Preparation of the next stable Debian GNU/Linux update

An up-to-date version is at http://people.debian.org/~joey/3.1r1/.

I am preparing the first revision of the current stable Debian distribution (sarge) and will frequently send reports so people can actually comment on it and intervene whenever this is required.

If you disagree with one bit or another, please reply to this mail and explain why these things should be handled differently. There is still enough time to reconsider.

The overall plan is to release a new update of the stable Debian distribution roughly two months after the last update or after the initial release, whatever is suitable. The next revision of stable should therefore be released soon.

An ftpmaster still has to give the final approval for each package since ftpmasters are responsible for the archive. However, I'm trying to make their work as easy as possible in the hope to get the next revision out properly and without too much hassle.

The regulations for updates to the stable Debian release are quite conservative.

The requirements for packages to get updated in stable are:

1. The package fixes a security problem. An advisory by our own Security Team is required. Updates need to be approved by the Security Team.

2. The package fixes a critical bug which can lead into data loss, data corruption, or an overly broken system, or the package is broken or not usable (anymore).

3. The stable version of the package is not installable at all due to broken or unmet dependencies or broken installation scripts.

4. All released architectures have to be in sync.

5. The package gets all released architectures back in sync.

It is (or (and (or 1 2 3) 4) 5)

Regular bugs and upgrade problems don't get fixed in new revisions for the stable distribution. They should instead be documented in the Release Notes which are maintained by Rob Bradford <mailto:robster@debian.org> and are found at http://www.debian.org/releases/sarge/releasenotes.

Packages, which will most probably be rejected:

. Packages that fix non-critical bugs.

. Misplaced uploads, i.e. packages that were uploaded to 'stable unstable' or `frozen unstable' or similar.

. Packages for which its binary packages are out of sync with regard to all supported architectures in the stable distribution.

. Binary packages for which the source got lost somehow.

. Packages that fix an unusable minor part of a package.

If you would like to get a package updated in the stable release, you are advised to talk to the stable release manager first (see http://www.debian.org/intro/organization).

Accepted Packages

These packages will be installed into the stable Debian distribution and will be part of the next revision.

abiword-commonstable2.2.7-3all
abiword-commonupdates2.2.7-3sarge2all
abiword-docstable2.2.7-3all
abiword-docupdates2.2.7-3sarge2all
abiword-gnomestable2.2.7-3alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
abiword-gnomeupdates2.2.7-3sarge2alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
abiword-helpstable2.2.7-3all
abiword-helpupdates2.2.7-3sarge2all
abiword-plugins-gnomestable2.2.7-3alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
abiword-plugins-gnomeupdates2.2.7-3sarge2alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
abiword-pluginsstable2.2.7-3alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
abiword-pluginsupdates2.2.7-3sarge2alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
abiwordstable2.2.7-3alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc source
abiwordupdates2.2.7-3sarge2alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc source
xfonts-abistable2.2.7-3all
xfonts-abiupdates2.2.7-3sarge2all

DSA 894 abiword - buffer overflows

acidlab-docstable0.9.6b20-10all
acidlab-docupdates0.9.6b20-10.1all
acidlab-mysqlstable0.9.6b20-10all
acidlab-mysqlupdates0.9.6b20-10.1all
acidlab-pgsqlstable0.9.6b20-10all
acidlab-pgsqlupdates0.9.6b20-10.1all
acidlabstable0.9.6b20-10all source
acidlabupdates0.9.6b20-10.1all source

DSA 893 acidlab - missing input sanitising

affixstable2.1.1-1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc source
affixupdates2.1.1-3alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc source
libaffix-devstable2.1.1-1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
libaffix-devupdates2.1.1-3alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
libaffix2stable2.1.1-1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
libaffix2updates2.1.1-3alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc

DSA 762 affix - several vulnerabilities

DSA 796 affix - remote command execution

apache-commonstable1.3.33-6alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
apache-commonupdates1.3.33-6sarge1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
apache-dbgstable1.3.33-6alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
apache-dbgupdates1.3.33-6sarge1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
apache-devstable1.3.33-6all
apache-devupdates1.3.33-6sarge1all
apache-docstable1.3.33-6all
apache-docupdates1.3.33-6sarge1all
apache-perlstable1.3.33-6alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
apache-perlupdates1.3.33-6sarge1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
apache-sslstable1.3.33-6alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
apache-sslupdates1.3.33-6sarge1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
apache-utilsstable1.3.33-6all
apache-utilsupdates1.3.33-6sarge1all
apachestable1.3.33-6alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc source
apacheupdates1.3.33-6sarge1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc source
libapache-mod-perlstable1.29.0.3-6alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
libapache-mod-perlupdates1.29.0.3-6sarge1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc

