6.11alpha hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
libkscan-devstable4:2.2.2-6.8alpha arm i386 ia64 m68k mips mipsel powerpc s390 sparc
libkscan-devupdates4:2.2.2-6.11alpha i386 ia64 m68k mips mipsel powerpc s390 sparc
libkscan1stable4:2.2.2-6.8alpha arm i386 ia64 m68k mips mipsel powerpc s390 sparc
libkscan1updates4:2.2.2-6.11alpha i386 ia64 m68k mips mipsel powerpc s390 sparc

DSA 284 - insecure execution

kdelibs-devstable4:2.2.2-13.woody.5alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
kdelibs-devupdates4:2.2.2-13.woody.8alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
kdelibs3-binstable4:2.2.2-13.woody.5alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
kdelibs3-binupdates4:2.2.2-13.woody.8alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
kdelibs3-cupsstable4:2.2.2-13.woody.5alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
kdelibs3-cupsupdates4:2.2.2-13.woody.8alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
kdelibs3-docstable4:2.2.2-13.woody.5all
kdelibs3-docupdates4:2.2.2-13.woody.8all
kdelibs3stable4:2.2.2-13.woody.5alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
kdelibs3updates4:2.2.2-13.woody.8alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
kdelibsstable4:2.2.2-13.woody.5source
kdelibsupdates4:2.2.2-13.woody.8source
libarts-alsastable4:2.2.2-13.woody.5alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
libarts-alsaupdates4:2.2.2-13.woody.8alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
libarts-devstable4:2.2.2-13.woody.5alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
libarts-devupdates4:2.2.2-13.woody.8alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
libartsstable4:2.2.2-13.woody.5alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
libartsupdates4:2.2.2-13.woody.8alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
libkmid-alsastable4:2.2.2-13.woody.5alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
libkmid-alsaupdates4:2.2.2-13.woody.8alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
libkmid-devstable4:2.2.2-13.woody.5alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
libkmid-devupdates4:2.2.2-13.woody.8alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
libkmidstable4:2.2.2-13.woody.5alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
libkmidupdates4:2.2.2-13.woody.8alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc

DSA 293 - insecure execution

DSA 361 - several vulnerabilities

kdelibs-cryptostable4:2.2.2-6source
kdelibs-cryptoupdates4:2.2.2-6woody2source
kdelibs3-cryptostable4:2.2.2-6alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
kdelibs3-cryptoupdates4:2.2.2-6woody2alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc

DSA 361 - several vulnerabilities

kdenetworkstable4:2.2.2-14source
kdenetworkupdates4:2.2.2-14.6source
kdictstable4:2.2.2-14alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
kdictupdates4:2.2.2-14.6alpha arm hppa ia64 m68k mips mipsel powerpc s390 sparc
kitstable4:2.2.2-14alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
kitupdates4:2.2.2-14.6alpha arm hppa ia64 m68k mips mipsel powerpc s390 sparc
klisastable4:2.2.2-14alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
klisaupdates4:2.2.2-14.6alpha arm hppa ia64 m68k mips mipsel powerpc s390 sparc
kmailstable4:2.2.2-14alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
kmailupdates4:2.2.2-14.6alpha arm hppa ia64 m68k mips mipsel powerpc s390 sparc
knewstickerstable4:2.2.2-14alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
knewstickerupdates4:2.2.2-14.6alpha arm hppa ia64 m68k mips mipsel powerpc s390 sparc
knodestable4:2.2.2-14alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
knodeupdates4:2.2.2-14.6alpha arm hppa ia64 m68k mips mipsel powerpc s390 sparc
kornstable4:2.2.2-14alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
kornupdates4:2.2.2-14.6alpha arm hppa ia64 m68k mips mipsel powerpc s390 sparc
kpppstable4:2.2.2-14alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
kpppupdates4:2.2.2-14.6alpha arm hppa ia64 m68k mips mipsel powerpc s390 sparc
ksircstable4:2.2.2-14alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
ksircupdates4:2.2.2-14.6alpha arm hppa ia64 m68k mips mipsel powerpc s390 sparc
ktalkdstable4:2.2.2-14alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
ktalkdupdates4:2.2.2-14.6alpha arm hppa ia64 m68k mips mipsel powerpc s390 sparc
libkdenetwork1stable4:2.2.2-14alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
libkdenetwork1updates4:2.2.2-14.6alpha arm hppa ia64 m68k mips mipsel powerpc s390 sparc
libmimelib-devstable4:2.2.2-14alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
libmimelib-devupdates4:2.2.2-14.6alpha arm hppa ia64 m68k mips mipsel powerpc s390 sparc
libmimelib1stable4:2.2.2-14alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
libmimelib1updates4:2.2.2-14.6alpha arm hppa ia64 m68k mips mipsel powerpc s390 sparc

