Bugs with severity critical in stable -- Debian Bug report logs

# Debian Bug report logs: Bugs with severity critical in stable

- Outstanding bugs -- Critical bugs; Patch Available (7 bugs)
- Outstanding bugs -- Critical bugs; Confirmed (1 bug)
- Outstanding bugs -- Critical bugs; Unclassified (27 bugs)
- Forwarded bugs -- Critical bugs (5 bugs)
- Pending Upload bugs -- Critical bugs (1 bug)
- Resolved bugs -- Critical bugs (4 bugs)
- From other Branch bugs -- Critical bugs (30 bugs)

## Outstanding bugs -- Critical bugs; Patch Available (7 bugs)

- #417673 [C|+|☺] [dosfstools] /sbin/fsck.vfat: Incorrectly truncates files of 4294966784 bytes length during boot.
  Reported by: Andrew Vaughan <ajv-lists@netspace.net.au>; Date: Wed, 4 Apr 2007 08:57:05 UTC; Severity: critical; Tags: patch; Found in versions dosfstools/2.11-2.1, dosfstools/2.11-2; Fixed in version dosfstools/2.11-2.2; Done: Andreas Barth <aba@not.so.argh.org>; Filed 1 year and 318 days ago; Modified 64 days ago;
- #417862 [C|+Su|☺] [graphicsmagick] libX11: Buffer overflow in XGetPixel().
  Reported by: Sami Liedes <sliedes@cc.hut.fi>; Date: Thu, 1 Mar 2007 03:42:01 UTC; Severity: critical; Tags: patch, security, upstream; Fixed in version graphicsmagick/1.1.7-14; Done: Daniel Kobras <kobras@debian.org>; Filed 1 year and 352 days ago; Modified 1 year and 316 days ago;
- #476339 [C|+S|┣] [libmikmod2] libmikmod2: segfaults when loading XM files
  Reported by: Javier Serrano Polo <jasp00@terra.es>; Date: Wed, 16 Apr 2008 03:27:01 UTC; Severity: critical; Tags: patch, security; Found in version libmikmod/3.1.11-6; Blocking fix for 510675: mod support disabled in 0.14-1?; Filed 305 days ago; Modified 33 days ago;
- #480972 [C|+Su|☺] [libuu-dev] CVE-2008-2266 vulnerable to symlink attacks
  Reported by: Marco d'Itri <md@linux.it>; Date: Mon, 12 May 2008 23:24:10 UTC; Severity: critical; Tags: patch, security, upstream; Found in version uudeview/0.5.20-3; Fixed in version uudeview/0.5.20-3.1; Done: Marco d'Itri <md@linux.it>; Filed 278 days ago; Modified 268 days ago;
- #492348 [C|+|☺] [libpam-devperm] libpam-devperm: Breaks execution of at jobs
  Reported by: Christoph Pleger <Christoph.Pleger@cs.uni-dortmund.de>; Date: Fri, 25 Jul 2008 14:09:02 UTC; Severity: critical; Tags: patch; Found in version pam-devperm/1.5-2; Fixed in version pam-devperm/1.6-1; Done: Petter Reinholdtsen <pere@debian.org>; Filed 205 days ago; Modified 196 days ago;
- #510205 [C|+S| ] [libaudiofile0] buffer overflow in libaudiofile
  Reported by: Max Kellermann <max@duempel.org>; Date: Tue, 30 Dec 2008 13:30:02 UTC; Severity: critical; Tags: patch, security; Found in version audiofile/0.2.6-6; Filed 47 days ago; Modified 34 days ago;
- #512365 [C|+S|=☺] [gmetad] gmetad: stack based buffer overflow in process_path
  Reported by: Carlo Marcelo Arenas Belon <carenas@sajinet.com.pe>; Date: Tue, 20 Jan 2009 07:21:02 UTC; Severity: critical; Tags: patch, security; Merged with 512637; Found in version ganglia-monitor-core/2.5.7-2; Fixed in version ganglia/3.1.2-1; Done: Stu Teasdale <sdt@debian.org>; Filed 26 days ago; Modified 14 days ago;

## Outstanding bugs -- Critical bugs; Confirmed (1 bug)

- #435983 [C|H|☺] [mdadm] mount: fails to detect LABEL=foo filesystems
  Reported by: James Youngman <jay@gnu.org>; Date: Sat, 4 Aug 2007 13:45:01 UTC; Severity: critical; Tags: confirmed, help, lenny, sid; Fixed in version mdadm/2.6.7-2; Done: madduck@debian.org (martin f. krafft); Filed 1 year and 196 days ago; Modified 228 days ago;