DSA 803 apache - programming error

apache2-commonstable2.0.54-4alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
apache2-commonupdates2.0.54-5alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
apache2-docstable2.0.54-4all
apache2-docupdates2.0.54-5all
apache2-mpm-perchildstable2.0.54-4alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
apache2-mpm-perchildupdates2.0.54-5alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
apache2-mpm-preforkstable2.0.54-4alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
apache2-mpm-preforkupdates2.0.54-5alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
apache2-mpm-threadpoolstable2.0.54-4all
apache2-mpm-threadpoolupdates2.0.54-5all
apache2-mpm-workerstable2.0.54-4alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
apache2-mpm-workerupdates2.0.54-5alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
apache2-prefork-devstable2.0.54-4alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
apache2-prefork-devupdates2.0.54-5alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
apache2-threaded-devstable2.0.54-4alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
apache2-threaded-devupdates2.0.54-5alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
apache2-utilsstable2.0.54-4alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
apache2-utilsupdates2.0.54-5alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
apache2stable2.0.54-4alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc source
apache2updates2.0.54-5alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc source
libapr0-devstable2.0.54-4alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
libapr0-devupdates2.0.54-5alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
libapr0stable2.0.54-4alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
libapr0updates2.0.54-5alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc

DSA 805 apache2 - several vulnerabilities

apachetopstable0.12.5-1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc source
apachetopupdates0.12.5-1sarge1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc source

DSA 839 apachetop - insecure temporary file

apt-cacherstable0.9.4all source
apt-cacherupdates0.9.4sarge1all source

DSA 772 apt-cacher - missing input sanitising

arcstable5.21l-1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc source
arcupdates5.21l-1sarge1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc source

DSA 843 arc - insecure temporary file

awstatsstable6.4-1all source
awstatsupdates6.4-1sarge1all source

DSA 892 awstats - missing input sanitising

backup-managerstable0.5.7-1all source
backup-managerupdates0.5.7-1sarge1all source

DSA 787 backup-manager - insecure permissions and tempfile

backupninjastable0.5-3all source
backupninjaupdates0.5-3sarge1all source

DSA 827 backupninja - insecure temporary file

backuppcstable2.1.1-2all source
backuppcupdates2.1.1-2sarge1all source

Fixes potential data loss and corruption.

bluez-bcm203xstable2.15-1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
bluez-bcm203xupdates2.15-1.1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
bluez-cupsstable2.15-1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
bluez-cupsupdates2.15-1.1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
bluez-pcmcia-supportstable2.15-1alpha arm hppa i386 ia64 m68k mips mipsel powerpc sparc
bluez-pcmcia-supportupdates2.15-1.1alpha arm hppa i386 ia64 m68k mips mipsel powerpc sparc
bluez-utilsstable2.15-1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc source
bluez-utilsupdates2.15-1.1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc source

DSA 782 bluez-utils - missing input sanitising

cactistable0.8.6c-7all source
cactiupdates0.8.6c-7sarge2all source

DSA 764 cacti - several vulnerabilities

centericq-commonstable4.20.0-1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
centericq-commonupdates4.20.0-1sarge3alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
centericq-fribidistable4.20.0-1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
centericq-fribidiupdates4.20.0-1sarge3alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
centericq-utf8stable4.20.0-1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
centericq-utf8updates4.20.0-1sarge3alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
centericqstable4.20.0-1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc source
centericqupdates4.20.0-1sarge3alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc source

DSA 754 centericq - insecure temporary file

DSA 813 centericq - several vulnerabilities

DSA 912 centericq - denial of service

cfengine-docstable1.6.5-1all
cfengine-docupdates1.6.5-1sarge1all
cfenginestable1.6.5-1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc source
cfengineupdates1.6.5-1sarge1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc source

DSA 835 cfengine - insecure temporary files

cfengine2-docstable2.1.14-1all
cfengine2-docupdates2.1.14-1sarge1all
cfengine2stable2.1.14-1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc source
cfengine2updates2.1.14-1sarge1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc source