DSA 237 - several vulnerabilities

kapptemplatestable2.2.2-3all
kapptemplateupdates2.2.2-3.2all
kbabel-devstable2.2.2-3alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
kbabel-devupdates2.2.2-3.2alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
kbabelstable2.2.2-3alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
kbabelupdates2.2.2-3.2alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
kdepalettesstable2.2.2-3all
kdepalettesupdates2.2.2-3.2all
kdesdk-docstable2.2.2-3all
kdesdk-docupdates2.2.2-3.2all
kdesdk-scriptsstable2.2.2-3all
kdesdk-scriptsupdates2.2.2-3.2all
kdesdkstable2.2.2-3alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc source
kdesdkupdates2.2.2-3.2alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc source
kexamplestable2.2.2-3alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
kexampleupdates2.2.2-3.2alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
kmtracestable2.2.2-3alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
kmtraceupdates2.2.2-3.2alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
kspystable2.2.2-3alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
kspyupdates2.2.2-3.2alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
kstartperfstable2.2.2-3alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
kstartperfupdates2.2.2-3.2alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
poxmlstable2.2.2-3alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
poxmlupdates2.2.2-3.2alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc

DSA 239 - several vulnerabilities

kernel-headers-2.2.20-compactstable2.2.20-5i386
kernel-headers-2.2.20-compactupdates2.2.20-5woody3i386
kernel-headers-2.2.20-idepcistable2.2.20-5i386
kernel-headers-2.2.20-idepciupdates2.2.20-5woody3i386
kernel-headers-2.2.20stable2.2.20-5i386
kernel-headers-2.2.20updates2.2.20-5woody3i386
kernel-image-2.2.20-compactstable2.2.20-5i386
kernel-image-2.2.20-compactupdates2.2.20-5woody3i386
kernel-image-2.2.20-i386stable2.2.20-5source
kernel-image-2.2.20-i386updates2.2.20-5woody3source
kernel-image-2.2.20-idepcistable2.2.20-5i386
kernel-image-2.2.20-idepciupdates2.2.20-5woody3i386
kernel-image-2.2.20stable2.2.20-5i386
kernel-image-2.2.20updates2.2.20-5woody3i386

DSA 336 - several vulnerabilities

kernel-headers-2.4.17stable2.4.17-2.woody.1.1s390
kernel-headers-2.4.17updates2.4.17-2.woody.2.2s390
kernel-image-2.4.17-s390stable2.4.17-2.woody.1.1s390 source
kernel-image-2.4.17-s390updates2.4.17-2.woody.2.2s390 source

DSA 276 - local privilege escalation

kernel-headers-2.4.17stable2.4.17-0.020226.2mips mipsel
kernel-headers-2.4.17updates2.4.17-0.020226.2.woody2mips mipsel
kernel-image-2.4.17-r3k-kn02stable2.4.17-0.020226.2mipsel
kernel-image-2.4.17-r3k-kn02updates2.4.17-0.020226.2.woody2mipsel
kernel-image-2.4.17-r4k-ip22stable2.4.17-0.020226.2mips
kernel-image-2.4.17-r4k-ip22updates2.4.17-0.020226.2.woody2mips
kernel-image-2.4.17-r4k-kn04stable2.4.17-0.020226.2mipsel
kernel-image-2.4.17-r4k-kn04updates2.4.17-0.020226.2.woody2mipsel
kernel-image-2.4.17-r5k-ip22stable2.4.17-0.020226.2mips
kernel-image-2.4.17-r5k-ip22updates2.4.17-0.020226.2.woody2mips
kernel-patch-2.4.17-mipsstable2.4.17-0.020226.1all source
kernel-patch-2.4.17-mipsupdates2.4.17-0.020226.2.woody2all source
mips-toolsstable2.4.17-0.020226.2mipsel
mips-toolsstable2.4.19-0.020911.1.woody0mips
mips-toolsupdates2.4.17-0.020226.2.woody2mipsel
mips-toolsupdates2.4.19-0.020911.1.woody1mips

DSA 270 - local privilege escalation

kernel-patch-2.4.17-s390stable0.0.20020816-0.woody.1all source
kernel-patch-2.4.17-s390updates0.0.20020816-0.woody.1.1all source

