Hi, There are a large number of security issues discussed in the BTS. http://qa.debian.org/bts-security.html lists almost all of them. I'm looking at them and trying to create patches for some and bring them to the attention of the appropriate parties. Any help would be appreciated.
The security team has been releasing advisories like crazy and they seem very overworked. If non security team people can help patch known security issues, then Debian, and OpenSource software would be even more secure. There are other social benefits too... I've been looking at creating a security audit team, but it looks like far more help is needed to patch known problems. Drew Daniels