DSA 836 cfengine2 - insecure temporary files

cgiemailstable1.6-26alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc source
cgiemailupdates1.6-26sarge1alpha arm hppa i386 ia64 m68k mips mipsel powerpc sparc source

Configure sendmail properly, rendered package unusable. Closes: #320752.

chmlib-binstable0.35-6alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
chmlib-binupdates0.35-6sarge1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
chmlib-devstable0.35-6alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
chmlib-devupdates0.35-6sarge1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
chmlibstable0.35-6alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc source
chmlibupdates0.35-6sarge1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc source

DSA 886 chmlib - several vulnerabilities

clamav-basestable0.84-2all
clamav-baseupdates0.84-2.sarge.5all
clamav-daemonstable0.84-2alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
clamav-daemonupdates0.84-2.sarge.5alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
clamav-docsstable0.84-2all
clamav-docsupdates0.84-2.sarge.5all
clamav-freshclamstable0.84-2alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
clamav-freshclamupdates0.84-2.sarge.5alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
clamav-milterstable0.84-2alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
clamav-milterupdates0.84-2.sarge.5alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
clamav-testfilesstable0.84-2all
clamav-testfilesupdates0.84-2.sarge.5all
clamavstable0.84-2alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc source
clamavupdates0.84-2.sarge.5alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc source
libclamav-devstable0.84-2alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
libclamav-devupdates0.84-2.sarge.5alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
libclamav1stable0.84-2alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
libclamav1updates0.84-2.sarge.5alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc

DSA 887 clamav - several vulnerabilities

DSA 824 clamav - infinite loop, buffer overflow

DSA 737 clamav - remote DOS

DSA 776 clamav - integer overflows, infinite loop

* logrotate scripts no longer HUP the running daemon if the pidfile is absent (closes: #315063)

* Better debconf/ucf handling in clamav-daemon postinst (closes: #321440)

* Fix unreported redirection typo

* Fix hang on low entropy systems when setting up cron job for freshclam

common-lisp-controllerstable4.15all source
common-lisp-controllerupdates4.15sarge3all source

DSA 811 common-lisp-controller - design error

courier-authdaemonstable0.47-4alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
courier-authdaemonupdates0.47-4sarge4alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
courier-authmysqlstable0.47-4alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
courier-authmysqlupdates0.47-4sarge4alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
courier-authpostgresqlstable0.47-4alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
courier-authpostgresqlupdates0.47-4sarge4alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
courier-basestable0.47-4alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
courier-baseupdates0.47-4sarge4alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
courier-docstable0.47-4all
courier-docupdates0.47-4sarge4all
courier-faxmailstable0.47-4alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
courier-faxmailupdates0.47-4sarge4alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
courier-imap-sslstable3.0.8-4alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
courier-imap-sslupdates3.0.8-4sarge4alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
courier-imapstable3.0.8-4alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
courier-imapupdates3.0.8-4sarge4alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
courier-ldapstable0.47-4alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
courier-ldapupdates0.47-4sarge4alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
courier-maildropstable0.47-4alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
courier-maildropupdates0.47-4sarge4alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
courier-mlmstable0.47-4alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
courier-mlmupdates0.47-4sarge4alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
courier-mta-sslstable0.47-4alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
courier-mta-sslupdates0.47-4sarge4alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
courier-mtastable0.47-4alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
courier-mtaupdates0.47-4sarge4alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
courier-pcpstable0.47-4alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
courier-pcpupdates0.47-4sarge4alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
courier-pop-sslstable0.47-4alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
courier-pop-sslupdates0.47-4sarge4alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
courier-popstable0.47-4alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
courier-popupdates0.47-4sarge4alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
courier-sslstable0.47-4alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
courier-sslupdates0.47-4sarge4alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
courier-webadminstable0.47-4alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
courier-webadminupdates0.47-4sarge4alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
courierstable0.47-4source
courierupdates0.47-4sarge4source
sqwebmailstable0.47-4alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
sqwebmailupdates0.47-4sarge4alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc

DSA 784 courier - programming error

DSA 793 courier - missing input sanitising

DSA 820 courier - missing input sanitising

DSA 917 courier - programming error

cpiostable2.5-1.2alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc source
cpioupdates2.5-1.3alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc source

DSA 846 cpio - several vulnerabilities

cripstable3.5-1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc source
cripupdates3.5-1sarge2alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc source

DSA 733 crip - insecure temporary files

curlstable7.13.2-2alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc source
curlupdates7.13.2-2sarge4alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc source
libcurl3-dbgstable7.13.2-2alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
libcurl3-dbgupdates7.13.2-2sarge4alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
libcurl3-devstable7.13.2-2alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
libcurl3-devupdates7.13.2-2sarge4alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
libcurl3-gssapistable7.13.2-2alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
libcurl3-gssapiupdates7.13.2-2sarge4alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
libcurl3stable7.13.2-2alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
libcurl3updates7.13.2-2sarge4alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc

* Fixed data corruption when HTTP response headers contain null bytes (closes: #310948).