DSA 276 - local privilege escalation

kernel-headers-2.4.18stable2.4.18-1powerpc
kernel-headers-2.4.18updates2.4.18-1woody1powerpc
kernel-image-2.4.18-newpmacstable2.4.18-1powerpc
kernel-image-2.4.18-newpmacupdates2.4.18-1woody1powerpc
kernel-image-2.4.18-powerpc-smpstable2.4.18-1powerpc
kernel-image-2.4.18-powerpc-smpupdates2.4.18-1woody1powerpc
kernel-image-2.4.18-powerpcstable2.4.18-1powerpc
kernel-image-2.4.18-powerpcupdates2.4.18-1woody1powerpc
kernel-patch-2.4.18-powerpcstable2.4.18-1all source
kernel-patch-2.4.18-powerpcupdates2.4.18-1woody1all source

DSA 312 - several vulnerabilities

kernel-headers-2.4.19stable2.4.19-0.020911.1.woody0mips
kernel-headers-2.4.19updates2.4.19-0.020911.1.woody1mips
kernel-image-2.4.19-r4k-ip22stable2.4.19-0.020911.1.woody0mips
kernel-image-2.4.19-r4k-ip22updates2.4.19-0.020911.1.woody1mips
kernel-image-2.4.19-r5k-ip22stable2.4.19-0.020911.1.woody0mips
kernel-image-2.4.19-r5k-ip22updates2.4.19-0.020911.1.woody1mips
kernel-patch-2.4.19-mipsstable2.4.19-0.020911.1.woody0all source
kernel-patch-2.4.19-mipsupdates2.4.19-0.020911.1.woody1all source
mips-toolsstable2.4.19-0.020911.1.woody0mips
mips-toolsupdates2.4.19-0.020911.1.woody1mips

DSA 270 - local privilege escalation

kernel-doc-2.4.17stable2.4.17-1all
kernel-doc-2.4.17updates2.4.17-1woody1all
kernel-source-2.4.17stable2.4.17-1all source
kernel-source-2.4.17updates2.4.17-1woody1all source
mkcramfsstable2.4.17-1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
mkcramfsupdates2.4.17-1woody1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc

DSA 332 - several vulnerabilities

kernel-doc-2.4.18stable2.4.18-5all
kernel-doc-2.4.18updates2.4.18-13all
kernel-source-2.4.18stable2.4.18-5all source
kernel-source-2.4.18updates2.4.18-13all source

DSA 358 - several vulnerabilities

krb5-admin-serverstable1.2.4-5woody3alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
krb5-admin-serverupdates1.2.4-5woody4alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
krb5-clientsstable1.2.4-5woody3alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
krb5-clientsupdates1.2.4-5woody4alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
krb5-docstable1.2.4-5woody3all
krb5-docupdates1.2.4-5woody4all
krb5-ftpdstable1.2.4-5woody3alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
krb5-ftpdupdates1.2.4-5woody4alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
krb5-kdcstable1.2.4-5woody3alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
krb5-kdcupdates1.2.4-5woody4alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
krb5-rsh-serverstable1.2.4-5woody3alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
krb5-rsh-serverupdates1.2.4-5woody4alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
krb5-telnetdstable1.2.4-5woody3alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
krb5-telnetdupdates1.2.4-5woody4alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
krb5-userstable1.2.4-5woody3alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
krb5-userupdates1.2.4-5woody4alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
krb5stable1.2.4-5woody3source
krb5updates1.2.4-5woody4source
libkadm55stable1.2.4-5woody3alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
libkadm55updates1.2.4-5woody4alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
libkrb5-devstable1.2.4-5woody3alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
libkrb5-devupdates1.2.4-5woody4alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
libkrb53stable1.2.4-5woody3alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
libkrb53updates1.2.4-5woody4alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc

DSA 266 - several vulnerabilities

leksbotstable1.2-3.1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc source
leksbotupdates1.2-3.1woody1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc source

DSA 299 - improper setuid-root execution

libdbd-mysql-perlstable1.2216-2arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc source
libdbd-mysql-perlstable1.2216-2.0.1alpha
libdbd-mysql-perlupdates1.2216-2.0.1ia64

* Binary-only non-maintainer upload for ia64; no source changes.

* Rebuild for ia64: Closes: #191552

TODO: Find out if it works, the bug submitter fell silent

Raphaël Hertzog said: It works. I gave the package to at least another person who had the same problem and he never mailed me to say that it doesn't solve his problem.

liblocale-gettext-perlstable1.01-11alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc source
liblocale-gettext-perlupdates1.01-11a.woodyalpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc source

* The bugs #156381 is also in the stable version of the package. Since it renders basic packages like debconf unusable when it's installed, I'm providing this updated package to fix it.

* Added the include <libintl.h> in the .xs file this time.

* Really stupid version number to have a version number lower than 1.01-11bis which is in unstable...

The bug report demonstrates that this problem may render an entire installation/upgrade broken. Hence, an update is required.