## Outstanding bugs -- Critical bugs; Unclassified (27 bugs)

- #394963 [C| | ] [installation-reports] installation: Problems with dual booting Dell D600 with winXP pro in the first partition (hd0, 0). After installing the Dell Etch Beta 3, Windows fails to boot and I get the blue screen of death.
  Reported by: Bobby Jafari <bobby.jafari@senetas.com>; Date: Tue, 24 Oct 2006 06:48:03 UTC; Severity: critical; Tags: etch, lenny, sarge, sid; Filed 2 years and 115 days ago; Modified 1 year and 211 days ago;
- #416424 [C|S|☺] [libapache2-mod-suphp] SuPHP security issue: Replace AddHandler by AddType
  Reported by: Fili <fili@fili.nl>; Date: Sat, 17 Mar 2007 14:24:05 UTC; Severity: critical; Tags: security; Found in version suphp/0.6.2-1; Fixed in version suphp/0.6.2-2; Done: Emmanuel Lacour <elacour@home-dn.net>; Filed 1 year and 336 days ago; Modified 1 year and 121 days ago;
- #419987 [C| |=☺] [xmltex] configuration runs into neverending loop
  Reported by: Wouter Cloetens <wouter@mind.be>; Date: Thu, 19 Apr 2007 08:51:01 UTC; Severity: critical; Tags: lenny, sid; Merged with 420559, 421059, 421242; Fixed in version xmltex/1.9-12; Done: Norbert Preining <preining@debian.org>; Filed 1 year and 303 days ago; Modified 1 year and 210 days ago;
- #424964 [C| |☺] [python-constraint] python-constraint: causes multiple postinst failures (SyntaxError: from __future__ imports must occur at the beginning of the file)
  Reported by: Laurent Bonnaud <Laurent.Bonnaud@inpg.fr>; Date: Fri, 18 May 2007 07:30:02 UTC; Severity: critical; Tags: lenny, sid; Found in version constraint/0.3.0-5; Fixed in version constraint/0.3.0-6; Done: Alexandre Fayolle <afayolle@debian.org>; Filed 1 year and 274 days ago; Modified 1 year and 230 days ago;
- #425656 [C| |☺] [libpam-encfs] libpam-encfs causes problems with sudo
  Reported by: Stefan Tittel <bugreports@tittel.net>; Date: Wed, 23 May 2007 02:03:02 UTC; Severity: critical; Found in version libpam-encfs/0.1.3-1; Fixed in version libpam-encfs/0.1.4.1-1; Done: Rubén Porras Campo <nahoo82@gmail.com>; Filed 1 year and 269 days ago; Modified 1 year and 109 days ago;
- #427562 [C| |☺] [tex-common] texlive-base-bin: Launches forkbomb on upgrade/install
  Reported by: John Goerzen <jgoerzen@complete.org>; Date: Mon, 4 Jun 2007 21:39:02 UTC; Severity: critical; Found in versions tex-common/1.0.1, tex-common/1.7; Fixed in version tex-common/1.8; Done: Frank Küster <frank@debian.org>; Filed 1 year and 256 days ago; Modified 1 year and 214 days ago;
- #431605 [C| |☺] [korganizer] korganizer: events disappear
  Reported by: Alex Henry Ribeiro dos Santos <tukkek@terra.com.br>; Date: Tue, 3 Jul 2007 19:24:01 UTC; Severity: critical; Found in versions kdepim/4:3.5.5.dfsg.1-6, kdepim/4:3.5.7-4; Fixed in version kdepim/4:3.5.9-3; Done: Debian Qt/KDE Maintainers <debian-qt-kde@lists.debian.org>; Filed 1 year and 228 days ago; Modified 230 days ago;
- #433826 [C| |☺] [gforge] gforge: missing dependancy on libapache-mod-ssl ; ssl certificates not set ; shell via pgsql problems
  Reported by: Ivan Vucica <ivucica@gmail.com>; Date: Thu, 19 Jul 2007 18:15:04 UTC; Severity: critical; Found in version gforge/4.5.14-22; Fixed in version gforge/4.6.99+svn6094-2; Done: Roland Mas <lolando@debian.org>; Filed 1 year and 212 days ago; Modified 1 year and 143 days ago;
- #436681 [C|S|☺] [backuppc] backuppc: Web interface password publicly visible