DSA 919 curl - buffer overflow

dhcpcdstable1:1.3.22pl4-21alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc source
dhcpcdupdates1:1.3.22pl4-21sarge1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc source

DSA 750 dhcpcd - out-of-bound memory access

dia-commonstable0.94.0-7all
dia-commonupdates0.94.0-7sarge1all
dia-gnomestable0.94.0-7alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
dia-gnomeupdates0.94.0-7sarge1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
dia-libsstable0.94.0-7alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
dia-libsupdates0.94.0-7sarge1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
diastable0.94.0-7alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc source
diaupdates0.94.0-7sarge1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc source

DSA 847 dia - missing input sanitising

drbd0.7-module-sourcestable0.7.10-3all
drbd0.7-module-sourceupdates0.7.10-4all
drbd0.7-utilsstable0.7.10-3alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
drbd0.7-utilsupdates0.7.10-4alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
drbdstable0.7.10-3source
drbdupdates0.7.10-4source

Added missing dependency to drbd0.7-module-source (#319537, #308295)

drupalstable4.5.3-2all source
drupalupdates4.5.3-4all source

DSA 840 drupal - missing input sanitising

DSA 745 drupal - input validation errors

egroupware-addressbookstable1.0.0.007-2.dfsg-2all
egroupware-addressbookupdates1.0.0.007-2.dfsg-2sarge4all
egroupware-bookmarksstable1.0.0.007-2.dfsg-2all
egroupware-bookmarksupdates1.0.0.007-2.dfsg-2sarge4all
egroupware-calendarstable1.0.0.007-2.dfsg-2all
egroupware-calendarupdates1.0.0.007-2.dfsg-2sarge4all
egroupware-comicstable1.0.0.007-2.dfsg-2all
egroupware-comicupdates1.0.0.007-2.dfsg-2sarge4all
egroupware-corestable1.0.0.007-2.dfsg-2all
egroupware-coreupdates1.0.0.007-2.dfsg-2sarge4all
egroupware-developer-toolsstable1.0.0.007-2.dfsg-2all
egroupware-developer-toolsupdates1.0.0.007-2.dfsg-2sarge4all
egroupware-emailadminstable1.0.0.007-2.dfsg-2all
egroupware-emailadminupdates1.0.0.007-2.dfsg-2sarge4all
egroupware-emailstable1.0.0.007-2.dfsg-2all
egroupware-emailupdates1.0.0.007-2.dfsg-2sarge4all
egroupware-etemplatestable1.0.0.007-2.dfsg-2all
egroupware-etemplateupdates1.0.0.007-2.dfsg-2sarge4all
egroupware-felamimailstable1.0.0.007-2.dfsg-2all
egroupware-felamimailupdates1.0.0.007-2.dfsg-2sarge4all
egroupware-filemanagerstable1.0.0.007-2.dfsg-2all
egroupware-filemanagerupdates1.0.0.007-2.dfsg-2sarge4all
egroupware-forumstable1.0.0.007-2.dfsg-2all
egroupware-forumupdates1.0.0.007-2.dfsg-2sarge4all
egroupware-ftpstable1.0.0.007-2.dfsg-2all
egroupware-ftpupdates1.0.0.007-2.dfsg-2sarge4all
egroupware-fudforumstable1.0.0.007-2.dfsg-2all
egroupware-fudforumupdates1.0.0.007-2.dfsg-2sarge4all
egroupware-headlinesstable1.0.0.007-2.dfsg-2all
egroupware-headlinesupdates1.0.0.007-2.dfsg-2sarge4all
egroupware-infologstable1.0.0.007-2.dfsg-2all
egroupware-infologupdates1.0.0.007-2.dfsg-2sarge4all
egroupware-jinnstable1.0.0.007-2.dfsg-2all
egroupware-jinnupdates1.0.0.007-2.dfsg-2sarge4all
egroupware-ldapstable1.0.0.007-2.dfsg-2all
egroupware-ldapupdates1.0.0.007-2.dfsg-2sarge4all
egroupware-manualstable1.0.0.007-2.dfsg-2all
egroupware-manualupdates1.0.0.007-2.dfsg-2sarge4all
egroupware-messengerstable1.0.0.007-2.dfsg-2all
egroupware-messengerupdates1.0.0.007-2.dfsg-2sarge4all
egroupware-news-adminstable1.0.0.007-2.dfsg-2all
egroupware-news-adminupdates1.0.0.007-2.dfsg-2sarge4all
egroupware-phpbrainstable1.0.0.007-2.dfsg-2all
egroupware-phpbrainupdates1.0.0.007-2.dfsg-2sarge4all
egroupware-phpldapadminstable1.0.0.007-2.dfsg-2all
egroupware-phpldapadminupdates1.0.0.007-2.dfsg-2sarge4all
egroupware-phpsysinfostable1.0.0.007-2.dfsg-2all
egroupware-phpsysinfoupdates1.0.0.007-2.dfsg-2sarge4all
egroupware-pollsstable1.0.0.007-2.dfsg-2all
egroupware-pollsupdates1.0.0.007-2.dfsg-2sarge4all
egroupware-projectsstable1.0.0.007-2.dfsg-2all
egroupware-projectsupdates1.0.0.007-2.dfsg-2sarge4all
egroupware-registrationstable1.0.0.007-2.dfsg-2all
egroupware-registrationupdates1.0.0.007-2.dfsg-2sarge4all
egroupware-sitemgrstable1.0.0.007-2.dfsg-2all
egroupware-sitemgrupdates1.0.0.007-2.dfsg-2sarge4all
egroupware-stocksstable1.0.0.007-2.dfsg-2all
egroupware-stocksupdates1.0.0.007-2.dfsg-2sarge4all
egroupware-ttsstable1.0.0.007-2.dfsg-2all
egroupware-ttsupdates1.0.0.007-2.dfsg-2sarge4all
egroupware-wikistable1.0.0.007-2.dfsg-2all
egroupware-wikiupdates1.0.0.007-2.dfsg-2sarge4all
egroupwarestable1.0.0.007-2.dfsg-2all source
egroupwareupdates1.0.0.007-2.dfsg-2sarge4all source

