| 1 | # blacklist: gnome1 |
|---|
| 2 | # We want to avoid shipping GNOME 1.x components if possible |
|---|
| 3 | gconf |
|---|
| 4 | libxml |
|---|
| 5 | libcapplet |
|---|
| 6 | gnome-bin |
|---|
| 7 | gnome-libs |
|---|
| 8 | |
|---|
| 9 | # blacklist: misc |
|---|
| 10 | # Packages which are pulled in incidentally (typically by build-dependencies) |
|---|
| 11 | # and could be trivially replaced with something that we ship |
|---|
| 12 | |
|---|
| 13 | # java-common build-depends |
|---|
| 14 | #dpsyco |
|---|
| 15 | # various build-depends, pulls in lua, consider standarizing html->text |
|---|
| 16 | #elinks |
|---|
| 17 | # could be removed by getting rid of CHILL, which nothing uses |
|---|
| 18 | gcc-2.95 |
|---|
| 19 | # no one actually uses this anymore |
|---|
| 20 | #zephyr |
|---|
| 21 | # mdz, 2004-06-15: only pulled in by vim |
|---|
| 22 | ruby1.8 |
|---|
| 23 | |
|---|
| 24 | # blacklist: security |
|---|
| 25 | # |
|---|
| 26 | # Packages which are not supportable from a security standpoint |
|---|
| 27 | # |
|---|
| 28 | |
|---|
| 29 | ## mdz: Packages noticed in 2004-06-14 review of germinate output |
|---|
| 30 | uw-imap |
|---|
| 31 | # We shall only ship current kernel-source |
|---|
| 32 | kernel-source-2.4.22 |
|---|
| 33 | kernel-source-2.4.23 |
|---|
| 34 | kernel-source-2.4.24 |
|---|
| 35 | kernel-source-2.4.25 |
|---|
| 36 | kernel-source-2.2.25 |
|---|
| 37 | # results in lots of unwanted setuid-ness; modern stuff uses X or fb |
|---|
| 38 | svgalib |
|---|
| 39 | # we ship server software with TLS built-in |
|---|
| 40 | stunnel |
|---|
| 41 | |
|---|
| 42 | # mdz, 2004-06-15 |
|---|
| 43 | apache |
|---|
| 44 | |
|---|
| 45 | ## Packages which haven't shown up yet; make sure they don't sneak in |
|---|
| 46 | |
|---|
| 47 | # mdz, 2004-06-14: many, many bugs and unmaintained (both debian and upstream) |
|---|
| 48 | metamail |
|---|
| 49 | # mdz, 2004-06-14: lots of unsafe string handling, CVE-2002-0789, |
|---|
| 50 | # CAN-2003-0436, CAN-2003-0437 |
|---|
| 51 | mnogosearch |
|---|
| 52 | # mdz, 2004-06-14: requires no explanation |
|---|
| 53 | wu-ftpd |
|---|
| 54 | # mdz, 2004-06-14: CAN-2003-0781, unmaintained upstream, Debian#210444 |
|---|
| 55 | ecartis |
|---|
| 56 | # mdz, 2004-06-14: lots of DoS and other badness, CAN-2003-0946, CAN-2004-0270, |
|---|
| 57 | # debian#209084 |
|---|
| 58 | clamav |
|---|
| 59 | # mdz, 2004-06-14: upstream deliberately obfuscates vulnerabilities |
|---|
| 60 | # mdz, 2004-06-20: CAN-2002-0757, CAN-2003-0101, SNS 74, SNS 75 |
|---|
| 61 | webmin |
|---|