  Reported by: Frans Pop <elendil@planet.nl>; Date: Wed, 8 Aug 2007 14:00:02 UTC; Severity: critical; Tags: security; Found in versions backuppc/2.1.2-6, backuppc/3.0.0-1; Fixed in version backuppc/3.0.0-4; Done: Ludovic Drolez <ldrolez@debian.org>; Filed 1 year and 192 days ago; Modified 287 days ago;
- #437142 [C| |☺] [perl-base] perl-base should include unicore/PVA.pl
  Reported by: Christian Perrier <bubulle@debian.org>; Date: Fri, 10 Aug 2007 16:51:04 UTC; Severity: critical; Found in version perl/5.8.8-7; Fixed in version perl/5.8.8-8; Done: Brendan O'Dea <bod@debian.org>; Filed 1 year and 190 days ago; Modified 1 year and 152 days ago;
- #440630 [C| |☺] [bsdmainutils] bsdmainutils: hexdump is lost, needs a new upload with appropriate conflicts
  Reported by: Pierre Habouzit <madcoder@debian.org>; Date: Mon, 3 Sep 2007 09:12:02 UTC; Severity: critical; Tags: lenny, sid; Found in version bsdmainutils/6.1.6; Fixed in version bsdmainutils/6.1.7; Done: Daniel Baumann <daniel@debian.org>; Filed 1 year and 166 days ago; Modified 1 year and 126 days ago;
- #441555 [C|S|=☺] [lighttpd] lighttpd: header overflow when using the mod_fastcgi extension
  Reported by: Stefan Andersson <stefan@stardoll.com>; Date: Mon, 10 Sep 2007 11:42:06 UTC; Severity: critical; Tags: etch, lenny, security, sid; Merged with 441787; Found in versions lighttpd/1.4.13-4etch1, lighttpd/1.4.15-1, lighttpd/1.4.13-4etch3; Fixed in version 1.4.18-1; Done: Krzysztof Krzyzaniak (eloy) <eloy@debian.org>; Filed 1 year and 159 days ago; Modified 1 year and 151 days ago;
- #442165 [C| |☺] [apt-spy] apt-spy: Destroys sources.list file
  Reported by: "Jeffrey W. Baker" <jwbaker@acm.org>; Date: Thu, 13 Sep 2007 18:18:01 UTC; Severity: critical; Found in version apt-spy/3.1-16; Fixed in version apt-spy/3.1-17; Done: Raphael Geissert <atomo64@gmail.com>; Filed 1 year and 156 days ago; Modified 1 year and 118 days ago;
- #445861 [C| |=☺] [hal] hal: HAL daemon exited with return code 1
  Reported by: Antonio <antonio.dantas@gmail.com>; Date: Mon, 8 Oct 2007 17:54:01 UTC; Severity: critical; Merged with 447860; Found in versions hal/0.5.10-1, hal/0.5.8.1-9; Fixed in version hal/0.5.10-4; Done: Sjoerd Simons <sjoerd@debian.org>; Filed 1 year and 131 days ago; Modified 1 year and 75 days ago;
- #455694 [C| |☺] [gdm] gdm: crashes GTK+ when run with dash as /bin/sh
  Reported by: Andreas Kroschel <kro@pobox.com>; Date: Tue, 11 Dec 2007 07:54:01 UTC; Severity: critical; Tags: lenny, sid; Fixed in version gdm/2.20.3-1; Done: Sebastian Dröge <slomo@debian.org>; Filed 1 year and 67 days ago; Modified 183 days ago;
- #467090 [C| | ] [lvm-common] lvm-common: Snapshotting LVM1 volumes with LVM2 tools corrupts volume group
  Reported by: Dominic Hargreaves <dom@earth.li>; Date: Fri, 22 Feb 2008 23:24:01 UTC; Severity: critical; Found in version lvm-common/1.5.20; Filed 358 days ago; Modified 358 days ago;
- #468343 [C| |☺] [linux-image-2.6.18-6-amd64] Page fault in nfs_complete_unlink
  Reported by: Evaggelos Souglakos <sys-serv@otenet.gr>; Date: Thu, 28 Feb 2008 13:30:02 UTC; Severity: critical; Found in version linux-2.6/2.6.18.dfsg.1-18etch1; Fixed in version 2.6.23-1; Done: maximilian attems <max@stro.at>; Filed 353 days ago; Modified 277 days ago;
- #470745 [C|Uu|☺] [passwd] passwd: usermod loops and mem leaks