DSA 899 egroupware - programming errors

DSA 842 egroupware - missing input sanitising

DSA 747 egroupware - input validation error

ekgstable1:1.5+20050411-3alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc source
ekgupdates1:1.5+20050411-5alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc source

DSA 760 ekg - several vulnerabilities

DSA 767 ekg - integer overflows

enigmailstable2:0.91-4source
enigmailupdates2:0.91-4sarge2source
mozilla-enigmailstable2:0.91-4alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
mozilla-enigmailupdates2:0.91-4sarge2alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
mozilla-thunderbird-enigmailstable2:0.91-4alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
mozilla-thunderbird-enigmailupdates2:0.91-4sarge2alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc

DSA 889 enigmail - programming error

ericstable3.6.2-1all source
ericupdates3.6.2-2all source

DSA 869 eric - missing input sanitising

ethereal-commonstable0.10.10-2sarge2alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
ethereal-commonupdates0.10.10-2sarge4alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
ethereal-devstable0.10.10-2sarge2alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
ethereal-devupdates0.10.10-2sarge4alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
etherealstable0.10.10-2sarge2alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc source
etherealupdates0.10.10-2sarge4alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc source
tetherealstable0.10.10-2sarge2alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
tetherealupdates0.10.10-2sarge4alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc

DSA 853 ethereal - several vulnerabilities

DSA 920 ethereal - buffer overflow

ettercap-commonstable1:0.7.1-1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
ettercap-commonupdates1:0.7.1-1sarge1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
ettercap-gtkstable1:0.7.1-1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
ettercap-gtkupdates1:0.7.1-1sarge1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
ettercapstable1:0.7.1-1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc source
ettercapupdates1:0.7.1-1sarge1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc source

DSA 749 ettercap - format string error

f-prot-installerstable0.5.14i386 source
f-prot-installerupdates0.5.14.sarge.1i386 source

Package was rendered unusable by external changes.