  Reported by: Thomas Rasmussen <rasmussen.thomas@gmail.com>; Date: Thu, 13 Mar 2008 11:36:02 UTC; Severity: critical; Tags: fixed-upstream, upstream; Found in version shadow/1:4.0.18.1-7; Fixed in version shadow/1:4.1.1-1; Done: Nicolas FRANCOIS (Nekral) <nicolas.francois@centraliens.net>; Filed 339 days ago; Modified 318 days ago;
- #474364 [C| |☺] [fmirror] fmirror: deletes filesystem before downloading
  Reported by: Michael Braun <michael-dev@fami-braun.de>; Date: Sat, 5 Apr 2008 10:06:02 UTC; Severity: critical; Found in version fmirror/2:0.8.4-13; Fixed in version 2:0.8.4-14+rm; Done: Marco Rodrigues <gothicx@sapo.pt>; Filed 316 days ago; Modified 207 days ago;
- #475926 [C| |☺] [laptop-mode-tools] laptop-mode-tools: When /proc/acpi/battery is not present and auto hibernate is on, system hibernates on boot
  Reported by: Nigel McNie <nigel@mcnie.name>; Date: Sun, 13 Apr 2008 21:48:01 UTC; Severity: critical; Fixed in version laptop-mode-tools/1.40-1; Done: Bart Samwel <bart@samwel.tk>; Filed 307 days ago; Modified 301 days ago;
- #490443 [C| | ] [evms] A partition is registered twice in blkid.tab, which prevent to mount it
  Reported by: Fabrice Salvaire <fabrice.salvaire@orange.fr>; Date: Sat, 12 Jul 2008 10:57:02 UTC; Severity: critical; Found in version evms/2.5.5-18; Filed 218 days ago; Modified 218 days ago;
- #490753 [C| |☺] [linux-image-2.6.18-6-686] /boot/vmlinuz-2.6.18-6-686: kernel BUG at drivers/md/bitmap.c:1166!
  Reported by: Rob Leslie <rob@mars.org>; Date: Mon, 14 Jul 2008 00:24:04 UTC; Severity: critical; Found in version 2.6.18.dfsg.1-18etch6; Fixed in version 2.6.24-1; Done: maximilian attems <max@stro.at>; Filed 216 days ago; Modified 204 days ago;
- #495603 [C| | ] [installation-reports] grub-installer fails on a FSC Primergy RX300 with a level 5 RAID
  Reported by: Ulrich Stärk <uli@spielviel.de>; Date: Mon, 18 Aug 2008 20:54:01 UTC; Severity: critical; Filed 180 days ago; Modified 180 days ago;
- #508259 [C|S|☺] [linux-image-2.6.18-6-k7] linux-image-2.6.18-6-k7: Local kernel panic exploit
  Reported by: Kuba Plichcinski <kuba@fabrykahostingu.pl>; Date: Tue, 9 Dec 2008 11:48:02 UTC; Severity: critical; Tags: security; Found in version linux-2.6/2.6.18.dfsg.1-23; Fixed in version 2.6.26-11; Done: Moritz Muehlenhoff <jmm@inutil.org>; Filed 68 days ago; Modified 56 days ago;
- #512999 [C|Su|☺] [rt2400] Possible security flaw in ad-hoc probe request processing
  Reported by: Ben Hutchings <ben@decadent.org.uk>; Date: Sun, 25 Jan 2009 16:18:01 UTC; Severity: critical; Tags: security, upstream; Found in versions rt2400/1.2.2+cvs20060620-4, 1.2.2+cvs20080623-2; Fixed in version rt2400/1.2.2+cvs20080623-3; Done: Ben Hutchings <ben@decadent.org.uk>; Filed 21 days ago; Modified 18 days ago;
- #513000 [C|Su|☺] [rt2500] Possible security flaw in ad-hoc probe request processing
  Reported by: Ben Hutchings <ben@decadent.org.uk>; Date: Sun, 25 Jan 2009 16:18:01 UTC; Severity: critical; Tags: security, upstream; Found in versions 1:1.1.0-b4+cvs20080623-2, rt2500/1.1.0+cvs20060620-3; Fixed in version rt2500/1:1.1.0-b4+cvs20080623-3; Done: Ben Hutchings <ben@decadent.org.uk>; Filed 21 days ago; Modified 18 days ago;
- #514096 [C| |☺] [mped] Minimum Profit text editor version 3.x can destroy UTF-8 files
  Reported by: Angel Ortega <angel@triptico.com>; Date: Wed, 4 Feb 2009 07:57:01 UTC; Severity: critical; Tags: lenny; Found in version mped/3.3.17-1; Fixed in version mped/5.1.1-1; Filed 11 days ago; Modified 11 days ago;