famstable2.7.0-6alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc source
famupdates2.7.0-6sarge1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc source
libfam-devstable2.7.0-6alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
libfam-devupdates2.7.0-6sarge1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
libfam0c102stable2.7.0-6alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
libfam0c102updates2.7.0-6sarge1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc

Fixes data corruption due to missing handle release (#316579, #296609, #272577)

fetchmail-sslstable6.2.5-12all
fetchmail-sslupdates6.2.5-12sarge3all
fetchmailconfstable6.2.5-12all
fetchmailconfupdates6.2.5-12sarge3all
fetchmailstable6.2.5-12alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc source
fetchmailupdates6.2.5-12sarge3alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc source

DSA 774 fetchmail - buffer overflow

DSA 900 fetchmail - programming error

fireholstable1.231-2all source
fireholupdates1.231-2sarge1all source

Fixed lockfile deletion, that prevented a firewall start (Closes: #315399, #309651)

fuse-sourcestable2.2.1-4all
fuse-sourceupdates2.2.1-4sarge2all
fuse-utilsstable2.2.1-4alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
fuse-utilsupdates2.2.1-4sarge2alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
fusestable2.2.1-4source
fuseupdates2.2.1-4sarge2source
libfuse-devstable2.2.1-4alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
libfuse-devupdates2.2.1-4sarge2alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
libfuse2stable2.2.1-4alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
libfuse2updates2.2.1-4sarge2alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc

DSA 744 fuse - programming error

gaim-datastable1:1.2.1-1.1all
gaim-dataupdates1:1.2.1-1.4all
gaim-devstable1:1.2.1-1.1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
gaim-devupdates1:1.2.1-1.4alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
gaimstable1:1.2.1-1.1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc source
gaimupdates1:1.2.1-1.4alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc source

DSA 734 gaim - denial of service

DSA 769 gaim - memory alignment bug

gallerystable1.5-1all source
galleryupdates1.5-1sarge1all source

DSA 879 gallery - programming error

gcvsstable1.0final-5alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc source
gcvsupdates1.0final-5sarge1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc source

DSA 806 gcvs - insecure temporary files

gdk-pixbufstable0.22.0-8source
gdk-pixbufupdates0.22.0-8.1source
libgdk-pixbuf-devstable0.22.0-8alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
libgdk-pixbuf-devupdates0.22.0-8.1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
libgdk-pixbuf-gnome-devstable0.22.0-8alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
libgdk-pixbuf-gnome-devupdates0.22.0-8.1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
libgdk-pixbuf-gnome2stable0.22.0-8alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
libgdk-pixbuf-gnome2updates0.22.0-8.1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
libgdk-pixbuf2stable0.22.0-8alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
libgdk-pixbuf2updates0.22.0-8.1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc

DSA 913 gdk-pixbuf - several vulnerabilities

gedit-commonstable2.8.3-4all
gedit-commonupdates2.8.3-4sarge1all
gedit-devstable2.8.3-4all
gedit-devupdates2.8.3-4sarge1all
geditstable2.8.3-4alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc source
geditupdates2.8.3-4sarge1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc source

DSA 753 gedit - format string

gnome-system-monitorstable2.8.1-2alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc source
gnome-system-monitorupdates2.8.1-4alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc source

Crash fix (Bug#289384, Bug#311714)

gnump3dstable2.9.3-1sarge1all source
gnump3dupdates2.9.3-1sarge2all source

DSA 901 gnump3d - programming error

DSA 877 gnump3d - cross-site scripting, directory traversal

gopherstable3.0.7alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc source
gopherupdates3.0.7sarge2alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc source

DSA 770 gopher - insecure tmpfile creating

DSA 832 gopher - buffer overflows

gprstable0.9deb-4alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc source
gprupdates0.9deb-4sargealpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc source

The diversion of lpr with gpr did not work (it would loop endlessly) (curiosly the people who noted did not file a bug report) in that case gpr would become completly useless; I uploaded 0.9deb-5 into sarge before the freeze but it did not make it in :-( :-( and I did not that :-( :-( so this upload is for sarge.

I also disabled the automatic update of config.{sub,guess} for paranoia

gpsdrivestable2.09-2alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc source
gpsdriveupdates2.09-2sarge1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc source

DSA 891 gpsdrive - format string

graphviz-devstable2.2.1-1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
graphviz-devupdates2.2.1-1sarge1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
graphviz-docstable2.2.1-1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
graphviz-docupdates2.2.1-1sarge1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
graphvizstable2.2.1-1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc source
graphvizupdates2.2.1-1sarge1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc source

DSA 857 graphviz - insecure temporary file

gtk+2.0stable2.6.4-3source
gtk+2.0updates2.6.4-3.1source
gtk2-engines-pixbufstable2.6.4-3alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
gtk2-engines-pixbufupdates2.6.4-3.1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
gtk2.0-examplesstable2.6.4-3alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
gtk2.0-examplesupdates2.6.4-3.1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
libgtk2.0-0-dbgstable2.6.4-3alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
libgtk2.0-0-dbgupdates2.6.4-3.1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
libgtk2.0-0stable2.6.4-3alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
libgtk2.0-0updates2.6.4-3.1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
libgtk2.0-binstable2.6.4-3alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
libgtk2.0-binupdates2.6.4-3.1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
libgtk2.0-commonstable2.6.4-3all
libgtk2.0-commonupdates2.6.4-3.1all
libgtk2.0-devstable2.6.4-3alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
libgtk2.0-devupdates2.6.4-3.1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
libgtk2.0-docstable2.6.4-3all
libgtk2.0-docupdates2.6.4-3.1all

DSA 911 gtk+2.0 - several vulnerabilities

gtkdiskfreestable1.9.3-4alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc source
gtkdiskfreeupdates1.9.3-4sarge1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc source

DSA 822 gtkdiskfree - insecure temporary file creation

gzipstable1.3.5-10alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc source
gzipupdates1.3.5-10sarge1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc source

Fix futex hangs

heartbeat-devstable1.2.3-9alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
heartbeat-devupdates1.2.3-9sarge4alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
heartbeatstable1.2.3-9alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc source
heartbeatupdates1.2.3-9sarge4alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc source
ldirectordstable1.2.3-9all
ldirectordupdates1.2.3-9sarge4all
libpils-devstable1.2.3-9alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
libpils-devupdates1.2.3-9sarge4alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
libpils0stable1.2.3-9alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
libpils0updates1.2.3-9sarge4alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
libstonith-devstable1.2.3-9alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
libstonith-devupdates1.2.3-9sarge4alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
libstonith0stable1.2.3-9alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
libstonith0updates1.2.3-9sarge4alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
stonithstable1.2.3-9alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
stonithupdates1.2.3-9sarge4alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc

DSA 761 heartbeat - insecure temporary files

Additional patches to make stonith work again

heimdal-clients-xstable0.6.3-10alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
heimdal-clients-xupdates0.6.3-10sarge1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
heimdal-clientsstable0.6.3-10alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
heimdal-clientsupdates0.6.3-10sarge1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
heimdal-devstable0.6.3-10alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
heimdal-devupdates0.6.3-10sarge1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
heimdal-docsstable0.6.3-10all
heimdal-docsupdates0.6.3-10sarge1all
heimdal-kdcstable0.6.3-10alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
heimdal-kdcupdates0.6.3-10sarge1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
heimdal-servers-xstable0.6.3-10alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
heimdal-servers-xupdates0.6.3-10sarge1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
heimdal-serversstable0.6.3-10alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
heimdal-serversupdates0.6.3-10sarge1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
heimdalstable0.6.3-10source
heimdalupdates0.6.3-10sarge1source
libasn1-6-heimdalstable0.6.3-10alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
libasn1-6-heimdalupdates0.6.3-10sarge1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
libgssapi1-heimdalstable0.6.3-10alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
libgssapi1-heimdalupdates0.6.3-10sarge1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
libhdb7-heimdalstable0.6.3-10alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
libhdb7-heimdalupdates0.6.3-10sarge1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
libkadm5clnt4-heimdalstable0.6.3-10alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
libkadm5clnt4-heimdalupdates0.6.3-10sarge1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
libkadm5srv7-heimdalstable0.6.3-10alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
libkadm5srv7-heimdalupdates0.6.3-10sarge1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
libkafs0-heimdalstable0.6.3-10alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
libkafs0-heimdalupdates0.6.3-10sarge1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
libkrb5-17-heimdalstable0.6.3-10alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
libkrb5-17-heimdalupdates0.6.3-10sarge1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc

DSA 758 heimdal - buffer overflow

helix-playerstable1.0.4-1i386 powerpc source
helix-playerupdates1.0.4-1sarge2i386 powerpc source