## Forwarded bugs -- Critical bugs (5 bugs)

- #439392 [C|S|☺↝] [backup-manager] backup-manager: password disclosure in backup uploads
  Reported by: Micha Lenk <micha@lenk.info>; Date: Fri, 24 Aug 2007 19:06:02 UTC; Severity: critical; Tags: security; Found in version backup-manager/0.7.5-3; Fixed in versions backup-manager/0.7.6-3, backup-manager/0.5.7-1sarge2, backup-manager/0.7.5-4; Forwarded to http://bugzilla.backup-manager.org/cgi-bin/show_bug.cgi?id=173; Done: Thijs Kinkhorst <thijs@debian.org>; Filed 1 year and 176 days ago; Modified 309 days ago;
- #466663 [C|+S|☺↝] [lighttpd] lighttpd: remote denial of service
  Reported by: u0@desibbrg.com; Date: Wed, 20 Feb 2008 08:42:01 UTC; Severity: critical; Tags: patch, security; Found in versions lighttpd/1.4.13-4etch4, lighttpd/1.4.18-1; Fixed in version lighttpd/1.4.18-2; Forwarded to http://trac.lighttpd.net/trac/ticket/1562; Done: Pierre Habouzit <madcoder@debian.org>; Filed 361 days ago; Modified 256 days ago;
- #494969 [C|+S|=☺↝] [sympa] sympa: Leftover debug code may lead to data loss
  Reported by: Olivier Berger <olivier.berger@it-sudparis.eu>; Date: Wed, 13 Aug 2008 14:00:07 UTC; Severity: critical; Tags: patch, security; Merged with 496405; Found in versions sympa/5.2.3-1.2+etch1, sympa/5.3.4-5; Fixed in version 5.3.4-5.1; Forwarded to http://sourcesup.cru.fr/tracker/index.php?func=detail&aid=4430; Done: Nico Golde <nion@debian.org>; Filed 186 days ago; Modified 171 days ago;
- #499078 [C|M+|↝] [jfsutils] jfsutils: Bus Error when running fsck.jfs on sparc
  Reported by: Ivan Jager <aij+debian@andrew.cmu.edu>; Date: Tue, 16 Sep 2008 01:42:01 UTC; Severity: critical; Tags: moreinfo, patch; Found in version jfsutils/1.1.11-1; Forwarded to https://sourceforge.net/tracker/?func=detail&atid=712756&aid=2113843&group_id=128802; Filed 152 days ago;
- #514163 [C| |☺↝] [fail2ban] fail2ban: allows DoS via construction of domain names starting with IP of a victim
  Reported by: Chris Butler <chrisb@debian.org>; Date: Wed, 4 Feb 2009 19:57:01 UTC; Severity: critical; Found in version fail2ban/0.7.5-2etch1; Fixed in versions fail2ban/0.8.3-5, fail2ban/0.8.3-2sid1; Forwarded to Cyril Jaquier ; Done: Yaroslav Halchenko <debian@onerussian.com>; Filed 11 days ago; Modified 10 days ago;

## Pending Upload bugs -- Critical bugs (1 bug)

- #471104 [C|P|☺] [php5] php5: Please rebuild against up to date timezone data
  Reported by: Andrew McMillan <debian@mcmillan.net.nz>; Date: Sat, 15 Mar 2008 22:54:01 UTC; Severity: critical; Tags: pending; Found in version php5/5.2.0-8+etch10; Fixed in version php5/5.2.6-1; Done: Sean Finney <seanius@debian.org>; Filed 336 days ago; Modified 71 days ago;

## Resolved bugs -- Critical bugs (4 bugs)

- #466449 [C|S|☺] [diatheke] diatheke: Diatheke allows arbitrary command execution using the range parameter
  Reported by: Dan Dennison <dan@thedennisons.org>; Date: Mon, 18 Feb 2008 20:36:05 UTC; Severity: critical; Tags: security; Fixed in versions sword/1.5.9-8, sword/1.5.7-7sarge1, sword/1.5.9-2etch1; Done: Thijs Kinkhorst <thijs@debian.org>; Filed 362 days ago; Modified 204 days ago;
- #510902 [C|S|☺] [iceweasel] Missing security updates - version 2.0.0.20 available from upstream
  Reported by: "bugtracker@slideomania.com" <bugtracker@slideomania.com>; Date: Mon, 5 Jan 2009 20:06:02 UTC; Severity: critical; Tags: security; Found in version iceweasel/2.0.0.18-0etch1; Fixed in version iceweasel/2.0.0.19-0etch1; Done: Eric Dorland <eric@debian.org>; Can be archived in 23 days; Filed 40 days ago;
- #514411 [C| | ] [resolvconf] resolvconf breaks all network operations
  Reported by: Richard Kettlewell <rjk@greenend.org.uk>; Date: Sat, 7 Feb 2009 10:51:02 UTC; Severity: critical; Found in version resolvconf/1.43; Done: Thomas Hood <jdthood@gmail.com>; Can be archived in 21 days; Filed 8 days ago;
- #515160 [C| | ] [debian-installer] debian-installer: Fails to install Debian
  Reported by: Michael Rasmussen <mir@datanom.net>; Date: Sat, 14 Feb 2009 02:36:01 UTC; Severity: critical; Found in version debian-installer/20090123; Done: Christian Perrier <bubulle@debian.org>; Can be archived in 27 days;

## From other Branch bugs -- Critical bugs (30 bugs)

- #423222 [C|S|=☺] [libnss-mdns] SIGBUS in _nss_mdns4_gethostbyaddr_r on SPARC
  Reported by: Dan Smolik <marvin@sitour.cz>; Date: Thu, 10 May 2007 17:30:02 UTC; Severity: critical; Tags: etch, security; Merged with 451428; Found in version nss-mdns/0.9-0.2; Fixed in version nss-mdns/0.10-0.1; Done: Sjoerd Simons <sjoerd@debian.org>; Can be archived today; Filed 1 year and 282 days ago; Modified 1 year and 88 days ago;
- #425978 [C|+S|☺] [libgd2] libgd2: Multiple issues in GIF loader
  Reported by: Pierre Joye <pierre.php@gmail.com>; Date: Fri, 25 May 2007 11:18:02 UTC; Severity: critical; Tags: patch, security; Found in versions 2.0.33, 2.0.33-5.2; Fixed in versions 2.0.34, 2.0.34-1; Done: Jonas Smedegaard <dr@jones.dk>; Filed 1 year and 267 days ago; Modified 1 year and 187 days ago;
- #428053 [C| | ] [libpam-poldi] libpam-poldi: segfaults after removing the cardreader
  Reported by: Alexander Wirt <formorer@debian.org>; Date: Fri, 8 Jun 2007 12:06:08 UTC; Severity: critical; Found in version poldi/0.3.0-4.1; Filed 1 year and 253 days ago; Modified 191 days ago;
- #433501 [C|U|☺↝] [linux-2.6] Oops in kcryptd
  Reported by: "Laurent Parenteau" <laurent.parenteau@gmail.com>; Date: Tue, 17 Jul 2007 15:33:02 UTC; Severity: critical; Tags: fixed-upstream; Found in versions 2.6.18.dfsg.1-12etch2, 2.6.18-1; Fixed in version 2.6.22-4; Forwarded to http://bugzilla.kernel.org/show_bug.cgi?id=7388; Done: Philippe Cloutier <chealer@gmail.com>; Filed 1 year and 214 days ago; Modified 139 days ago;
- #440436 [C| |┫] [w3c-libwww] The maintainer plans to request removal of this package from the Debian archive
  Reported by: Richard Atterer <atterer@debian.org>; Date: Sat, 1 Sep 2007 13:33:02 UTC; Severity: critical; Fix blocked by 471750: dependency libwww to be dropped from the archive; Filed 1 year and 168 days ago; Modified 303 days ago;
- #463261 [C|u|↝] [libpam-thinkfinger] causes cupsd to crash
  Reported by: Sam Hocevar <sam@zoy.org>; Date: Wed, 30 Jan 2008 17:30:07 UTC; Severity: critical; Tags: upstream; Found in version thinkfinger/0.3+rev118.2-2; Forwarded to http://thread.gmane.org/gmane.linux.drivers.thinkfinger/531; Filed 1 year and 17 days ago; Modified 1 year and 14 days ago;
- #468751 [C|S|☺] [aptitude] aptitude update fails with improperly formed Recommends entry in lists files
  Reported by: "Warren Turkal" <wt@penguintechs.org>; Date: Sat, 1 Mar 2008 07:12:04 UTC; Severity: critical; Tags: security; Found in version aptitude/0.4.10-1; Fixed in version aptitude/0.4.11-1; Done: Daniel Burrows <dburrows@debian.org>; Filed 351 days ago; Modified 336 days ago;
- #471642 [C| |=] [pango-graphite] libpango1.0-0: iceweasel is crashing permanently with pango enabled
  Reported by: Norbert Preining <preining@logic.at>; Date: Wed, 19 Mar 2008 09:30:03 UTC; Severity: critical; Merged with 476089, 479153; Filed 333 days ago; Modified 135 days ago;
- #481818 [C| | ] [nbsmtp] nbsmtp: Unable to send mail via mail or mailx
  Reported by: Vojtech <vojtech@x.cz>; Date: Sun, 18 May 2008 19:03:02 UTC; Severity: critical; Found in version nbsmtp/1.00-4; Filed 273 days ago; Modified 99 days ago;
- #491915 [C| | ] [python-vobject] breaks calendarserver
  Reported by: Guido Günther <agx@sigxcpu.org>; Date: Tue, 22 Jul 2008 18:30:02 UTC; Severity: critical; Found in version python-vobject/0.6.6-1; Filed 208 days ago; Modified 208 days ago;
- #492317 [C| | ] [kdm] update breaks grub boot (MBR) "Grub Error 28: Selected item can not fit into memory"