DSA 915 helix-player - buffer overflow

DSA 826 helix-player - multiple vulnerabilities

horde2stable2.2.8-1all source
horde2updates2.2.8-1sarge1all source

DSA 914 horde2 - missing input sanitising

horde3stable3.0.4-4all source
horde3updates3.0.4-4sarge2all source

DSA 909 horde3 - missing input sanitising

DSA 884 horde3 - design error

htstable0.8.0-2alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc source
htupdates0.8.0-2sarge4alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc source

DSA 743 ht - buffer overflows, integer overflows

hylafax-clientstable1:4.2.1-5alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
hylafax-clientupdates1:4.2.1-5sarge1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
hylafax-docstable1:4.2.1-5all
hylafax-docupdates1:4.2.1-5sarge1all
hylafax-serverstable1:4.2.1-5alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
hylafax-serverupdates1:4.2.1-5sarge1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
hylafaxstable1:4.2.1-5source
hylafaxupdates1:4.2.1-5sarge1source

DSA 865 hylafax - insecure temporary files

inkscapestable0.41-4.99.sarge0alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc source
inkscapeupdates0.41-4.99.sarge2alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc source

DSA 916 inkscape - buffer overflow

kazehakasestable0.2.7-2alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc source
kazehakaseupdates0.2.7-2.sarge1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc source

* fix crash for mozilla 2:1.7.8-1sarge2 (Closes: 325124, 326509)

kappfinderstable4:3.3.2-1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
kappfinderupdates4:3.3.2-1sarge1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
katestable4:3.3.2-1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
kateupdates4:3.3.2-1sarge1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
kcontrolstable4:3.3.2-1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
kcontrolupdates4:3.3.2-1sarge1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
kdebase-binstable4:3.3.2-1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
kdebase-binupdates4:3.3.2-1sarge1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
kdebase-datastable4:3.3.2-1all
kdebase-dataupdates4:3.3.2-1sarge1all
kdebase-devstable4:3.3.2-1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
kdebase-devupdates4:3.3.2-1sarge1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
kdebase-docstable4:3.3.2-1all
kdebase-docupdates4:3.3.2-1sarge1all
kdebase-kio-pluginsstable4:3.3.2-1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
kdebase-kio-pluginsupdates4:3.3.2-1sarge1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
kdebasestable4:3.3.2-1all source
kdebaseupdates4:3.3.2-1sarge1all source
kdepasswdstable4:3.3.2-1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
kdepasswdupdates4:3.3.2-1sarge1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
kdeprintstable4:3.3.2-1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
kdeprintupdates4:3.3.2-1sarge1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
kdesktopstable4:3.3.2-1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
kdesktopupdates4:3.3.2-1sarge1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
kdmstable4:3.3.2-1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
kdmupdates4:3.3.2-1sarge1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
kfindstable4:3.3.2-1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
kfindupdates4:3.3.2-1sarge1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
khelpcenterstable4:3.3.2-1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
khelpcenterupdates4:3.3.2-1sarge1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
kickerstable4:3.3.2-1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
kickerupdates4:3.3.2-1sarge1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
klipperstable4:3.3.2-1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
klipperupdates4:3.3.2-1sarge1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
kmenueditstable4:3.3.2-1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
kmenueditupdates4:3.3.2-1sarge1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
konqueror-nspluginsstable4:3.3.2-1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
konqueror-nspluginsupdates4:3.3.2-1sarge1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
konquerorstable4:3.3.2-1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
konquerorupdates4:3.3.2-1sarge1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
konsolestable4:3.3.2-1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
konsoleupdates4:3.3.2-1sarge1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
kpagerstable4:3.3.2-1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
kpagerupdates4:3.3.2-1sarge1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
kpersonalizerstable4:3.3.2-1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
kpersonalizerupdates4:3.3.2-1sarge1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
ksmserverstable4:3.3.2-1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
ksmserverupdates4:3.3.2-1sarge1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
ksplashstable4:3.3.2-1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
ksplashupdates4:3.3.2-1sarge1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
ksysguarddstable4:3.3.2-1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
ksysguarddupdates4:3.3.2-1sarge1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
ksysguardstable4:3.3.2-1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
ksysguardupdates4:3.3.2-1sarge1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
ktipstable4:3.3.2-1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
ktipupdates4:3.3.2-1sarge1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
kwinstable4:3.3.2-1alpha arm hppa i386 ia64 m68k mips mipsel powerpc s390 sparc
kwinupdates