  Reported by: Alan Braslau <alan.braslau@cea.fr>; Date: Fri, 25 Jul 2008 08:30:02 UTC; Severity: critical; Found in version kdebase-workspace/4:4.0.98-1; Filed 205 days ago; Modified 25 days ago;
- #496758 [C| | ] [ia32-libs-tools] Too late for lenny
  Reported by: Goswin von Brederlow <goswin-v-b@web.de>; Date: Wed, 27 Aug 2008 08:57:01 UTC; Severity: critical; Found in version 12; Filed 172 days ago; Modified 172 days ago;
- #498965 [C| |☺] [selinux-policy-default] dbus_bus_get(): An SELinux policy prevents this sender from sending this message to this recipient
  Reported by: "Eddy Petrișor" <eddy.petrisor@gmail.com>; Date: Sun, 14 Sep 2008 21:21:01 UTC; Severity: critical; Found in version refpolicy/2:0.0.20080702-7; Fixed in version 2:0.0.20080702-6; Done: "Eddy Petrișor" <eddy.petrisor@gmail.com>; Filed 153 days ago; Modified 102 days ago;
- #499025 [C| | ] [heartbeat-2] heartbeat-2: Primary node thrashes to death with queue error
  Reported by: Colin Alston <colin@thusa.co.za>; Date: Mon, 15 Sep 2008 15:45:06 UTC; Severity: critical; Tags: etch; Found in version heartbeat-2/2.0.7-2; Filed 153 days ago; Modified 126 days ago;
- #503475 [C| | ] [love] Reproducably steals all keyboard and some mouse input
  Reported by: "Richard Hartmann" <richih.mailinglist@gmail.com>; Date: Sun, 26 Oct 2008 12:33:02 UTC; Severity: critical; Found in version love/0.4.0-2; Filed 112 days ago; Modified 55 days ago;
- #504373 [C| |☺] [libtemplate-perl] libtemplate-perl: Upgrade from etch breaks code using DBI plugins
  Reported by: Antti Salmela <asalmela@iki.fi>; Date: Mon, 3 Nov 2008 08:09:02 UTC; Severity: critical; Found in versions libtemplate-perl/2.19-1.1lenny1, libtemplate-perl/2.20-1; Fixed in version libtemplate-perl/2.19-1.1lenny1.1; Done: Dominic Hargreaves <dom@earth.li>; Filed 104 days ago; Modified 63 days ago;
- #509292 [C|+|☺] [rsyslog] rsyslog: random crashes on multi core machines
  Reported by: Juha Koho <jmcsa00@gmail.com>; Date: Sat, 20 Dec 2008 22:33:01 UTC; Severity: critical; Tags: patch; Found in version rsyslog/3.18.5-1; Fixed in version rsyslog/3.18.6-4; Done: Michael Biebl <biebl@debian.org>; Can be archived in 24 days; Filed 56 days ago;
- #510966 [C| | ] [mgp] latest mgp package doesn't display any presentation, not even included examples
  Reported by: Harald Welte <laforge@gnumonks.org>; Date: Tue, 6 Jan 2009 10:03:02 UTC; Severity: critical; Found in version mgp/1.13a-1; Filed 40 days ago; Modified 39 days ago;
- #511562 [C| |☺] [rsyslog] rsyslog: segfault on reload when using $AllowedSender
  Reported by: Juha Koho <jmcsa00@gmail.com>; Date: Sat, 20 Dec 2008 22:33:01 UTC; Severity: critical; Found in version rsyslog/3.18.5-1; Fixed in version rsyslog/3.18.6-3; Done: Michael Biebl <biebl@debian.org>; Can be archived in 3 days; Filed 56 days ago; Modified 31 days ago;
- #512696 [C| | ] [firmware-iwlwifi] firmware-iwlwifi: Kernel panic when using iwl4965 and iwlwifi-4965-ucode-228.57.2.21
  Reported by: Oleg Broytmann <phd@phd.pp.ru>; Date: Thu, 22 Jan 2009 22:18:04 UTC; Severity: critical; Found in version firmware-nonfree/0.14; Filed 23 days ago;
- #512995 [C|Su|☺] [rt73] Possible security flaw in ad-hoc probe request processing
  Reported by: Ben Hutchings <ben@decadent.org.uk>; Date: Sun, 25 Jan 2009 16:18:01 UTC; Severity: critical; Tags: security, upstream; Found in version 1:1.0.3.6-cvs20080623-dfsg1-2; Fixed in version rt73/1:1.0.3.6-cvs20080623-dfsg1-3; Done: Ben Hutchings <ben@decadent.org.uk>; Can be archived in 12 days; Filed 21 days ago; Modified 18 days ago;
- #513001 [C|Su|☺] [rt2570] Possible security flaw in ad-hoc probe request processing
  Reported by: Ben Hutchings <ben@decadent.org.uk>; Date: Sun, 25 Jan 2009 16:18:01 UTC; Severity: critical; Tags: security, upstream; Found in versions 1.1.0+cvs20060620-3, 1.1.0+cvs20080623-1; Fixed in version rt2570/1.1.0+cvs20080623-2; Done: Ben Hutchings <ben@decadent.org.uk>; Filed 21 days ago; Modified 18 days ago;
- #513002 [C|Su| ] [rt2860-source] Possible security flaw in ad-hoc probe request processing
  Reported by: Ben Hutchings <ben@decadent.org.uk>; Date: Sun, 25 Jan 2009 16:18:01 UTC; Severity: critical; Tags: security, upstream; Done: Ben Hutchings <ben@decadent.org.uk>; Can be archived in 12 days; Filed 21 days ago; Modified 16 days ago;
- #513022 [C|PSu|☺] [linux-modules-contrib-2.6] Possible security flaw in ad-hoc probe request processing
  Reported by: Ben Hutchings <ben@decadent.org.uk>; Date: Sun, 25 Jan 2009 16:18:01 UTC; Severity: critical; Tags: pending, security, upstream; Fixed in version linux-modules-contrib-2.6/2.6.26-3; Done: Daniel Baumann <daniel@debian.org>; Can be archived in 16 days; Filed 21 days ago; Modified 16 days ago;
- #513576 [C|P|☺] [octave3.0] octave-symbolic does not uninstall
  Reported by: Steve Cotton <steve0001@s.cotton.clara.co.uk>; Date: Fri, 30 Jan 2009 12:21:01 UTC; Severity: critical; Tags: pending; Found in version octave3.0/1:3.0.1-6lenny1; Fixed in version octave3.0/1:3.0.1-6lenny2; Done: Thomas Weber <thomas.weber.mail@gmail.com>; Can be archived in 21 days; Filed 16 days ago;
- #514017 [C| |☺] [attr] attr - Puts files in /lib64
  Reported by: Bastian Blank <waldi@debian.org>; Date: Tue, 3 Feb 2009 13:18:01 UTC; Severity: critical; Found in version attr/1:2.4.43-1; Fixed in version attr/1:2.4.43-2; Done: Anibal Monsalve Salazar <anibal@debian.org>; Can be archived in 26 days; Filed 12 days ago;
- #514629 [C| | ] [util-linux] /sbin/cfdisk: crash with big partitions
  Reported by: root <bugs@shiva.hostoffice.hu>; Date: Mon, 9 Feb 2009 16:12:04 UTC; Severity: critical; Found in version util-linux/2.13.1.1-1;
- #514713 [C|S|☺] [typo3-src] Information disclosure and XSS vulnerabilities in TYPO3
  Reported by: gawain@camlann.de; Date: Tue, 10 Feb 2009 10:27:01 UTC; Severity: critical; Tags: security; Found in versions 4.0.2+debian-7, 4.2.5-1; Fixed in versions typo3-src/4.2.6-1, typo3-src/4.2.5-1+lenny1; Done: Christian Welzel <gawain@camlann.de>; Can be archived in 24 days;
- #514892 [C| | ] [nfs-user-server] rpc.mount took a wrong port
  Reported by: Dmitry Baryshev <ksquirrel.iv@gmail.com>; Date: Wed, 11 Feb 2009 18:27:02 UTC; Severity: critical; Found in version nfs-user-server/2.2beta47-25;
- #515229 [C| | ] [dash] New dash has serious problems with waiting for spawned processes
  Reported by: Petr Vandrovec <petr@vmware.com>; Date: Sun, 15 Feb 2009 01:03:01 UTC; Severity: critical; Found in version dash/0.5.5.1-1;

## Summary

- Status
  - 35 Outstanding
  - 5 Forwarded
  - 1 Pending Upload
  - 4 Resolved
  - 30 From other Branch
- Severity
  - 75 Critical bugs
- Classification
  - 7 Patch Available
  - 1 Confirmed
  - 27 Unclassified

## Options

## Select bugs |  | The same search fields are ORed, different fields are ANDed. Valid severities are critical, grave, serious, important, normal, minor, wishlist, fixed Valid tags are patch, wontfix, moreinfo, unreproducible, fixed, potato, woody, sid, help, security, upstream, pending, sarge, sarge-ignore, experimental, d-i, confirmed, ipv6, lfs, fixed-in-experimental, fixed-upstream, l10n, etch, etch-ignore, lenny, lenny-ignore, squeeze, squeeze-ignore
## Include Bugs |  |
## Exclude Bugs |  |
## Categorize using |
## Order by |  |
## Misc options | Repeat Merged Reverse Bugs Reverse Pending Reverse Severity Toggle all extra information
## Submit |